This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa File: e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa (raw, json) Hash identifier: uecWuEucxJMjRJ0Pi50BDPkdYq1Egd4TrhHCager2rI= Subject key identifier: 9E:93:BE:BC:78:7A:A7:2E:7A:A2:16:1B:26:27:5B:14:5D:25:38:77 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 42484A4401D37D4283FA71E3965C35766149E1E3 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa Signing time: Sat 15 Nov 2025 06:50:09 +0000 ROA not before: Sat 15 Nov 2025 06:50:09 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 193.57.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:48:4a:44:01:d3:7d:42:83:fa:71:e3:96:5c:35:76:61:49:e1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:50:09 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=38ad946041b0efda07369069aeafdf72e48337a3b1cc107fe3b76597d3fb041d, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d2:8e:7b:fc:b7:d3:8b:7b:b1:57:43:ce:ef: a1:75:6c:5b:ca:14:2e:5e:b8:c1:56:ee:ec:c2:1c: 2c:9a:8c:a6:dc:46:cc:42:ab:49:f6:01:e9:bd:f3: 93:46:87:8e:20:f6:d5:5b:76:8e:6c:9d:1f:c1:63: 57:61:6d:55:50:c6:d7:14:a6:38:58:86:14:64:3b: 62:1d:30:d1:bc:5d:48:6c:f2:ae:88:f5:05:c5:9e: 89:c9:36:32:11:10:18:db:86:fa:33:b1:fd:4d:c1: 66:ca:1f:3b:e4:6a:da:0e:a6:ee:fa:c2:53:9b:02: 13:8e:13:c9:b8:7f:df:87:dd:bd:41:42:fd:bb:e4: 46:09:6a:1c:37:4c:07:c6:02:d8:38:e1:a8:6d:8c: e8:7a:72:4c:6d:02:ee:66:8d:e6:df:d1:eb:4e:f1: d2:b7:e1:40:9c:45:5f:20:dd:ec:c6:6e:32:e2:5b: 50:64:c7:da:8c:7b:13:ab:a4:d0:69:76:3c:48:4a: a4:90:7c:30:ea:31:36:0e:6d:65:c0:cb:6b:98:6e: b7:18:06:46:c9:2c:da:78:10:a2:a3:03:5b:0c:3e: 29:1a:50:1b:42:a5:0e:4d:b1:86:c2:b5:2d:7e:8d: 8e:e0:d5:60:18:c6:43:cb:f7:20:b8:7d:bf:7e:04: 3e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:93:BE:BC:78:7A:A7:2E:7A:A2:16:1B:26:27:5B:14:5D:25:38:77 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e680ffe7-d77c-4433-81f9-ffbf76a45a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.181.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:c5:97:38:4f:8b:61:f7:94:84:16:7c:e1:98:96:c9:84:0b: ed:95:c6:50:de:b6:60:d6:73:0a:85:08:9e:7b:23:7b:f5:ea: 0c:af:a3:aa:a2:cb:9e:3d:f3:63:99:7f:a2:ad:bb:8c:af:29: 5b:16:2b:05:08:6a:fb:43:d0:a5:34:12:47:1d:c7:7d:f6:50: e6:b8:9a:d8:5d:05:89:93:78:8b:aa:75:26:51:72:06:91:b4: 9a:5d:6c:7c:a4:2b:0a:52:55:6d:71:ac:3f:c1:c6:c4:7d:b4: e1:ca:46:66:bc:d7:9e:1e:e0:76:3b:88:42:7e:7d:a3:0b:13: dd:ac:e8:a5:00:aa:98:dd:5f:e7:74:f5:40:0c:6f:d2:18:c2: a5:b3:b3:56:be:09:fd:03:6d:f6:4d:18:60:a9:ec:fc:e4:e6: 64:f6:41:96:61:03:06:7f:68:73:39:89:44:e7:5a:14:f9:4b: 0b:4f:3d:48:ac:ea:dc:ce:60:86:4b:c7:72:d4:8b:d3:89:33: 05:fc:56:37:7d:38:0c:eb:d0:00:80:e9:1c:f7:78:6f:96:8d: 92:72:b2:66:97:2b:dc:c6:89:8d:cd:7d:7d:b7:b7:15:0e:a4: a7:f7:34:e4:9b:8b:70:3c:44:8f:cd:2e:c0:04:a1:d9:1d:27: b0:38:69:ef -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUQkhKRAHTfUKD+nHjllw1dmFJ4eMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjUwMDlaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDM4YWQ5NDYwNDFiMGVmZGEwNzM2OTA2OWFlYWZkZjcyZTQ4MzM3YTNiMWNj MTA3ZmUzYjc2NTk3ZDNmYjA0MWQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKHSjnv8t9OLe7FXQ87voXVsW8oULl64wVbu7MIcLJqMptxGzEKrSfYB6b3z k0aHjiD21Vt2jmydH8FjV2FtVVDG1xSmOFiGFGQ7Yh0w0bxdSGzyroj1BcWeick2 MhEQGNuG+jOx/U3BZsofO+Rq2g6m7vrCU5sCE44Tybh/34fdvUFC/bvkRglqHDdM B8YC2DjhqG2M6HpyTG0C7maN5t/R607x0rfhQJxFXyDd7MZuMuJbUGTH2ox7E6uk 0Gl2PEhKpJB8MOoxNg5tZcDLa5hutxgGRsks2ngQoqMDWww+KRpQG0KlDk2xhsK1 LX6NjuDVYBjGQ8v3ILh9v34EPnECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSek768 eHqnLnqiFhsmJ1sUXSU4dzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv ZTY4MGZmZTctZDc3Yy00NDMzLTgxZjktZmZiZjc2YTQ1YTZkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAME5tTAN BgkqhkiG9w0BAQsFAAOCAQEAasWXOE+LYfeUhBZ84ZiWyYQL7ZXGUN62YNZzCoUI nnsje/XqDK+jqqLLnj3zY5l/oq27jK8pWxYrBQhq+0PQpTQSRx3HffZQ5ria2F0F iZN4i6p1JlFyBpG0ml1sfKQrClJVbXGsP8HGxH204cpGZrzXnh7gdjuIQn59owsT 3azopQCqmN1f53T1QAxv0hjCpbOzVr4J/QNt9k0YYKns/OTmZPZBlmEDBn9oczmJ ROdaFPlLC089SKzq3M5ghkvHctSL04kzBfxWN304DOvQAIDpHPd4b5aNknKyZpcr 3MaJjc19fbe3FQ6kp/c05JuLcDxEj80uwASh2R0nsDhp7w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:43 2025 by rpki-client