This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa File: b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa (raw, json) Hash identifier: VklJCOalMRaV0JvGYpig5hpbGvMSpdVfKRed5LVj4SQ= Subject key identifier: FC:0D:AF:DD:BB:E6:E9:E6:28:C8:6F:18:CF:B2:77:1E:94:6D:6F:DD Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 1CB17F461305CDF90D8A4AAE681A3165BCDE6169 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa Signing time: Sat 15 Nov 2025 06:40:09 +0000 ROA not before: Sat 15 Nov 2025 06:40:09 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 193.218.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b1:7f:46:13:05:cd:f9:0d:8a:4a:ae:68:1a:31:65:bc:de:61:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:40:09 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=3be6f2b2d0f82079ff10c5622f2d3728e3c35edd7e96bdb358da86b33e5355d0, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:9a:93:f8:eb:b8:6e:81:60:2d:3f:1f:4d:a0: 82:ef:b1:3c:9e:b4:fb:0f:9e:32:f6:70:b2:33:25: c2:a0:95:f9:fa:c3:02:40:66:72:18:1d:67:a9:b8: 2b:16:ef:fa:72:6e:25:1c:6b:47:49:f4:ff:d4:32: df:1c:79:43:45:72:07:3a:7a:9b:98:98:a3:d9:c0: e5:7a:0b:b8:7e:79:6a:2e:05:cf:f2:3d:5a:26:1e: 69:0b:a9:a5:4e:d5:fb:a2:66:72:93:61:3c:28:0b: 79:8a:ff:74:a0:62:21:85:da:61:08:86:58:96:6b: 99:9a:c6:e9:53:8a:92:5a:77:2a:99:ec:f1:e4:5e: d7:b9:5f:86:2f:ff:be:64:eb:b6:0f:f2:41:2b:6a: 5e:3e:f9:77:45:df:e9:a4:cf:c2:36:b8:44:75:c5: 3c:78:40:b0:50:ac:f9:4d:ff:2f:da:40:d8:72:bb: f2:d7:e5:eb:19:c9:3c:9c:70:a9:c0:74:08:ea:7c: 5f:13:8c:65:b0:e3:9b:f0:42:92:5c:4e:ca:bb:f4: ff:ab:0c:c1:69:29:cb:c8:26:76:9f:23:30:35:63: 0a:cf:d9:51:99:a7:3b:1b:0a:f3:ae:68:f5:3d:1b: a8:24:b4:2a:8c:d1:8a:8a:5b:7f:04:a0:74:f0:4c: 24:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0D:AF:DD:BB:E6:E9:E6:28:C8:6F:18:CF:B2:77:1E:94:6D:6F:DD X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/b2cfc52a-1f15-43b9-93f9-9828d60fbe69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.122.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:04:6d:b2:5d:52:ba:ff:8f:5f:ae:75:d6:06:1a:14:6c:68: 09:47:14:ed:1d:68:3c:04:1b:76:e7:cc:c3:bf:ae:01:8a:da: 69:d8:59:11:76:97:d1:67:89:20:ac:4b:cf:0b:43:09:03:88: ea:2a:bb:1d:46:43:62:da:cd:07:2a:66:ae:7d:15:f8:14:81: 98:fd:2a:5b:3a:bc:57:f3:6d:d5:22:f6:60:39:18:48:44:5c: 95:57:5e:b0:f8:05:b1:b5:88:47:5a:47:cb:f7:ca:df:0b:75: 1b:53:4a:48:15:4a:c5:16:be:a5:ae:d2:8a:2a:fa:ce:94:8c: a8:5d:cb:85:be:2d:52:36:1e:93:f8:db:75:c2:d2:5c:f0:db: e4:cc:5a:f7:e7:91:2d:de:c5:1b:1b:b2:38:f2:97:8d:15:5e: 27:ae:83:30:7e:72:91:54:f1:90:1a:1c:9b:8e:7f:3d:a1:af: cb:18:da:3e:3b:79:09:f2:18:fe:d0:ef:a6:4f:3a:90:18:84: 20:f5:68:b9:a1:86:b4:07:c5:06:af:2c:38:60:b5:c0:1c:66: ae:fe:0e:5d:17:8e:37:e6:60:36:d1:fe:3b:f0:4d:e5:f7:c5: ff:55:b4:a5:5c:cc:8f:a8:4b:ae:94:9a:f3:f9:ea:0a:80:9d: ba:27:12:35 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUHLF/RhMFzfkNikquaBoxZbzeYWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjQwMDlaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDNiZTZmMmIyZDBmODIwNzlmZjEwYzU2MjJmMmQzNzI4ZTNjMzVlZGQ3ZTk2 YmRiMzU4ZGE4NmIzM2U1MzU1ZDAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPaak/jruG6BYC0/H02ggu+xPJ60+w+eMvZwsjMlwqCV+frDAkBmchgdZ6m4 Kxbv+nJuJRxrR0n0/9Qy3xx5Q0VyBzp6m5iYo9nA5XoLuH55ai4Fz/I9WiYeaQup pU7V+6JmcpNhPCgLeYr/dKBiIYXaYQiGWJZrmZrG6VOKklp3Kpns8eRe17lfhi// vmTrtg/yQStqXj75d0Xf6aTPwja4RHXFPHhAsFCs+U3/L9pA2HK78tfl6xnJPJxw qcB0COp8XxOMZbDjm/BCklxOyrv0/6sMwWkpy8gmdp8jMDVjCs/ZUZmnOxsK865o 9T0bqCS0KozRiopbfwSgdPBMJF8CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBT8Da/d u+bp5ijIbxjPsncelG1v3TAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv YjJjZmM1MmEtMWYxNS00M2I5LTkzZjktOTgyOGQ2MGZiZTY5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHaejAN BgkqhkiG9w0BAQsFAAOCAQEALQRtsl1Suv+PX6511gYaFGxoCUcU7R1oPAQbdufM w7+uAYraadhZEXaX0WeJIKxLzwtDCQOI6iq7HUZDYtrNBypmrn0V+BSBmP0qWzq8 V/Nt1SL2YDkYSERclVdesPgFsbWIR1pHy/fK3wt1G1NKSBVKxRa+pa7Siir6zpSM qF3Lhb4tUjYek/jbdcLSXPDb5Mxa9+eRLd7FGxuyOPKXjRVeJ66DMH5ykVTxkBoc m45/PaGvyxjaPjt5CfIY/tDvpk86kBiEIPVouaGGtAfFBq8sOGC1wBxmrv4OXReO N+ZgNtH+O/BN5ffF/1W0pVzMj6hLrpSa8/nqCoCduicSNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:19:35 2025 by rpki-client