This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/465ffdf3-82ea-46dd-b114-e21ffa69798b.roa File: 465ffdf3-82ea-46dd-b114-e21ffa69798b.roa (raw, json) Hash identifier: NNSglw5ZnomzpQwpS1j03Pk65llUd+m8ImYsnL5NUC0= Subject key identifier: 94:44:10:6A:63:78:6B:75:DB:A6:9B:60:6C:0C:7F:E8:80:FD:A4:0F Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 496B9936FBEE55A702248DF13024A2F333CC1149 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/465ffdf3-82ea-46dd-b114-e21ffa69798b.roa Signing time: Tue 09 Dec 2025 15:36:52 +0000 ROA not before: Tue 09 Dec 2025 15:36:52 +0000 ROA not after: Mon 09 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 51.118.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6b:99:36:fb:ee:55:a7:02:24:8d:f1:30:24:a2:f3:33:cc:11:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Dec 9 15:36:52 2025 GMT Not After : Mar 9 23:59:59 2026 GMT Subject: serialNumber=7c479b7886a6a4b742b3fa1e7dfd448315260a9fc2644997334d6ac8c05a7803, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7a:fa:93:41:b2:f1:cf:e5:c9:74:37:a9:44: 66:ca:1b:bd:75:18:ad:e6:c5:ba:bf:89:78:ea:73: c4:64:8f:42:b2:d3:6c:7f:cd:c9:51:9a:7e:33:1b: ee:e2:b4:a4:42:0d:ed:0e:3e:16:0e:77:9c:be:63: fc:b9:0b:9c:f8:8e:96:6a:f5:7a:6b:65:a2:f9:c6: cd:fc:3b:20:cd:44:55:be:ff:20:3e:08:d4:31:d1: fb:c5:d4:3e:f4:b7:d1:10:48:8e:17:b9:ee:0c:1f: 9a:d4:8a:4e:c5:da:19:b7:c0:38:28:9b:9f:cd:ab: 4c:72:6b:34:e0:9a:bb:d7:c1:30:c3:cf:19:3c:5e: 64:e1:5c:2c:43:b5:ec:b1:90:9e:b9:b7:9f:19:46: 87:dc:b8:e4:b1:11:ce:f4:20:89:96:88:20:4e:f4: 37:4a:0c:7d:95:eb:fe:58:23:65:02:c8:53:59:3b: 0c:65:59:b5:c7:b1:2a:c3:e3:fc:28:a2:8b:34:1b: 02:23:9d:9e:b8:51:6b:6e:7c:fa:ba:b2:e8:4b:36: b8:5e:86:d1:9f:34:40:a5:f5:50:d7:ce:30:fe:14: c2:05:c5:6d:4b:9d:47:9c:f3:e7:81:91:ef:5c:fb: 44:96:61:a3:36:9e:c1:a2:b1:fc:52:2b:63:98:7f: 9c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:44:10:6A:63:78:6B:75:DB:A6:9B:60:6C:0C:7F:E8:80:FD:A4:0F X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/465ffdf3-82ea-46dd-b114-e21ffa69798b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.118.98.0/23 Signature Algorithm: sha256WithRSAEncryption 90:61:80:cf:ab:d7:91:3e:23:63:a8:24:80:e2:19:26:dc:43: de:05:a8:b4:3f:94:6a:b5:56:68:07:77:5a:6c:84:27:03:bd: 66:53:ef:97:18:04:4c:00:aa:94:55:7f:38:41:3d:17:52:3d: 76:47:f4:b8:d6:33:77:85:56:72:95:aa:fe:b5:36:5c:d5:06: d6:44:64:ff:a3:37:c2:4a:16:3e:ab:97:a2:f5:96:8a:b7:a2: 0e:03:ae:5c:62:4f:66:a3:ed:a0:11:11:68:85:37:18:4a:65: 27:bb:6f:e4:66:5f:16:fa:92:c9:50:a0:eb:64:2d:ce:43:ee: 34:56:fc:0d:a3:08:84:95:3e:76:b6:c2:b3:2a:10:6e:c1:c8: 7b:5e:36:4e:1c:c5:1d:cd:10:3b:e9:d9:ef:12:7e:c0:d6:ae: 7f:5e:e4:17:f8:16:9c:45:9b:a9:ae:3d:5f:33:f0:0e:be:ed: f9:ed:28:5e:a0:71:95:e0:5e:8a:b5:31:ea:c4:b0:aa:31:21: 3f:35:78:54:6b:dc:35:b2:54:2b:5d:90:c2:f5:ef:4b:36:16: 86:c2:23:ee:38:96:c2:95:9a:b4:fd:34:9c:55:fa:6d:99:f3: 7a:b8:58:69:17:70:21:35:e9:66:09:b8:92:7c:30:44:1f:eb: 37:2f:14:1a -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUSWuZNvvuVacCJI3xMCSi8zPMEUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTEyMDkxNTM2NTJaFw0yNjAzMDkyMzU5NTlaMHoxSTBHBgNV BAUTQDdjNDc5Yjc4ODZhNmE0Yjc0MmIzZmExZTdkZmQ0NDgzMTUyNjBhOWZjMjY0 NDk5NzMzNGQ2YWM4YzA1YTc4MDMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKF6+pNBsvHP5cl0N6lEZsobvXUYrebFur+JeOpzxGSPQrLTbH/NyVGafjMb 7uK0pEIN7Q4+Fg53nL5j/LkLnPiOlmr1emtlovnGzfw7IM1EVb7/ID4I1DHR+8XU PvS30RBIjhe57gwfmtSKTsXaGbfAOCibn82rTHJrNOCau9fBMMPPGTxeZOFcLEO1 7LGQnrm3nxlGh9y45LERzvQgiZaIIE70N0oMfZXr/lgjZQLIU1k7DGVZtcexKsPj /CiiizQbAiOdnrhRa258+rqy6Es2uF6G0Z80QKX1UNfOMP4UwgXFbUudR5zz54GR 71z7RJZhozaewaKx/FIrY5h/nFcCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSURBBq Y3hrddumm2BsDH/ogP2kDzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv NDY1ZmZkZjMtODJlYS00NmRkLWIxMTQtZTIxZmZhNjk3OThiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATN2YjAN BgkqhkiG9w0BAQsFAAOCAQEAkGGAz6vXkT4jY6gkgOIZJtxD3gWotD+UarVWaAd3 WmyEJwO9ZlPvlxgETACqlFV/OEE9F1I9dkf0uNYzd4VWcpWq/rU2XNUG1kRk/6M3 wkoWPquXovWWireiDgOuXGJPZqPtoBERaIU3GEplJ7tv5GZfFvqSyVCg62QtzkPu NFb8DaMIhJU+drbCsyoQbsHIe142ThzFHc0QO+nZ7xJ+wNauf17kF/gWnEWbqa49 XzPwDr7t+e0oXqBxleBeirUx6sSwqjEhPzV4VGvcNbJUK12QwvXvSzYWhsIj7jiW wpWatP00nFX6bZnzerhYaRdwITXpZgm4knwwRB/rNy8UGg== -----END CERTIFICATE-----Generated at Fri Dec 19 20:16:27 2025 by rpki-client