This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa File: 4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa (raw, json) Hash identifier: vvBKh2QR1if5hIM/At1GDSLOLTXUvDopwD2ONgRefsw= Subject key identifier: 0C:DE:EB:A7:2B:93:90:6F:7C:65:01:67:E5:29:8B:BC:B8:C9:C9:7A Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 73C744A71A424F31DA566188A9BA3887130EE084 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa Signing time: Wed 10 Dec 2025 06:50:08 +0000 ROA not before: Wed 10 Dec 2025 06:50:08 +0000 ROA not after: Tue 10 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 51.164.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c7:44:a7:1a:42:4f:31:da:56:61:88:a9:ba:38:87:13:0e:e0:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Dec 10 06:50:08 2025 GMT Not After : Mar 10 23:59:59 2026 GMT Subject: serialNumber=177c648de6c23a519eca58f1ca1e818e0a8a509767301528df2af67c7d1d21fa, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:17:5f:71:b8:dd:9e:40:d2:c6:3e:69:88:ad: 5c:ee:56:d4:d7:dd:14:5b:82:b8:a5:f6:ad:fe:9e: 1d:75:83:de:d3:60:8a:0a:1e:57:da:e3:16:8b:2b: 4d:e3:09:46:14:c5:14:b1:c6:00:39:1b:ed:0a:a8: 4b:36:ce:5f:31:1f:1c:b5:47:e4:23:65:5d:a8:33: 85:29:a4:76:c5:07:92:2c:50:59:3b:4c:e6:68:7a: 91:b9:6c:a8:3d:1c:3b:a3:94:79:33:eb:c2:a3:3f: e0:cd:48:bd:28:48:98:e4:e3:a4:e0:e9:69:b6:9d: 85:b4:3d:13:9d:d0:ee:aa:86:9c:75:f4:e9:99:29: 4f:f9:04:8a:93:de:a0:87:b6:d2:fe:1a:93:af:f4: 1f:ac:51:2c:b5:07:fa:b3:ea:e6:a5:ce:a4:84:cb: 28:68:b9:c4:46:80:e6:fa:fb:d4:08:bf:f4:30:f4: 0d:40:07:89:b1:71:97:2a:16:a9:57:fc:a6:9e:e5: 53:e1:6b:9d:90:f4:55:57:74:ab:28:e0:12:81:e7: e8:69:d8:f1:ed:3c:1d:df:f2:40:05:6d:57:04:c7: ae:c2:13:79:9d:9a:10:c2:50:bc:ba:ce:2a:f5:c0: 31:bd:93:00:55:98:27:45:44:d6:30:9d:88:61:91: 2c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DE:EB:A7:2B:93:90:6F:7C:65:01:67:E5:29:8B:BC:B8:C9:C9:7A X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/4eaaf9aa-bbc4-42a5-9ead-7164e7953aee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.164.0.0/15 Signature Algorithm: sha256WithRSAEncryption 19:76:01:98:c4:4c:be:3b:5d:87:14:43:21:4d:5f:82:5d:24: a0:6d:9b:56:49:93:03:f8:7d:1b:3e:e7:00:06:e1:66:e6:25: a2:ae:41:fe:1b:50:ec:37:ef:c5:a0:a5:13:95:fb:06:94:43: 32:e6:6d:40:e8:cc:60:07:d3:b6:77:41:8a:eb:02:e7:53:42: 5e:fa:0e:40:36:20:ed:a8:2b:7f:bc:ac:9e:de:7b:d9:ad:d4: c1:1a:f9:f5:81:c7:f0:43:d4:10:e9:07:43:3a:e1:ea:3f:9b: 40:93:c6:b8:02:cc:1c:4d:c2:fa:3e:61:42:27:38:84:6b:a0: f4:f9:24:51:76:27:38:a5:39:61:66:4a:4b:93:5d:ab:dc:6b: 95:36:cf:d7:bf:d6:2d:7a:28:f3:d8:5f:17:15:c2:66:82:58: 8a:85:b4:ee:89:63:d8:6d:4e:2f:71:93:9c:17:20:2c:94:a1: e3:71:5e:e4:11:13:b2:08:a8:62:a4:2d:f2:6b:40:5f:be:92: 7d:88:a2:e9:a1:19:a2:8f:eb:95:68:d4:6c:14:4c:01:a8:4c: 31:dd:61:6c:a7:2e:6c:4d:5a:43:71:ec:74:30:9f:c8:6d:a4: 0b:aa:72:35:b7:77:d9:24:f5:93:88:e8:3a:8e:bd:dc:46:0d: 77:c7:c0:7b -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUc8dEpxpCTzHaVmGIqbo4hxMO4IQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTEyMTAwNjUwMDhaFw0yNjAzMTAyMzU5NTlaMHoxSTBHBgNV BAUTQDE3N2M2NDhkZTZjMjNhNTE5ZWNhNThmMWNhMWU4MThlMGE4YTUwOTc2NzMw MTUyOGRmMmFmNjdjN2QxZDIxZmExLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIXX3G43Z5A0sY+aYitXO5W1NfdFFuCuKX2rf6eHXWD3tNgigoeV9rjFosr TeMJRhTFFLHGADkb7QqoSzbOXzEfHLVH5CNlXagzhSmkdsUHkixQWTtM5mh6kbls qD0cO6OUeTPrwqM/4M1IvShImOTjpODpabadhbQ9E53Q7qqGnHX06ZkpT/kEipPe oIe20v4ak6/0H6xRLLUH+rPq5qXOpITLKGi5xEaA5vr71Ai/9DD0DUAHibFxlyoW qVf8pp7lU+FrnZD0VVd0qyjgEoHn6GnY8e08Hd/yQAVtVwTHrsITeZ2aEMJQvLrO KvXAMb2TAFWYJ0VE1jCdiGGRLAECAwEAAaOCAiAwggIcMB0GA1UdDgQWBBQM3uun K5OQb3xlAWflKYu8uMnJejAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv NGVhYWY5YWEtYmJjNC00MmE1LTllYWQtNzE2NGU3OTUzYWVlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATOkMA0G CSqGSIb3DQEBCwUAA4IBAQAZdgGYxEy+O12HFEMhTV+CXSSgbZtWSZMD+H0bPucA BuFm5iWirkH+G1DsN+/FoKUTlfsGlEMy5m1A6MxgB9O2d0GK6wLnU0Je+g5ANiDt qCt/vKye3nvZrdTBGvn1gcfwQ9QQ6QdDOuHqP5tAk8a4AswcTcL6PmFCJziEa6D0 +SRRdic4pTlhZkpLk12r3GuVNs/Xv9Yteijz2F8XFcJmgliKhbTuiWPYbU4vcZOc FyAslKHjcV7kEROyCKhipC3ya0BfvpJ9iKLpoRmij+uVaNRsFEwBqEwx3WFspy5s TVpDcex0MJ/IbaQLqnI1t3fZJPWTiOg6jr3cRg13x8B7 -----END CERTIFICATE-----Generated at Sat Dec 20 02:37:58 2025 by rpki-client