This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa File: e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa (raw, json) Hash identifier: /n7wgiPcI/0aEvXKoKS1bTK1W3FZPGGGWEbJrjDQ6Bg= Subject key identifier: 6E:25:CC:5D:DD:D0:4F:03:54:59:BD:E6:57:EB:10:50:98:D2:9F:C6 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 283C5995AF6DD095CF1786440A7957E75CE3E934 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa Signing time: Wed 10 Dec 2025 06:40:36 +0000 ROA not before: Wed 10 Dec 2025 06:40:36 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 51.204.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:3c:59:95:af:6d:d0:95:cf:17:86:44:0a:79:57:e7:5c:e3:e9:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Dec 10 06:40:36 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=dcd96be2faa59dc1912f15532bfd5a0075ee55902d8fadc7c1a834b2f84e1cf5, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:b0:9e:3d:59:87:45:38:8a:aa:bd:3a:fd: 79:4f:25:d8:f7:1c:c7:17:95:1a:ea:37:b4:e7:02: 59:71:69:a3:5e:02:7c:52:49:53:1b:3f:b4:d2:8d: 4c:39:96:64:3c:62:0d:58:23:ea:7d:ea:19:a3:e1: 14:b0:73:87:82:90:fa:0c:29:90:f2:a7:64:2c:a2: 91:b7:77:57:44:0b:4f:4f:16:ca:d2:98:56:c1:16: 29:ef:d8:04:9f:73:34:a3:ff:b5:57:ab:ec:a5:08: 50:d0:c5:fc:81:3f:c6:3f:4c:b7:58:ce:a9:fe:b4: 50:ae:26:4a:6a:30:78:27:06:ae:51:ad:12:e8:fb: e5:51:d1:e0:e6:40:e6:8d:94:ff:cd:52:cd:11:af: 9b:11:1e:bf:49:ee:a4:7d:53:72:69:dd:80:cd:1f: f5:14:67:c2:7a:55:ce:ab:de:9f:54:be:03:f0:0a: 9e:c1:41:85:ec:8b:bb:c8:95:cc:bd:f5:ff:c6:02: 74:32:8b:0b:f2:62:c7:ad:bb:99:cd:79:f7:38:5b: 12:ad:cd:ad:c8:5f:46:98:62:af:5c:ab:3b:44:bf: ab:44:bc:72:d9:4a:1d:3f:b2:0b:d4:90:7e:01:37: c9:34:a2:12:a6:52:30:6a:18:05:74:f8:43:61:7b: f6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:25:CC:5D:DD:D0:4F:03:54:59:BD:E6:57:EB:10:50:98:D2:9F:C6 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/e9b59cd2-43ef-4533-a5a5-5892471ab64c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.204.0.0/15 Signature Algorithm: sha256WithRSAEncryption 15:1e:24:8e:9e:27:21:32:4f:1e:58:1f:92:8e:69:92:9d:c2: b2:b2:71:5c:51:8b:60:3e:fa:7f:9f:f2:a4:16:7c:0f:1c:2f: 92:1e:17:c7:23:bf:24:fd:0c:46:01:0f:8c:01:ea:fa:15:d3: c9:05:9a:e9:84:f4:1b:61:47:ae:2f:ba:bb:83:22:7c:23:ac: 08:41:42:16:1c:8a:cc:7a:d2:d6:88:cc:f1:55:3c:0b:65:25: ef:d0:3d:89:52:59:78:5a:84:be:20:22:76:e0:0f:d4:17:6d: c2:49:90:33:b8:65:57:d4:3c:8e:06:96:ce:6b:bf:28:88:13: 40:c4:24:1c:22:5a:ee:1c:60:e2:5a:0e:8a:4c:00:54:ca:3b: c4:8b:9d:b6:e5:87:05:ec:2e:62:5c:65:a4:e8:ab:de:32:1c: 24:0b:cf:b1:c1:1e:15:ab:62:cb:35:f3:c6:27:dc:45:3a:e8: e2:68:20:25:12:48:5d:a3:2e:57:90:4f:89:de:cc:1c:c8:b6: 17:7a:55:f7:33:86:ab:0a:d4:82:9e:3f:3d:f5:db:a1:cf:0f: c6:d9:90:91:a0:99:62:4c:e1:90:fe:a9:a3:da:29:c7:e4:42: 93:b7:f9:0a:39:e3:40:45:86:3b:a1:53:4f:46:dc:66:5f:a7: 55:3b:ba:da -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUKDxZla9t0JXPF4ZECnlX51zj6TQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTEyMTAwNjQwMzZaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQGRjZDk2YmUyZmFhNTlkYzE5MTJmMTU1MzJiZmQ1YTAwNzVlZTU1OTAyZDhm YWRjN2MxYTgzNGIyZjg0ZTFjZjUxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMhIsJ49WYdFOIqqvTr9eU8l2PccxxeVGuo3tOcCWXFpo14CfFJJUxs/tNKN TDmWZDxiDVgj6n3qGaPhFLBzh4KQ+gwpkPKnZCyikbd3V0QLT08WytKYVsEWKe/Y BJ9zNKP/tVer7KUIUNDF/IE/xj9Mt1jOqf60UK4mSmoweCcGrlGtEuj75VHR4OZA 5o2U/81SzRGvmxEev0nupH1TcmndgM0f9RRnwnpVzqven1S+A/AKnsFBheyLu8iV zL31/8YCdDKLC/Jix627mc159zhbEq3NrchfRphir1yrO0S/q0S8ctlKHT+yC9SQ fgE3yTSiEqZSMGoYBXT4Q2F79h0CAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRuJcxd 3dBPA1RZveZX6xBQmNKfxjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv ZTliNTljZDItNDNlZi00NTMzLWE1YTUtNTg5MjQ3MWFiNjRjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATPMMA0G CSqGSIb3DQEBCwUAA4IBAQAVHiSOnichMk8eWB+SjmmSncKysnFcUYtgPvp/n/Kk FnwPHC+SHhfHI78k/QxGAQ+MAer6FdPJBZrphPQbYUeuL7q7gyJ8I6wIQUIWHIrM etLWiMzxVTwLZSXv0D2JUll4WoS+ICJ24A/UF23CSZAzuGVX1DyOBpbOa78oiBNA xCQcIlruHGDiWg6KTABUyjvEi5225YcF7C5iXGWk6KveMhwkC8+xwR4Vq2LLNfPG J9xFOujiaCAlEkhdoy5XkE+J3swcyLYXelX3M4arCtSCnj899duhzw/G2ZCRoJli TOGQ/qmj2inH5EKTt/kKOeNARYY7oVNPRtxmX6dVO7ra -----END CERTIFICATE-----Generated at Thu Jan 22 22:17:43 2026 by rpki-client