This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/74f381b2-46ae-4e78-8d95-25730216e683.roa File: 74f381b2-46ae-4e78-8d95-25730216e683.roa (raw, json) Hash identifier: LFN+sVzNyB7YvQEgMJg1oe4q/UBDYnFLdWvT810cPwA= Subject key identifier: 23:5E:A4:86:D5:87:64:15:6D:DC:1A:34:41:70:FA:ED:37:D9:FD:E6 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 778689451D661F3A9E7FD690913187B529B3DABE Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/74f381b2-46ae-4e78-8d95-25730216e683.roa Signing time: Sat 06 Dec 2025 00:30:12 +0000 ROA not before: Sat 06 Dec 2025 00:30:12 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc2:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:86:89:45:1d:66:1f:3a:9e:7f:d6:90:91:31:87:b5:29:b3:da:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 6 00:30:12 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=770005ad0468a1f043cb4861844e3beebadfb6000afaa0ecc182bc667c595822, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ba:41:83:3b:5e:0b:c3:9f:a7:dd:3a:62:17: ee:7c:9a:f0:99:1f:cb:ad:62:bf:45:e3:cf:8e:07: 12:79:ba:67:c7:ef:d0:2a:61:cb:57:0a:1a:1e:1f: 5a:8d:f1:24:ed:ac:75:10:21:32:ca:8b:59:df:a3: 2b:7f:70:41:2e:1c:02:42:0c:94:cc:f9:ed:46:93: f0:20:fc:eb:42:9e:8f:3c:85:b7:aa:d6:e5:85:c4: 9e:6a:12:ff:9b:59:e8:0d:e6:d3:14:3b:f1:c1:95: ad:8a:a1:a5:5e:17:5e:6e:65:c3:e0:64:5b:7e:d5: 2c:c0:d9:4c:5e:7a:f6:6e:6c:fe:40:5b:50:2f:55: 03:3f:17:9f:6f:c2:00:d1:23:ea:a4:f9:3a:60:c4: 4d:8c:41:d7:6c:de:c1:30:76:ab:0e:4f:78:30:7f: c8:79:eb:3b:cf:58:ca:a0:54:6a:32:6c:6c:f8:bc: 0a:df:79:dd:52:6a:c6:ee:6d:9a:62:23:d8:d3:c5: 23:96:80:3c:a8:3d:0c:85:6b:ce:2b:c2:06:1f:66: d4:d1:d8:f0:88:a6:4d:e6:71:d2:2b:f3:bd:1a:16: 3e:76:ab:2e:e3:f3:56:af:98:11:82:51:d3:f4:44: b4:bb:6c:22:c5:b2:f5:4d:30:91:9d:78:94:84:58: 6e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5E:A4:86:D5:87:64:15:6D:DC:1A:34:41:70:FA:ED:37:D9:FD:E6 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/74f381b2-46ae-4e78-8d95-25730216e683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc2:8000::/36 Signature Algorithm: sha256WithRSAEncryption 4a:36:15:4d:ba:8e:7b:82:59:bc:3e:b2:cd:f7:a0:88:f1:78: 82:da:65:9a:05:a1:8b:44:3c:ce:a5:14:9f:2c:ab:e6:1e:11: da:92:21:07:b2:9e:c6:2b:33:62:76:1f:db:61:5a:86:0d:91: 0c:3e:a4:aa:a3:24:3c:48:0c:1c:90:cb:75:e8:62:fa:c7:8b: 90:15:14:7d:9c:7a:26:ad:db:a8:4b:67:f4:ac:08:42:5d:c4: bb:02:ed:b3:f5:0b:ac:09:0c:14:eb:6f:d8:9e:ff:97:b8:52: ae:52:96:86:00:2b:ec:c6:c4:1a:16:55:0f:f6:32:bc:8f:72: 1c:6e:04:88:22:c1:1c:e6:99:03:ec:51:b5:b6:86:ae:05:c5: b7:a6:af:5c:9b:c8:f3:2b:c7:2f:aa:b7:55:bb:23:f8:f4:8f: 27:85:f0:0e:01:34:ab:f5:04:90:21:d1:76:ce:04:12:c1:7b: 0a:ea:55:85:d0:ea:2e:ce:aa:34:77:05:7d:c0:3b:8f:b4:5f: c1:81:9f:60:c7:c9:34:c4:ae:03:45:b3:22:06:77:de:9b:97: dc:1c:7e:9d:36:83:a4:04:45:bf:aa:20:50:bd:43:c7:07:11: 3c:fe:a7:90:8e:5d:3f:67:98:ed:19:73:9e:1e:af:28:ca:15: ae:bc:a4:06 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUd4aJRR1mHzqef9aQkTGHtSmz2r4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDYwMDMwMTJaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQDc3MDAwNWFkMDQ2OGExZjA0M2NiNDg2MTg0NGUzYmVlYmFkZmI2MDAwYWZh YTBlY2MxODJiYzY2N2M1OTU4MjIxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL66QYM7XgvDn6fdOmIX7nya8Jkfy61iv0Xjz44HEnm6Z8fv0Cphy1cKGh4f Wo3xJO2sdRAhMsqLWd+jK39wQS4cAkIMlMz57UaT8CD860KejzyFt6rW5YXEnmoS /5tZ6A3m0xQ78cGVrYqhpV4XXm5lw+BkW37VLMDZTF569m5s/kBbUC9VAz8Xn2/C ANEj6qT5OmDETYxB12zewTB2qw5PeDB/yHnrO89YyqBUajJsbPi8Ct953VJqxu5t mmIj2NPFI5aAPKg9DIVrzivCBh9m1NHY8IimTeZx0ivzvRoWPnarLuPzVq+YEYJR 0/REtLtsIsWy9U0wkZ14lIRYbm8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQjXqSG 1YdkFW3cGjRBcPrtN9n95jAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv NzRmMzgxYjItNDZhZS00ZTc4LThkOTUtMjU3MzAyMTZlNjgzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8KA MA0GCSqGSIb3DQEBCwUAA4IBAQBKNhVNuo57glm8PrLN96CI8XiC2mWaBaGLRDzO pRSfLKvmHhHakiEHsp7GKzNidh/bYVqGDZEMPqSqoyQ8SAwckMt16GL6x4uQFRR9 nHomrduoS2f0rAhCXcS7Au2z9QusCQwU62/Ynv+XuFKuUpaGACvsxsQaFlUP9jK8 j3IcbgSIIsEc5pkD7FG1toauBcW3pq9cm8jzK8cvqrdVuyP49I8nhfAOATSr9QSQ IdF2zgQSwXsK6lWF0Oouzqo0dwV9wDuPtF/BgZ9gx8k0xK4DRbMiBnfem5fcHH6d NoOkBEW/qiBQvUPHBxE8/qeQjl0/Z5jtGXOeHq8oyhWuvKQG -----END CERTIFICATE-----Generated at Sat Dec 6 09:54:13 2025 by rpki-client