This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e2093baf-9227-4159-b7ff-180369fe3bda.roa File: e2093baf-9227-4159-b7ff-180369fe3bda.roa (raw, json) Hash identifier: cMuqT9ZFQTE3hgckq+rVSmYeQEqDtxVK89GGrWwSFtU= Subject key identifier: C9:DF:C9:01:41:42:0E:7A:63:6C:25:B0:C3:0E:86:19:5F:07:93:02 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 2335D5491E67CF234D6B054A6AAF850D6F6F927E Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e2093baf-9227-4159-b7ff-180369fe3bda.roa Signing time: Sat 15 Nov 2025 06:40:55 +0000 ROA not before: Sat 15 Nov 2025 06:40:55 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 51.88.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:35:d5:49:1e:67:cf:23:4d:6b:05:4a:6a:af:85:0d:6f:6f:92:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:40:55 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=b5fe07dcaac037f0b0bb415bbf847fbdb2a5627e92dde58aeabda85ea2c39c99, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:ef:49:1b:32:8e:07:79:06:c1:12:e4:40: 66:83:50:00:d1:08:45:a2:9e:2c:7e:a1:e9:e2:b0: 69:d5:b0:46:4a:dd:d9:a5:0e:90:d6:97:b9:d8:9f: 48:b3:46:58:a0:01:50:ac:19:86:18:a1:d6:13:b4: dd:60:5f:41:b7:b9:e3:a1:ae:1e:8f:96:f0:dc:f8: 75:94:6f:87:1f:07:fa:f5:4e:a9:d6:8a:0b:5f:ca: 35:a7:6f:5a:e9:b2:a4:7c:6e:25:ad:9e:c5:34:d4: 4a:38:7d:25:1b:63:fa:a5:99:4a:9a:24:53:dd:f9: 64:6f:5f:2a:2a:34:7f:c7:5a:96:cc:6a:73:38:36: a3:8d:de:43:3c:9e:d0:a7:5f:97:76:8d:e5:a1:50: d5:d0:fb:31:ed:7e:09:ec:07:0b:60:c1:40:56:e3: 85:4f:ff:05:41:7a:2e:8f:0c:e1:10:7d:74:7f:f2: d8:15:19:92:27:98:21:8d:0f:c5:17:f3:c6:57:99: 4d:5d:fb:67:46:16:bd:df:dd:67:a9:d3:f3:26:20: 80:b9:5a:74:4f:17:c4:2b:97:1e:b7:ac:d6:a0:fe: 4b:0a:4a:62:ba:61:e8:b5:15:c6:dd:26:e4:b1:ce: 32:0e:9f:87:00:ac:e3:15:e2:06:3e:66:58:53:2d: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DF:C9:01:41:42:0E:7A:63:6C:25:B0:C3:0E:86:19:5F:07:93:02 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e2093baf-9227-4159-b7ff-180369fe3bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption 67:4a:26:98:f6:a0:1e:31:09:ba:10:3e:f1:9e:2e:2f:80:ff: ed:fe:18:b3:90:bc:60:2e:25:5d:4d:6f:38:3f:c6:db:d4:ad: 11:0d:c4:3c:8f:3a:02:a1:06:8f:1e:55:e5:d0:66:84:e3:6e: 05:4d:11:92:bb:bf:b7:bc:bd:d2:0d:21:19:0a:de:1d:da:5b: 39:36:43:39:e8:b2:02:72:88:3a:8c:81:c5:9e:27:fa:6d:48: bb:1b:d3:bb:83:12:37:97:07:64:35:bf:37:cb:fa:a0:67:76: a7:81:8f:c4:f8:c0:e0:01:5c:c6:3c:d4:59:4c:44:de:a7:ed: 9b:75:7d:0d:ce:f3:39:7a:ab:5e:33:cb:9d:e0:86:66:5e:d0: 84:25:9a:5e:07:f2:56:e8:fb:7a:43:7f:20:1b:b9:e1:fc:b8: a0:bd:63:89:89:a4:50:ba:b9:68:33:1d:02:3f:98:50:a6:e5: 4c:b4:a8:08:b4:45:8d:45:b6:1e:e4:cf:08:65:a2:d6:34:69: ed:41:9a:06:cb:95:9a:77:de:ea:d1:39:e8:a3:4d:60:fa:fc: 13:e9:33:01:1b:86:73:64:99:33:f6:e2:53:4f:cf:ea:c1:3c: 98:f2:b9:74:c7:7d:56:a1:45:1f:2c:1a:2d:38:f3:2d:da:f1: 75:4f:6a:c2 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUIzXVSR5nzyNNawVKaq+FDW9vkn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjQwNTVaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGI1ZmUwN2RjYWFjMDM3ZjBiMGJiNDE1YmJmODQ3ZmJkYjJhNTYyN2U5MmRk ZTU4YWVhYmRhODVlYTJjMzljOTkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1V70kbMo4HeQbBEuRAZoNQANEIRaKeLH6h6eKwadWwRkrd2aUOkNaXudif SLNGWKABUKwZhhih1hO03WBfQbe546GuHo+W8Nz4dZRvhx8H+vVOqdaKC1/KNadv WumypHxuJa2exTTUSjh9JRtj+qWZSpokU935ZG9fKio0f8dalsxqczg2o43eQzye 0Kdfl3aN5aFQ1dD7Me1+CewHC2DBQFbjhU//BUF6Lo8M4RB9dH/y2BUZkieYIY0P xRfzxleZTV37Z0YWvd/dZ6nT8yYggLladE8XxCuXHres1qD+SwpKYrph6LUVxt0m 5LHOMg6fhwCs4xXiBj5mWFMtuV0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTJ38kB QUIOemNsJbDDDoYZXweTAjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv ZTIwOTNiYWYtOTIyNy00MTU5LWI3ZmYtMTgwMzY5ZmUzYmRhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADNYMA0G CSqGSIb3DQEBCwUAA4IBAQBnSiaY9qAeMQm6ED7xni4vgP/t/hizkLxgLiVdTW84 P8bb1K0RDcQ8jzoCoQaPHlXl0GaE424FTRGSu7+3vL3SDSEZCt4d2ls5NkM56LIC cog6jIHFnif6bUi7G9O7gxI3lwdkNb83y/qgZ3angY/E+MDgAVzGPNRZTETep+2b dX0NzvM5eqteM8ud4IZmXtCEJZpeB/JW6Pt6Q38gG7nh/LigvWOJiaRQurloMx0C P5hQpuVMtKgItEWNRbYe5M8IZaLWNGntQZoGy5Wad97q0Tnoo01g+vwT6TMBG4Zz ZJkz9uJTT8/qwTyY8rl0x31WoUUfLBotOPMt2vF1T2rC -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:23 2025 by rpki-client