This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa File: 9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa (raw, json) Hash identifier: rg+bZtU4ysr05OUdGLwqjs8Um9RjJa+9ji9rj2h6zH0= Subject key identifier: 0C:4D:28:A1:FA:5E:25:F1:E4:AB:62:B3:24:5F:18:E8:F0:6D:36:4D Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 3D97F26E5CAF845D09B1DD5A4EDEF0376D6D1A54 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa Signing time: Sat 15 Nov 2025 06:50:10 +0000 ROA not before: Sat 15 Nov 2025 06:50:10 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 51.188.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:97:f2:6e:5c:af:84:5d:09:b1:dd:5a:4e:de:f0:37:6d:6d:1a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:50:10 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=580b753e41fe1943cf38f09b0a014956f67c63865ad85d1df0073c949e69e8ea, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:4c:b3:a5:78:2f:50:99:29:71:a8:1f:78: b2:f1:ee:14:5a:9d:be:04:dd:fd:01:8a:87:b9:f5: db:ea:ae:e2:78:6f:d3:2c:73:7e:e1:78:66:a2:f8: 0f:61:b2:de:e4:3c:8f:88:4e:0a:a6:f8:e8:70:38: fc:f7:72:a5:48:51:35:b9:50:92:cd:01:e6:02:65: 86:6f:ee:90:66:8d:ea:7b:38:3b:83:d9:f6:fe:e2: 24:32:e6:31:eb:28:8a:41:cc:b6:9d:0d:d2:cf:70: 28:c3:77:10:b5:de:d0:ad:2f:2d:7c:f1:e6:9c:e6: cd:3c:79:5e:47:05:71:18:a9:bb:65:d3:f0:f2:a6: 41:66:f0:3f:48:ca:0f:81:5c:76:0f:98:24:5b:5f: e3:bb:05:b2:ec:56:23:0f:70:45:ce:cf:e4:ff:48: 9a:9d:36:56:d8:25:bb:be:ef:78:31:45:ba:16:58: a3:f8:8f:bb:6b:62:cc:b1:0b:8d:ce:83:97:8b:4e: 6e:36:23:b0:fe:ae:a3:b0:71:e4:0c:50:6d:4f:d7: 3e:97:dc:63:4f:75:0d:7a:b0:23:9c:0a:e3:37:14: 0a:26:7f:98:14:dd:6f:22:56:a7:84:02:53:98:80: a6:4d:a9:7d:0b:6a:92:7f:7e:4f:45:bf:0c:d8:9b: 0e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4D:28:A1:FA:5E:25:F1:E4:AB:62:B3:24:5F:18:E8:F0:6D:36:4D X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9ebfa348-5910-4667-b4db-cfb5bb3acbc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.188.0.0/15 Signature Algorithm: sha256WithRSAEncryption 5a:1a:10:37:7a:9b:87:57:e9:02:5b:01:1a:1b:d8:88:86:47: 19:67:32:33:22:36:e4:8b:a1:c0:2e:2f:cb:39:d2:57:1d:08: 4b:f1:0f:0c:f4:7e:50:56:78:96:b2:80:a3:4e:66:07:78:c2: a2:80:b9:06:44:31:d3:84:75:8d:1f:92:84:3d:0c:43:a8:92: 40:a1:ae:bc:30:f0:97:e8:6b:96:10:90:46:aa:00:43:95:bf: ef:f8:05:03:0f:b1:c0:bc:ea:c7:e5:8e:0b:53:d7:2e:09:5e: 7c:52:a3:1d:bc:85:39:00:76:38:30:02:a5:58:6e:1a:3f:5a: ad:b7:b5:d6:5d:aa:46:1e:d7:24:41:af:d2:85:64:67:ff:3c: fb:10:5e:cc:ff:99:45:0b:6b:23:ef:b0:54:40:4b:f9:94:b5: e4:f8:af:7b:26:56:78:4a:12:e3:2c:4a:40:ca:0e:2b:c8:26: dc:4e:01:59:7e:9b:12:f5:09:f5:a9:55:2d:73:1c:62:4e:5f: 40:fa:50:72:fc:37:1c:bc:c3:13:23:73:8c:1a:9b:b4:6f:79: 79:7c:e5:bb:4e:e1:59:a1:75:92:38:7c:55:c7:f4:d7:42:f2: 43:a6:b0:89:0f:df:31:9e:c8:82:46:e2:c2:8d:80:ee:f9:43: 42:d5:73:5d -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUPZfyblyvhF0Jsd1aTt7wN21tGlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjUwMTBaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDU4MGI3NTNlNDFmZTE5NDNjZjM4ZjA5YjBhMDE0OTU2ZjY3YzYzODY1YWQ4 NWQxZGYwMDczYzk0OWU2OWU4ZWExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJbATLOleC9QmSlxqB94svHuFFqdvgTd/QGKh7n12+qu4nhv0yxzfuF4ZqL4 D2Gy3uQ8j4hOCqb46HA4/PdypUhRNblQks0B5gJlhm/ukGaN6ns4O4PZ9v7iJDLm MesoikHMtp0N0s9wKMN3ELXe0K0vLXzx5pzmzTx5XkcFcRipu2XT8PKmQWbwP0jK D4Fcdg+YJFtf47sFsuxWIw9wRc7P5P9Imp02Vtglu77veDFFuhZYo/iPu2tizLEL jc6Dl4tObjYjsP6uo7Bx5AxQbU/XPpfcY091DXqwI5wK4zcUCiZ/mBTdbyJWp4QC U5iApk2pfQtqkn9+T0W/DNibDmMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQMTSih +l4l8eSrYrMkXxjo8G02TTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv OWViZmEzNDgtNTkxMC00NjY3LWI0ZGItY2ZiNWJiM2FjYmM4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATO8MA0G CSqGSIb3DQEBCwUAA4IBAQBaGhA3epuHV+kCWwEaG9iIhkcZZzIzIjbki6HALi/L OdJXHQhL8Q8M9H5QVniWsoCjTmYHeMKigLkGRDHThHWNH5KEPQxDqJJAoa68MPCX 6GuWEJBGqgBDlb/v+AUDD7HAvOrH5Y4LU9cuCV58UqMdvIU5AHY4MAKlWG4aP1qt t7XWXapGHtckQa/ShWRn/zz7EF7M/5lFC2sj77BUQEv5lLXk+K97JlZ4ShLjLEpA yg4ryCbcTgFZfpsS9Qn1qVUtcxxiTl9A+lBy/DccvMMTI3OMGpu0b3l5fOW7TuFZ oXWSOHxVx/TXQvJDprCJD98xnsiCRuLCjYDu+UNC1XNd -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:44 2025 by rpki-client