This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa File: 7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa (raw, json) Hash identifier: wURFWCn8N+gy9Wak08B+1bF8mFQKzm1uSho3cSmryTk= Subject key identifier: 9F:46:94:92:5C:9E:F4:DA:DD:63:05:2F:1E:2D:68:86:D7:5C:4B:12 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 60372F6AD40B65B39F38B5AB6541782C763C4982 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa Signing time: Wed 10 Dec 2025 06:50:33 +0000 ROA not before: Wed 10 Dec 2025 06:50:33 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 57.65.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:37:2f:6a:d4:0b:65:b3:9f:38:b5:ab:65:41:78:2c:76:3c:49:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Dec 10 06:50:33 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=51bae3d2d89bacdbe445237dea1206a0da425871727f1a9801e67238a6d0c714, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6a:5d:93:37:d5:0f:67:1d:82:35:86:bc:e3: 15:e2:65:1a:14:50:9c:de:f7:f4:62:40:83:0c:33: 3e:77:85:0d:f7:f7:39:65:e5:60:22:dd:85:6e:d1: 8d:9d:14:9b:85:76:ef:c4:d7:30:d6:31:76:43:b4: e8:0f:d4:ff:dd:72:e4:35:29:f4:6e:d4:2c:c9:ca: 51:ee:5b:b2:29:65:42:29:81:0e:75:ee:e6:d0:8c: df:40:0a:74:41:3a:2d:0c:41:44:4f:ac:fd:8c:f7: de:3f:77:77:e1:0c:88:51:ef:fa:0e:55:b9:4a:06: 72:2c:ac:05:bb:7f:74:c6:60:ba:85:11:5b:41:c6: b6:d0:c8:50:2a:67:52:60:9b:9a:18:d2:c3:7a:39: cf:d3:d6:a1:1d:a0:c3:08:a6:3d:55:55:3a:25:35: 5e:f2:e1:03:6f:3e:a1:3b:a5:5f:8c:f6:4d:20:a8: 52:50:45:6c:fd:c2:bc:b2:b4:e5:56:7f:63:b2:e3: 6b:3c:82:04:a8:44:23:31:b7:6f:b0:09:4a:2a:e0: c1:f2:ec:3c:e4:47:5d:bd:e2:b5:d0:02:80:09:e9: 69:6f:4e:46:a9:c5:39:55:2c:cb:83:7b:87:87:9e: 99:3e:2b:21:c7:56:7d:7d:82:6a:72:fa:a1:17:a3: 59:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:46:94:92:5C:9E:F4:DA:DD:63:05:2F:1E:2D:68:86:D7:5C:4B:12 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7f5c30d0-efa8-41c0-aa7d-c5016e9315d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.65.0.0/16 Signature Algorithm: sha256WithRSAEncryption 62:f6:16:99:00:8e:52:4f:2c:7e:0c:f2:99:07:76:21:4a:59: 7c:60:0b:ba:fb:00:fa:71:52:b8:1f:ca:f5:0c:57:06:25:f1: ce:7d:20:56:3d:40:c4:7d:bf:b1:ee:dd:4b:d2:83:65:fe:2e: f1:c9:62:36:48:83:6f:39:82:c4:a9:76:b1:6e:65:f7:d3:1a: 63:73:b6:eb:82:07:bd:cd:4c:7b:ec:1c:d7:b1:02:7f:ea:c7: 7e:2d:c6:8b:25:71:a3:49:6f:95:2c:cd:e1:ed:db:0e:28:4f: 00:c4:e1:bc:3e:0f:7a:67:01:97:ab:f9:17:3e:0d:0f:72:ba: b0:e2:f9:a7:08:ed:0c:a6:05:58:73:3e:9e:51:40:2f:c7:ec: 7b:ff:3b:a0:e7:5d:ce:a3:a8:05:e0:55:4f:57:08:cd:a2:18: 27:f6:02:d4:dd:9f:17:cc:be:fd:87:e2:26:a5:e4:67:c4:95: c8:98:39:7d:90:25:d1:70:18:35:d4:50:43:47:a5:4b:30:ad: 29:3e:0d:1e:7c:f1:a9:25:85:da:a1:6a:96:83:70:0f:68:6d: 7f:17:fe:ab:e2:dd:66:c2:71:68:70:86:67:69:e5:25:f9:30: b7:37:ce:7e:96:55:ee:5a:d6:ac:26:13:71:46:93:3a:a4:d3: 14:f8:e8:79 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUYDcvatQLZbOfOLWrZUF4LHY8SYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTEyMTAwNjUwMzNaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDUxYmFlM2QyZDg5YmFjZGJlNDQ1MjM3ZGVhMTIwNmEwZGE0MjU4NzE3Mjdm MWE5ODAxZTY3MjM4YTZkMGM3MTQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK1qXZM31Q9nHYI1hrzjFeJlGhRQnN739GJAgwwzPneFDff3OWXlYCLdhW7R jZ0Um4V278TXMNYxdkO06A/U/91y5DUp9G7ULMnKUe5bsillQimBDnXu5tCM30AK dEE6LQxBRE+s/Yz33j93d+EMiFHv+g5VuUoGciysBbt/dMZguoURW0HGttDIUCpn UmCbmhjSw3o5z9PWoR2gwwimPVVVOiU1XvLhA28+oTulX4z2TSCoUlBFbP3CvLK0 5VZ/Y7LjazyCBKhEIzG3b7AJSirgwfLsPORHXb3itdACgAnpaW9ORqnFOVUsy4N7 h4eemT4rIcdWfX2CanL6oRejWRMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSfRpSS XJ702t1jBS8eLWiG11xLEjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv N2Y1YzMwZDAtZWZhOC00MWMwLWFhN2QtYzUwMTZlOTMxNWQ1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADlBMA0G CSqGSIb3DQEBCwUAA4IBAQBi9haZAI5STyx+DPKZB3YhSll8YAu6+wD6cVK4H8r1 DFcGJfHOfSBWPUDEfb+x7t1L0oNl/i7xyWI2SINvOYLEqXaxbmX30xpjc7brgge9 zUx77BzXsQJ/6sd+LcaLJXGjSW+VLM3h7dsOKE8AxOG8Pg96ZwGXq/kXPg0Pcrqw 4vmnCO0MpgVYcz6eUUAvx+x7/zug513Oo6gF4FVPVwjNohgn9gLU3Z8XzL79h+Im peRnxJXImDl9kCXRcBg11FBDR6VLMK0pPg0efPGpJYXaoWqWg3APaG1/F/6r4t1m wnFocIZnaeUl+TC3N85+llXuWtasJhNxRpM6pNMU+Oh5 -----END CERTIFICATE-----Generated at Mon Dec 15 20:11:57 2025 by rpki-client