This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/85620864-b6e3-4aeb-8798-74669cc5226c.roa File: 85620864-b6e3-4aeb-8798-74669cc5226c.roa (raw, json) Hash identifier: xjxAlrac67sJP4w1H82ai/YqfH1aKJHHTSBoaRC94kw= Subject key identifier: E4:58:B5:E3:5D:C8:64:BD:96:81:45:34:CB:76:43:6F:CF:A8:1B:A3 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 1F87DE1E8F62A985F820F62BA1ADCF946FD7EEBC Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/85620864-b6e3-4aeb-8798-74669cc5226c.roa Signing time: Sat 15 Nov 2025 06:50:44 +0000 ROA not before: Sat 15 Nov 2025 06:50:44 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 51.202.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:87:de:1e:8f:62:a9:85:f8:20:f6:2b:a1:ad:cf:94:6f:d7:ee:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:50:44 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=a933c68aa2ae663cd833da4c34ba15a8d20c7bcbe471aa72fb99c28ee3b59a93, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:9b:80:54:04:80:0a:47:14:75:04:94:00: ef:2e:2f:f2:67:23:c3:20:b2:0f:eb:54:e7:96:d1: 7b:c1:b4:89:e8:3e:8b:6a:4b:4e:26:49:94:d3:95: 59:10:7b:2b:46:6e:fe:0e:a6:e1:e8:4f:bd:2e:b1: c8:de:ea:7a:e6:e1:0f:53:2b:8d:96:69:df:73:81: 1b:24:17:1b:bf:d2:50:e6:19:47:0e:e2:35:7d:87: 1f:da:50:9f:de:83:77:00:46:68:48:9b:4f:0a:ee: c3:68:5f:8c:32:97:04:55:1b:85:dc:b5:53:ce:35: 7d:bd:17:b9:61:1e:f8:6e:82:ea:19:13:d3:71:6d: ce:e7:35:e4:34:ee:a5:c2:fa:25:c9:6a:95:a5:97: 58:b6:23:8d:98:2f:c8:4b:44:7c:96:a3:e5:90:dd: 83:b8:b3:12:8b:20:d5:dd:c0:0d:af:ae:d7:85:73: ba:85:d0:a4:c7:15:9d:f1:4c:03:b0:3b:c4:24:a6: d1:00:d9:42:22:47:60:dd:e6:25:0e:57:4a:29:12: 1a:fb:14:89:46:2c:aa:b9:f4:c7:58:71:cd:6e:c7: c5:57:df:eb:89:e8:46:cf:7d:54:1b:13:b4:ba:8c: 60:00:43:c9:bc:17:80:21:84:1f:34:b0:9a:c8:4a: ed:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:58:B5:E3:5D:C8:64:BD:96:81:45:34:CB:76:43:6F:CF:A8:1B:A3 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/85620864-b6e3-4aeb-8798-74669cc5226c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.202.0.0/15 Signature Algorithm: sha256WithRSAEncryption b3:ee:72:3d:a7:61:41:ad:06:0d:e7:8d:45:82:58:3e:d4:cb: ef:c8:49:72:44:69:47:c1:c3:89:e0:f0:f2:1a:bd:6e:6a:b0: c2:8a:41:f0:eb:7a:be:5c:78:fa:b4:47:59:f7:4a:c4:c3:08: 55:05:28:44:c9:3c:6d:c9:d2:7e:27:57:a8:4c:f9:bc:a4:d8: 45:5e:50:4d:49:47:80:31:4d:04:be:6b:5d:7e:3c:08:3b:dc: 67:df:8f:c7:b0:4b:9a:22:c2:88:4e:9a:ef:96:59:e6:82:cf: 5c:51:ea:d0:d8:77:47:ff:f7:9e:e1:9f:55:67:2c:50:16:e0: dc:88:86:49:93:d6:3b:fc:96:a6:11:4a:bb:4f:1c:9e:e0:8d: ca:9a:55:ff:c5:21:53:68:09:89:76:70:83:cb:33:36:1e:d6: f7:c6:2b:52:fc:66:8d:a0:1a:aa:c9:cf:49:7b:ed:f6:1e:60: 42:ac:a9:eb:b8:11:e2:5a:26:bc:d5:ae:a9:64:25:6c:80:f8: 9b:4e:8b:da:dd:a7:2f:d3:af:25:7a:bb:27:0b:31:e3:c7:a7: 37:e0:c2:73:8f:2e:ea:0e:50:fd:83:a4:4d:2c:35:70:cc:5c: 2b:b5:2d:d3:4a:07:ec:c2:ae:bb:0c:d1:31:7e:4a:7c:da:ad: 90:4f:81:af -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUH4feHo9iqYX4IPYroa3PlG/X7rwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjUwNDRaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQGE5MzNjNjhhYTJhZTY2M2NkODMzZGE0YzM0YmExNWE4ZDIwYzdiY2JlNDcx YWE3MmZiOTljMjhlZTNiNTlhOTMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANopm4BUBIAKRxR1BJQA7y4v8mcjwyCyD+tU55bRe8G0ieg+i2pLTiZJlNOV WRB7K0Zu/g6m4ehPvS6xyN7qeubhD1MrjZZp33OBGyQXG7/SUOYZRw7iNX2HH9pQ n96DdwBGaEibTwruw2hfjDKXBFUbhdy1U841fb0XuWEe+G6C6hkT03Ftzuc15DTu pcL6JclqlaWXWLYjjZgvyEtEfJaj5ZDdg7izEosg1d3ADa+u14VzuoXQpMcVnfFM A7A7xCSm0QDZQiJHYN3mJQ5XSikSGvsUiUYsqrn0x1hxzW7HxVff64noRs99VBsT tLqMYABDybwXgCGEHzSwmshK7WECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBTkWLXj XchkvZaBRTTLdkNvz6gbozAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv ODU2MjA4NjQtYjZlMy00YWViLTg3OTgtNzQ2NjljYzUyMjZjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPKMA0G CSqGSIb3DQEBCwUAA4IBAQCz7nI9p2FBrQYN541Fglg+1MvvyElyRGlHwcOJ4PDy Gr1uarDCikHw63q+XHj6tEdZ90rEwwhVBShEyTxtydJ+J1eoTPm8pNhFXlBNSUeA MU0EvmtdfjwIO9xn34/HsEuaIsKITprvllnmgs9cUerQ2HdH//ee4Z9VZyxQFuDc iIZJk9Y7/JamEUq7Txye4I3KmlX/xSFTaAmJdnCDyzM2Htb3xitS/GaNoBqqyc9J e+32HmBCrKnruBHiWia81a6pZCVsgPibTova3acv068lersnCzHjx6c34MJzjy7q DlD9g6RNLDVwzFwrtS3TSgfswq67DNExfkp82q2QT4Gv -----END CERTIFICATE-----Generated at Sat Nov 22 21:30:06 2025 by rpki-client