This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/03927569-0b5c-4807-96ea-c0c7c45fd675.roa File: 03927569-0b5c-4807-96ea-c0c7c45fd675.roa (raw, json) Hash identifier: lMrYwJsw7GEuJPxeUn17RNJHuo/GEKsqgobKkinngz0= Subject key identifier: EA:8A:BF:C3:82:E2:E8:EE:14:9D:61:5F:CC:E3:FC:83:D5:A1:25:73 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 6000FE9FCD04D60B3E884AACD9DDEE863A25A68D Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/03927569-0b5c-4807-96ea-c0c7c45fd675.roa Signing time: Sat 06 Dec 2025 00:30:13 +0000 ROA not before: Sat 06 Dec 2025 00:30:13 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc2::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:00:fe:9f:cd:04:d6:0b:3e:88:4a:ac:d9:dd:ee:86:3a:25:a6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 6 00:30:13 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=f20b8369c31a88cabaa8945429104f96fb7c13bd387dcf52ca6821ce7ea0a6b9, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4e:23:eb:77:48:a2:39:23:62:a1:aa:d6:b7: 09:96:ca:fe:76:28:45:2c:67:8e:c0:d8:a5:31:56: 90:54:26:4c:76:5b:1a:69:71:99:09:ee:2e:8d:73: 13:e6:10:23:99:09:58:f5:49:18:89:90:58:bb:2d: 22:ca:6b:5c:92:af:21:88:51:1f:ed:42:bd:40:c4: 83:76:51:ef:86:8c:17:72:64:ab:44:70:e3:ac:3e: f0:95:ca:cb:21:72:a6:f4:dd:26:f2:aa:ca:69:49: 27:26:74:9f:3c:7d:09:fa:a6:e5:c9:ab:00:3f:59: 2b:05:b5:34:5a:6a:d3:cc:46:1a:2f:8e:75:04:98: 24:de:e0:96:de:ad:b9:aa:d1:9f:1a:61:10:24:ea: 56:ad:bd:63:46:15:34:96:b7:df:83:ed:94:67:90: e1:3e:fb:d2:c5:61:e3:18:03:29:c2:07:a0:31:ca: 3b:ce:24:3b:53:3b:c6:87:18:b2:98:59:ff:00:51: 28:44:d4:e7:0e:3f:6c:2a:ca:49:93:c3:64:74:fd: 12:a5:a7:3a:ba:a4:cf:1c:26:b9:32:bf:40:75:31: ab:fd:36:c5:87:15:9b:fc:3c:bb:a5:f0:37:34:a1: cf:33:bb:8d:6b:7a:7f:b6:9c:2f:08:c6:81:6f:48: db:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8A:BF:C3:82:E2:E8:EE:14:9D:61:5F:CC:E3:FC:83:D5:A1:25:73 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/03927569-0b5c-4807-96ea-c0c7c45fd675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc2::/32 Signature Algorithm: sha256WithRSAEncryption 9d:51:1d:55:29:f9:c2:8b:23:69:b3:ba:c1:c4:5b:66:df:5a: 48:78:cb:b9:de:13:05:03:ac:76:20:b7:0f:69:ed:ef:6f:62: 2d:b9:77:52:a5:6f:08:39:4c:8b:0c:6b:73:13:12:9a:fb:f6: 1d:a2:ee:5b:92:f0:18:a4:9c:46:d7:ae:37:29:fd:17:13:8c: 1b:5d:1d:d6:d7:70:3b:f5:71:88:b8:5b:21:1e:a0:4d:51:a3: 85:6e:e6:c1:a8:fb:7a:ee:67:8d:dd:3e:2c:30:e3:89:22:78: bc:2c:cd:11:e5:66:19:c0:d9:69:e7:a8:d6:27:94:f5:5a:2e: 0b:64:04:57:c2:35:b2:32:8a:1e:4e:95:20:dd:db:6f:de:4d: 36:3d:64:0c:b0:45:ad:76:ef:dd:24:96:e8:f5:17:fc:8c:4e: 33:78:9a:b2:9a:25:5d:0a:cd:5d:1c:3b:a6:0c:8f:a9:9a:f4: 7f:f3:31:1c:25:c5:69:14:2d:79:90:6e:6f:47:7e:56:29:21: b8:df:3b:68:71:43:45:9a:bd:9b:17:49:98:e3:59:d3:75:38: ea:87:88:02:93:8a:a6:06:ab:a2:46:f3:06:dd:e6:0b:00:45: ce:41:5c:e7:35:43:dd:30:91:d1:01:82:b9:57:1c:51:f7:b6: 42:4d:ee:67 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUYAD+n80E1gs+iEqs2d3uhjolpo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDYwMDMwMTNaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQGYyMGI4MzY5YzMxYTg4Y2FiYWE4OTQ1NDI5MTA0Zjk2ZmI3YzEzYmQzODdk Y2Y1MmNhNjgyMWNlN2VhMGE2YjkxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANlOI+t3SKI5I2Khqta3CZbK/nYoRSxnjsDYpTFWkFQmTHZbGmlxmQnuLo1z E+YQI5kJWPVJGImQWLstIsprXJKvIYhRH+1CvUDEg3ZR74aMF3Jkq0Rw46w+8JXK yyFypvTdJvKqymlJJyZ0nzx9Cfqm5cmrAD9ZKwW1NFpq08xGGi+OdQSYJN7glt6t uarRnxphECTqVq29Y0YVNJa334PtlGeQ4T770sVh4xgDKcIHoDHKO84kO1M7xocY sphZ/wBRKETU5w4/bCrKSZPDZHT9EqWnOrqkzxwmuTK/QHUxq/02xYcVm/w8u6Xw NzShzzO7jWt6f7acLwjGgW9I240CAwEAAaOCAiIwggIeMB0GA1UdDgQWBBTqir/D guLo7hSdYV/M4/yD1aElczAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv MDM5Mjc1NjktMGI1Yy00ODA3LTk2ZWEtYzBjN2M0NWZkNjc1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACABP8Iw DQYJKoZIhvcNAQELBQADggEBAJ1RHVUp+cKLI2mzusHEW2bfWkh4y7neEwUDrHYg tw9p7e9vYi25d1Klbwg5TIsMa3MTEpr79h2i7luS8BiknEbXrjcp/RcTjBtdHdbX cDv1cYi4WyEeoE1Ro4Vu5sGo+3ruZ43dPiww44kieLwszRHlZhnA2WnnqNYnlPVa LgtkBFfCNbIyih5OlSDd22/eTTY9ZAywRa12790kluj1F/yMTjN4mrKaJV0KzV0c O6YMj6ma9H/zMRwlxWkULXmQbm9HflYpIbjfO2hxQ0WavZsXSZjjWdN1OOqHiAKT iqYGq6JG8wbd5gsARc5BXOc1Q90wkdEBgrlXHFH3tkJN7mc= -----END CERTIFICATE-----Generated at Sun Dec 7 01:07:08 2025 by rpki-client