This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6b161c7d-a2d5-44f9-95b6-bbf915698d48.roa File: 6b161c7d-a2d5-44f9-95b6-bbf915698d48.roa (raw, json) Hash identifier: weKR/XEHXnd96XPlBTlm+Ird8BmicUel4j1iSykA8rI= Subject key identifier: 7A:CD:61:35:B3:FA:2C:39:E6:67:C0:8A:2B:29:A6:EC:21:C5:95:5A Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 06EBE52C3A40F75EF2CD5CF9CD6825FF324F846C Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6b161c7d-a2d5-44f9-95b6-bbf915698d48.roa Signing time: Tue 02 Dec 2025 01:40:05 +0000 ROA not before: Tue 02 Dec 2025 01:40:05 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc7:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:eb:e5:2c:3a:40:f7:5e:f2:cd:5c:f9:cd:68:25:ff:32:4f:84:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 2 01:40:05 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=bb98c5f204c164a0f48ba0aae8dbb9f41a717873fc01b76a7fb7c90b38727796, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ea:ff:52:07:be:f6:c2:03:d5:ab:f4:15:ab: 3d:b6:32:9f:db:c0:6e:2d:30:c7:27:5e:d6:a0:ef: e2:d1:5c:98:e1:6d:e4:36:f2:58:77:0c:7f:15:81: 74:07:50:f5:f7:a7:8c:1f:21:2b:e8:1f:10:88:38: 4d:9e:dd:3f:ac:70:e7:7b:a7:cd:45:52:bd:13:0d: ed:0e:3a:09:d8:33:f8:23:43:58:fb:7b:1a:8d:22: 17:da:23:05:6a:cb:7f:ac:c9:88:a6:71:18:19:ef: d5:ad:1f:12:e5:7f:cf:22:6b:9d:30:6e:9e:93:3e: 71:e0:d5:d3:33:c2:36:bd:ce:af:cf:0a:75:b1:f1: 52:a3:ed:14:31:91:be:6d:77:16:69:50:25:03:f5: 31:74:3e:83:3f:a2:d9:86:a2:a9:af:a4:e0:83:ba: bd:39:62:21:9a:2b:37:97:0c:30:98:53:46:8f:b1: 6a:24:db:69:9f:2c:32:8a:8b:ad:1b:02:c0:5d:b2: a5:9c:a1:e2:d0:dc:37:6c:a2:75:f8:c5:81:15:c0: 93:d4:72:d0:78:cd:60:e7:4b:5d:f3:8e:ad:cd:61: bd:91:1b:f4:02:89:59:99:63:f4:92:ea:8d:58:46: 04:81:b9:92:6d:3d:09:55:bc:55:99:d3:18:6b:c0: 4d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CD:61:35:B3:FA:2C:39:E6:67:C0:8A:2B:29:A6:EC:21:C5:95:5A X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/6b161c7d-a2d5-44f9-95b6-bbf915698d48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc7:f000::/36 Signature Algorithm: sha256WithRSAEncryption 44:04:6e:26:d5:4e:b6:1f:27:bd:98:b6:ef:57:c5:cd:4f:aa: 8a:6e:d8:34:98:ad:3d:38:fe:83:66:29:af:cb:78:1b:ff:22: 61:17:da:9f:bf:6f:a2:64:e3:43:55:6c:43:a8:56:1c:87:0f: c4:c4:50:ac:26:33:b0:d3:be:b6:2c:33:1a:60:be:73:e2:ca: 00:2d:e8:48:21:0c:3f:2a:99:9f:1e:57:ec:cf:87:c4:d1:01: 1d:78:5b:c2:b0:ec:63:9c:52:7d:96:41:92:88:2e:c8:63:fd: a0:a7:22:91:db:51:9d:b3:82:f1:92:3f:4c:a7:d3:e8:4a:78: d8:d4:ca:6d:b3:a5:01:19:4f:d2:dc:31:f9:bd:03:0b:f2:c1: c7:ed:77:83:fc:39:5e:12:8d:22:0f:f9:43:21:84:67:6a:24: f7:f7:ec:17:50:52:65:65:25:22:76:14:4a:dc:b4:db:39:0f: 7c:cd:bf:e6:9e:d9:71:b5:48:25:43:c6:01:53:86:1c:fe:57: 9b:5b:4e:94:d1:c9:8d:55:4c:51:b1:7f:1f:84:1b:b2:21:39: 30:c8:dc:20:56:47:a9:8f:ef:81:3c:f3:82:b4:6f:27:96:1f: a4:a2:98:e3:a2:b4:a9:d8:2b:70:8f:b0:7b:05:8e:dc:fd:fc: ba:9a:26:55 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUBuvlLDpA917yzVz5zWgl/zJPhGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDIwMTQwMDVaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQGJiOThjNWYyMDRjMTY0YTBmNDhiYTBhYWU4ZGJiOWY0MWE3MTc4NzNmYzAx Yjc2YTdmYjdjOTBiMzg3Mjc3OTYxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ3q/1IHvvbCA9Wr9BWrPbYyn9vAbi0wxyde1qDv4tFcmOFt5DbyWHcMfxWB dAdQ9fenjB8hK+gfEIg4TZ7dP6xw53unzUVSvRMN7Q46Cdgz+CNDWPt7Go0iF9oj BWrLf6zJiKZxGBnv1a0fEuV/zyJrnTBunpM+ceDV0zPCNr3Or88KdbHxUqPtFDGR vm13FmlQJQP1MXQ+gz+i2Yaiqa+k4IO6vTliIZorN5cMMJhTRo+xaiTbaZ8sMoqL rRsCwF2ypZyh4tDcN2yidfjFgRXAk9Ry0HjNYOdLXfOOrc1hvZEb9AKJWZlj9JLq jVhGBIG5km09CVW8VZnTGGvATT8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR6zWE1 s/osOeZnwIorKabsIcWVWjAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv NmIxNjFjN2QtYTJkNS00NGY5LTk1YjYtYmJmOTE1Njk4ZDQ4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8fw MA0GCSqGSIb3DQEBCwUAA4IBAQBEBG4m1U62Hye9mLbvV8XNT6qKbtg0mK09OP6D Zimvy3gb/yJhF9qfv2+iZONDVWxDqFYchw/ExFCsJjOw0762LDMaYL5z4soALehI IQw/KpmfHlfsz4fE0QEdeFvCsOxjnFJ9lkGSiC7IY/2gpyKR21Gds4Lxkj9Mp9Po SnjY1Mpts6UBGU/S3DH5vQML8sHH7XeD/DleEo0iD/lDIYRnaiT39+wXUFJlZSUi dhRK3LTbOQ98zb/mntlxtUglQ8YBU4Yc/lebW06U0cmNVUxRsX8fhBuyITkwyNwg Vkepj++BPPOCtG8nlh+kopjjorSp2Ctwj7B7BY7c/fy6miZV -----END CERTIFICATE-----Generated at Sat Dec 6 11:44:47 2025 by rpki-client