This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/20a0941e-97e6-476c-adec-4755830b9511.roa File: 20a0941e-97e6-476c-adec-4755830b9511.roa (raw, json) Hash identifier: SxOt3An2JJ/nYmR31mIK+nLTw9F3h4bhp19Bz+mBNms= Subject key identifier: 9E:4F:54:9B:79:01:D8:D6:B2:AF:D6:F8:D7:BA:74:F2:DA:49:6E:28 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 6D28A3C2D05CF5DDE08CA00D1645608F660F12B4 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/20a0941e-97e6-476c-adec-4755830b9511.roa Signing time: Tue 02 Dec 2025 01:40:09 +0000 ROA not before: Tue 02 Dec 2025 01:40:09 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2001:3fc7:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:28:a3:c2:d0:5c:f5:dd:e0:8c:a0:0d:16:45:60:8f:66:0f:12:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 2 01:40:09 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=49d129ed07d4d76eaad3c9e9e3d5496421ddfe2a63889fa9d5c4566eda32c0ea, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:bc:f1:69:0d:1d:d7:45:92:9f:a8:22:ad: 2c:5a:31:49:69:00:ec:16:fa:af:15:5b:61:bd:80: 8e:91:96:72:9e:76:0a:e7:a8:63:21:83:39:3d:ce: a4:f8:f8:88:83:4f:e8:71:7a:21:ee:6d:2f:58:48: ac:09:45:b7:d7:b2:b1:1c:91:62:0c:5e:ad:2e:67: 3b:46:80:7d:2c:3c:3e:30:19:9d:62:36:10:a3:c1: bc:7a:04:01:62:80:cd:f4:ff:65:31:b9:97:1c:36: a3:21:de:0d:35:07:ae:3b:d3:c4:6a:d6:be:cf:50: f3:d6:d0:40:66:5b:fd:c6:c0:67:db:8c:d1:2a:96: 4b:a0:1b:84:4e:d0:89:ae:77:ad:d8:4c:fd:45:5c: 31:83:00:2d:c4:b5:fd:e7:37:26:2c:b8:9e:2c:65: 5b:73:be:8e:eb:b0:3b:e1:74:af:fe:f8:1a:82:40: dc:ef:16:bb:a0:23:b1:6a:9b:76:fb:5d:48:13:cb: 65:60:26:8e:bd:8d:22:40:04:df:1e:36:7c:f0:e0: 6a:4a:fd:c7:eb:32:dd:8d:73:42:ce:4d:f2:32:13: 0d:d4:e2:67:5b:88:95:83:c2:6e:fe:6b:26:6f:fb: d3:59:8b:c2:8f:16:73:40:89:a0:86:43:14:c3:2d: f0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4F:54:9B:79:01:D8:D6:B2:AF:D6:F8:D7:BA:74:F2:DA:49:6E:28 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/20a0941e-97e6-476c-adec-4755830b9511.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc7:4800::/40 Signature Algorithm: sha256WithRSAEncryption bd:60:b6:d4:80:80:da:f3:4f:3f:24:ba:44:42:9a:16:e2:0b: 44:e3:4d:e4:20:e7:0e:8c:a5:3e:9e:cf:09:e3:76:1d:5e:ce: 37:98:d7:9d:a3:6b:93:cd:95:d0:eb:d5:80:4f:0b:e9:d5:57: 96:44:6e:21:68:fc:1a:ad:44:33:b7:d9:19:42:5d:33:65:49: 36:9c:b9:13:68:b5:e8:0d:24:0e:28:d5:f0:56:8c:20:7a:a4: 50:5a:93:74:15:e8:a8:76:5f:2a:29:a1:de:35:50:25:ef:10: d3:58:76:32:7b:ce:f4:c0:c5:35:68:48:4b:4a:94:25:96:f0: e4:3e:22:44:81:67:ec:2d:70:62:33:e4:1f:58:1a:de:ec:a0: b2:38:d7:d3:bf:4d:ef:a6:90:5c:77:73:0c:73:45:2b:0a:d7: 8f:12:eb:cb:a6:08:be:c3:3e:9f:81:0f:dd:fc:e6:1d:76:68: c0:61:0e:64:29:e7:ee:00:d0:74:43:71:35:0c:57:4a:aa:e4: 74:9b:45:1d:13:ba:7e:a2:4a:62:42:8a:52:f6:8e:a7:80:b9: 93:05:d7:c2:f0:34:e8:94:70:27:35:3e:9b:53:5b:96:20:4e: b7:b2:ec:4a:1b:ef:01:9d:05:2c:b7:bb:e2:53:de:9d:ce:62: ac:2d:2b:b0 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUbSijwtBc9d3gjKANFkVgj2YPErQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDIwMTQwMDlaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQDQ5ZDEyOWVkMDdkNGQ3NmVhYWQzYzllOWUzZDU0OTY0MjFkZGZlMmE2Mzg4 OWZhOWQ1YzQ1NjZlZGEzMmMwZWExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPtvPFpDR3XRZKfqCKtLFoxSWkA7Bb6rxVbYb2AjpGWcp52CueoYyGDOT3O pPj4iINP6HF6Ie5tL1hIrAlFt9eysRyRYgxerS5nO0aAfSw8PjAZnWI2EKPBvHoE AWKAzfT/ZTG5lxw2oyHeDTUHrjvTxGrWvs9Q89bQQGZb/cbAZ9uM0SqWS6AbhE7Q ia53rdhM/UVcMYMALcS1/ec3Jiy4nixlW3O+juuwO+F0r/74GoJA3O8Wu6AjsWqb dvtdSBPLZWAmjr2NIkAE3x42fPDgakr9x+sy3Y1zQs5N8jITDdTiZ1uIlYPCbv5r Jm/701mLwo8Wc0CJoIZDFMMt8JECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSeT1Sb eQHY1rKv1vjXunTy2kluKDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv MjBhMDk0MWUtOTdlNi00NzZjLWFkZWMtNDc1NTgzMGI5NTExLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8dI MA0GCSqGSIb3DQEBCwUAA4IBAQC9YLbUgIDa808/JLpEQpoW4gtE403kIOcOjKU+ ns8J43YdXs43mNedo2uTzZXQ69WATwvp1VeWRG4haPwarUQzt9kZQl0zZUk2nLkT aLXoDSQOKNXwVowgeqRQWpN0Feiodl8qKaHeNVAl7xDTWHYye870wMU1aEhLSpQl lvDkPiJEgWfsLXBiM+QfWBre7KCyONfTv03vppBcd3MMc0UrCtePEuvLpgi+wz6f gQ/d/OYddmjAYQ5kKefuANB0Q3E1DFdKquR0m0UdE7p+okpiQopS9o6ngLmTBdfC 8DTolHAnNT6bU1uWIE63suxKG+8BnQUst7viU96dzmKsLSuw -----END CERTIFICATE-----Generated at Sat Dec 6 21:51:31 2025 by rpki-client