This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/938d85ea-da85-4f15-8f87-5780d45bc4c1.roa File: 938d85ea-da85-4f15-8f87-5780d45bc4c1.roa (raw, json) Hash identifier: pH/jAgHZ0BYHtTKvXe7pR5Lw49nsIZYvhOGUYKP8r1s= Subject key identifier: 0A:E3:69:B1:BE:6E:25:F7:86:70:AE:32:4A:15:F4:B6:E1:BB:42:18 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 790386CCF1BF018516854A0D4FEE9E14107BBE88 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/938d85ea-da85-4f15-8f87-5780d45bc4c1.roa Signing time: Tue 20 Jan 2026 17:06:48 +0000 ROA not before: Tue 20 Jan 2026 17:06:48 +0000 ROA not after: Mon 20 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 57.71.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:03:86:cc:f1:bf:01:85:16:85:4a:0d:4f:ee:9e:14:10:7b:be:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Jan 20 17:06:48 2026 GMT Not After : Apr 20 23:59:59 2026 GMT Subject: serialNumber=16ae2bc20d8281bc4a6262dfe967f4e0fc8bfb0d85ffb3223a0558587fabbbf6, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:d0:97:d8:1a:c2:25:20:ff:a3:35:20:5a: 81:ad:10:4b:13:af:80:6d:4c:ac:7a:9c:6e:1e:0d: 06:8d:e2:82:23:26:ed:cb:36:5c:be:e1:ba:8d:1a: 4b:97:57:c3:f3:51:55:08:f6:3c:b8:ee:b9:21:b7: bf:4c:fe:fe:ec:4c:87:5e:07:03:6b:4c:6c:c7:ca: bc:ad:e8:ec:46:9b:22:e6:37:cd:28:cf:14:78:4c: de:67:bf:ff:5d:31:b9:91:76:8c:73:78:34:a5:0a: 71:fe:eb:24:1a:c8:43:56:c3:4e:cc:99:69:98:3e: 98:f3:c7:9a:d0:9a:7d:ba:d4:90:9e:f7:f3:66:68: e5:1e:9f:72:6b:80:90:cd:24:89:ff:c5:a1:21:bd: 7e:f8:8a:04:f3:82:58:ee:b1:98:ef:08:33:de:0d: 29:30:6c:49:44:2e:bc:01:f4:ca:37:3a:82:cb:7e: a5:c8:50:72:09:13:1b:69:f1:ab:4d:c9:9e:7d:9f: 6d:71:a5:f3:d6:53:2b:74:eb:8e:4a:22:2e:4d:84: aa:28:92:be:50:b2:bb:06:28:2b:04:e4:c1:94:ef: 93:bb:dc:c9:b3:8c:31:0d:64:c6:62:f9:17:0c:e4: a7:6d:d2:41:c0:34:ec:71:c7:31:20:a1:86:af:78: c9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E3:69:B1:BE:6E:25:F7:86:70:AE:32:4A:15:F4:B6:E1:BB:42:18 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/938d85ea-da85-4f15-8f87-5780d45bc4c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 57.71.0.0/16 Signature Algorithm: sha256WithRSAEncryption 46:7e:8c:dd:27:5e:0b:f4:42:f6:6e:50:c9:29:d1:3b:df:0b: 3d:d8:23:0b:59:15:0d:7b:62:a3:b1:04:63:68:f6:1b:20:bd: 1f:92:26:cb:e1:a0:b9:01:72:8e:47:62:85:6e:6e:99:4d:ab: 78:2b:c7:f5:74:e7:ad:87:33:1f:af:7a:b7:ba:3b:6c:cf:8c: 37:9c:81:02:7a:36:bb:40:97:73:43:22:00:7a:c9:8e:f4:a2: 3a:cb:ca:5f:39:ca:bf:ce:7c:24:ac:53:04:dd:e2:70:0b:4c: db:11:e3:ff:84:44:bc:5e:a7:8d:de:9c:f1:37:fe:95:6b:ae: 5a:a9:48:f7:ca:4c:1c:03:ef:22:84:83:53:cc:9c:a3:94:3a: f5:00:33:18:cf:33:65:0b:5b:df:2e:6d:ac:ab:46:8f:ee:7b: 22:ce:72:21:64:20:9b:a1:12:2b:3e:e8:f4:43:a3:c7:78:38: d8:49:61:e3:c6:38:13:70:0b:82:00:47:e3:94:01:42:b7:b0: d9:f4:dc:8b:df:cd:b1:db:77:23:1e:ff:af:be:6c:42:f6:bd: 0a:63:8c:fe:14:95:d7:b7:ee:bb:fa:06:c6:73:c3:62:19:3b: b0:25:89:68:30:e4:37:0e:bb:07:0e:28:8b:7f:8e:90:48:60: ac:56:6c:48 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUeQOGzPG/AYUWhUoNT+6eFBB7vogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNjAxMjAxNzA2NDhaFw0yNjA0MjAyMzU5NTlaMHoxSTBHBgNV BAUTQDE2YWUyYmMyMGQ4MjgxYmM0YTYyNjJkZmU5NjdmNGUwZmM4YmZiMGQ4NWZm YjMyMjNhMDU1ODU4N2ZhYmJiZjYxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsy0JfYGsIlIP+jNSBaga0QSxOvgG1MrHqcbh4NBo3igiMm7cs2XL7huo0a S5dXw/NRVQj2PLjuuSG3v0z+/uxMh14HA2tMbMfKvK3o7EabIuY3zSjPFHhM3me/ /10xuZF2jHN4NKUKcf7rJBrIQ1bDTsyZaZg+mPPHmtCafbrUkJ7382Zo5R6fcmuA kM0kif/FoSG9fviKBPOCWO6xmO8IM94NKTBsSUQuvAH0yjc6gst+pchQcgkTG2nx q03Jnn2fbXGl89ZTK3TrjkoiLk2EqiiSvlCyuwYoKwTkwZTvk7vcybOMMQ1kxmL5 Fwzkp23SQcA07HHHMSChhq94yXECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQK42mx vm4l94ZwrjJKFfS24btCGDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv OTM4ZDg1ZWEtZGE4NS00ZjE1LThmODctNTc4MGQ0NWJjNGMxLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADlHMA0G CSqGSIb3DQEBCwUAA4IBAQBGfozdJ14L9EL2blDJKdE73ws92CMLWRUNe2KjsQRj aPYbIL0fkibL4aC5AXKOR2KFbm6ZTat4K8f1dOethzMfr3q3ujtsz4w3nIECeja7 QJdzQyIAesmO9KI6y8pfOcq/znwkrFME3eJwC0zbEeP/hES8XqeN3pzxN/6Va65a qUj3ykwcA+8ihINTzJyjlDr1ADMYzzNlC1vfLm2sq0aP7nsiznIhZCCboRIrPuj0 Q6PHeDjYSWHjxjgTcAuCAEfjlAFCt7DZ9NyL382x23cjHv+vvmxC9r0KY4z+FJXX t+67+gbGc8NiGTuwJYloMOQ3DrsHDiiLf46QSGCsVmxI -----END CERTIFICATE-----Generated at Thu Jan 22 22:15:44 2026 by rpki-client