This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/222bf775-2bba-4790-943c-82c7a38f7efd.roa File: 222bf775-2bba-4790-943c-82c7a38f7efd.roa (raw, json) Hash identifier: qop8YIt3W/zrOxivhgZZ7pxo4SMOb6P2n9nNuJ6WFrA= Subject key identifier: 06:74:E3:12:75:DF:71:0B:03:EF:17:5D:0E:90:96:0E:2A:79:0A:60 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 578B88B4E329E427BAB696C9AB64F2A6C525C0EC Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/222bf775-2bba-4790-943c-82c7a38f7efd.roa Signing time: Tue 02 Dec 2025 01:30:18 +0000 ROA not before: Tue 02 Dec 2025 01:30:18 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc4::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:8b:88:b4:e3:29:e4:27:ba:b6:96:c9:ab:64:f2:a6:c5:25:c0:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 2 01:30:18 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=3474203bbc2ec81e6ef3cdf13e3d27f34da940e88c3a8f970dea91accf5c896b, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:08:f0:e6:ac:5d:8f:3e:07:da:05:58:ce:5f: af:e9:10:bc:a9:15:1e:2a:68:08:ad:f2:1d:9a:22: 73:ec:a5:10:b3:2e:81:2c:f2:53:e4:eb:e6:82:ff: d3:9f:06:71:37:d6:73:95:08:85:7a:d8:8c:e8:8f: 09:02:52:43:57:a9:23:dd:5e:3f:bb:cf:c5:8d:74: b8:8a:58:61:7b:51:ac:34:a5:66:1f:31:e5:05:45: a6:8b:be:ff:87:0a:b2:17:54:5a:8e:be:fd:1e:4e: a0:e9:21:d5:94:71:ee:6e:87:72:37:c3:f0:d9:d3: bf:ae:91:60:f4:ed:be:3a:37:4b:ca:1c:e2:75:fe: ba:9b:db:a4:6b:57:5b:05:eb:f5:a4:22:d5:37:0f: cd:87:07:72:be:f6:0d:13:a5:8a:1f:b4:eb:d3:bc: ea:8c:b4:bd:ef:14:47:7f:bf:37:5c:f0:13:da:61: fc:17:9e:6b:4a:d2:a4:60:82:fc:1d:77:be:f5:64: 82:c5:1d:a4:c5:ff:eb:38:02:0d:8a:04:dd:6e:c7: 2c:4a:85:6e:12:0c:9f:0d:7d:82:8e:d1:9b:37:44: c9:77:ef:b4:85:75:1c:6f:60:da:e9:a9:45:b3:56: a5:77:99:ed:1a:91:82:41:54:5b:27:1d:01:d1:b7: 9e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:74:E3:12:75:DF:71:0B:03:EF:17:5D:0E:90:96:0E:2A:79:0A:60 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/222bf775-2bba-4790-943c-82c7a38f7efd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc4::/36 Signature Algorithm: sha256WithRSAEncryption 8d:8b:fe:7a:60:d6:a0:39:d7:5e:ce:0b:69:c5:fb:41:17:b9: 8c:f5:fd:dd:1a:b2:9f:84:aa:cb:ea:e9:f6:74:74:58:b1:8b: 1b:81:61:d9:30:1f:4d:90:a9:fa:ab:af:0c:fb:86:ae:61:ee: 17:79:59:30:ed:82:05:84:79:14:15:3d:73:ac:a0:e9:09:1e: 34:52:91:69:f5:d3:33:ca:de:7e:b9:8d:93:ea:f2:98:6f:0f: 12:e1:7c:31:db:86:3c:ec:74:4b:91:55:6b:5e:fd:64:30:90: a6:29:84:3b:f7:21:28:a8:ac:32:3c:4d:93:bb:60:51:f5:33: 56:fe:51:dc:21:09:87:42:24:57:61:72:01:0d:85:dc:b7:f5: 8e:1e:75:3b:6c:e0:ba:74:52:03:91:43:d9:9a:b3:0d:fa:46: dd:c4:1e:60:cf:49:e2:92:bc:85:5c:20:39:b5:a7:09:f2:a2: 48:86:3a:0b:b7:42:58:91:14:f0:07:ce:75:de:ae:96:5d:c0: 16:88:7d:f7:d2:0c:6d:d8:df:44:fb:3b:dd:15:26:69:dc:6a: 74:59:52:1c:1e:cc:99:81:1e:ec:ea:50:b3:63:68:95:c2:65: 36:a2:89:0b:ec:28:bd:5d:95:b7:5f:fa:cc:c5:10:ce:f8:ea: 3d:10:7b:ed -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUV4uItOMp5Ce6tpbJq2TypsUlwOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDIwMTMwMThaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQDM0NzQyMDNiYmMyZWM4MWU2ZWYzY2RmMTNlM2QyN2YzNGRhOTQwZTg4YzNh OGY5NzBkZWE5MWFjY2Y1Yzg5NmIxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJsI8OasXY8+B9oFWM5fr+kQvKkVHipoCK3yHZoic+ylELMugSzyU+Tr5oL/ 058GcTfWc5UIhXrYjOiPCQJSQ1epI91eP7vPxY10uIpYYXtRrDSlZh8x5QVFpou+ /4cKshdUWo6+/R5OoOkh1ZRx7m6HcjfD8NnTv66RYPTtvjo3S8oc4nX+upvbpGtX WwXr9aQi1TcPzYcHcr72DROlih+069O86oy0ve8UR3+/N1zwE9ph/Beea0rSpGCC /B13vvVkgsUdpMX/6zgCDYoE3W7HLEqFbhIMnw19go7RmzdEyXfvtIV1HG9g2ump RbNWpXeZ7RqRgkFUWycdAdG3nqUCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQGdOMS dd9xCwPvF10OkJYOKnkKYDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv MjIyYmY3NzUtMmJiYS00NzkwLTk0M2MtODJjN2EzOGY3ZWZkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8QA MA0GCSqGSIb3DQEBCwUAA4IBAQCNi/56YNagOddezgtpxftBF7mM9f3dGrKfhKrL 6un2dHRYsYsbgWHZMB9NkKn6q68M+4auYe4XeVkw7YIFhHkUFT1zrKDpCR40UpFp 9dMzyt5+uY2T6vKYbw8S4Xwx24Y87HRLkVVrXv1kMJCmKYQ79yEoqKwyPE2Tu2BR 9TNW/lHcIQmHQiRXYXIBDYXct/WOHnU7bOC6dFIDkUPZmrMN+kbdxB5gz0nikryF XCA5tacJ8qJIhjoLt0JYkRTwB8513q6WXcAWiH330gxt2N9E+zvdFSZp3Gp0WVIc HsyZgR7s6lCzY2iVwmU2ookL7Ci9XZW3X/rMxRDO+Oo9EHvt -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:02 2025 by rpki-client