This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c5a8891f-2cfd-49db-84c7-7a149ce6f868.roa File: c5a8891f-2cfd-49db-84c7-7a149ce6f868.roa (raw, json) Hash identifier: vLp9lGr+BW21lwPd+bmV0SxYkb8D3pfeFkS9WbCsbnc= Subject key identifier: 3A:BF:31:A8:B0:A4:CE:2C:28:6A:2C:56:0C:02:33:86:CE:59:02:CE Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 79A2D2656709CD14AFB2B32D21C88EB9CD8DA7CB Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c5a8891f-2cfd-49db-84c7-7a149ce6f868.roa Signing time: Tue 02 Dec 2025 01:40:21 +0000 ROA not before: Tue 02 Dec 2025 01:40:21 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc7::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a2:d2:65:67:09:cd:14:af:b2:b3:2d:21:c8:8e:b9:cd:8d:a7:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 2 01:40:21 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=5d394a236e6ee6de09cb5c3a9b60cda9bf2e68b27113b31938e21b5cbbd9c444, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fa:66:3f:89:94:d7:37:ae:59:cc:c1:20:ce: 04:3b:17:9e:fe:50:01:fb:c2:c6:48:87:74:4e:7b: e4:e0:8c:fb:c5:03:96:50:c5:e8:09:3f:7a:49:76: f3:14:bd:51:f3:30:dd:ec:97:fb:32:8f:b2:c9:0a: 4c:2d:3a:4c:b2:4d:c7:7a:4a:a1:c7:b4:92:74:4d: b0:07:7e:61:e8:c4:f1:47:8b:17:7b:0d:1a:62:6d: be:99:c8:21:ff:01:84:de:a1:ca:54:25:d1:58:f7: a6:04:0d:dd:28:a2:58:d6:18:f6:fb:8e:ff:42:61: 0a:56:d5:48:af:f1:5d:7f:28:7b:ba:34:b8:23:83: 60:eb:ae:00:d4:36:ea:14:97:60:f1:96:27:74:0e: ed:d4:66:c2:bf:2d:3d:f5:95:00:47:c7:43:15:76: 91:b3:06:b0:a1:5c:72:96:b1:36:d8:0e:73:31:55: 51:cf:4c:2c:66:ec:06:3f:0a:ad:f7:fb:75:0f:96: 37:37:43:f7:e2:4c:84:29:71:35:6f:05:f1:06:f0: 36:07:c2:4e:53:8a:6f:63:27:c0:06:69:75:97:c0: 53:32:14:fc:06:27:3a:1d:a0:8b:b9:85:56:73:0e: 5f:86:0a:e3:ef:03:e8:a2:14:4f:e9:a3:70:29:2e: fe:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BF:31:A8:B0:A4:CE:2C:28:6A:2C:56:0C:02:33:86:CE:59:02:CE X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/c5a8891f-2cfd-49db-84c7-7a149ce6f868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc7::/36 Signature Algorithm: sha256WithRSAEncryption 46:30:84:c4:97:06:7d:76:9a:e1:f8:b1:24:e6:8e:2d:66:1b: bd:c9:d9:70:00:52:2f:80:53:3d:66:9d:53:e0:bb:8e:9e:11: 62:e2:4f:79:55:b2:5f:84:03:4f:97:cb:cb:80:1d:6c:50:f5: ae:30:84:4e:3f:f4:30:34:36:25:35:66:e6:79:51:42:bc:33: 1a:c5:b9:7b:e6:5f:83:02:6e:cd:45:77:c8:0b:ea:8e:01:05: e2:97:a7:71:e7:7c:c9:34:66:3f:76:a3:c9:59:0b:3e:41:d0: d0:cf:58:5f:2c:c7:2a:f2:69:f4:1c:cc:0e:f1:f6:97:5c:77: 3e:35:55:e2:45:9a:2d:73:18:96:05:46:35:62:cb:2d:08:1b: 6d:b5:97:11:83:f1:af:33:6a:ef:65:da:22:f4:a7:e7:a2:78: 86:b0:a4:f1:3b:20:80:e5:b5:e8:e2:03:ba:e5:46:c0:44:3d: 92:31:8b:79:c0:7a:86:03:4c:3f:74:f9:89:4d:69:2e:d6:0b: 98:89:a6:f7:00:82:75:98:88:44:1d:55:15:b8:8a:29:3a:25: 23:38:7a:ca:92:c7:ab:46:1a:60:15:c0:69:5e:b2:15:0d:5f: e4:8f:4b:2f:e5:7e:41:de:63:4b:6b:15:1d:5f:64:16:f1:2f: a8:60:c2:df -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUeaLSZWcJzRSvsrMtIciOuc2Np8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDIwMTQwMjFaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQDVkMzk0YTIzNmU2ZWU2ZGUwOWNiNWMzYTliNjBjZGE5YmYyZTY4YjI3MTEz YjMxOTM4ZTIxYjVjYmJkOWM0NDQxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOb6Zj+JlNc3rlnMwSDOBDsXnv5QAfvCxkiHdE575OCM+8UDllDF6Ak/ekl2 8xS9UfMw3eyX+zKPsskKTC06TLJNx3pKoce0knRNsAd+YejE8UeLF3sNGmJtvpnI If8BhN6hylQl0Vj3pgQN3SiiWNYY9vuO/0JhClbVSK/xXX8oe7o0uCODYOuuANQ2 6hSXYPGWJ3QO7dRmwr8tPfWVAEfHQxV2kbMGsKFccpaxNtgOczFVUc9MLGbsBj8K rff7dQ+WNzdD9+JMhClxNW8F8QbwNgfCTlOKb2MnwAZpdZfAUzIU/AYnOh2gi7mF VnMOX4YK4+8D6KIUT+mjcCku/usCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ6vzGo sKTOLChqLFYMAjOGzlkCzjAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv YzVhODg5MWYtMmNmZC00OWRiLTg0YzctN2ExNDljZTZmODY4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8cA MA0GCSqGSIb3DQEBCwUAA4IBAQBGMITElwZ9dprh+LEk5o4tZhu9ydlwAFIvgFM9 Zp1T4LuOnhFi4k95VbJfhANPl8vLgB1sUPWuMIROP/QwNDYlNWbmeVFCvDMaxbl7 5l+DAm7NRXfIC+qOAQXil6dx53zJNGY/dqPJWQs+QdDQz1hfLMcq8mn0HMwO8faX XHc+NVXiRZotcxiWBUY1YsstCBtttZcRg/GvM2rvZdoi9KfnoniGsKTxOyCA5bXo 4gO65UbARD2SMYt5wHqGA0w/dPmJTWku1guYiab3AIJ1mIhEHVUVuIopOiUjOHrK kserRhpgFcBpXrIVDV/kj0sv5X5B3mNLaxUdX2QW8S+oYMLf -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:11 2025 by rpki-client