This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa File: bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa (raw, json) Hash identifier: N1/g4IXB5rVvb+73H5x1jEi/YYWNAJilVN4zwyqI1GA= Subject key identifier: AB:A4:D7:18:FA:2C:9A:5E:46:EA:6E:13:DC:BA:AD:A5:9E:03:AE:82 Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Certificate serial: 722B7944FDEC0B6908DBF160EE06E727A74185C4 Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa Signing time: Tue 25 Nov 2025 20:10:24 +0000 ROA not before: Tue 25 Nov 2025 20:10:24 +0000 ROA not after: Mon 23 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 83.118.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:2b:79:44:fd:ec:0b:69:08:db:f1:60:ee:06:e7:27:a7:41:85:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf Validity Not Before: Nov 25 20:10:24 2025 GMT Not After : Feb 23 23:59:59 2026 GMT Subject: serialNumber=e0ade98a29f820ff83634beb4db354cf9c93c5e9bb005c0b0797d57061b230cb, CN=c336411a-6651-4f13-8ef9-de681c7c9444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:10:9c:5b:ce:96:51:f6:0a:27:1b:43:88:cc: e0:21:a1:57:06:cd:81:10:b5:2f:7f:a2:4b:22:77: bc:5d:8e:01:c0:a0:15:f8:53:d8:ad:a3:d2:55:02: c7:d3:ee:4e:89:ae:17:68:55:37:76:e6:24:52:b2: e0:79:88:dc:24:ce:72:69:64:7c:71:06:bf:94:c9: 66:2b:72:95:29:82:45:2e:10:ed:0b:b7:c7:08:d8: 4e:1b:33:28:4f:c6:dc:79:48:b7:6b:87:9b:5c:c4: e0:0d:99:17:cd:db:c5:c0:52:d9:86:05:22:27:0e: bf:76:cd:2e:97:00:6a:6c:53:cd:14:c3:2e:72:55: 06:60:29:a4:73:5a:78:bd:c3:ae:6b:8b:95:3a:b7: 14:87:e2:f5:df:9d:56:cb:c3:28:98:5e:3a:0c:fb: aa:19:9f:55:91:25:7f:39:f3:5a:2b:9a:c9:ce:42: 55:3b:7f:49:ca:5a:9d:14:3d:ba:f0:32:ed:d4:76: 2b:50:a6:c1:e9:39:64:15:b5:72:48:e4:ee:0a:a7: 81:f3:3b:f2:6d:f1:e7:a9:9b:e1:97:86:64:29:77: 3b:ae:65:38:68:0a:07:23:2f:7d:d4:24:2f:07:06: c0:62:4d:58:78:ff:79:c7:7b:f6:6f:a1:fd:6e:fa: b3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A4:D7:18:FA:2C:9A:5E:46:EA:6E:13:DC:BA:AD:A5:9E:03:AE:82 X509v3 Authority Key Identifier: keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/bf3c19cc-7e74-4d47-9e2d-5bcee63041aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.118.234.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:27:ba:2a:b1:35:c5:f0:bb:01:8e:b0:15:00:0b:f3:98:30: 1c:81:9f:82:f0:cd:f6:b3:8f:ae:dd:26:53:66:5c:49:b8:70: e9:13:ec:35:6d:15:9b:50:40:7b:e0:39:72:4c:52:ae:60:7e: a9:54:aa:3b:5c:59:7c:30:c5:cc:cb:f0:5b:2d:7a:ba:dc:4f: f0:4f:23:03:55:40:04:28:45:97:ec:8b:b7:3f:2d:94:38:ae: f6:36:87:61:b0:e2:6c:4d:f6:9e:52:03:e0:c8:a9:4f:be:86: 98:12:12:82:f8:df:62:f9:cf:ab:b6:13:23:60:fd:6d:bf:49: 03:03:d9:fe:a1:ab:64:6c:7c:5e:d0:69:b9:3a:52:05:c5:b5: 25:14:fe:9d:32:1d:f9:02:ce:93:9e:15:bb:c8:fa:c8:a5:d3: 7a:d0:93:e7:fc:9e:4a:c6:c7:a5:27:cf:5b:30:af:94:84:2c: 49:92:b2:a5:e2:5a:67:18:40:55:3f:73:3d:9d:4f:1c:8c:04: 9d:df:39:d5:c4:13:8a:b7:20:e4:54:c2:78:08:98:16:24:8d: 81:68:a5:2e:ee:9d:54:70:fb:36:9f:9b:db:10:04:5b:04:78: 97:8d:6a:90:36:a2:1e:1c:f2:b6:45:9b:fb:ad:3a:4f:0a:52: a1:2f:be:d7 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUcit5RP3sC2kI2/Fg7gbnJ6dBhcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw ZTVjODdjZjAeFw0yNTExMjUyMDEwMjRaFw0yNjAyMjMyMzU5NTlaMHoxSTBHBgNV BAUTQGUwYWRlOThhMjlmODIwZmY4MzYzNGJlYjRkYjM1NGNmOWM5M2M1ZTliYjAw NWMwYjA3OTdkNTcwNjFiMjMwY2IxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJAQnFvOllH2CicbQ4jM4CGhVwbNgRC1L3+iSyJ3vF2OAcCgFfhT2K2j0lUC x9PuTomuF2hVN3bmJFKy4HmI3CTOcmlkfHEGv5TJZitylSmCRS4Q7Qu3xwjYThsz KE/G3HlIt2uHm1zE4A2ZF83bxcBS2YYFIicOv3bNLpcAamxTzRTDLnJVBmAppHNa eL3DrmuLlTq3FIfi9d+dVsvDKJheOgz7qhmfVZElfznzWiuayc5CVTt/ScpanRQ9 uvAy7dR2K1Cmwek5ZBW1ckjk7gqngfM78m3x56mb4ZeGZCl3O65lOGgKByMvfdQk LwcGwGJNWHj/ecd79m+h/W76s4ECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSrpNcY +iyaXkbqbhPcuq2lngOugjAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv YmYzYzE5Y2MtN2U3NC00ZDQ3LTllMmQtNWJjZWU2MzA0MWFhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVN26jAN BgkqhkiG9w0BAQsFAAOCAQEAPCe6KrE1xfC7AY6wFQAL85gwHIGfgvDN9rOPrt0m U2ZcSbhw6RPsNW0Vm1BAe+A5ckxSrmB+qVSqO1xZfDDFzMvwWy16utxP8E8jA1VA BChFl+yLtz8tlDiu9jaHYbDibE32nlID4MipT76GmBISgvjfYvnPq7YTI2D9bb9J AwPZ/qGrZGx8XtBpuTpSBcW1JRT+nTId+QLOk54Vu8j6yKXTetCT5/yeSsbHpSfP WzCvlIQsSZKypeJaZxhAVT9zPZ1PHIwEnd851cQTircg5FTCeAiYFiSNgWilLu6d VHD7Np+b2xAEWwR4l41qkDaiHhzytkWb+606TwpSoS++1w== -----END CERTIFICATE-----Generated at Fri Dec 19 20:12:51 2025 by rpki-client