This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8462af63-807c-4934-9e2f-0d749c431bcd.roa File: 8462af63-807c-4934-9e2f-0d749c431bcd.roa (raw, json) Hash identifier: zTHb4BuG5xU8uG/ximPuIgSY4eYWQKuUuFQxdsBFQvM= Subject key identifier: 49:92:58:43:86:F4:3D:E6:7E:18:D6:8B:C2:2C:C8:4D:FB:E0:57:EB Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 39D0D0EF279A3939BB4A3D698A457DF832825E62 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8462af63-807c-4934-9e2f-0d749c431bcd.roa Signing time: Sat 15 Nov 2025 06:50:30 +0000 ROA not before: Sat 15 Nov 2025 06:50:30 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 193.186.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:d0:d0:ef:27:9a:39:39:bb:4a:3d:69:8a:45:7d:f8:32:82:5e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:50:30 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=073ba029fe31b76c730583b88c950e59e30960ed24c8ff1c9f0a3aadef01fca9, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:b4:19:37:d9:50:1f:6b:32:a6:e7:a8:f5: a9:6a:3c:1d:ab:63:79:cf:e5:8d:d2:dc:48:1d:60: fb:67:31:c6:d2:87:3e:89:73:38:5d:77:d3:69:92: 03:25:94:bd:41:ef:2e:33:bb:a6:b9:87:57:bb:ff: 57:ec:d8:3e:56:d1:c7:88:c8:cb:5c:dc:fb:ca:28: c8:a6:93:c6:e8:e4:14:fb:a0:53:73:50:dc:2b:ff: 26:ab:a5:3b:70:59:85:06:4e:0d:7f:13:b8:a5:3c: b2:38:ad:83:1b:38:e4:2f:c7:46:37:b0:56:1e:f6: 6e:09:de:15:2a:46:60:30:81:af:b2:04:de:86:c7: 22:0a:ef:47:0e:48:91:cc:f2:f3:30:31:24:ff:db: 84:ad:04:8f:31:1a:80:be:8d:a2:3b:60:2e:12:e8: ea:44:bf:17:91:52:0d:da:b6:06:fd:56:49:4a:92: a3:b6:92:19:dc:e2:4c:32:99:24:ff:b8:14:49:fe: 8d:b0:33:47:d0:77:3a:ca:b4:b1:99:63:91:d2:69: ce:52:ed:92:45:bf:41:5d:55:b7:2f:09:74:1b:6a: 81:a9:83:91:8b:a0:2d:bc:fb:c0:25:c3:2c:95:46: 14:74:98:b4:34:86:3d:f6:17:6b:0d:a9:c8:92:3b: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:92:58:43:86:F4:3D:E6:7E:18:D6:8B:C2:2C:C8:4D:FB:E0:57:EB X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/8462af63-807c-4934-9e2f-0d749c431bcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.210.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:b8:8a:5a:b4:0b:3c:9e:ae:bd:8b:6b:25:fa:a0:76:3d:d7: 92:ba:20:0f:92:33:f3:7c:6a:9d:a4:93:5f:3c:f1:01:6b:87: 98:b9:fb:06:b7:a4:5f:d5:55:00:d2:d9:52:6e:89:2c:2a:dc: 23:3f:52:f5:fc:17:49:7d:f9:10:75:60:6a:9b:5f:c3:06:b2: fe:04:b2:28:0e:60:bb:0e:26:62:e8:c2:0c:30:5d:ad:17:cb: 41:cd:cf:7a:73:bc:91:3a:57:bc:11:85:c9:e7:6a:4d:f4:77: dd:05:e9:6b:12:0a:5f:09:67:ba:df:37:ab:d7:0a:1f:eb:1e: 49:9f:30:11:9e:4a:bf:88:1d:a9:4e:7c:68:f6:8b:94:16:50: 3a:2e:10:8e:b2:f7:ec:6c:3f:99:ed:aa:9d:24:bf:e3:96:90: 22:06:90:dc:52:54:b5:b7:a4:ca:e9:6c:99:bb:24:98:52:5c: b5:9b:1c:0e:55:01:a3:a9:c0:c3:58:d6:c4:ea:f6:1e:bb:bc: 7f:7c:de:ed:a8:2d:51:66:ef:b7:ef:5b:6e:4d:b2:0b:db:c5: 24:e6:2e:70:a0:58:89:8e:bd:fd:66:77:3f:b8:c6:cb:a6:45: 26:05:49:ed:0d:b9:42:5c:a4:1f:7a:9e:18:8f:f8:6c:b7:c3: c5:85:58:be -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUOdDQ7yeaOTm7Sj1pikV9+DKCXmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjUwMzBaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDA3M2JhMDI5ZmUzMWI3NmM3MzA1ODNiODhjOTUwZTU5ZTMwOTYwZWQyNGM4 ZmYxYzlmMGEzYWFkZWYwMWZjYTkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKjhtBk32VAfazKm56j1qWo8Hatjec/ljdLcSB1g+2cxxtKHPolzOF1302mS AyWUvUHvLjO7prmHV7v/V+zYPlbRx4jIy1zc+8ooyKaTxujkFPugU3NQ3Cv/Jqul O3BZhQZODX8TuKU8sjitgxs45C/HRjewVh72bgneFSpGYDCBr7IE3obHIgrvRw5I kczy8zAxJP/bhK0EjzEagL6NojtgLhLo6kS/F5FSDdq2Bv1WSUqSo7aSGdziTDKZ JP+4FEn+jbAzR9B3Osq0sZljkdJpzlLtkkW/QV1Vty8JdBtqgamDkYugLbz7wCXD LJVGFHSYtDSGPfYXaw2pyJI7Xh8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRJklhD hvQ95n4Y1ovCLMhN++BX6zAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv ODQ2MmFmNjMtODA3Yy00OTM0LTllMmYtMGQ3NDljNDMxYmNkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMG60jAN BgkqhkiG9w0BAQsFAAOCAQEAmriKWrQLPJ6uvYtrJfqgdj3XkrogD5Iz83xqnaST XzzxAWuHmLn7BrekX9VVANLZUm6JLCrcIz9S9fwXSX35EHVgaptfwway/gSyKA5g uw4mYujCDDBdrRfLQc3PenO8kTpXvBGFyedqTfR33QXpaxIKXwlnut83q9cKH+se SZ8wEZ5Kv4gdqU58aPaLlBZQOi4QjrL37Gw/me2qnSS/45aQIgaQ3FJUtbekyuls mbskmFJctZscDlUBo6nAw1jWxOr2Hru8f3ze7agtUWbvt+9bbk2yC9vFJOYucKBY iY69/WZ3P7jGy6ZFJgVJ7Q25QlykH3qeGI/4bLfDxYVYvg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:28 2025 by rpki-client