This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/14c89f5a-e81a-409d-bc58-42bed3a3217e.roa File: 14c89f5a-e81a-409d-bc58-42bed3a3217e.roa (raw, json) Hash identifier: xRfc7OJqrCzqE46fPf2uPciGowKxWeiOdzXl1at1Jko= Subject key identifier: 0A:3C:B8:46:1D:4F:CC:8B:9F:B6:1D:A7:33:A1:85:93:01:18:C1:9F Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 4304998D63485AA0599317BDE5D60C9974E029D1 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/14c89f5a-e81a-409d-bc58-42bed3a3217e.roa Signing time: Tue 02 Dec 2025 01:40:55 +0000 ROA not before: Tue 02 Dec 2025 01:40:55 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc3:6800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:04:99:8d:63:48:5a:a0:59:93:17:bd:e5:d6:0c:99:74:e0:29:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 2 01:40:55 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=cbb0b5264894f574ec4059066fbd0a9cb589da9a8fcd5c9247d6d3628194bf84, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:e1:b7:47:7c:69:64:80:1f:3e:28:a9:98: 69:6d:fd:40:f8:23:d6:4d:54:aa:fd:0d:f0:ee:7c: 51:7a:27:69:6d:05:2d:d4:00:28:c6:19:c2:b7:d9: a1:74:b9:e7:87:40:d3:27:03:4b:7d:be:84:47:08: ba:0c:e1:a7:9d:90:33:8f:15:7a:cf:8d:51:1a:7b: 18:a6:84:fc:f3:37:55:a1:08:98:f1:cc:ac:77:9f: aa:97:23:85:64:35:57:bb:a0:62:78:70:76:f0:a2: 46:c1:71:f7:34:e1:e2:5d:12:8b:1f:d1:dc:6f:43: 1d:bf:16:17:69:a5:32:6c:d2:bc:43:be:75:0d:23: 13:e3:58:05:22:3e:8e:14:0e:bf:04:f2:f0:6a:1e: 36:d3:66:66:24:40:91:11:4f:06:82:7d:ac:95:72: fb:d2:50:df:4b:29:1c:6d:54:ff:d3:a4:a4:3c:0c: d7:0a:f7:07:0f:7e:78:7d:dd:7a:d7:43:ef:31:e2: 0d:55:08:22:d2:83:03:6d:43:c5:2c:c0:71:a5:b7: 42:98:1b:bd:3f:24:f5:c7:73:6e:ec:ea:4e:12:c4: d1:af:43:79:f6:00:72:3c:bf:9b:7d:4f:30:5a:fc: f1:9f:00:ec:50:88:74:33:21:60:3e:da:32:64:eb: 53:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3C:B8:46:1D:4F:CC:8B:9F:B6:1D:A7:33:A1:85:93:01:18:C1:9F X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/14c89f5a-e81a-409d-bc58-42bed3a3217e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc3:6800::/40 Signature Algorithm: sha256WithRSAEncryption c6:9e:3a:45:c6:2f:2a:be:d8:c2:b1:aa:16:75:71:86:0c:6e: 0e:a7:dc:b5:1e:28:bf:e0:57:1d:1f:15:5e:8f:94:e2:ab:ed: a2:33:7d:83:c4:c0:3c:f5:eb:43:9c:fb:33:f2:86:6e:19:85: 6b:84:da:8b:f6:0f:b7:e5:84:b6:a5:36:a6:54:89:fa:6b:58: 1d:01:65:d4:8e:ae:7c:b1:02:69:46:24:af:2e:7d:06:66:f6: e6:46:dc:bd:86:bc:8f:4c:82:eb:6b:58:b7:13:19:e5:11:04: d9:85:3d:81:5c:1b:a3:e4:6d:72:54:0f:5f:13:5a:54:4d:55: 5e:d8:0e:7f:34:2c:39:fa:d8:d0:e3:c5:52:6e:84:84:41:fa: 35:85:71:8f:31:0b:69:5b:6f:16:1a:66:c8:d6:42:79:b6:3d: a5:91:66:94:0c:4e:9a:1f:5c:af:f0:83:20:b6:e2:83:1c:96: 83:91:e3:0f:db:b9:92:7d:d0:28:b9:a6:81:6f:46:bb:71:4a: 16:84:67:f7:66:46:c2:7c:ac:f8:a0:11:d7:15:c8:e7:ed:e6: 30:a3:48:d8:60:12:30:aa:8b:5d:4f:56:b8:e3:55:ff:46:16: fa:82:3c:4c:9b:7c:60:d5:7a:f9:32:15:c7:9a:3a:7d:9a:ff: dd:0a:3e:b1 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUQwSZjWNIWqBZkxe95dYMmXTgKdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDIwMTQwNTVaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQGNiYjBiNTI2NDg5NGY1NzRlYzQwNTkwNjZmYmQwYTljYjU4OWRhOWE4ZmNk NWM5MjQ3ZDZkMzYyODE5NGJmODQxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKC14bdHfGlkgB8+KKmYaW39QPgj1k1Uqv0N8O58UXonaW0FLdQAKMYZwrfZ oXS554dA0ycDS32+hEcIugzhp52QM48Ves+NURp7GKaE/PM3VaEImPHMrHefqpcj hWQ1V7ugYnhwdvCiRsFx9zTh4l0Six/R3G9DHb8WF2mlMmzSvEO+dQ0jE+NYBSI+ jhQOvwTy8GoeNtNmZiRAkRFPBoJ9rJVy+9JQ30spHG1U/9OkpDwM1wr3Bw9+eH3d etdD7zHiDVUIItKDA21DxSzAcaW3QpgbvT8k9cdzbuzqThLE0a9DefYAcjy/m31P MFr88Z8A7FCIdDMhYD7aMmTrU28CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQKPLhG HU/Mi5+2HaczoYWTARjBnzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv MTRjODlmNWEtZTgxYS00MDlkLWJjNTgtNDJiZWQzYTMyMTdlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8No MA0GCSqGSIb3DQEBCwUAA4IBAQDGnjpFxi8qvtjCsaoWdXGGDG4Op9y1Hii/4Fcd HxVej5Tiq+2iM32DxMA89etDnPsz8oZuGYVrhNqL9g+35YS2pTamVIn6a1gdAWXU jq58sQJpRiSvLn0GZvbmRty9hryPTILra1i3ExnlEQTZhT2BXBuj5G1yVA9fE1pU TVVe2A5/NCw5+tjQ48VSboSEQfo1hXGPMQtpW28WGmbI1kJ5tj2lkWaUDE6aH1yv 8IMgtuKDHJaDkeMP27mSfdAouaaBb0a7cUoWhGf3ZkbCfKz4oBHXFcjn7eYwo0jY YBIwqotdT1a441X/Rhb6gjxMm3xg1Xr5MhXHmjp9mv/dCj6x -----END CERTIFICATE-----Generated at Sat Dec 6 21:51:17 2025 by rpki-client