This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa File: e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa (raw, json) Hash identifier: +2V4CMKiTTexzpR8hvfY1FpigkmVBTjCvDFxwlGkiwQ= Subject key identifier: 49:64:25:35:0C:17:C9:D6:F7:36:DE:2D:41:73:18:D6:43:40:A8:3C Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 52B17632043EFFAC4ADDCFE0053F1E1457741FA8 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa Signing time: Sat 15 Nov 2025 06:40:05 +0000 ROA not before: Sat 15 Nov 2025 06:40:05 +0000 ROA not after: Sat 20 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 51.204.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 02:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b1:76:32:04:3e:ff:ac:4a:dd:cf:e0:05:3f:1e:14:57:74:1f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 15 06:40:05 2025 GMT Not After : Dec 20 23:59:59 2025 GMT Subject: serialNumber=70bf2f0da701510a2fed310226850886258fc594bfefbf2d26b7a8a35d26ff77, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:2b:17:06:57:7a:45:d6:3c:3a:44:86:f9: ef:d3:8d:c6:61:d7:80:93:af:51:bc:38:bb:24:d0: df:3a:00:03:03:b9:b7:a8:c9:49:ee:35:e7:ec:43: 43:a1:54:c8:4b:2f:34:c5:f1:9a:5c:ed:54:db:9f: 76:3c:81:56:a0:67:cc:e0:96:18:9f:92:b7:85:55: 96:bc:ae:14:01:7b:4f:3d:e6:e8:cf:64:5b:27:4d: 04:2e:07:b8:fd:26:19:26:01:b5:a6:23:bb:1e:3d: 42:af:15:d4:8b:ab:c1:63:d2:64:4d:df:c5:21:55: e8:76:fa:dc:ac:bd:7e:d1:4f:22:a0:7d:62:70:c4: ea:ca:1e:19:d3:15:97:b1:59:99:92:b3:b3:0d:d3: 74:30:5c:16:3e:3f:5e:1b:71:d1:e0:5c:f3:b2:87: 5d:d0:68:0b:e3:c7:96:a9:9f:5e:de:69:95:c3:31: 52:df:44:55:74:f9:be:df:77:e0:c6:eb:6d:a3:f5: 1b:5a:e5:c9:34:4e:e5:03:ac:3a:ff:93:1c:74:9b: e1:c7:cf:4c:d0:78:f1:32:f0:a9:57:51:29:38:93: a1:e1:5b:ed:1d:a9:7b:43:90:15:b8:e7:90:f4:3f: 99:15:93:cd:3d:1f:a4:d4:7a:7c:c9:9a:c1:ec:cb: 2f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:64:25:35:0C:17:C9:D6:F7:36:DE:2D:41:73:18:D6:43:40:A8:3C X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.204.0.0/15 Signature Algorithm: sha256WithRSAEncryption d4:66:22:4d:27:29:79:59:eb:71:93:38:21:eb:0c:4e:4b:a0: f4:44:ba:86:6d:fb:a4:f4:93:b7:80:ce:09:9d:1c:d3:80:07: f3:07:1c:35:9d:45:e6:26:56:bd:b6:d2:6f:0d:32:ea:3c:14: 55:b9:d1:a1:b9:57:bf:c3:ab:5a:68:9b:bd:a8:81:f7:50:45: 57:f1:15:b2:e1:44:ed:47:46:32:51:6c:57:ea:3e:59:98:89: bc:a2:2f:18:9d:9b:99:aa:f9:6e:ac:24:ac:02:4d:48:6d:ec: 5c:d3:a2:fb:e0:d2:6e:7b:c4:8d:c1:38:6d:18:ad:4b:83:b0: bf:a6:b8:56:38:39:b0:45:43:ab:0e:38:ca:c2:1f:dd:3a:f3: fe:2f:a8:97:cb:c0:5f:46:5d:23:02:1e:b2:b8:e8:09:0a:9c: 82:48:d9:cd:f0:a3:1e:0b:92:89:25:4c:9c:0c:49:dc:e5:f4: 06:90:25:64:85:59:01:0a:61:a2:f6:1a:51:e6:82:2a:df:63: 5b:0a:9f:86:4d:92:5b:97:99:ac:e4:0a:61:1e:bf:fa:16:7a: 6f:ee:42:00:35:b3:a0:74:87:cb:a9:7b:5c:98:eb:50:b1:a7: 29:8b:48:e7:1f:9c:96:44:f4:a1:8f:76:5f:be:95:ef:76:b6: 45:30:17:d4 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUUrF2MgQ+/6xK3c/gBT8eFFd0H6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMTUwNjQwMDVaFw0yNTEyMjAyMzU5NTlaMHoxSTBHBgNV BAUTQDcwYmYyZjBkYTcwMTUxMGEyZmVkMzEwMjI2ODUwODg2MjU4ZmM1OTRiZmVm YmYyZDI2YjdhOGEzNWQyNmZmNzcxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8OKxcGV3pF1jw6RIb579ONxmHXgJOvUbw4uyTQ3zoAAwO5t6jJSe415+xD Q6FUyEsvNMXxmlztVNufdjyBVqBnzOCWGJ+St4VVlryuFAF7Tz3m6M9kWydNBC4H uP0mGSYBtaYjux49Qq8V1IurwWPSZE3fxSFV6Hb63Ky9ftFPIqB9YnDE6soeGdMV l7FZmZKzsw3TdDBcFj4/Xhtx0eBc87KHXdBoC+PHlqmfXt5plcMxUt9EVXT5vt93 4MbrbaP1G1rlyTRO5QOsOv+THHSb4cfPTNB48TLwqVdRKTiToeFb7R2pe0OQFbjn kPQ/mRWTzT0fpNR6fMmawezLL/cCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRJZCU1 DBfJ1vc23i1BcxjWQ0CoPDAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv ZTliNTljZDItNDNlZi00NTMzLWE1YTUtNTg5MjQ3MWFiNjRjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPMMA0G CSqGSIb3DQEBCwUAA4IBAQDUZiJNJyl5Wetxkzgh6wxOS6D0RLqGbfuk9JO3gM4J nRzTgAfzBxw1nUXmJla9ttJvDTLqPBRVudGhuVe/w6taaJu9qIH3UEVX8RWy4UTt R0YyUWxX6j5ZmIm8oi8YnZuZqvlurCSsAk1Ibexc06L74NJue8SNwThtGK1Lg7C/ prhWODmwRUOrDjjKwh/dOvP+L6iXy8BfRl0jAh6yuOgJCpyCSNnN8KMeC5KJJUyc DEnc5fQGkCVkhVkBCmGi9hpR5oIq32NbCp+GTZJbl5ms5AphHr/6Fnpv7kIANbOg dIfLqXtcmOtQsacpi0jnH5yWRPShj3ZfvpXvdrZFMBfU -----END CERTIFICATE-----Generated at Thu Nov 27 04:16:40 2025 by rpki-client