This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa File: fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa (raw, json) Hash identifier: o4/HTrOa9gf72wCfp46rI0kfE8QGLZsZzeOjQCPFfjQ= Subject key identifier: 1A:96:55:7A:41:12:32:77:0A:21:F7:F5:4B:99:CE:0D:4D:5F:E2:73 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 108819BB0265C0074626E51FE15A541993401A5A Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa Signing time: Sat 15 Nov 2025 06:40:54 +0000 ROA not before: Sat 15 Nov 2025 06:40:54 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 212.167.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:88:19:bb:02:65:c0:07:46:26:e5:1f:e1:5a:54:19:93:40:1a:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:40:54 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=006029eb8b4fd51a542657dfa70d9888591da8807a96f07baa8cb034c7135865, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4c:62:2c:25:35:64:b8:d9:59:eb:fc:ad:a9: fb:81:ae:68:89:40:4b:90:78:aa:24:3c:83:d5:68: 61:0b:13:af:36:17:5f:6f:4e:16:42:f5:ab:96:c6: b1:93:14:41:b5:6b:b9:82:60:64:10:22:6e:46:0f: 4b:91:3f:c3:3a:87:9a:77:29:77:5a:93:71:7d:9b: 94:24:18:c2:d4:46:8f:0c:0c:27:c4:13:da:07:f3: 74:46:40:97:83:04:f2:ff:74:dc:e8:fc:ff:78:43: 55:67:96:a3:f1:bb:c8:49:e8:63:97:a3:39:c7:e0: c7:d4:0c:1c:2f:2f:11:e8:d5:de:f5:96:59:71:cf: bc:d1:c4:49:10:73:4a:70:b0:18:19:85:72:ad:47: c6:1d:b6:9c:ad:bf:18:7e:ed:33:b4:ca:7c:c9:14: 17:29:c4:38:c8:2b:12:b7:4b:2b:0e:d3:37:c6:02: 79:2f:54:25:a0:c9:2c:4c:7c:35:f5:6e:82:41:2c: d3:20:a7:3f:fe:20:5e:8f:67:6d:68:1e:90:97:b8: 84:dc:9e:80:cf:d8:5c:b9:c2:07:ff:d9:6c:76:43: 60:ca:6a:c0:ef:8a:49:6f:b0:d2:c5:dd:cc:f1:87: a1:aa:c3:36:c9:d7:4e:28:01:12:6f:bd:31:39:50: 86:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:96:55:7A:41:12:32:77:0A:21:F7:F5:4B:99:CE:0D:4D:5F:E2:73 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fb2bc1bb-cbbe-4f6c-8ef3-eabfdb4fa7b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.167.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1f:fe:c8:e2:df:0d:1e:65:81:6b:94:3b:6b:b1:8d:a5:24:8e: 10:cf:e1:49:42:71:5e:45:70:e3:39:d6:9e:3a:a5:15:ad:9f: ce:d3:dd:4d:0a:39:14:5f:1d:c1:5b:bd:c7:32:6c:7d:5a:a5: 26:70:cb:4e:40:77:13:1a:81:d8:87:f9:2a:db:61:d9:c1:68: b8:4c:cf:cf:8c:5c:ec:b7:5c:e2:65:c6:bc:2d:2c:67:f5:dc: e4:eb:41:60:d9:ca:df:68:b0:e5:33:19:da:0c:16:ab:78:ed: 07:05:1d:6c:49:0a:3d:b8:af:7d:b5:31:37:b5:fd:fb:6c:d4: 34:95:eb:14:0e:8e:65:74:96:08:5f:89:35:8d:68:1c:4e:56: 79:f4:db:6c:99:39:cb:9b:ba:4b:e1:43:ac:a5:17:46:72:fb: e9:65:1f:31:56:e1:aa:54:a4:d7:bb:31:6c:3a:cd:5f:3d:6c: d2:ed:ca:ad:2f:86:72:c7:35:da:69:2a:1f:73:84:db:d5:03: d2:c7:f8:84:37:bf:4e:e6:f8:6b:95:14:0f:d4:05:5c:7d:13: d1:9d:65:56:fe:2a:2b:4e:ce:72:82:75:cb:11:d7:00:9a:d8: 35:e9:c2:80:67:e7:cf:f8:ba:a6:6e:d8:7a:27:7d:f2:7f:99: 6f:8f:a8:cb -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUEIgZuwJlwAdGJuUf4VpUGZNAGlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjQwNTRaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDAwNjAyOWViOGI0ZmQ1MWE1NDI2NTdkZmE3MGQ5ODg4NTkxZGE4ODA3YTk2 ZjA3YmFhOGNiMDM0YzcxMzU4NjUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlMYiwlNWS42Vnr/K2p+4GuaIlAS5B4qiQ8g9VoYQsTrzYXX29OFkL1q5bG sZMUQbVruYJgZBAibkYPS5E/wzqHmncpd1qTcX2blCQYwtRGjwwMJ8QT2gfzdEZA l4ME8v903Oj8/3hDVWeWo/G7yEnoY5ejOcfgx9QMHC8vEejV3vWWWXHPvNHESRBz SnCwGBmFcq1Hxh22nK2/GH7tM7TKfMkUFynEOMgrErdLKw7TN8YCeS9UJaDJLEx8 NfVugkEs0yCnP/4gXo9nbWgekJe4hNyegM/YXLnCB//ZbHZDYMpqwO+KSW+w0sXd zPGHoarDNsnXTigBEm+9MTlQhkECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQallV6 QRIydwoh9/VLmc4NTV/iczAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv ZmIyYmMxYmItY2JiZS00ZjZjLThlZjMtZWFiZmRiNGZhN2I5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANSnMA0G CSqGSIb3DQEBCwUAA4IBAQAf/sji3w0eZYFrlDtrsY2lJI4Qz+FJQnFeRXDjOdae OqUVrZ/O091NCjkUXx3BW73HMmx9WqUmcMtOQHcTGoHYh/kq22HZwWi4TM/PjFzs t1ziZca8LSxn9dzk60Fg2crfaLDlMxnaDBareO0HBR1sSQo9uK99tTE3tf37bNQ0 lesUDo5ldJYIX4k1jWgcTlZ59NtsmTnLm7pL4UOspRdGcvvpZR8xVuGqVKTXuzFs Os1fPWzS7cqtL4ZyxzXaaSofc4Tb1QPSx/iEN79O5vhrlRQP1AVcfRPRnWVW/ior Ts5ygnXLEdcAmtg16cKAZ+fP+Lqmbth6J33yf5lvj6jL -----END CERTIFICATE-----Generated at Sat Dec 6 21:32:58 2025 by rpki-client