This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa File: ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa (raw, json) Hash identifier: bTc/hVNP+l4nL4rLh4gWxeJbDVNj5VjiW66qdpOKZaw= Subject key identifier: 96:BE:53:B2:6C:13:95:A8:37:FF:84:CD:2B:47:F5:67:5C:4C:19:2C Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 45F32DA389703168A0A984381FEDFE419D291EBC Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa Signing time: Tue 25 Nov 2025 20:10:06 +0000 ROA not before: Tue 25 Nov 2025 20:10:06 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 83.116.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f3:2d:a3:89:70:31:68:a0:a9:84:38:1f:ed:fe:41:9d:29:1e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 25 20:10:06 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=90086ecf2a0e65496109c1db1a4592c8f37011468cccd73210f48de82726e550, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:60:04:38:f3:99:db:e3:03:af:6c:d9:ce:09: 34:bc:b0:ce:0b:8f:42:0f:31:70:b4:a4:44:6f:9e: fb:11:65:88:7a:a3:7d:15:43:65:24:64:cd:d3:4d: c0:f4:f0:76:5b:fc:70:82:8e:e2:14:37:ef:d5:17: 95:a4:92:de:7d:52:2e:f3:91:91:32:02:fc:c1:11: f7:f1:6d:1e:27:b7:3a:64:2a:f8:03:51:fb:4f:7c: 3c:65:3a:e8:8d:4c:d4:fc:8d:7b:f7:26:12:21:45: de:b8:cd:83:de:eb:f8:ed:67:8b:da:85:e4:b3:87: 5e:fd:df:c4:a5:37:a4:08:2e:09:c3:2d:80:1a:9a: a3:7a:bd:77:36:aa:a1:52:be:3b:e7:3b:aa:40:28: 7d:a8:f9:93:e0:4f:2e:ca:17:b2:e9:80:0f:e5:43: 2b:07:00:0a:e2:6e:0c:58:fa:fc:3f:49:b0:80:18: fc:a0:ba:a1:e9:93:e6:8e:8d:35:88:21:bd:43:38: 70:b8:c5:e1:dd:ad:7e:40:8b:4d:31:29:02:c5:f6: 02:0f:d4:44:e4:ad:69:53:28:47:9f:44:ab:88:cc: b4:b1:48:94:96:b7:72:e8:a7:cb:6a:74:cb:bb:e5: da:bf:24:b4:a8:be:ec:71:53:3e:03:9c:63:7a:3c: 8d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BE:53:B2:6C:13:95:A8:37:FF:84:CD:2B:47:F5:67:5C:4C:19:2C X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/ac4a6d71-8f2c-4a51-b73d-23abcb81a3b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.116.0.0/15 Signature Algorithm: sha256WithRSAEncryption 6c:ce:71:53:3c:29:5f:ca:fa:60:1c:84:d7:3e:38:41:94:41: 17:3c:db:0c:77:e5:36:d3:64:b2:60:44:d1:74:4b:da:7a:30: 1e:9b:e0:0d:a6:db:8a:fb:f0:4c:9c:54:dc:e4:22:1c:e5:57: b2:8d:32:84:1c:46:74:9b:a5:e0:96:00:22:83:ba:09:4f:d7: e8:c1:b0:05:5f:67:f6:36:08:1d:1b:f3:80:50:32:db:76:b9: ab:58:7b:8a:43:ec:6a:76:89:09:f5:bc:a1:ee:fd:63:ee:d5: 92:40:71:17:3e:e2:00:56:35:58:32:8e:c5:dc:a3:f4:e0:58: e2:0c:8e:28:5a:30:98:de:ac:88:e3:43:33:46:c3:45:4b:c8: 79:2e:90:05:4e:55:d2:7f:82:92:75:99:d0:4e:ab:1b:e3:80: 79:19:ac:a0:d3:bb:1d:5a:bd:fc:b6:db:76:f3:c1:87:b2:e2: 53:86:52:a7:6c:79:3e:c1:01:3d:db:ea:a6:5a:36:58:91:ea: 4c:18:87:31:37:ec:4b:04:92:71:dd:7b:b7:13:dd:f7:f1:f2: ce:c4:9a:2a:a0:9c:cd:5b:6a:c6:0f:d1:d9:4a:b5:19:69:13: 73:60:ef:9f:91:05:2f:c7:3b:d8:c9:f7:f5:00:13:cd:b2:2a: d2:45:dd:b4 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIURfMto4lwMWigqYQ4H+3+QZ0pHrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMjUyMDEwMDZaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQDkwMDg2ZWNmMmEwZTY1NDk2MTA5YzFkYjFhNDU5MmM4ZjM3MDExNDY4Y2Nj ZDczMjEwZjQ4ZGU4MjcyNmU1NTAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM5gBDjzmdvjA69s2c4JNLywzguPQg8xcLSkRG+e+xFliHqjfRVDZSRkzdNN wPTwdlv8cIKO4hQ379UXlaSS3n1SLvORkTIC/MER9/FtHie3OmQq+ANR+098PGU6 6I1M1PyNe/cmEiFF3rjNg97r+O1ni9qF5LOHXv3fxKU3pAguCcMtgBqao3q9dzaq oVK+O+c7qkAofaj5k+BPLsoXsumAD+VDKwcACuJuDFj6/D9JsIAY/KC6oemT5o6N NYghvUM4cLjF4d2tfkCLTTEpAsX2Ag/UROStaVMoR59Eq4jMtLFIlJa3cuiny2p0 y7vl2r8ktKi+7HFTPgOcY3o8jT0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSWvlOy bBOVqDf/hM0rR/VnXEwZLDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv YWM0YTZkNzEtOGYyYy00YTUxLWI3M2QtMjNhYmNiODFhM2I0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAVN0MA0G CSqGSIb3DQEBCwUAA4IBAQBsznFTPClfyvpgHITXPjhBlEEXPNsMd+U202SyYETR dEvaejAem+ANptuK+/BMnFTc5CIc5VeyjTKEHEZ0m6XglgAig7oJT9fowbAFX2f2 NggdG/OAUDLbdrmrWHuKQ+xqdokJ9byh7v1j7tWSQHEXPuIAVjVYMo7F3KP04Fji DI4oWjCY3qyI40MzRsNFS8h5LpAFTlXSf4KSdZnQTqsb44B5Gayg07sdWr38ttt2 88GHsuJThlKnbHk+wQE92+qmWjZYkepMGIcxN+xLBJJx3Xu3E9338fLOxJoqoJzN W2rGD9HZSrUZaRNzYO+fkQUvxzvYyff1ABPNsirSRd20 -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:26 2025 by rpki-client