This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa
File: 00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa (raw, json)
Hash identifier: Pb4b1/8qrSfQn5Bb9emrNS/VUiYQK2u60yOa9PUOcDs=
Subject key identifier: 85:D6:16:85:D6:49:BE:28:CF:C6:F4:26:BB:EC:58:9D:96:C1:01:CD
Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial: 2CDA0F82692DE67D1C7FFE6CD9F90C6B1450752F
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa
Signing time: Fri 24 Oct 2025 00:30:33 +0000
ROA not before: Fri 24 Oct 2025 00:30:33 +0000
ROA not after: Fri 28 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2001:3fc3:6000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:da:0f:82:69:2d:e6:7d:1c:7f:fe:6c:d9:f9:0c:6b:14:50:75:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Validity
Not Before: Oct 24 00:30:33 2025 GMT
Not After : Nov 28 23:59:59 2025 GMT
Subject: serialNumber=e49f7134b9b407b7879df120c94d54a6b85bf74db5a9c850ade883d88dd49ba6, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:06:93:b2:9a:37:16:86:4f:a6:73:d0:90:
4a:96:d2:a9:6c:53:d9:c0:8e:e6:be:ae:a7:75:86:
7f:d8:05:7f:f5:d5:9b:ac:da:c5:f9:8f:35:dc:5e:
d0:10:90:3f:4c:e8:7a:d5:1c:37:bf:11:d4:f0:36:
43:79:20:6a:49:4a:6b:59:e6:b1:bb:72:ca:98:9d:
da:bc:0f:76:c1:56:5b:0f:de:b3:44:88:30:88:76:
11:1b:bd:3f:17:19:5d:88:31:79:d8:83:9d:20:a0:
a6:ae:f3:aa:04:c1:f7:a4:55:18:25:20:23:58:6e:
58:17:de:c5:12:2c:f0:85:6b:ae:3b:9e:ee:dd:9f:
64:fe:4e:82:75:fc:3a:c8:e5:ff:bf:09:b2:ba:8f:
09:1d:6e:d4:2f:74:72:96:03:01:db:0e:e6:b6:02:
fb:29:4d:66:ab:ba:ef:68:d7:27:ff:c6:ae:47:4b:
6c:b2:11:cc:93:d7:d3:3d:3c:21:e3:66:d5:c0:c7:
58:56:ea:13:af:aa:9c:71:3e:35:a3:aa:d3:d5:6b:
6a:6b:0d:27:b0:18:fb:85:0a:96:bf:2e:9b:2c:b3:
18:51:41:f5:27:fe:a5:ae:f6:3a:4d:b0:a8:6f:4a:
0a:4b:1f:08:6c:cf:70:23:96:c7:ce:ac:a8:00:0f:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D6:16:85:D6:49:BE:28:CF:C6:F4:26:BB:EC:58:9D:96:C1:01:CD
X509v3 Authority Key Identifier:
keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/00793623-9ed7-44a4-9c2d-b3ff0668aeb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3fc3:6000::/36
Signature Algorithm: sha256WithRSAEncryption
4d:26:eb:36:17:c6:cd:19:33:1a:2c:77:3c:da:5e:15:c7:96:
c7:cf:50:70:b3:ea:17:bc:91:6b:92:4c:50:14:7c:0b:80:d0:
11:90:bd:c3:a8:e7:54:b8:a7:8e:82:88:4a:ae:b1:58:f8:5f:
cc:ad:84:06:2c:e5:b0:9b:f8:bc:2d:ed:4c:6a:a6:58:5b:2a:
3d:e9:4c:95:df:2a:b9:86:82:0d:85:1d:88:0b:e7:22:0d:71:
88:9d:87:79:21:e2:ac:28:89:f1:b1:41:dc:b2:67:b1:ed:9c:
43:84:2c:62:53:fe:d5:b5:4a:b0:59:c2:9c:c9:5c:22:14:ef:
17:8b:69:ff:4d:d2:0f:c6:42:c6:40:74:7c:a2:4f:1a:5d:90:
12:6c:bc:d9:1f:9e:f2:27:18:38:f4:ed:69:04:a0:ca:bb:2b:
12:9f:6c:a2:7d:99:6d:e9:21:e1:ac:18:28:c6:60:57:6a:22:
f7:0f:4a:01:26:65:b4:00:34:22:2a:b9:9c:59:fa:56:ea:de:
f6:81:27:4c:c9:09:9c:83:7f:56:48:2f:78:94:cd:72:ec:0d:
7a:ee:0b:e6:b3:4b:80:6c:44:e0:84:df:96:03:d1:64:8d:e4:
cc:e9:a6:dc:2a:b7:d0:ac:c9:65:61:f9:b0:27:dc:9a:07:08:
60:9f:f4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 07:08:58 2025 by rpki-client