This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1b27e87-801f-4c9e-98a2-f81b54e8b8d9.roa File: a1b27e87-801f-4c9e-98a2-f81b54e8b8d9.roa (raw, json) Hash identifier: 7J+UL0jPZlhVDEn/G/kSMKvRKXGr9pmzDHjZ7jqOn28= Subject key identifier: 93:0B:BF:16:36:44:EF:D8:A6:9F:45:DB:8A:68:00:5C:69:85:BA:D6 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 2C6A5822F975F8E81EC9D66824E524D6A7DC761E Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1b27e87-801f-4c9e-98a2-f81b54e8b8d9.roa Signing time: Sun 16 Nov 2025 01:00:21 +0000 ROA not before: Sun 16 Nov 2025 01:00:21 +0000 ROA not after: Sun 21 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 51.112.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6a:58:22:f9:75:f8:e8:1e:c9:d6:68:24:e5:24:d6:a7:dc:76:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 16 01:00:21 2025 GMT Not After : Dec 21 23:59:59 2025 GMT Subject: serialNumber=d35d6b0c3b13f3787b2840cb52a7ed167d90e499a7d2ce107e08f0a95c5c941f, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:e9:91:0e:ae:18:e0:99:d1:3e:c5:90:74: fc:3c:dd:a8:66:35:e7:3a:71:25:32:c2:2b:4a:d7: 38:16:a3:00:40:0c:81:3f:4f:56:77:f6:24:95:55: 58:79:8d:a8:dc:e5:99:cd:77:0b:19:8f:2e:e4:44: ca:dc:0a:ad:cc:69:21:c0:be:fd:c1:5e:76:92:cd: dd:9c:be:1b:cf:18:db:b7:9c:68:bf:59:d3:d1:9d: c3:fc:93:1e:3b:2d:4b:26:6a:2c:d4:d7:21:41:52: a9:a5:7b:24:90:c8:c4:38:bb:e2:e4:36:e9:e6:55: 1e:50:9e:72:45:3e:ce:fc:62:85:b7:bc:38:34:ec: 7a:94:ab:82:13:1f:e4:4c:48:12:89:26:4c:40:da: 41:fc:f4:02:9c:c4:e3:31:58:b1:ad:2c:6b:4e:b8: 06:fd:8e:ce:38:d4:4d:6d:f5:88:4d:9f:4e:fd:90: 94:d8:18:84:b4:14:17:a0:eb:6c:21:69:6f:c3:4e: 1c:80:cd:99:ce:24:9a:4f:ae:cd:52:fa:ab:34:1e: 0e:73:b9:63:0e:06:ee:fa:60:0d:ea:2f:09:f8:4f: ce:5d:70:b8:02:90:db:6d:12:96:6c:ae:74:e0:1b: 85:b4:60:a2:4e:ab:cb:28:b5:b1:ef:3f:60:ab:03: 49:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:0B:BF:16:36:44:EF:D8:A6:9F:45:DB:8A:68:00:5C:69:85:BA:D6 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/a1b27e87-801f-4c9e-98a2-f81b54e8b8d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.112.0.0/15 Signature Algorithm: sha256WithRSAEncryption ab:fb:79:be:bc:1e:54:49:9a:da:15:6e:21:16:30:57:25:2e: 01:72:d7:6a:d6:a8:5f:36:93:b4:4c:d9:6f:ad:6b:7e:2d:9c: 1c:21:cd:18:c9:d6:db:7d:23:09:99:37:75:d0:29:35:10:57: 00:1d:f4:84:bd:6c:f5:9e:c1:f5:f5:6b:c8:25:d1:7d:88:52: 40:e9:65:fa:45:a0:1c:2c:b9:62:1b:c2:26:56:52:4d:49:43: 1f:16:21:9d:b6:1e:5a:b6:c2:b4:29:c4:89:39:cd:bc:ff:e5: 1b:53:73:9b:8e:d0:06:99:f2:84:2f:b6:0a:4d:55:09:48:35: ea:e4:34:4f:c9:6a:30:b0:db:f0:12:95:fd:b1:b6:86:ed:ec: 80:26:e6:c0:03:94:55:d2:51:ba:a7:47:fb:68:98:6c:3d:d8: 45:79:3f:7f:55:ea:bb:41:bd:b3:b7:93:f0:a5:c9:c6:f0:a3: f6:e7:c9:2b:03:41:8c:e1:50:2a:dd:6e:a8:93:c8:59:89:fe: cb:da:13:50:73:bf:c9:0f:16:6c:78:63:85:f4:3c:11:81:02: 23:17:c6:1d:3d:d2:d8:d2:4d:f9:17:5e:12:7c:b0:e8:a1:3b: b6:7e:ec:93:fe:7c:92:a2:1c:4b:66:a4:ea:4a:7e:49:b0:66: 27:8b:4c:fa -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIULGpYIvl1+OgeydZoJOUk1qfcdh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTYwMTAwMjFaFw0yNTEyMjEyMzU5NTlaMHoxSTBHBgNV BAUTQGQzNWQ2YjBjM2IxM2YzNzg3YjI4NDBjYjUyYTdlZDE2N2Q5MGU0OTlhN2Qy Y2UxMDdlMDhmMGE5NWM1Yzk0MWYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0H6ZEOrhjgmdE+xZB0/DzdqGY15zpxJTLCK0rXOBajAEAMgT9PVnf2JJVV WHmNqNzlmc13CxmPLuREytwKrcxpIcC+/cFedpLN3Zy+G88Y27ecaL9Z09Gdw/yT HjstSyZqLNTXIUFSqaV7JJDIxDi74uQ26eZVHlCeckU+zvxihbe8ODTsepSrghMf 5ExIEokmTEDaQfz0ApzE4zFYsa0sa064Bv2OzjjUTW31iE2fTv2QlNgYhLQUF6Dr bCFpb8NOHIDNmc4kmk+uzVL6qzQeDnO5Yw4G7vpgDeovCfhPzl1wuAKQ220Slmyu dOAbhbRgok6ryyi1se8/YKsDSfECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSTC78W NkTv2KafRduKaABcaYW61jAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv YTFiMjdlODctODAxZi00YzllLTk4YTItZjgxYjU0ZThiOGQ5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATNwMA0G CSqGSIb3DQEBCwUAA4IBAQCr+3m+vB5USZraFW4hFjBXJS4Bctdq1qhfNpO0TNlv rWt+LZwcIc0YydbbfSMJmTd10Ck1EFcAHfSEvWz1nsH19WvIJdF9iFJA6WX6RaAc LLliG8ImVlJNSUMfFiGdth5atsK0KcSJOc28/+UbU3ObjtAGmfKEL7YKTVUJSDXq 5DRPyWowsNvwEpX9sbaG7eyAJubAA5RV0lG6p0f7aJhsPdhFeT9/Veq7Qb2zt5Pw pcnG8KP258krA0GM4VAq3W6ok8hZif7L2hNQc7/JDxZseGOF9DwRgQIjF8YdPdLY 0k35F14SfLDooTu2fuyT/nySohxLZqTqSn5JsGYni0z6 -----END CERTIFICATE-----Generated at Sat Dec 6 21:33:04 2025 by rpki-client