This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa File: 9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa (raw, json) Hash identifier: zgUXRTG3sLsU4OCQCPDker2clJxdAVq800MiIv0X6hM= Subject key identifier: BE:66:2A:6E:37:48:C2:72:21:37:2A:B6:22:5D:BC:28:3B:4E:F3:D7 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 03741F01F72FDE5698F3524967ED9479376E0CBD Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa Signing time: Tue 25 Nov 2025 20:10:22 +0000 ROA not before: Tue 25 Nov 2025 20:10:22 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 51.206.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 22:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:74:1f:01:f7:2f:de:56:98:f3:52:49:67:ed:94:79:37:6e:0c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 25 20:10:22 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=523a9d5e8f16e2a382c3835696c56e989a3dcccd677f19ccc87c9ddc17e4fd30, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:43:6d:90:c8:f1:60:5d:13:cc:16:41:78:98: f0:07:51:0f:df:ec:c5:03:d4:a5:ef:0b:b2:b6:5f: 16:42:75:3d:2f:2d:e1:d8:24:5c:11:29:2e:39:ca: e5:9e:d9:40:12:33:e2:fe:82:f2:20:3e:b6:aa:4a: 1d:d0:b3:63:96:97:7a:1b:f0:3a:05:7d:0b:d8:23: ba:e8:d1:6e:7a:7a:eb:65:28:85:8e:06:0f:99:03: 1a:6a:f5:d6:5d:43:58:af:ca:b2:b7:e2:37:ea:aa: 87:15:1d:b9:e7:9d:16:46:33:b9:42:a4:38:38:93: 7c:a3:c3:57:08:39:18:5e:53:5d:7e:66:9f:28:4d: e4:a2:fa:a0:5d:66:da:91:70:98:b9:6a:b5:fe:a5: 33:dc:a7:f4:ce:cc:38:7e:0c:b3:40:5e:0a:2d:d4: ae:cb:bf:da:76:e3:06:56:33:85:46:b3:da:22:2a: a4:5b:de:b6:89:a8:3d:5a:eb:69:cb:d3:76:14:d1: 1c:3c:e3:30:78:46:16:a1:29:93:f0:f9:69:f2:2c: 17:0e:85:ea:1a:69:c3:df:1b:e5:18:d4:d5:ee:dc: ae:87:f8:ab:a1:ff:8f:cf:58:f6:45:c5:df:5e:d6: 77:9d:09:7c:a1:49:02:9f:c3:a3:11:4d:9a:a5:de: f6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:66:2A:6E:37:48:C2:72:21:37:2A:B6:22:5D:BC:28:3B:4E:F3:D7 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/9c8ae942-f8e3-4cdb-8c6e-8aaeda879863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.206.0.0/15 Signature Algorithm: sha256WithRSAEncryption 77:ab:18:6e:b2:97:73:9f:ee:a8:a4:82:64:3c:6b:15:9f:7c: c0:2c:2f:fb:db:16:d7:7d:8a:bb:67:0a:b0:05:35:a3:3a:32: 99:54:13:50:db:84:c1:c0:f2:0d:3e:a0:c3:94:29:8a:96:6f: 46:ec:f3:0a:74:98:c2:ad:dc:aa:bd:e6:55:d7:e2:46:c1:03: c6:9d:c4:59:e2:24:01:93:bb:b8:7b:27:60:1f:f1:06:66:fc: f0:c0:78:58:ba:06:cd:8d:85:be:a9:a8:66:98:81:21:53:84: e2:0a:ab:d2:a4:df:b8:f4:27:20:5e:f9:93:71:a5:fd:f5:ad: 95:ab:bd:8a:db:f4:59:12:2d:b3:a8:1d:68:48:dd:f5:11:e8: d1:fa:51:93:62:61:94:06:f4:b8:15:19:01:f3:d3:57:6d:9d: bf:03:98:bd:cd:8a:ce:52:9b:2a:7c:1e:61:61:55:32:d9:90: c4:33:1a:6e:71:a1:03:1b:2d:15:df:09:d3:48:03:48:82:c3: e9:bd:c8:36:71:75:67:1e:2a:73:2e:3f:bd:a7:bb:70:4d:7a: 20:4d:58:11:18:8b:62:42:53:dc:46:bc:3c:c3:1e:b0:1d:21: 3d:05:2c:5f:86:98:5b:cc:b7:c2:d2:c8:58:02:eb:6d:2a:cd: ef:84:9c:ce -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUA3QfAfcv3laY81JJZ+2UeTduDL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMjUyMDEwMjJaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQDUyM2E5ZDVlOGYxNmUyYTM4MmMzODM1Njk2YzU2ZTk4OWEzZGNjY2Q2Nzdm MTljY2M4N2M5ZGRjMTdlNGZkMzAxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhDbZDI8WBdE8wWQXiY8AdRD9/sxQPUpe8LsrZfFkJ1PS8t4dgkXBEpLjnK 5Z7ZQBIz4v6C8iA+tqpKHdCzY5aXehvwOgV9C9gjuujRbnp662UohY4GD5kDGmr1 1l1DWK/KsrfiN+qqhxUdueedFkYzuUKkODiTfKPDVwg5GF5TXX5mnyhN5KL6oF1m 2pFwmLlqtf6lM9yn9M7MOH4Ms0BeCi3Ursu/2nbjBlYzhUaz2iIqpFvetomoPVrr acvTdhTRHDzjMHhGFqEpk/D5afIsFw6F6hppw98b5RjU1e7crof4q6H/j89Y9kXF 317Wd50JfKFJAp/DoxFNmqXe9skCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBS+Zipu N0jCciE3KrYiXbwoO07z1zAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv OWM4YWU5NDItZjhlMy00Y2RiLThjNmUtOGFhZWRhODc5ODYzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPOMA0G CSqGSIb3DQEBCwUAA4IBAQB3qxhuspdzn+6opIJkPGsVn3zALC/72xbXfYq7Zwqw BTWjOjKZVBNQ24TBwPINPqDDlCmKlm9G7PMKdJjCrdyqveZV1+JGwQPGncRZ4iQB k7u4eydgH/EGZvzwwHhYugbNjYW+qahmmIEhU4TiCqvSpN+49CcgXvmTcaX99a2V q72K2/RZEi2zqB1oSN31EejR+lGTYmGUBvS4FRkB89NXbZ2/A5i9zYrOUpsqfB5h YVUy2ZDEMxpucaEDGy0V3wnTSANIgsPpvcg2cXVnHipzLj+9p7twTXogTVgRGIti QlPcRrw8wx6wHSE9BSxfhphbzLfC0shYAuttKs3vhJzO -----END CERTIFICATE-----Generated at Thu Nov 27 04:14:43 2025 by rpki-client