This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dc5d2309-ce0f-4816-b8d0-260ce079f694.roa File: dc5d2309-ce0f-4816-b8d0-260ce079f694.roa (raw, json) Hash identifier: c70aCPnXYQPbDiQMjw60fmHFjW3rYG369vAjeniM6+8= Subject key identifier: 6D:B1:BF:0A:84:7A:33:62:FE:11:31:8A:F5:A6:70:53:DE:54:87:A6 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 6412D5C92D05490ED214B4716FC5C1E877538FB6 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dc5d2309-ce0f-4816-b8d0-260ce079f694.roa Signing time: Sat 15 Nov 2025 06:40:36 +0000 ROA not before: Sat 15 Nov 2025 06:40:36 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 212.255.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:12:d5:c9:2d:05:49:0e:d2:14:b4:71:6f:c5:c1:e8:77:53:8f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:40:36 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=6b78881812f08f00b9b09cfca724015d1b960987dd92832a0aac4c2acb887f45, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:70:82:de:2a:4e:b7:6a:46:b6:1d:3c:a7:ab: 48:bb:33:08:88:36:3d:95:40:13:95:9a:b3:bd:ed: 7d:21:ba:fa:1a:ab:4c:ef:5f:d7:2f:2b:5d:99:cd: 33:03:b2:1c:02:4b:84:54:c4:0d:c2:82:ab:d7:bc: 69:72:ba:c8:82:09:86:bd:d0:f9:51:f2:f1:04:d5: 04:c9:5c:07:2d:03:1b:f6:bd:ae:5e:5d:85:83:39: 6e:02:19:39:bf:ff:10:b8:00:69:00:6d:8c:93:9f: 42:b9:ab:3b:1c:b7:54:cc:b5:c1:3c:36:c7:1d:6e: 29:b9:53:29:54:3a:9c:14:3f:43:e3:b7:b5:72:39: 24:47:5a:91:72:9c:d6:4b:f3:fa:6f:68:91:58:a5: 19:36:85:25:75:69:34:0e:d5:ef:6f:f1:4b:47:8e: ae:b1:39:b6:ab:22:64:0a:65:90:cd:59:ae:b1:33: 53:60:c2:53:c1:ba:2c:5b:19:2c:a0:71:71:41:f6: 6c:96:55:28:40:89:0e:6e:b3:3f:18:be:03:ce:0c: e5:08:af:7e:f4:99:8e:95:d1:fe:1b:bf:50:62:d5: 97:89:b7:e0:8a:e8:5f:c7:1a:e3:02:4e:39:72:8c: 9a:24:f8:c0:86:e2:b3:4e:54:58:8b:77:be:2e:3f: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B1:BF:0A:84:7A:33:62:FE:11:31:8A:F5:A6:70:53:DE:54:87:A6 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/dc5d2309-ce0f-4816-b8d0-260ce079f694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.255.0.0/16 Signature Algorithm: sha256WithRSAEncryption 18:ac:da:7e:54:8d:ae:ab:8a:70:c6:18:97:c3:f9:5d:a2:6b: 16:e3:26:31:b5:83:56:a5:3a:38:30:c8:5f:24:2b:7d:07:99: 5d:98:7b:09:b5:f8:a1:b4:f7:a8:1f:b0:df:42:b1:7d:67:0f: 0e:50:1a:9e:25:02:13:e5:de:ea:eb:02:07:c4:27:0c:c3:6c: c2:c3:f4:8e:fb:b5:3c:89:27:e0:cd:cf:67:97:18:4b:bd:61: 84:ca:fa:b7:03:63:9a:69:d9:1a:a5:35:61:62:80:90:79:82: 00:07:29:9d:a8:92:43:ca:86:67:e0:6b:2a:25:6a:98:b3:d7: 08:ac:b0:0d:8a:13:d3:f1:ff:bb:ba:34:0c:b2:42:97:1a:3a: 10:03:64:d5:0b:20:99:94:de:39:3b:93:68:4f:30:9e:95:a3: f9:bd:00:47:be:94:44:d7:c7:1a:63:54:23:5d:19:fb:e3:29: e0:5d:3e:be:5b:cf:bb:47:0b:7d:a2:6f:1c:ce:61:b4:dd:e8: 4f:43:88:82:e3:9a:e9:88:2d:9c:5a:a2:4a:0e:55:b9:97:8b: 9e:8e:e2:d3:85:99:e1:3a:fb:d0:bc:22:ba:22:5a:a5:fa:ce: f4:86:94:a7:25:bf:f5:30:7d:94:4f:2d:95:eb:f9:3c:a6:ab: 53:5d:07:c6 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUZBLVyS0FSQ7SFLRxb8XB6HdTj7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjQwMzZaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDZiNzg4ODE4MTJmMDhmMDBiOWIwOWNmY2E3MjQwMTVkMWI5NjA5ODdkZDky ODMyYTBhYWM0YzJhY2I4ODdmNDUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhwgt4qTrdqRrYdPKerSLszCIg2PZVAE5Was73tfSG6+hqrTO9f1y8rXZnN MwOyHAJLhFTEDcKCq9e8aXK6yIIJhr3Q+VHy8QTVBMlcBy0DG/a9rl5dhYM5bgIZ Ob//ELgAaQBtjJOfQrmrOxy3VMy1wTw2xx1uKblTKVQ6nBQ/Q+O3tXI5JEdakXKc 1kvz+m9okVilGTaFJXVpNA7V72/xS0eOrrE5tqsiZAplkM1ZrrEzU2DCU8G6LFsZ LKBxcUH2bJZVKECJDm6zPxi+A84M5QivfvSZjpXR/hu/UGLVl4m34IroX8ca4wJO OXKMmiT4wIbis05UWIt3vi4/XscCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRtsb8K hHozYv4RMYr1pnBT3lSHpjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv ZGM1ZDIzMDktY2UwZi00ODE2LWI4ZDAtMjYwY2UwNzlmNjk0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANT/MA0G CSqGSIb3DQEBCwUAA4IBAQAYrNp+VI2uq4pwxhiXw/ldomsW4yYxtYNWpTo4MMhf JCt9B5ldmHsJtfihtPeoH7DfQrF9Zw8OUBqeJQIT5d7q6wIHxCcMw2zCw/SO+7U8 iSfgzc9nlxhLvWGEyvq3A2OaadkapTVhYoCQeYIABymdqJJDyoZn4GsqJWqYs9cI rLANihPT8f+7ujQMskKXGjoQA2TVCyCZlN45O5NoTzCelaP5vQBHvpRE18caY1Qj XRn74yngXT6+W8+7Rwt9om8czmG03ehPQ4iC45rpiC2cWqJKDlW5l4uejuLThZnh OvvQvCK6Ilql+s70hpSnJb/1MH2UTy2V6/k8pqtTXQfG -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:23 2025 by rpki-client