This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/54519fcd-4655-4148-9d7d-913b0c0cfe03.roa File: 54519fcd-4655-4148-9d7d-913b0c0cfe03.roa (raw, json) Hash identifier: sz6DDcpg7ye7Pkdep/O0ML+UA0BoNAQF6uxVUgSSi+U= Subject key identifier: 23:3C:C5:E6:2C:3B:73:C4:02:96:E6:FE:90:A4:17:6D:5D:45:95:09 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 07CCD4FD9150FCED8C41339F1833F358D4A3B6CF Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/54519fcd-4655-4148-9d7d-913b0c0cfe03.roa Signing time: Tue 02 Dec 2025 01:40:40 +0000 ROA not before: Tue 02 Dec 2025 01:40:40 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc7:9000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:cc:d4:fd:91:50:fc:ed:8c:41:33:9f:18:33:f3:58:d4:a3:b6:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 2 01:40:40 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=3380bee9a49d4027c12f09108fdbedfe30fb456e3c9aa17af58773652d9dcb24, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:df:0c:23:ed:d3:06:7c:15:58:d9:70:cd:38: 93:47:1b:b5:0e:09:ed:f8:b3:f8:3b:f4:65:37:57: f8:30:71:9a:dd:5c:be:d0:b1:27:f8:4b:dc:99:6c: ff:71:6a:8e:e6:6a:f4:7e:12:fd:85:9f:9b:ef:be: 56:f2:1a:3b:bd:b5:57:5d:57:f9:24:d9:3a:bb:be: ca:4e:a0:7f:ed:09:f3:e6:c4:a9:18:5f:03:1f:9c: 88:c0:37:b5:aa:24:03:5c:92:57:f2:2b:d3:2b:8e: da:33:b5:c6:2a:dc:9e:72:18:f9:d7:01:26:f9:1e: ab:2c:1f:1b:68:4a:ef:34:46:19:82:bd:68:9a:4f: 1e:c9:54:02:6b:23:07:10:fd:53:ac:a7:cd:fe:e2: b8:59:41:c4:f6:cd:46:fa:71:3f:45:58:9b:3e:45: 4f:6d:66:57:38:fa:3f:d7:a0:c3:34:61:23:4a:c8: 73:da:e5:b6:7e:62:4a:f7:30:5e:3e:07:8a:a3:d1: 18:45:68:3a:92:f5:5f:d6:40:85:7f:f1:7e:1f:9e: 9f:4d:5c:94:1b:41:d6:0f:43:9b:83:17:20:00:e6: 41:a9:70:da:9f:0e:90:7d:58:29:c4:2d:25:df:f4: 61:f1:50:a6:1f:0e:52:54:ef:e5:64:0e:c2:54:ec: cf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3C:C5:E6:2C:3B:73:C4:02:96:E6:FE:90:A4:17:6D:5D:45:95:09 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/54519fcd-4655-4148-9d7d-913b0c0cfe03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc7:9000::/36 Signature Algorithm: sha256WithRSAEncryption 26:5d:10:81:a3:09:f6:90:77:33:6d:03:74:7a:8a:3f:05:4d: d5:fc:2c:81:01:b9:db:32:17:b8:90:55:c2:15:c7:59:c4:3a: 54:55:82:d6:92:fe:89:4e:4e:f9:b5:c1:b5:d5:e7:56:dd:2d: 1f:39:6d:83:fd:d7:01:a6:ef:2b:90:e1:72:dd:e4:fe:ac:64: 7b:55:e3:ac:9a:5c:1a:d0:23:e9:76:88:89:50:1e:f4:63:4c: 7e:3a:dd:39:01:6f:93:4b:97:e1:59:a6:88:45:c0:c6:90:09: 91:b4:03:02:ac:aa:75:c3:9f:01:d3:f8:d0:c1:5a:d0:55:e9: f7:9e:5e:3e:c7:94:84:d1:ba:cb:2b:8f:8c:d6:08:56:02:3e: 92:2d:bc:bd:15:f5:2a:f2:bc:a7:ce:a9:57:18:2b:54:64:17: c7:0d:c3:24:82:6b:6d:83:e1:8f:09:20:5f:56:c9:66:07:a5: cb:27:0b:c2:1a:36:f2:8c:f6:b5:c6:e6:94:00:1e:ce:c9:c6: e4:df:29:dc:3c:0b:6c:c0:8e:9f:6b:be:62:fb:9c:09:6f:05: 9f:e5:1d:62:78:7f:86:d6:6a:af:4c:cd:60:9d:5d:9d:af:60: b1:94:fd:a4:73:be:41:3a:87:61:1a:c1:32:e3:18:79:39:62: d6:4f:5f:72 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUB8zU/ZFQ/O2MQTOfGDPzWNSjts8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDIwMTQwNDBaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQDMzODBiZWU5YTQ5ZDQwMjdjMTJmMDkxMDhmZGJlZGZlMzBmYjQ1NmUzYzlh YTE3YWY1ODc3MzY1MmQ5ZGNiMjQxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANjfDCPt0wZ8FVjZcM04k0cbtQ4J7fiz+Dv0ZTdX+DBxmt1cvtCxJ/hL3Jls /3FqjuZq9H4S/YWfm+++VvIaO721V11X+STZOru+yk6gf+0J8+bEqRhfAx+ciMA3 taokA1ySV/Ir0yuO2jO1xircnnIY+dcBJvkeqywfG2hK7zRGGYK9aJpPHslUAmsj BxD9U6ynzf7iuFlBxPbNRvpxP0VYmz5FT21mVzj6P9egwzRhI0rIc9rltn5iSvcw Xj4HiqPRGEVoOpL1X9ZAhX/xfh+en01clBtB1g9Dm4MXIADmQalw2p8OkH1YKcQt Jd/0YfFQph8OUlTv5WQOwlTsz2kCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQjPMXm LDtzxAKW5v6QpBdtXUWVCTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv NTQ1MTlmY2QtNDY1NS00MTQ4LTlkN2QtOTEzYjBjMGNmZTAzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8eQ MA0GCSqGSIb3DQEBCwUAA4IBAQAmXRCBown2kHczbQN0eoo/BU3V/CyBAbnbMhe4 kFXCFcdZxDpUVYLWkv6JTk75tcG11edW3S0fOW2D/dcBpu8rkOFy3eT+rGR7VeOs mlwa0CPpdoiJUB70Y0x+Ot05AW+TS5fhWaaIRcDGkAmRtAMCrKp1w58B0/jQwVrQ Ven3nl4+x5SE0brLK4+M1ghWAj6SLby9FfUq8rynzqlXGCtUZBfHDcMkgmttg+GP CSBfVslmB6XLJwvCGjbyjPa1xuaUAB7Oycbk3yncPAtswI6fa75i+5wJbwWf5R1i eH+G1mqvTM1gnV2dr2CxlP2kc75BOodhGsEy4xh5OWLWT19y -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:01 2025 by rpki-client