This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa File: f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa (raw, json) Hash identifier: hhsr9fpldfxmZ6uBXzXgS4vjp5dtwkuyfTXNBNjc4Q4= Subject key identifier: 6E:B5:33:7C:B0:97:0D:0F:75:A2:E4:28:08:26:E9:46:33:06:E8:45 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 4042C7C1CA4384C3674E0C770F3A4E1ABD66DF7D Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa Signing time: Sat 15 Nov 2025 06:40:07 +0000 ROA not before: Sat 15 Nov 2025 06:40:07 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 193.26.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:42:c7:c1:ca:43:84:c3:67:4e:0c:77:0f:3a:4e:1a:bd:66:df:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:40:07 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=6113b2447a357f9b7d7bd4b5691d6765652c786b42d6835a2c3e81e936113a9d, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fc:d9:1e:58:c0:d3:59:48:38:52:5c:bd:9f: 9b:6e:2f:e4:cb:ac:4d:91:54:83:e8:6f:e9:06:59: 7f:9f:b8:ec:ee:db:6a:96:cd:80:67:e9:ce:fd:65: fb:bf:08:a6:c1:2e:e7:71:70:31:08:e4:62:32:c0: 26:c8:08:30:78:76:45:73:c0:bb:db:ca:ab:23:42: 24:6e:f6:ec:82:18:6e:29:88:32:24:f5:90:51:c2: 07:59:fa:40:fe:bf:e5:d3:33:02:eb:32:45:e5:ff: 5c:80:04:2b:f4:25:35:a8:4e:be:f5:29:8e:ed:54: 52:85:b9:00:c8:3c:94:e6:10:34:16:ad:e0:d4:2c: fd:64:a8:6b:fa:54:c6:d0:24:1a:ba:f1:e8:0a:6a: b3:b6:4a:f4:6d:df:2e:09:7d:71:a1:f6:a8:46:b2: 56:51:a4:f9:53:ba:ef:ae:34:db:7b:87:34:7f:6a: 1e:29:fa:36:64:1c:39:a5:37:25:b9:71:43:ed:0c: 29:3d:5b:27:e2:94:7c:e1:76:62:ac:cc:22:e5:0f: 13:89:03:13:a6:ac:cc:bf:ab:92:dd:ae:d3:cf:f2: d8:11:51:09:8d:38:40:a4:66:27:4e:84:ed:46:14: d1:e7:70:57:dd:cf:a0:95:0c:e8:e3:49:df:36:e6: 8d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B5:33:7C:B0:97:0D:0F:75:A2:E4:28:08:26:E9:46:33:06:E8:45 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.64.0/19 Signature Algorithm: sha256WithRSAEncryption 85:18:1f:c4:e3:66:38:db:86:3d:29:a6:68:68:f7:79:46:16: 8e:ac:a4:b7:06:c6:86:5f:d9:00:56:69:ad:96:5a:86:ed:a1: 96:23:f7:f0:b2:75:52:f8:9e:c8:78:3c:f7:5b:00:22:c3:60: 85:aa:7e:31:89:b7:34:6d:90:9b:23:67:b4:db:5f:57:5f:6d: be:0b:fd:c3:3d:28:61:72:6b:e1:b2:92:b2:2b:cd:84:d8:23: 34:bd:60:54:38:6f:aa:e5:e7:59:8b:82:97:fb:ad:7e:13:23: 2a:3c:cf:5d:43:e2:5d:42:36:70:30:32:bd:f9:c3:23:f6:d3: fd:70:1b:d9:4e:bb:15:2c:72:bf:7d:1c:bd:21:de:7c:f5:fa: cf:ab:ba:06:9c:b2:51:c1:ed:ba:e6:16:0d:5a:ff:db:27:f0: 11:be:23:75:6d:17:81:8e:a8:d9:72:4e:09:c4:ba:39:df:2d: 17:ac:b8:22:a9:4d:56:73:95:db:ed:c4:b1:e9:25:29:4b:1a: 80:07:d9:77:44:5e:d0:91:99:29:62:46:b8:d7:79:26:e2:4a: 6a:70:13:ec:9d:e4:b1:0c:57:8a:59:03:53:5c:fe:eb:f3:6f: 3b:1f:24:6a:ca:45:dd:2e:de:f7:5c:9b:e5:20:44:b6:77:05: f2:26:f4:22 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUQELHwcpDhMNnTgx3DzpOGr1m330wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjQwMDdaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDYxMTNiMjQ0N2EzNTdmOWI3ZDdiZDRiNTY5MWQ2NzY1NjUyYzc4NmI0MmQ2 ODM1YTJjM2U4MWU5MzYxMTNhOWQxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKL82R5YwNNZSDhSXL2fm24v5MusTZFUg+hv6QZZf5+47O7bapbNgGfpzv1l +78IpsEu53FwMQjkYjLAJsgIMHh2RXPAu9vKqyNCJG727IIYbimIMiT1kFHCB1n6 QP6/5dMzAusyReX/XIAEK/QlNahOvvUpju1UUoW5AMg8lOYQNBat4NQs/WSoa/pU xtAkGrrx6Apqs7ZK9G3fLgl9caH2qEayVlGk+VO6764023uHNH9qHin6NmQcOaU3 JblxQ+0MKT1bJ+KUfOF2YqzMIuUPE4kDE6aszL+rkt2u08/y2BFRCY04QKRmJ06E 7UYU0edwV93PoJUM6ONJ3zbmjfkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRutTN8 sJcND3Wi5CgIJulGMwboRTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv ZjBjYjM2YWUtMjFlZS00ZTk5LTkzYzYtZTYzYWU1NzBlNDgzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcEaQDAN BgkqhkiG9w0BAQsFAAOCAQEAhRgfxONmONuGPSmmaGj3eUYWjqyktwbGhl/ZAFZp rZZahu2hliP38LJ1UvieyHg891sAIsNghap+MYm3NG2QmyNntNtfV19tvgv9wz0o YXJr4bKSsivNhNgjNL1gVDhvquXnWYuCl/utfhMjKjzPXUPiXUI2cDAyvfnDI/bT /XAb2U67FSxyv30cvSHefPX6z6u6BpyyUcHtuuYWDVr/2yfwEb4jdW0XgY6o2XJO CcS6Od8tF6y4IqlNVnOV2+3EseklKUsagAfZd0Re0JGZKWJGuNd5JuJKanAT7J3k sQxXilkDU1z+6/NvOx8kaspF3S7e91yb5SBEtncF8ib0Ig== -----END CERTIFICATE-----Generated at Sat Dec 6 17:34:06 2025 by rpki-client