This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4ce5b31b-8d42-403f-b519-f240e7958f0e.roa File: 4ce5b31b-8d42-403f-b519-f240e7958f0e.roa (raw, json) Hash identifier: fEVBZFU/ih0AYm4tM44NV3E0iqKumxiOOrgQu4+06qE= Subject key identifier: D3:88:FE:E4:61:82:39:3F:E9:36:10:50:59:99:06:60:51:B7:E0:45 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 3A609340864FC7EAAD30BCDBC998D7FCD7F64B7B Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4ce5b31b-8d42-403f-b519-f240e7958f0e.roa Signing time: Tue 02 Dec 2025 01:40:25 +0000 ROA not before: Tue 02 Dec 2025 01:40:25 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc7:1800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:60:93:40:86:4f:c7:ea:ad:30:bc:db:c9:98:d7:fc:d7:f6:4b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 2 01:40:25 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=387d92e5b7ab53d0b46ab1c6152c12e063edc23cedf9a1ce3b5890594fa708d9, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ec:99:b2:0b:76:b0:36:9c:da:e2:77:c5:65: e6:c9:4c:47:d6:ea:09:8e:10:29:fa:c9:a2:12:6e: 73:82:da:f6:83:d8:0f:30:72:e4:e7:e1:4d:0c:cc: e2:8c:0a:93:e1:80:d9:b5:ad:46:b7:85:0a:5c:30: ac:56:d3:0b:69:01:8f:67:17:98:22:55:df:f8:4d: 65:59:09:0b:8f:62:23:f9:d5:e2:cf:43:d4:2a:2d: c9:a0:30:77:6e:4f:0c:e2:bf:52:19:b5:5b:ce:5c: c7:d7:1a:67:cc:60:e7:c1:36:a2:68:1b:c3:9a:4f: b8:f2:7d:23:d1:3d:46:07:7f:71:77:b7:89:16:20: 99:52:b1:41:07:e1:04:9d:46:a9:c4:63:b4:74:56: e9:7a:9f:74:2e:06:0c:8d:8f:81:3c:39:c1:2d:8b: 4d:31:12:9c:ba:c3:42:76:a8:1a:e3:47:08:87:11: 21:da:50:38:2e:3e:55:03:53:d1:85:c2:da:21:b3: 9d:76:6f:4a:f8:77:6e:d1:f4:6d:d9:10:c2:a6:51: f7:9b:a4:45:38:da:a2:8a:2e:6c:a1:4c:99:43:47: da:36:79:ce:8f:e4:b8:1c:50:66:d8:30:3f:c7:b0: fe:01:c8:b0:ae:3d:33:d8:99:75:49:50:0c:3a:2a: ec:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:88:FE:E4:61:82:39:3F:E9:36:10:50:59:99:06:60:51:B7:E0:45 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4ce5b31b-8d42-403f-b519-f240e7958f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc7:1800::/40 Signature Algorithm: sha256WithRSAEncryption c3:3c:98:43:35:b7:bd:7e:7d:06:3a:10:26:6c:d5:15:6d:35: ef:22:03:63:4b:ce:75:dc:be:a1:b1:90:fb:1c:d8:f8:e9:68: af:66:e8:e3:e7:51:4f:7f:94:c7:52:8e:46:18:d5:8c:3f:3d: 71:54:ee:7d:48:04:21:e5:a3:8e:d8:3e:9a:1f:c6:aa:09:58: fc:7a:86:e6:a7:61:21:64:ee:3a:ac:3d:36:ad:a9:1d:8f:2d: a5:38:e3:fb:5c:84:1a:12:2d:cd:7b:0a:fe:e9:50:e9:5c:ad: 5b:de:83:2e:e5:b3:d7:26:df:af:3a:29:68:d0:7e:06:06:a0: 7d:ad:b0:5b:c8:fc:b1:00:41:93:58:18:22:1e:35:60:db:7a: 1a:fb:ef:7e:fe:8a:57:33:56:30:e8:b8:38:2a:df:33:94:07: 2b:08:31:35:2b:78:db:ec:b0:a9:67:ff:79:82:45:34:9c:eb: c6:40:c6:3b:61:24:34:3a:67:ff:80:22:c0:58:0f:06:fa:c6: d1:4a:28:9b:50:aa:cb:48:33:e0:55:5d:3c:7f:9f:55:b8:94: 64:07:9d:d3:3a:9e:2f:7f:fc:a8:bd:45:da:82:03:ac:29:f3: ff:34:66:23:07:a7:f3:2e:a9:07:68:b3:77:25:de:de:dd:b8: 7a:9d:bd:2b -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUOmCTQIZPx+qtMLzbyZjX/Nf2S3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDIwMTQwMjVaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQDM4N2Q5MmU1YjdhYjUzZDBiNDZhYjFjNjE1MmMxMmUwNjNlZGMyM2NlZGY5 YTFjZTNiNTg5MDU5NGZhNzA4ZDkxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOfsmbILdrA2nNrid8Vl5slMR9bqCY4QKfrJohJuc4La9oPYDzBy5OfhTQzM 4owKk+GA2bWtRreFClwwrFbTC2kBj2cXmCJV3/hNZVkJC49iI/nV4s9D1CotyaAw d25PDOK/Uhm1W85cx9caZ8xg58E2omgbw5pPuPJ9I9E9Rgd/cXe3iRYgmVKxQQfh BJ1GqcRjtHRW6XqfdC4GDI2PgTw5wS2LTTESnLrDQnaoGuNHCIcRIdpQOC4+VQNT 0YXC2iGznXZvSvh3btH0bdkQwqZR95ukRTjaoooubKFMmUNH2jZ5zo/kuBxQZtgw P8ew/gHIsK49M9iZdUlQDDoq7LcCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTTiP7k YYI5P+k2EFBZmQZgUbfgRTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv NGNlNWIzMWItOGQ0Mi00MDNmLWI1MTktZjI0MGU3OTU4ZjBlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8cY MA0GCSqGSIb3DQEBCwUAA4IBAQDDPJhDNbe9fn0GOhAmbNUVbTXvIgNjS8513L6h sZD7HNj46WivZujj51FPf5THUo5GGNWMPz1xVO59SAQh5aOO2D6aH8aqCVj8eobm p2EhZO46rD02rakdjy2lOOP7XIQaEi3Newr+6VDpXK1b3oMu5bPXJt+vOilo0H4G BqB9rbBbyPyxAEGTWBgiHjVg23oa++9+/opXM1Yw6Lg4Kt8zlAcrCDE1K3jb7LCp Z/95gkU0nOvGQMY7YSQ0Omf/gCLAWA8G+sbRSiibUKrLSDPgVV08f59VuJRkB53T Op4vf/yovUXaggOsKfP/NGYjB6fzLqkHaLN3Jd7e3bh6nb0r -----END CERTIFICATE-----Generated at Sat Dec 6 09:47:17 2025 by rpki-client