This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa File: f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa (raw, json) Hash identifier: 0m9Bd4GSZ8VCfvecbA7rGIOT6KXS5u9AaDeDaW6CKhI= Subject key identifier: 97:D4:82:A9:04:D1:3E:B3:E1:EA:5D:3A:5C:5C:E5:A5:B1:B0:8E:92 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 22DE0EE13BD83B394617627FE52CCC90CEC00FE8 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa Signing time: Wed 10 Dec 2025 06:40:36 +0000 ROA not before: Wed 10 Dec 2025 06:40:36 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 193.26.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:de:0e:e1:3b:d8:3b:39:46:17:62:7f:e5:2c:cc:90:ce:c0:0f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Dec 10 06:40:36 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=81ac33c75535f6a24eb6bc4899e164699cd5e93e520333a8314d47e9683ff971, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:76:26:f2:38:30:b9:57:e0:0a:35:01:40:5a: d4:e2:a2:11:df:ac:da:57:d4:c2:58:93:9b:d9:20: 6a:44:59:b8:81:65:a4:b8:42:ec:11:4e:38:55:10: a4:06:47:4c:a7:7f:29:4c:0b:ba:e6:6d:43:6b:0c: 78:6b:76:2d:ea:48:0d:61:d8:f6:86:45:32:36:ac: 4d:6d:9b:1c:0d:e6:e0:d6:8f:0b:66:53:5f:84:e3: 77:6f:4f:f0:9e:ed:c6:77:57:a5:7c:87:7b:8a:02: 81:88:17:85:35:8c:c2:d7:13:16:a8:a8:27:49:03: 29:5c:0d:92:fe:cb:b0:18:c4:f3:b8:7b:d4:a2:16: cb:a7:b3:ca:8b:a8:80:68:8b:76:4a:f8:20:b7:62: 12:59:d3:78:95:3c:d3:01:b4:34:c7:5d:c9:1e:5c: 50:82:26:67:43:d2:2e:e3:3f:18:a7:6e:67:9f:d1: df:ee:33:77:35:6f:d8:6e:a7:38:59:49:9e:b4:54: 15:07:1a:dc:31:10:8c:c2:ac:ae:d5:54:2c:c1:37: bd:9f:fe:e8:9a:4c:65:f1:fe:71:40:1c:57:80:55: 0a:c3:03:16:8b:a1:16:08:1c:20:75:e1:c6:63:97: 36:8e:e1:76:1e:90:d6:fb:99:22:c1:8e:33:e6:cf: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D4:82:A9:04:D1:3E:B3:E1:EA:5D:3A:5C:5C:E5:A5:B1:B0:8E:92 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/f0cb36ae-21ee-4e99-93c6-e63ae570e483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.64.0/19 Signature Algorithm: sha256WithRSAEncryption 3e:94:0e:31:93:2f:5f:c9:b4:45:2a:a3:a9:ea:94:e2:05:c4: 37:67:06:f2:15:e5:ce:e2:91:2d:f4:07:8f:a4:c2:27:0a:a6: 59:50:20:3b:74:b5:c9:f6:e1:73:98:09:3a:4a:30:ef:53:b0: bd:c6:fd:9b:2c:90:27:65:05:ad:3f:4c:18:4e:e4:17:3e:75: 65:75:c7:7b:a7:12:06:bc:3c:49:b2:83:7d:4c:b5:8f:9d:57: 19:dd:6c:ae:9c:1f:86:68:4b:ef:c3:66:97:a0:56:57:b7:a4: 89:41:09:6f:fe:81:60:0d:a5:bc:26:6a:97:f6:65:83:c9:08: e0:65:1c:f7:ef:89:56:e1:84:b3:43:64:c4:54:76:9a:9b:fb: 81:82:b4:f1:84:91:26:c7:cc:fc:70:38:d6:77:93:95:0f:be: f1:ab:eb:33:38:e0:95:c7:26:7f:a9:d6:0b:3c:df:c1:12:6b: 61:83:68:0e:65:ab:b2:6a:ec:4c:9b:89:10:e3:75:2c:bb:7a: 55:0d:1a:bc:39:bf:07:54:90:e3:3e:c1:fc:a7:04:df:8d:b3: 00:68:c4:23:1a:b9:37:c8:68:23:23:39:89:33:b7:62:7f:f5: 28:b1:a9:b7:a9:77:6e:2c:6c:ad:29:30:3d:9f:e4:4a:94:a8: ec:a0:65:16 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUIt4O4TvYOzlGF2J/5SzMkM7AD+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTEyMTAwNjQwMzZaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDgxYWMzM2M3NTUzNWY2YTI0ZWI2YmM0ODk5ZTE2NDY5OWNkNWU5M2U1MjAz MzNhODMxNGQ0N2U5NjgzZmY5NzExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJ2JvI4MLlX4Ao1AUBa1OKiEd+s2lfUwliTm9kgakRZuIFlpLhC7BFOOFUQ pAZHTKd/KUwLuuZtQ2sMeGt2LepIDWHY9oZFMjasTW2bHA3m4NaPC2ZTX4Tjd29P 8J7txndXpXyHe4oCgYgXhTWMwtcTFqioJ0kDKVwNkv7LsBjE87h71KIWy6ezyouo gGiLdkr4ILdiElnTeJU80wG0NMddyR5cUIImZ0PSLuM/GKduZ5/R3+4zdzVv2G6n OFlJnrRUFQca3DEQjMKsrtVULME3vZ/+6JpMZfH+cUAcV4BVCsMDFouhFggcIHXh xmOXNo7hdh6Q1vuZIsGOM+bPWSsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSX1IKp BNE+s+HqXTpcXOWlsbCOkjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv ZjBjYjM2YWUtMjFlZS00ZTk5LTkzYzYtZTYzYWU1NzBlNDgzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcEaQDAN BgkqhkiG9w0BAQsFAAOCAQEAPpQOMZMvX8m0RSqjqeqU4gXEN2cG8hXlzuKRLfQH j6TCJwqmWVAgO3S1yfbhc5gJOkow71Owvcb9myyQJ2UFrT9MGE7kFz51ZXXHe6cS Brw8SbKDfUy1j51XGd1srpwfhmhL78Nml6BWV7ekiUEJb/6BYA2lvCZql/Zlg8kI 4GUc9++JVuGEs0NkxFR2mpv7gYK08YSRJsfM/HA41neTlQ++8avrMzjglccmf6nW CzzfwRJrYYNoDmWrsmrsTJuJEON1LLt6VQ0avDm/B1SQ4z7B/KcE342zAGjEIxq5 N8hoIyM5iTO3Yn/1KLGpt6l3bixsrSkwPZ/kSpSo7KBlFg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:48:04 2025 by rpki-client