This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3ad06e7c-7473-4104-a394-28daf30bc72f.roa File: 3ad06e7c-7473-4104-a394-28daf30bc72f.roa (raw, json) Hash identifier: pq6BsZD5lGN+goq1l63aavXI1lkmtWhDuBvrK7W9f1A= Subject key identifier: 31:E1:3E:C3:E3:FA:4B:C5:76:0B:AF:25:11:B9:EB:2B:53:D2:5F:D3 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 5C07B090FA095AF2D119A37CE9E6ED54AAC50E77 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3ad06e7c-7473-4104-a394-28daf30bc72f.roa Signing time: Tue 02 Dec 2025 01:30:10 +0000 ROA not before: Tue 02 Dec 2025 01:30:10 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc7:5800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:07:b0:90:fa:09:5a:f2:d1:19:a3:7c:e9:e6:ed:54:aa:c5:0e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 2 01:30:10 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=12205a317994d3f0c94cc0b29426e15693f234f17b80b018572aac4ace0dea6c, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:0b:d1:5e:12:4b:96:c6:27:ff:24:08:8c: 66:e0:ca:78:6a:d9:3f:0e:34:ff:48:0d:93:45:52: 0a:03:73:a2:75:31:3b:c5:03:91:08:56:3b:9e:83: ba:ee:a1:b4:65:04:ee:2f:94:61:ca:41:cd:ef:a9: 57:93:7b:61:5b:f2:41:15:5b:2b:a8:77:2b:85:c6: 17:fc:48:c1:3c:34:22:35:55:51:5a:6d:d7:bc:e5: 85:25:75:be:38:93:74:78:39:9f:a2:15:14:a7:f5: 71:cf:e5:64:e7:47:9c:e5:57:1c:58:2f:cd:d2:96: ce:fb:e2:29:04:db:48:56:37:e6:08:77:be:53:48: 29:28:1b:cc:7e:bf:9e:76:c0:b2:1b:ab:b9:1b:cb: 3c:4e:21:56:9a:8e:96:62:82:eb:47:39:5b:22:1d: a4:d7:17:c1:d9:14:99:36:db:50:68:2f:7d:a0:4a: 2f:af:44:dc:b8:d5:04:3f:e3:83:9e:4e:c7:28:a5: f1:e6:f6:e0:6c:a1:95:51:7a:c6:cc:fd:ce:f4:24: 82:67:b7:32:fd:3a:18:50:65:a5:fd:c9:ab:2f:51: a0:e9:06:9b:fd:af:25:72:ab:20:ab:6f:ea:8c:1a: 40:77:d3:93:ee:13:ff:38:da:9a:2c:fd:23:25:cc: 72:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E1:3E:C3:E3:FA:4B:C5:76:0B:AF:25:11:B9:EB:2B:53:D2:5F:D3 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/3ad06e7c-7473-4104-a394-28daf30bc72f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc7:5800::/40 Signature Algorithm: sha256WithRSAEncryption 9a:ed:94:ed:9c:1c:91:63:36:ee:45:81:92:c0:69:f4:59:53: 3f:2d:15:3b:81:0e:21:cc:cc:f1:52:b7:ee:91:a6:96:12:0c: aa:12:9c:64:a0:e3:c1:7b:1b:e4:54:e9:ef:a9:7e:bd:a2:1a: 67:16:bf:99:69:2d:3f:cd:7f:03:dd:a8:56:9f:f9:4a:b1:60: fd:cb:70:d3:93:a5:53:7d:9a:5e:a0:fc:d6:ee:1c:07:dd:8a: ae:6b:ee:2d:56:90:65:bb:7e:b4:28:6e:77:4f:86:e7:10:a9: 41:96:4f:65:84:77:39:43:a8:46:ec:93:ed:24:3b:55:1c:1e: e3:29:48:02:9a:59:6c:34:af:a8:36:5f:8f:18:0e:75:54:e6: 9d:de:77:a7:8c:3d:99:83:08:bf:62:5e:6a:4a:b2:91:c4:51: 2b:86:78:e8:a5:75:1f:5b:b2:98:df:8f:33:a4:c9:49:ff:fc: 94:c7:56:11:68:60:39:ef:8a:21:9a:b3:63:74:59:55:5e:19: b8:b5:e8:79:67:43:47:85:fb:b0:15:be:29:58:f8:2d:c7:fa: 06:a2:40:ee:62:04:5d:93:c5:29:1c:05:9f:ee:aa:9d:ab:53: b0:6c:fd:6f:b3:dc:7f:67:98:6a:98:b5:55:05:26:fd:c1:2a: 05:a7:e1:19 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUXAewkPoJWvLRGaN86ebtVKrFDncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDIwMTMwMTBaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQDEyMjA1YTMxNzk5NGQzZjBjOTRjYzBiMjk0MjZlMTU2OTNmMjM0ZjE3Yjgw YjAxODU3MmFhYzRhY2UwZGVhNmMxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKULC9FeEkuWxif/JAiMZuDKeGrZPw40/0gNk0VSCgNzonUxO8UDkQhWO56D uu6htGUE7i+UYcpBze+pV5N7YVvyQRVbK6h3K4XGF/xIwTw0IjVVUVpt17zlhSV1 vjiTdHg5n6IVFKf1cc/lZOdHnOVXHFgvzdKWzvviKQTbSFY35gh3vlNIKSgbzH6/ nnbAshuruRvLPE4hVpqOlmKC60c5WyIdpNcXwdkUmTbbUGgvfaBKL69E3LjVBD/j g55Oxyil8eb24GyhlVF6xsz9zvQkgme3Mv06GFBlpf3Jqy9RoOkGm/2vJXKrIKtv 6owaQHfTk+4T/zjamiz9IyXMcmMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQx4T7D 4/pLxXYLryURuesrU9Jf0zAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv M2FkMDZlN2MtNzQ3My00MTA0LWEzOTQtMjhkYWYzMGJjNzJmLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8dY MA0GCSqGSIb3DQEBCwUAA4IBAQCa7ZTtnByRYzbuRYGSwGn0WVM/LRU7gQ4hzMzx UrfukaaWEgyqEpxkoOPBexvkVOnvqX69ohpnFr+ZaS0/zX8D3ahWn/lKsWD9y3DT k6VTfZpeoPzW7hwH3Yqua+4tVpBlu360KG53T4bnEKlBlk9lhHc5Q6hG7JPtJDtV HB7jKUgCmllsNK+oNl+PGA51VOad3nenjD2Zgwi/Yl5qSrKRxFErhnjopXUfW7KY 348zpMlJ//yUx1YRaGA574ohmrNjdFlVXhm4teh5Z0NHhfuwFb4pWPgtx/oGokDu YgRdk8UpHAWf7qqdq1OwbP1vs9x/Z5hqmLVVBSb9wSoFp+EZ -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:21 2025 by rpki-client