This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b2738aa7-be3c-48f9-8b59-e5db58d9244b.roa File: b2738aa7-be3c-48f9-8b59-e5db58d9244b.roa (raw, json) Hash identifier: lOBPvBWOOCBmaYlkRWtIqSayU4cVxDA/sJdPzPK8v4o= Subject key identifier: 0F:C0:9F:F9:D6:53:DD:8B:DB:74:BD:C2:EB:F3:66:44:5F:91:56:43 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 6696E16337D74B443D9463D34B5F77E51B599A01 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b2738aa7-be3c-48f9-8b59-e5db58d9244b.roa Signing time: Tue 02 Dec 2025 01:40:24 +0000 ROA not before: Tue 02 Dec 2025 01:40:24 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc7:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:96:e1:63:37:d7:4b:44:3d:94:63:d3:4b:5f:77:e5:1b:59:9a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 2 01:40:24 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=0bfee4e386ff11966541e99455ce750fa1d507a3fd5c0d6ab52ac7529b0450bd, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:84:5f:f2:da:f9:3a:b7:a4:9e:6a:e1:70:2c: ca:d8:da:e1:99:5d:2e:90:f3:fa:38:6d:31:61:01: c9:01:03:d2:e5:f8:0c:6b:2c:4e:49:80:a6:71:d2: f0:4d:b9:5b:52:75:f9:b5:6e:3e:b9:ac:61:71:b6: 9b:be:75:eb:ba:3d:6a:e2:33:08:60:93:e1:98:be: 09:f7:8e:40:b6:29:e2:56:c7:56:b1:3c:64:9a:70: 72:59:4e:a8:63:11:61:06:84:0f:20:2b:4f:5e:93: 5f:e5:39:98:5a:40:e4:0f:52:ef:20:91:eb:47:50: ec:6e:57:d9:7b:8e:48:c5:01:51:c7:d0:ed:3e:11: 9c:62:04:05:7a:e0:d0:55:cb:5c:10:13:43:a4:ff: f7:9d:d0:a3:ee:ea:09:48:7b:16:07:0b:4d:2f:00: b1:34:d9:d3:2b:6a:4a:7e:5a:d9:27:13:68:aa:b9: 7a:f2:3b:3e:d6:48:11:56:0a:8d:4d:29:0a:46:93: e4:b7:95:b9:92:c9:18:9d:ab:9d:1f:5a:18:a5:c3: d3:52:f4:7b:b5:26:57:2c:6e:7f:73:34:c5:0a:15: 88:a6:b7:25:b5:f9:5e:d8:61:33:37:98:c5:e7:d0: 6d:bd:ba:d2:77:9a:ca:d3:ac:ad:dd:22:c0:dc:de: 56:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C0:9F:F9:D6:53:DD:8B:DB:74:BD:C2:EB:F3:66:44:5F:91:56:43 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/b2738aa7-be3c-48f9-8b59-e5db58d9244b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc7:6000::/36 Signature Algorithm: sha256WithRSAEncryption bd:cd:44:3c:63:bd:6a:ae:65:d3:7e:b6:c6:b9:57:51:4a:8d: 2e:3a:d0:6e:3f:94:f5:5b:1d:2b:73:bf:d4:93:57:d4:d1:37: fa:72:5c:8f:c0:f2:cf:8c:28:ee:9b:eb:27:96:0e:73:22:e8: 4a:a6:a7:e7:21:9c:f5:b6:31:f0:65:60:8d:91:36:35:1c:0c: 32:39:ac:4b:c4:fc:01:11:d7:09:f3:2f:1e:71:ab:da:12:d2: ae:c9:1a:c1:f2:ce:73:27:da:57:c3:8b:c5:ad:e0:06:46:09: a9:4e:3c:d7:ab:a4:0d:21:88:d3:a0:34:f6:d9:b1:9d:18:f4: 24:7b:c1:b9:63:4a:f3:ff:90:65:b2:3f:68:22:72:7c:49:92: 08:42:af:4b:45:a7:13:25:4f:3a:ff:c7:b9:c0:c1:7f:35:2a: c2:aa:53:fc:00:63:6b:3b:fd:51:59:f2:e7:8e:22:4e:3a:70: 15:17:a4:38:f7:c4:bd:61:87:17:8c:89:46:89:03:72:39:a8: a0:24:19:04:1d:29:92:a9:79:4a:51:78:54:4b:a5:ef:17:7b: 98:0f:b4:fc:27:a1:2d:42:33:85:6b:da:26:b2:d7:bc:42:b5: 3b:a3:60:05:f3:20:92:e4:56:60:d2:a4:34:28:fb:d4:d9:54: f7:2f:bc:29 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUZpbhYzfXS0Q9lGPTS1935RtZmgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDIwMTQwMjRaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQDBiZmVlNGUzODZmZjExOTY2NTQxZTk5NDU1Y2U3NTBmYTFkNTA3YTNmZDVj MGQ2YWI1MmFjNzUyOWIwNDUwYmQxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOEX/La+Tq3pJ5q4XAsytja4ZldLpDz+jhtMWEByQED0uX4DGssTkmApnHS 8E25W1J1+bVuPrmsYXG2m75167o9auIzCGCT4Zi+CfeOQLYp4lbHVrE8ZJpwcllO qGMRYQaEDyArT16TX+U5mFpA5A9S7yCR60dQ7G5X2XuOSMUBUcfQ7T4RnGIEBXrg 0FXLXBATQ6T/953Qo+7qCUh7FgcLTS8AsTTZ0ytqSn5a2ScTaKq5evI7PtZIEVYK jU0pCkaT5LeVuZLJGJ2rnR9aGKXD01L0e7UmVyxuf3M0xQoViKa3JbX5XthhMzeY xefQbb260neaytOsrd0iwNzeVn0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQPwJ/5 1lPdi9t0vcLr82ZEX5FWQzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv YjI3MzhhYTctYmUzYy00OGY5LThiNTktZTVkYjU4ZDkyNDRiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8dg MA0GCSqGSIb3DQEBCwUAA4IBAQC9zUQ8Y71qrmXTfrbGuVdRSo0uOtBuP5T1Wx0r c7/Uk1fU0Tf6clyPwPLPjCjum+snlg5zIuhKpqfnIZz1tjHwZWCNkTY1HAwyOaxL xPwBEdcJ8y8ecavaEtKuyRrB8s5zJ9pXw4vFreAGRgmpTjzXq6QNIYjToDT22bGd GPQke8G5Y0rz/5Blsj9oInJ8SZIIQq9LRacTJU86/8e5wMF/NSrCqlP8AGNrO/1R WfLnjiJOOnAVF6Q498S9YYcXjIlGiQNyOaigJBkEHSmSqXlKUXhUS6XvF3uYD7T8 J6EtQjOFa9omste8QrU7o2AF8yCS5FZg0qQ0KPvU2VT3L7wp -----END CERTIFICATE-----Generated at Sun Dec 7 01:07:28 2025 by rpki-client