This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/695b2c0d-a8e0-45bc-878b-176c66a934f6.roa File: 695b2c0d-a8e0-45bc-878b-176c66a934f6.roa (raw, json) Hash identifier: PZWByaGREazsKA2LyLsCSntkMepUKHDXE1RzXq1G8L8= Subject key identifier: 11:BC:90:FC:B4:C8:30:95:89:FF:29:F5:93:BA:ED:B9:A4:9A:71:69 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 4A6519B52EA3AA64155E3A91F4A9EFCC451532F3 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/695b2c0d-a8e0-45bc-878b-176c66a934f6.roa Signing time: Tue 02 Dec 2025 01:40:03 +0000 ROA not before: Tue 02 Dec 2025 01:40:03 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc7:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:65:19:b5:2e:a3:aa:64:15:5e:3a:91:f4:a9:ef:cc:45:15:32:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 2 01:40:03 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=e9fbd48dfd6b79c5f4479498ab92611a7bc9a10c7635161ab93bd88736d3970e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4b:d1:cf:30:91:30:5c:a8:fc:e8:49:36:c0: 90:94:70:57:9d:9d:84:1d:6e:b4:ed:8b:ee:1f:eb: e2:32:5b:f2:18:09:f2:24:9a:ff:cf:95:25:ff:1c: 65:77:82:6c:ef:9d:a9:77:a4:25:75:46:e9:ce:04: 58:d4:28:62:75:2f:ae:7b:c7:63:99:d1:89:e2:2a: 3e:eb:c3:4c:a7:11:b1:03:1e:ad:d7:2b:50:c4:f8: 94:af:26:d8:b5:e1:47:35:67:69:f7:24:16:3b:d5: 32:c7:ef:39:87:f0:b5:6d:1c:12:79:8c:6c:35:10: b1:06:cd:a3:05:15:30:b3:6b:25:22:fe:05:25:20: d1:4b:82:79:70:e6:da:a1:fc:19:ac:00:93:90:2a: fa:b1:b7:b1:cb:3b:4e:a0:3b:6c:e2:66:61:31:ce: ce:f4:82:ec:b1:e0:e8:4e:80:9d:35:84:41:0d:ac: 12:b7:e4:10:83:f0:cb:8d:77:a8:fb:9a:ca:b0:30: 75:4b:95:c7:2a:68:be:65:5b:b7:39:59:de:fc:ae: db:1b:3f:e6:7d:b3:8e:c0:01:af:4a:07:f1:04:45: f6:fa:4f:54:6e:34:99:9f:7d:20:97:ea:c0:c5:f2: 28:9e:94:20:c4:4c:74:ea:d7:a1:9f:ea:5c:13:31: 59:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BC:90:FC:B4:C8:30:95:89:FF:29:F5:93:BA:ED:B9:A4:9A:71:69 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/695b2c0d-a8e0-45bc-878b-176c66a934f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc7:28c0::/48 Signature Algorithm: sha256WithRSAEncryption 01:a7:78:4b:56:0b:02:23:d6:a0:40:a8:2d:69:e1:2b:5c:ad: 16:b5:49:cf:99:0f:3e:e1:f0:e0:e1:cd:2a:d4:8d:04:66:54: 88:14:a3:15:6e:89:06:80:a9:aa:98:e7:b3:9c:a3:cb:99:7c: 64:f6:56:e7:00:9e:d6:16:79:aa:c8:98:a6:e8:f0:33:22:a7: da:ea:0b:41:0d:be:1d:b5:2f:86:17:14:81:f4:ec:15:82:19: b7:83:e0:5e:11:ba:b3:d3:78:fe:6d:00:13:25:9c:94:7e:b1: 74:db:e3:6c:f9:92:f1:96:33:a4:78:45:ff:26:8d:80:3b:8d: 12:4a:ce:bc:f5:41:c0:66:73:f9:b0:f0:f0:78:26:83:4e:78: ff:7d:5f:0a:d2:28:2a:d5:df:c5:bb:69:19:47:4f:5b:f7:b6: 73:dd:13:f6:0e:36:6d:d5:94:ae:ec:47:e7:19:d8:98:1f:c7: be:40:89:95:b3:c3:d5:34:d9:71:38:03:e9:4e:ff:4a:35:1b: 7d:da:f2:2b:6c:ca:5f:f2:f3:dc:42:f0:73:4f:a1:ad:bc:26: f8:02:ff:d5:34:b6:13:15:70:88:d2:99:c1:a4:14:24:e2:dd: 5d:9c:bc:f7:0a:e7:72:42:33:f2:4e:5a:64:9d:a1:4e:a6:74: a4:42:fe:7e -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUSmUZtS6jqmQVXjqR9KnvzEUVMvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDIwMTQwMDNaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQGU5ZmJkNDhkZmQ2Yjc5YzVmNDQ3OTQ5OGFiOTI2MTFhN2JjOWExMGM3NjM1 MTYxYWI5M2JkODg3MzZkMzk3MGUxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO9L0c8wkTBcqPzoSTbAkJRwV52dhB1utO2L7h/r4jJb8hgJ8iSa/8+VJf8c ZXeCbO+dqXekJXVG6c4EWNQoYnUvrnvHY5nRieIqPuvDTKcRsQMerdcrUMT4lK8m 2LXhRzVnafckFjvVMsfvOYfwtW0cEnmMbDUQsQbNowUVMLNrJSL+BSUg0UuCeXDm 2qH8GawAk5Aq+rG3scs7TqA7bOJmYTHOzvSC7LHg6E6AnTWEQQ2sErfkEIPwy413 qPuayrAwdUuVxypovmVbtzlZ3vyu2xs/5n2zjsABr0oH8QRF9vpPVG40mZ99IJfq wMXyKJ6UIMRMdOrXoZ/qXBMxWQ8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQRvJD8 tMgwlYn/KfWTuu25pJpxaTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv Njk1YjJjMGQtYThlMC00NWJjLTg3OGItMTc2YzY2YTkzNGY2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABP8co wDANBgkqhkiG9w0BAQsFAAOCAQEAAad4S1YLAiPWoECoLWnhK1ytFrVJz5kPPuHw 4OHNKtSNBGZUiBSjFW6JBoCpqpjns5yjy5l8ZPZW5wCe1hZ5qsiYpujwMyKn2uoL QQ2+HbUvhhcUgfTsFYIZt4PgXhG6s9N4/m0AEyWclH6xdNvjbPmS8ZYzpHhF/yaN gDuNEkrOvPVBwGZz+bDw8Hgmg054/31fCtIoKtXfxbtpGUdPW/e2c90T9g42bdWU ruxH5xnYmB/HvkCJlbPD1TTZcTgD6U7/SjUbfdryK2zKX/Lz3ELwc0+hrbwm+AL/ 1TS2ExVwiNKZwaQUJOLdXZy89wrnckIz8k5aZJ2hTqZ0pEL+fg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:44:06 2025 by rpki-client