This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bad59de4-adad-41c5-bcd9-10599419c7b5.roa File: bad59de4-adad-41c5-bcd9-10599419c7b5.roa (raw, json) Hash identifier: Ppefzt6lgRHtzZ+0XIiLpd5tEmbo6l/dfvb6nD365Ik= Subject key identifier: EF:DD:2F:EA:8C:70:A7:FE:2D:45:66:4B:CB:9C:41:C1:36:90:B4:69 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 7B0EEC4309FFA201484150373A2BD8B471308505 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bad59de4-adad-41c5-bcd9-10599419c7b5.roa Signing time: Thu 11 Dec 2025 01:00:24 +0000 ROA not before: Thu 11 Dec 2025 01:00:24 +0000 ROA not after: Wed 11 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 51.0.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:0e:ec:43:09:ff:a2:01:48:41:50:37:3a:2b:d8:b4:71:30:85:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Dec 11 01:00:24 2025 GMT Not After : Mar 11 23:59:59 2026 GMT Subject: serialNumber=3eb505ee391d5d5168a2b378776732d7e7a2a8dddfa8abf4fd38d565674c5e1a, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:39:e1:18:46:10:ce:a9:da:bd:99:37:92:39: 68:5f:9d:e9:f1:bb:78:cd:15:6b:a4:df:ec:28:f5: 6b:4c:0a:06:40:71:74:51:cf:75:54:0d:e9:61:09: 4c:8b:65:dd:81:45:78:cb:db:d4:6a:24:2b:8e:42: 36:e0:f7:00:0c:5e:8f:4d:2d:b2:4d:57:43:d9:cb: 1a:64:17:4d:c9:fb:75:63:ff:fa:2c:db:e3:96:ab: 49:2a:97:5b:bf:e0:5f:f8:1b:2e:e1:73:f9:72:c5: f7:6e:04:83:12:a6:01:a4:94:ae:1b:39:6d:d7:c8: 79:cc:16:60:d8:e7:f8:e3:cf:ca:8b:53:d5:c6:23: 65:df:62:bf:b6:78:4b:31:0e:59:7f:35:7c:ca:df: e9:e2:31:20:a4:7b:41:26:58:6d:8b:fd:27:43:5f: 2b:42:67:e1:2d:0d:00:92:72:0c:6f:bd:81:9b:7d: ff:35:ae:7a:45:c8:ed:37:68:09:8a:64:f1:7a:51: ea:0c:6a:65:1f:d6:7e:a3:a9:4d:9e:e3:4d:42:ea: 96:18:5a:d8:44:08:0f:8b:eb:90:02:0e:4a:c4:4d: 74:0a:7d:4d:63:de:27:6b:81:fe:40:b4:81:17:e2: ef:df:29:07:97:3e:42:df:87:cc:5d:ac:35:1b:e3: 24:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DD:2F:EA:8C:70:A7:FE:2D:45:66:4B:CB:9C:41:C1:36:90:B4:69 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bad59de4-adad-41c5-bcd9-10599419c7b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.0.64.0/18 Signature Algorithm: sha256WithRSAEncryption 63:fc:69:b3:f2:35:3f:a7:29:62:6b:63:4f:7f:d6:fd:f8:95: bf:47:f8:f9:c2:6c:6e:e0:be:3b:d0:10:3a:41:73:66:71:d8: ae:56:61:3f:92:b0:4c:88:b5:f6:19:c1:c6:0c:d9:a0:7d:c0: 81:bc:54:50:e9:a8:76:38:54:74:92:3f:40:82:ef:e0:2d:46: 30:da:05:c9:2e:65:2d:e1:f2:32:1d:22:1e:80:e8:16:c3:5f: 58:56:08:2b:1c:dd:64:5e:15:c6:cb:74:0b:64:e2:c2:00:2d: 6b:94:3d:73:b9:d5:bd:33:5d:f7:2d:58:c7:4d:2c:7a:6e:ec: e9:b7:a0:54:df:18:1f:f4:99:30:a9:15:89:2c:f8:ce:b6:2a: f0:a3:83:90:eb:88:f1:ca:0c:a0:b1:a9:09:45:78:9f:7c:43: ef:d8:be:2a:26:bf:81:c3:b4:a0:f8:19:13:56:c8:eb:23:08: e1:02:a1:4d:79:f3:ce:c4:73:bf:07:79:57:95:f3:21:cc:e8: 0d:4d:e8:63:d8:23:cc:8b:fb:c2:0e:51:43:b3:97:1f:cf:22: b3:5b:51:e3:a3:d1:3f:55:56:40:ec:b7:75:68:05:1a:c5:c0: 54:f2:2f:03:f5:29:e8:a9:7e:c9:c2:be:17:71:64:02:32:b6: 38:90:0f:39 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUew7sQwn/ogFIQVA3OivYtHEwhQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTEyMTEwMTAwMjRaFw0yNjAzMTEyMzU5NTlaMHoxSTBHBgNV BAUTQDNlYjUwNWVlMzkxZDVkNTE2OGEyYjM3ODc3NjczMmQ3ZTdhMmE4ZGRkZmE4 YWJmNGZkMzhkNTY1Njc0YzVlMWExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMY54RhGEM6p2r2ZN5I5aF+d6fG7eM0Va6Tf7Cj1a0wKBkBxdFHPdVQN6WEJ TItl3YFFeMvb1GokK45CNuD3AAxej00tsk1XQ9nLGmQXTcn7dWP/+izb45arSSqX W7/gX/gbLuFz+XLF924EgxKmAaSUrhs5bdfIecwWYNjn+OPPyotT1cYjZd9iv7Z4 SzEOWX81fMrf6eIxIKR7QSZYbYv9J0NfK0Jn4S0NAJJyDG+9gZt9/zWuekXI7Tdo CYpk8XpR6gxqZR/WfqOpTZ7jTULqlhha2EQID4vrkAIOSsRNdAp9TWPeJ2uB/kC0 gRfi798pB5c+Qt+HzF2sNRvjJFMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTv3S/q jHCn/i1FZkvLnEHBNpC0aTAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv YmFkNTlkZTQtYWRhZC00MWM1LWJjZDktMTA1OTk0MTljN2I1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjMAQDAN BgkqhkiG9w0BAQsFAAOCAQEAY/xps/I1P6cpYmtjT3/W/fiVv0f4+cJsbuC+O9AQ OkFzZnHYrlZhP5KwTIi19hnBxgzZoH3AgbxUUOmodjhUdJI/QILv4C1GMNoFyS5l LeHyMh0iHoDoFsNfWFYIKxzdZF4Vxst0C2TiwgAta5Q9c7nVvTNd9y1Yx00sem7s 6begVN8YH/SZMKkViSz4zrYq8KODkOuI8coMoLGpCUV4n3xD79i+Kia/gcO0oPgZ E1bI6yMI4QKhTXnzzsRzvwd5V5XzIczoDU3oY9gjzIv7wg5RQ7OXH88is1tR46PR P1VWQOy3dWgFGsXAVPIvA/Up6Kl+ycK+F3FkAjK2OJAPOQ== -----END CERTIFICATE-----Generated at Thu Jan 22 22:20:18 2026 by rpki-client