This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7cf0ad47-8bb3-480b-be13-5f3302af8307.roa File: 7cf0ad47-8bb3-480b-be13-5f3302af8307.roa (raw, json) Hash identifier: t2ZFk90J8X187m7rVE1fH5xTh1pPjI7rf5m48m1lki0= Subject key identifier: 87:C3:38:65:1A:B8:32:A6:EE:20:25:2F:13:BD:47:5F:8C:7A:30:00 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 475A8580F403A3959461BA4ECB2A66ED1171A3E5 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7cf0ad47-8bb3-480b-be13-5f3302af8307.roa Signing time: Tue 02 Dec 2025 01:40:26 +0000 ROA not before: Tue 02 Dec 2025 01:40:26 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc7:e000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:5a:85:80:f4:03:a3:95:94:61:ba:4e:cb:2a:66:ed:11:71:a3:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 2 01:40:26 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=e24c088d857c626c545721548f73488c33caf88d74a3ff2fe3ffa1793f0022da, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d3:55:7d:57:31:c3:84:da:e9:c5:e4:e5:05: ef:88:2d:22:6b:99:26:cc:6e:cd:04:0e:b2:1d:96: ae:5a:33:31:6d:ec:65:b2:3b:1d:17:62:e1:41:c3: 16:49:94:46:3c:8b:4d:40:d9:f8:73:23:40:af:0d: b8:b3:bb:72:51:c2:fb:ba:20:46:5e:70:81:1a:92: 39:ca:7f:e7:52:7c:57:59:75:0d:48:4c:7a:75:6b: d1:5e:9f:fb:fb:df:64:03:52:f4:54:f2:e1:70:34: ab:62:2e:26:57:27:18:db:c2:16:83:33:ef:b3:90: 33:ad:98:9a:8b:f8:b4:2e:0f:82:c0:af:f2:4b:22: ca:58:81:86:99:df:a5:ea:3e:1b:7b:5b:46:15:d4: 13:7f:7a:8c:1c:c1:21:7f:fd:79:49:40:cb:c9:5e: 93:58:08:2d:93:ab:2d:d8:5c:2d:56:d1:f3:b3:89: ca:66:81:71:1f:ed:90:00:08:6a:d6:fa:a7:d5:e2: 86:45:20:bb:17:1b:e6:48:41:9b:9e:92:57:ad:3f: cb:ee:9f:6f:70:02:59:a3:7c:86:a7:3f:f1:7e:f4: d1:f1:e0:8e:a3:09:3b:11:30:b6:32:d8:a1:38:dc: 3a:c2:a7:e0:57:c3:52:95:e8:78:e6:59:b6:fd:a3: 8a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C3:38:65:1A:B8:32:A6:EE:20:25:2F:13:BD:47:5F:8C:7A:30:00 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/7cf0ad47-8bb3-480b-be13-5f3302af8307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc7:e000::/36 Signature Algorithm: sha256WithRSAEncryption b4:c6:85:fb:1a:1a:e7:de:6a:01:bd:c2:24:49:13:59:9a:ea: a5:c9:ec:09:76:c1:08:e8:fc:61:1f:5d:93:bf:d7:45:8b:1f: b6:db:be:ed:a8:2b:cb:a1:54:17:29:d4:15:f6:73:27:1f:83: 4e:28:fd:ac:45:1d:60:7e:ce:c4:69:99:48:09:60:79:7b:d2: be:8b:13:25:a1:25:0f:78:18:b0:62:c6:db:84:bf:82:ad:15: fb:42:6f:9a:08:85:98:8c:48:5f:d1:b4:27:5a:ef:ca:78:b8: 58:11:42:84:90:6f:87:3b:e9:0d:c9:5c:e7:a2:a1:33:b7:89: 23:a7:55:9e:5e:04:56:0b:83:61:61:f4:9d:34:ba:03:dc:97: 85:34:f9:cb:4f:a9:f8:e7:9d:06:a4:cf:8c:c7:de:7b:a4:86: 5f:79:4d:67:8b:98:2e:e3:f1:99:b9:86:75:f7:61:21:4f:cf: c0:ee:39:b1:f3:86:07:19:49:72:10:91:ad:a0:0a:04:d1:49: e8:6d:5e:dc:92:72:ec:91:b9:8c:ff:5a:cf:23:db:a7:93:b9: 72:63:04:bd:2c:c3:c3:cc:8b:e4:2a:f4:8b:12:50:12:6a:96: d4:8e:05:59:ce:0a:78:23:e6:71:bd:16:16:31:ab:a1:9c:0f: 08:58:ad:40 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUR1qFgPQDo5WUYbpOyypm7RFxo+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDIwMTQwMjZaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQGUyNGMwODhkODU3YzYyNmM1NDU3MjE1NDhmNzM0ODhjMzNjYWY4OGQ3NGEz ZmYyZmUzZmZhMTc5M2YwMDIyZGExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJTTVX1XMcOE2unF5OUF74gtImuZJsxuzQQOsh2WrlozMW3sZbI7HRdi4UHD FkmURjyLTUDZ+HMjQK8NuLO7clHC+7ogRl5wgRqSOcp/51J8V1l1DUhMenVr0V6f +/vfZANS9FTy4XA0q2IuJlcnGNvCFoMz77OQM62Ymov4tC4PgsCv8ksiyliBhpnf peo+G3tbRhXUE396jBzBIX/9eUlAy8lek1gILZOrLdhcLVbR87OJymaBcR/tkAAI atb6p9XihkUguxcb5khBm56SV60/y+6fb3ACWaN8hqc/8X700fHgjqMJOxEwtjLY oTjcOsKn4FfDUpXoeOZZtv2jih8CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSHwzhl Grgypu4gJS8TvUdfjHowADAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv N2NmMGFkNDctOGJiMy00ODBiLWJlMTMtNWYzMzAyYWY4MzA3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8fg MA0GCSqGSIb3DQEBCwUAA4IBAQC0xoX7Ghrn3moBvcIkSRNZmuqlyewJdsEI6Pxh H12Tv9dFix+2277tqCvLoVQXKdQV9nMnH4NOKP2sRR1gfs7EaZlICWB5e9K+ixMl oSUPeBiwYsbbhL+CrRX7Qm+aCIWYjEhf0bQnWu/KeLhYEUKEkG+HO+kNyVznoqEz t4kjp1WeXgRWC4NhYfSdNLoD3JeFNPnLT6n4550GpM+Mx957pIZfeU1ni5gu4/GZ uYZ192EhT8/A7jmx84YHGUlyEJGtoAoE0UnobV7cknLskbmM/1rPI9unk7lyYwS9 LMPDzIvkKvSLElASapbUjgVZzgp4I+ZxvRYWMauhnA8IWK1A -----END CERTIFICATE-----Generated at Sat Dec 6 09:53:55 2025 by rpki-client