This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/296c0259-01c8-4923-9577-44db7a2ae85b.roa File: 296c0259-01c8-4923-9577-44db7a2ae85b.roa (raw, json) Hash identifier: 7wJBCRflMBWNfTPl18cigfV4Ll0Yr+0AahvP/D99x+A= Subject key identifier: 98:DA:16:DB:9D:14:D2:C1:C5:E4:58:BD:A4:42:66:DE:E0:3F:EF:6B Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 3E0A0218EC929F583B444FAEBFD340898ACEA0B0 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/296c0259-01c8-4923-9577-44db7a2ae85b.roa Signing time: Tue 02 Dec 2025 01:40:39 +0000 ROA not before: Tue 02 Dec 2025 01:40:39 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc5::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0a:02:18:ec:92:9f:58:3b:44:4f:ae:bf:d3:40:89:8a:ce:a0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 2 01:40:39 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=24485839aa2dd118da51feae1deb00c30fd902a581acc39298d912169de4a3c0, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:28:e5:3e:a9:fc:06:51:7f:30:e8:56:dd:e5: f0:62:93:bc:15:5d:04:ef:af:9e:0a:7e:59:dd:05: 6c:27:3d:4c:d2:18:fc:7a:80:5c:50:e1:73:23:81: d9:a3:1e:1f:93:f1:c0:74:47:14:e1:1f:65:b8:a5: 3a:ad:d5:13:86:22:91:89:a3:7c:6f:74:21:76:63: 84:50:3a:8e:e7:3f:e2:34:3d:a2:3e:00:2f:8d:2e: 05:bb:08:14:83:f5:cd:34:c0:a5:06:e3:2b:c0:f5: 1b:43:d1:61:2e:6f:7d:c0:51:75:22:ec:a0:0e:54: d2:1c:c9:37:de:b3:d8:25:cf:0b:54:35:c0:44:f8: 1d:a0:c1:81:5e:ea:99:e7:8d:d1:4a:cc:2a:3f:66: ca:f6:98:78:a5:e2:1c:97:cc:58:74:7c:c2:74:df: ed:92:fa:fd:fc:1b:b0:ef:c4:f1:cc:e4:e9:93:18: 6b:dd:e1:2a:34:cb:03:09:ca:03:8f:8f:a3:ee:5d: 6b:42:66:a1:1c:c9:96:30:69:28:cb:8e:d1:de:f6: 38:14:06:be:fc:ff:96:d7:4e:06:dd:a0:39:93:6f: 3e:bb:9a:90:42:7a:96:bf:7b:f3:7c:81:0c:87:3b: 9c:09:5a:e5:4f:20:b6:99:dc:d3:22:71:b8:9c:62: a9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DA:16:DB:9D:14:D2:C1:C5:E4:58:BD:A4:42:66:DE:E0:3F:EF:6B X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/296c0259-01c8-4923-9577-44db7a2ae85b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc5::/36 Signature Algorithm: sha256WithRSAEncryption 21:ba:94:c7:28:8e:bf:ad:f3:0b:50:ed:16:ce:18:7e:38:91: f2:a0:31:f7:6e:ae:e5:fd:31:c3:60:e1:86:eb:2c:74:19:49: fc:3e:69:63:db:a2:68:5a:16:3a:f0:99:c8:17:f2:5b:3a:0a: 45:61:a4:e2:47:2e:0d:88:cc:0b:f0:47:66:a1:64:62:16:fa: 91:f5:4a:35:d9:a3:68:a8:29:d6:9f:d8:d1:78:82:e2:fe:f9: 99:6f:26:61:e4:52:de:eb:ec:41:a1:7e:61:d1:b8:55:67:72: cc:85:0a:b4:25:9c:7f:fa:05:00:04:72:e0:18:6a:cb:43:f5: a8:84:19:25:58:c1:f7:33:66:90:a8:83:19:1c:7e:01:68:8e: 8e:6b:22:45:16:ff:66:f1:72:af:d8:ec:61:6d:e5:94:2d:3a: 8e:d7:bc:a2:62:48:7b:eb:7c:c3:2e:9b:08:8a:f8:c8:05:68: 13:80:64:e7:dc:82:18:03:bb:69:da:c5:92:3b:62:eb:22:48: 62:01:d8:9f:c4:34:97:14:0a:9a:e0:a9:44:92:64:21:b3:21: cb:09:59:12:58:97:0a:df:dc:ec:37:80:8b:d4:98:31:a2:f8: 0e:20:b2:23:23:42:fe:43:f8:87:15:e1:50:36:ae:14:6a:1d: 33:54:5e:1d -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUPgoCGOySn1g7RE+uv9NAiYrOoLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDIwMTQwMzlaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQDI0NDg1ODM5YWEyZGQxMThkYTUxZmVhZTFkZWIwMGMzMGZkOTAyYTU4MWFj YzM5Mjk4ZDkxMjE2OWRlNGEzYzAxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQo5T6p/AZRfzDoVt3l8GKTvBVdBO+vngp+Wd0FbCc9TNIY/HqAXFDhcyOB 2aMeH5PxwHRHFOEfZbilOq3VE4YikYmjfG90IXZjhFA6juc/4jQ9oj4AL40uBbsI FIP1zTTApQbjK8D1G0PRYS5vfcBRdSLsoA5U0hzJN96z2CXPC1Q1wET4HaDBgV7q meeN0UrMKj9myvaYeKXiHJfMWHR8wnTf7ZL6/fwbsO/E8czk6ZMYa93hKjTLAwnK A4+Po+5da0JmoRzJljBpKMuO0d72OBQGvvz/ltdOBt2gOZNvPruakEJ6lr9783yB DIc7nAla5U8gtpnc0yJxuJxiqUkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSY2hbb nRTSwcXkWL2kQmbe4D/vazAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv Mjk2YzAyNTktMDFjOC00OTIzLTk1NzctNDRkYjdhMmFlODViLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8UA MA0GCSqGSIb3DQEBCwUAA4IBAQAhupTHKI6/rfMLUO0Wzhh+OJHyoDH3bq7l/THD YOGG6yx0GUn8Pmlj26JoWhY68JnIF/JbOgpFYaTiRy4NiMwL8EdmoWRiFvqR9Uo1 2aNoqCnWn9jReILi/vmZbyZh5FLe6+xBoX5h0bhVZ3LMhQq0JZx/+gUABHLgGGrL Q/WohBklWMH3M2aQqIMZHH4BaI6OayJFFv9m8XKv2OxhbeWULTqO17yiYkh763zD LpsIivjIBWgTgGTn3IIYA7tp2sWSO2LrIkhiAdifxDSXFAqa4KlEkmQhsyHLCVkS WJcK39zsN4CL1JgxovgOILIjI0L+Q/iHFeFQNq4Uah0zVF4d -----END CERTIFICATE-----Generated at Sat Dec 6 10:49:33 2025 by rpki-client