This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fd04a54b-459a-491a-a013-59d0ed55825f.roa File: fd04a54b-459a-491a-a013-59d0ed55825f.roa (raw, json) Hash identifier: RFGMNN145L8Bgc5nuxh9ecnzUjlzpkR2wdWsLepvSb8= Subject key identifier: 8E:16:05:C5:FF:84:CB:75:F5:E9:31:D9:9D:E0:73:00:19:68:CB:E1 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 70B8F8DDF4A64C0A11F8C2E350297DA438027C02 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fd04a54b-459a-491a-a013-59d0ed55825f.roa Signing time: Sat 15 Nov 2025 06:40:55 +0000 ROA not before: Sat 15 Nov 2025 06:40:55 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 51.131.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b8:f8:dd:f4:a6:4c:0a:11:f8:c2:e3:50:29:7d:a4:38:02:7c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:40:55 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=951ae61c8a5b303d496859e4ee0cd49a00ee99967401ab7cf3d8d6749fe01055, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:06:75:70:69:25:b1:c4:88:69:2c:5a:69:8d: 38:a6:90:30:28:32:26:b6:3b:ff:6b:de:a5:70:07: ad:db:e3:8a:93:89:01:35:34:26:6e:02:df:9a:51: fa:f3:35:26:d9:b5:4f:15:65:8c:d9:1a:3f:18:5d: b7:eb:6a:52:7c:71:67:5d:12:09:71:37:21:a2:ab: 58:c3:97:d6:5d:c3:af:d3:b0:77:e8:36:f1:13:d2: 75:63:f1:38:dc:dd:2c:2d:66:77:d2:67:b5:7c:cb: c2:bd:62:72:51:7b:e0:1b:29:74:1b:1d:52:1d:49: b7:9b:c5:9f:12:e3:7b:66:9c:55:d1:cc:41:bf:08: d7:fb:bd:90:b5:f6:ce:58:e3:a2:2d:db:3e:9b:3f: ce:a2:98:4b:ed:b4:f6:76:b0:aa:74:e8:87:f0:a9: 1d:53:96:17:28:16:8f:56:0b:1e:01:e7:4c:2d:54: de:ab:68:1c:ed:3f:9d:95:2e:5d:58:b5:be:5c:39: 18:32:98:c4:9a:17:a5:d6:d6:62:28:5d:aa:30:27: d5:b6:bd:34:f5:cc:63:7a:68:8c:70:7d:42:8e:5f: 86:5f:04:7f:a9:8f:7c:1d:5c:82:31:12:ad:0d:e7: da:db:92:46:e9:a6:5f:dc:3e:bb:75:d9:72:b7:a5: 23:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:16:05:C5:FF:84:CB:75:F5:E9:31:D9:9D:E0:73:00:19:68:CB:E1 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/fd04a54b-459a-491a-a013-59d0ed55825f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.131.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0d:c7:3e:1c:44:e7:fd:24:83:e2:db:07:04:03:10:a0:92:51: f9:88:5e:49:bf:9c:b7:69:63:70:af:a8:b6:b2:17:29:1f:53: e7:83:57:ea:44:e4:57:0b:88:c0:94:d9:80:60:2f:e0:6e:61: 82:49:bc:13:a9:93:11:d0:74:b1:36:25:0e:de:ea:c8:3f:04: 98:c5:ce:fa:de:af:1b:5d:2e:c3:84:fb:50:2f:15:55:08:fc: 70:51:2b:2c:40:c5:78:f6:ec:4f:77:ab:bd:13:7c:3a:cf:88: b1:50:ee:5f:4b:0f:d6:8c:bd:52:a4:51:7b:58:bc:c6:6d:1c: 49:b8:ff:31:cf:a9:cb:9d:e8:e9:e6:8c:0b:96:71:e4:72:74: 53:d7:97:71:9b:58:72:93:b2:74:fe:0f:68:c8:a6:55:1d:0d: d8:4d:aa:03:3e:b8:e9:40:0d:f3:f5:25:b4:c2:8d:c7:84:c6: 3c:e7:34:db:a1:aa:9f:c0:68:d8:28:f3:4a:f5:20:fa:26:52: 9d:9f:1e:8f:af:13:3e:d3:ad:b7:46:ef:49:be:19:c3:ec:14: 5e:30:3e:df:53:2c:5b:70:e8:14:c9:a5:38:65:ab:fc:3e:1d: 37:cb:71:d4:05:1e:10:ef:8e:4c:95:5c:f2:35:53:f3:7b:ea: d3:bd:a5:c1 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUcLj43fSmTAoR+MLjUCl9pDgCfAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjQwNTVaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDk1MWFlNjFjOGE1YjMwM2Q0OTY4NTllNGVlMGNkNDlhMDBlZTk5OTY3NDAx YWI3Y2YzZDhkNjc0OWZlMDEwNTUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANMGdXBpJbHEiGksWmmNOKaQMCgyJrY7/2vepXAHrdvjipOJATU0Jm4C35pR +vM1Jtm1TxVljNkaPxhdt+tqUnxxZ10SCXE3IaKrWMOX1l3Dr9Owd+g28RPSdWPx ONzdLC1md9JntXzLwr1iclF74BspdBsdUh1Jt5vFnxLje2acVdHMQb8I1/u9kLX2 zljjoi3bPps/zqKYS+209nawqnToh/CpHVOWFygWj1YLHgHnTC1U3qtoHO0/nZUu XVi1vlw5GDKYxJoXpdbWYihdqjAn1ba9NPXMY3pojHB9Qo5fhl8Ef6mPfB1cgjES rQ3n2tuSRummX9w+u3XZcrelIwMCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSOFgXF /4TLdfXpMdmd4HMAGWjL4TAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv ZmQwNGE1NGItNDU5YS00OTFhLWEwMTMtNTlkMGVkNTU4MjVmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADODMA0G CSqGSIb3DQEBCwUAA4IBAQANxz4cROf9JIPi2wcEAxCgklH5iF5Jv5y3aWNwr6i2 shcpH1Png1fqRORXC4jAlNmAYC/gbmGCSbwTqZMR0HSxNiUO3urIPwSYxc763q8b XS7DhPtQLxVVCPxwUSssQMV49uxPd6u9E3w6z4ixUO5fSw/WjL1SpFF7WLzGbRxJ uP8xz6nLnejp5owLlnHkcnRT15dxm1hyk7J0/g9oyKZVHQ3YTaoDPrjpQA3z9SW0 wo3HhMY85zTboaqfwGjYKPNK9SD6JlKdnx6PrxM+0623Ru9JvhnD7BReMD7fUyxb cOgUyaU4Zav8Ph03y3HUBR4Q745MlVzyNVPze+rTvaXB -----END CERTIFICATE-----Generated at Sat Dec 6 09:52:11 2025 by rpki-client