This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a7fd28cc-be6c-4ec2-845a-c1595c2cfd21.roa File: a7fd28cc-be6c-4ec2-845a-c1595c2cfd21.roa (raw, json) Hash identifier: NoGvW8bFZp5fLQcpJh9bNxF+EwYwhSsBbn9zYqyJDzE= Subject key identifier: 2A:65:A4:F6:D4:1E:34:7A:5E:4B:DD:2B:4E:EA:B7:48:87:E8:4E:B0 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 75A3670DA606851DF3337E009F189DCAEB20E792 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a7fd28cc-be6c-4ec2-845a-c1595c2cfd21.roa Signing time: Tue 02 Dec 2025 01:30:11 +0000 ROA not before: Tue 02 Dec 2025 01:30:11 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc1:8400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a3:67:0d:a6:06:85:1d:f3:33:7e:00:9f:18:9d:ca:eb:20:e7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 2 01:30:11 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=27c24cea14de8271ca5b1030d11bc0f5c4d1be200ea67aa93d17a6216e59d510, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9a:8f:7c:ac:9b:58:f9:21:ad:95:ad:88:d5: 56:41:e9:d5:a2:c4:1e:24:29:b6:b8:0b:6e:37:a1: c1:85:26:c5:9b:23:7b:3c:42:b5:5a:1b:f7:9b:7a: a4:83:40:a3:00:48:5f:70:ae:ff:dc:34:ae:9b:2a: c8:aa:51:13:ac:15:9f:b8:21:7c:90:6d:1b:03:a5: 75:b7:eb:c3:9b:35:e2:38:3d:b8:96:cc:75:6f:79: ec:f8:4e:01:52:81:87:fe:7d:3e:e8:79:81:c6:a9: 97:d2:ff:71:b3:9b:dc:6a:cf:8e:60:8e:2c:c5:e3: ce:44:99:61:4b:84:0b:5d:1d:c7:49:b9:8c:41:b5: 1a:db:91:0c:26:37:17:25:b2:db:3a:0a:fe:8d:d7: d7:47:ca:42:3a:55:54:02:c0:4e:ab:80:f0:c1:a7: 7e:2d:1c:36:af:0f:4e:75:53:4b:3b:87:0f:21:e7: 4a:2d:a4:82:bd:3a:6c:9d:86:bf:89:34:c4:4f:dd: 56:07:d2:a0:fd:69:88:8b:bb:6c:5e:36:0f:62:b4: e3:1d:b9:d5:ee:45:4a:ad:b1:e1:10:ac:e8:d4:fd: 7a:ad:6c:29:d3:d7:78:7c:a8:a3:85:d7:1a:a6:fa: f2:f8:f5:28:91:e7:95:ef:d8:6e:f1:e7:3c:01:ca: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:65:A4:F6:D4:1E:34:7A:5E:4B:DD:2B:4E:EA:B7:48:87:E8:4E:B0 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a7fd28cc-be6c-4ec2-845a-c1595c2cfd21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc1:8400::/38 Signature Algorithm: sha256WithRSAEncryption 30:79:5a:54:d9:f5:9d:a9:84:e4:64:d0:d4:d1:c2:fc:14:b1: 8f:0a:4f:b6:a7:5b:34:62:0a:d5:cd:c5:b2:1d:bc:19:fc:bd: b0:7d:f2:6b:b4:fc:55:b8:f5:47:4e:17:d3:6f:68:90:b0:97: 1d:90:2e:cb:21:ed:1d:7a:cd:c7:27:68:80:fc:65:95:12:48: f2:3b:32:ac:13:58:d4:8c:17:c1:b8:cd:e8:4f:74:3b:ba:b5: 29:42:30:64:7c:d0:66:93:94:67:96:e6:c8:f4:69:c2:db:ae: 7a:4a:af:83:05:18:70:89:7c:81:e7:5e:62:b6:e3:14:0a:ec: 35:13:d7:9f:6a:ce:1e:ae:9b:24:a6:3c:2a:c2:1c:53:9e:63: c2:2d:e6:87:69:b3:60:89:cd:8f:cb:0b:b7:b9:76:87:e3:b6: d8:d3:5f:f8:9e:74:2a:cd:19:e7:db:64:0c:11:9c:e6:42:57: 98:1e:73:cc:b9:e0:d2:54:41:1a:63:5a:46:99:02:ff:33:e4: cd:f7:e2:1d:2e:10:f4:c0:75:bd:f7:cd:b0:06:28:3c:ac:43: e8:08:86:15:56:4d:4d:bc:f3:aa:7a:20:60:87:50:d1:45:31: f9:88:dd:6d:06:09:08:b4:39:6e:67:cf:02:27:71:db:1b:99: 2e:f0:9b:4e -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUdaNnDaYGhR3zM34Anxidyusg55IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDIwMTMwMTFaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQDI3YzI0Y2VhMTRkZTgyNzFjYTViMTAzMGQxMWJjMGY1YzRkMWJlMjAwZWE2 N2FhOTNkMTdhNjIxNmU1OWQ1MTAxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOmaj3ysm1j5Ia2VrYjVVkHp1aLEHiQptrgLbjehwYUmxZsjezxCtVob95t6 pINAowBIX3Cu/9w0rpsqyKpRE6wVn7ghfJBtGwOldbfrw5s14jg9uJbMdW957PhO AVKBh/59Puh5gcapl9L/cbOb3GrPjmCOLMXjzkSZYUuEC10dx0m5jEG1GtuRDCY3 FyWy2zoK/o3X10fKQjpVVALATquA8MGnfi0cNq8PTnVTSzuHDyHnSi2kgr06bJ2G v4k0xE/dVgfSoP1piIu7bF42D2K04x251e5FSq2x4RCs6NT9eq1sKdPXeHyoo4XX Gqb68vj1KJHnle/YbvHnPAHKX8UCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQqZaT2 1B40el5L3StO6rdIh+hOsDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv YTdmZDI4Y2MtYmU2Yy00ZWMyLTg0NWEtYzE1OTVjMmNmZDIxLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGAiABP8GE MA0GCSqGSIb3DQEBCwUAA4IBAQAweVpU2fWdqYTkZNDU0cL8FLGPCk+2p1s0YgrV zcWyHbwZ/L2wffJrtPxVuPVHThfTb2iQsJcdkC7LIe0des3HJ2iA/GWVEkjyOzKs E1jUjBfBuM3oT3Q7urUpQjBkfNBmk5RnlubI9GnC2656Sq+DBRhwiXyB515ituMU Cuw1E9efas4erpskpjwqwhxTnmPCLeaHabNgic2Pywu3uXaH47bY01/4nnQqzRnn 22QMEZzmQleYHnPMueDSVEEaY1pGmQL/M+TN9+IdLhD0wHW9982wBig8rEPoCIYV Vk1NvPOqeiBgh1DRRTH5iN1tBgkItDluZ88CJ3HbG5ku8JtO -----END CERTIFICATE-----Generated at Sat Dec 6 20:51:03 2025 by rpki-client