This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa File: fc353215-935f-47d2-9298-767ccc0eae1a.roa (raw, json) Hash identifier: H16MllqHeSfGAVMxeK2Ob9ulEzAeGL4TgRaopESFcA0= Subject key identifier: 79:34:6C:5B:3F:E2:0A:AF:25:24:C1:68:16:86:16:75:EF:BF:F2:92 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 2420BD0C640E38AC394D7D36A51C4F6B39C9A286 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa Signing time: Sat 15 Nov 2025 06:50:21 +0000 ROA not before: Sat 15 Nov 2025 06:50:21 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 85.151.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:20:bd:0c:64:0e:38:ac:39:4d:7d:36:a5:1c:4f:6b:39:c9:a2:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:50:21 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=cdeb3d7fcfd68ade50e371d341c823cd922dfbeab9d528023305105f65b19d58, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:f7:8d:17:10:71:62:b9:d7:0f:94:82:88: af:b0:58:54:3f:a5:e7:02:85:38:d1:f6:c5:89:85: 35:e4:7a:2e:a0:e2:e5:8a:08:d9:42:21:60:34:89: a3:88:ce:d0:5b:86:c9:1d:c4:e9:78:ff:07:dc:41: 54:4b:83:9e:d1:1b:f8:bb:82:d0:08:06:aa:e0:96: 47:18:5e:1a:d4:68:a6:76:36:e8:00:86:f7:35:f9: a1:56:e6:be:34:5f:d8:50:2e:18:f1:e1:92:f9:57: dd:21:1b:65:3f:80:c7:9a:f9:a1:9d:f8:3a:31:5b: ab:53:7e:3f:c7:8d:78:b9:66:19:3a:57:5e:73:02: a5:16:14:b0:3a:c9:77:c8:31:4e:95:71:06:a3:12: e3:6a:6e:ce:1b:5c:00:cb:a7:18:16:c2:d7:34:2e: 32:f6:8a:03:6c:36:a4:8b:05:d9:48:4e:5d:8a:57: 63:57:ee:bf:d6:3e:38:3f:2d:ac:15:64:e6:45:09: d0:5b:38:da:78:a8:e8:92:25:8a:fc:62:51:19:20: a7:ac:2a:7e:8e:0c:d4:50:1d:7a:05:e4:e2:41:8c: cb:82:7c:fe:1c:34:0a:b7:12:24:2c:71:1a:21:be: be:f9:d6:3c:49:f4:d6:d2:ad:60:51:b8:c4:d8:f8: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:34:6C:5B:3F:E2:0A:AF:25:24:C1:68:16:86:16:75:EF:BF:F2:92 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fc353215-935f-47d2-9298-767ccc0eae1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.151.0.0/16 Signature Algorithm: sha256WithRSAEncryption 69:a6:26:4e:7b:f7:83:2a:ea:66:d0:91:15:1f:22:b9:fc:78: f6:ea:7a:d2:71:7c:01:b4:4f:29:25:53:79:d6:bf:9c:38:d2: 6a:ae:25:d6:7d:cd:0e:5e:96:37:b2:6e:36:22:0f:e8:cf:bd: a7:87:26:1c:0b:18:ed:03:9c:81:12:7f:32:42:3c:26:95:37: e8:b8:04:fa:72:31:49:48:f1:3b:f4:4a:ff:54:46:7a:6c:fb: 44:26:46:44:09:92:e0:17:4f:31:52:5a:c9:8f:3f:ef:45:ce: f6:1f:dd:20:de:c3:67:34:40:73:f5:da:16:08:da:86:06:8b: 74:91:c8:bd:01:ac:d5:2e:12:9d:81:a3:21:4b:aa:87:92:0e: a4:5e:2a:d4:89:cc:e2:71:bb:df:c1:04:8c:f7:79:46:84:8d: 75:b3:68:26:c8:54:44:92:98:06:18:97:89:99:10:7f:30:59: 9f:ab:a5:0b:d7:f3:85:88:c9:84:b8:4c:5a:1c:7d:c1:78:8e: 3e:f7:9a:7a:84:90:b6:6d:6f:0b:3e:55:53:5a:3b:6d:bc:fa: bf:e3:64:f1:9f:9b:52:20:93:e8:fe:a3:0d:4d:6d:79:ea:da: 55:7a:35:e9:85:c7:a5:c2:f0:1c:c8:70:5a:82:61:16:a0:26: be:39:0e:76 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUJCC9DGQOOKw5TX02pRxPaznJooYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjUwMjFaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGNkZWIzZDdmY2ZkNjhhZGU1MGUzNzFkMzQxYzgyM2NkOTIyZGZiZWFiOWQ1 MjgwMjMzMDUxMDVmNjViMTlkNTgxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5P940XEHFiudcPlIKIr7BYVD+l5wKFONH2xYmFNeR6LqDi5YoI2UIhYDSJ o4jO0FuGyR3E6Xj/B9xBVEuDntEb+LuC0AgGquCWRxheGtRopnY26ACG9zX5oVbm vjRf2FAuGPHhkvlX3SEbZT+Ax5r5oZ34OjFbq1N+P8eNeLlmGTpXXnMCpRYUsDrJ d8gxTpVxBqMS42puzhtcAMunGBbC1zQuMvaKA2w2pIsF2UhOXYpXY1fuv9Y+OD8t rBVk5kUJ0Fs42nio6JIlivxiURkgp6wqfo4M1FAdegXk4kGMy4J8/hw0CrcSJCxx GiG+vvnWPEn01tKtYFG4xNj4RJcCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBR5NGxb P+IKryUkwWgWhhZ177/ykjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv ZmMzNTMyMTUtOTM1Zi00N2QyLTkyOTgtNzY3Y2NjMGVhZTFhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAFWXMA0G CSqGSIb3DQEBCwUAA4IBAQBppiZOe/eDKupm0JEVHyK5/Hj26nrScXwBtE8pJVN5 1r+cONJqriXWfc0OXpY3sm42Ig/oz72nhyYcCxjtA5yBEn8yQjwmlTfouAT6cjFJ SPE79Er/VEZ6bPtEJkZECZLgF08xUlrJjz/vRc72H90g3sNnNEBz9doWCNqGBot0 kci9AazVLhKdgaMhS6qHkg6kXirUiczicbvfwQSM93lGhI11s2gmyFREkpgGGJeJ mRB/MFmfq6UL1/OFiMmEuExaHH3BeI4+95p6hJC2bW8LPlVTWjttvPq/42Txn5tS IJPo/qMNTW156tpVejXphcelwvAcyHBagmEWoCa+OQ52 -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:29 2025 by rpki-client