This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44c4496c-63e1-49fc-828b-d77f94e0a789.roa File: 44c4496c-63e1-49fc-828b-d77f94e0a789.roa (raw, json) Hash identifier: P10brcGZACHHzaL4Q9csZtgGXWlGmRcpsN4gcdvdCoU= Subject key identifier: 7F:81:FE:88:2C:B2:4C:22:00:2B:59:72:A2:A3:59:85:91:D9:85:6C Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 7C8C7C8BD5EDF1A0496843F9556D6FCEAFE11586 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44c4496c-63e1-49fc-828b-d77f94e0a789.roa Signing time: Thu 11 Dec 2025 01:00:21 +0000 ROA not before: Thu 11 Dec 2025 01:00:21 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 213.72.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8c:7c:8b:d5:ed:f1:a0:49:68:43:f9:55:6d:6f:ce:af:e1:15:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Dec 11 01:00:21 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=6a74676c46fc6b5dbd0fd74956981e561fae9182a76826efcf89b829fb1fa7e9, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:46:05:6d:fd:19:7e:73:29:bc:71:b6:2f:dc: 87:53:77:3e:a3:db:b7:cd:40:5c:d3:39:da:e0:26: 90:44:94:3f:98:98:e9:e7:35:83:5b:6d:4b:43:85: dd:a1:3b:40:d3:0e:7d:eb:08:8c:4d:a1:29:94:3f: 79:f0:90:14:c4:6f:ce:26:03:c5:65:2e:d5:d5:2a: ac:b5:e3:b6:d1:44:31:0f:4b:3d:42:1e:6d:b4:e4: 2d:16:bb:48:8a:61:1c:f5:91:7b:ea:79:64:e1:8f: 14:64:06:39:ef:f3:df:f5:56:86:1d:b5:ee:52:c2: 0b:90:af:0f:7e:93:79:20:67:1b:99:84:ec:e0:18: 27:5b:c6:23:a2:28:10:1d:a5:38:04:a7:c2:5e:14: 7f:0c:7b:a2:ab:85:e4:f3:94:b6:9a:a2:18:49:1b: da:b8:5c:89:41:39:02:ef:b9:ed:ab:df:9d:79:01: 69:c2:3b:83:46:22:5f:c3:e1:30:ad:15:74:9e:6a: 13:67:ce:1e:be:f1:9f:1b:1a:5c:e9:b3:14:9c:21: 45:67:d4:68:0b:5f:67:7a:64:bc:1a:33:19:02:79: a0:14:5b:b1:73:b6:03:20:20:6a:d6:24:9e:56:1e: 8b:a2:e8:12:89:49:3c:05:09:e7:60:0c:5e:49:4d: 26:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:81:FE:88:2C:B2:4C:22:00:2B:59:72:A2:A3:59:85:91:D9:85:6C X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/44c4496c-63e1-49fc-828b-d77f94e0a789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.72.128.0/17 Signature Algorithm: sha256WithRSAEncryption 55:e8:fc:79:ae:d8:95:c9:5f:ac:a5:fd:8c:8a:5e:e4:06:39: 05:f8:ba:1e:81:17:06:03:7a:22:d4:59:96:50:b6:57:c9:ab: 59:a6:e7:84:26:8c:94:b8:b6:da:9e:43:a9:a8:99:ab:a0:6e: 77:f3:e3:b1:5e:13:ec:cf:d2:c0:6c:72:8d:38:1b:c4:61:de: fa:79:c8:0a:2b:89:2e:a5:7f:26:c8:9d:5c:ce:ae:b2:b0:25: 3b:15:97:b3:c9:ba:35:20:1c:b3:b2:c3:c1:02:7b:bd:98:4e: 6c:f9:45:a1:d9:a0:64:55:df:08:45:8a:27:37:1c:95:ca:52: cc:2d:50:07:bc:e9:9f:64:f5:67:33:00:15:d0:00:0b:dd:05: 18:e2:1b:bf:6f:2e:8f:f0:91:14:1b:7d:b1:0b:5c:f4:08:6b: 56:2b:65:19:6b:fa:12:5c:ef:75:1a:6b:4e:df:bd:e1:57:98: 5e:e6:a8:70:d9:bd:7c:72:65:bd:50:43:73:f5:4b:af:71:6d: f9:9d:81:ec:ec:84:00:c8:87:78:30:12:10:ba:26:9e:ca:0a: 31:c7:c2:93:c8:1e:63:dc:db:f6:19:4c:0b:3f:5a:a8:ac:41: f9:07:96:ba:da:fe:80:23:8a:ae:ee:42:a1:f8:5e:de:c9:b5: 70:ec:93:7e -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUfIx8i9Xt8aBJaEP5VW1vzq/hFYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTEyMTEwMTAwMjFaFw0yNjAzMTEyMzU5NTlaMHoxSTBHBgNV BAUTQDZhNzQ2NzZjNDZmYzZiNWRiZDBmZDc0OTU2OTgxZTU2MWZhZTkxODJhNzY4 MjZlZmNmODliODI5ZmIxZmE3ZTkxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIJGBW39GX5zKbxxti/ch1N3PqPbt81AXNM52uAmkESUP5iY6ec1g1ttS0OF 3aE7QNMOfesIjE2hKZQ/efCQFMRvziYDxWUu1dUqrLXjttFEMQ9LPUIebbTkLRa7 SIphHPWRe+p5ZOGPFGQGOe/z3/VWhh217lLCC5CvD36TeSBnG5mE7OAYJ1vGI6Io EB2lOASnwl4Ufwx7oquF5POUtpqiGEkb2rhciUE5Au+57avfnXkBacI7g0YiX8Ph MK0VdJ5qE2fOHr7xnxsaXOmzFJwhRWfUaAtfZ3pkvBozGQJ5oBRbsXO2AyAgatYk nlYei6LoEolJPAUJ52AMXklNJlkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBR/gf6I LLJMIgArWXKio1mFkdmFbDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv NDRjNDQ5NmMtNjNlMS00OWZjLTgyOGItZDc3Zjk0ZTBhNzg5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9VIgDAN BgkqhkiG9w0BAQsFAAOCAQEAVej8ea7YlclfrKX9jIpe5AY5Bfi6HoEXBgN6ItRZ llC2V8mrWabnhCaMlLi22p5DqaiZq6Bud/PjsV4T7M/SwGxyjTgbxGHe+nnICiuJ LqV/JsidXM6usrAlOxWXs8m6NSAcs7LDwQJ7vZhObPlFodmgZFXfCEWKJzcclcpS zC1QB7zpn2T1ZzMAFdAAC90FGOIbv28uj/CRFBt9sQtc9AhrVitlGWv6ElzvdRpr Tt+94VeYXuaocNm9fHJlvVBDc/VLr3Ft+Z2B7OyEAMiHeDASELomnsoKMcfCk8ge Y9zb9hlMCz9aqKxB+QeWutr+gCOKru5Cofhe3sm1cOyTfg== -----END CERTIFICATE-----Generated at Thu Jan 22 22:20:18 2026 by rpki-client