This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d203f3b7-b0ac-4a90-8d89-cbcf13c69e19.roa File: d203f3b7-b0ac-4a90-8d89-cbcf13c69e19.roa (raw, json) Hash identifier: kZOtu7fGQ5hZhfhYgw6Q9/khqd5VoaY0WJPMSHoTLz4= Subject key identifier: F3:7D:C1:38:AC:96:25:66:B4:55:56:3C:7A:E0:3E:57:A8:F4:17:EC Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 49F1258A31BA1ECFED057F107ABB192A7D3264DD Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d203f3b7-b0ac-4a90-8d89-cbcf13c69e19.roa Signing time: Tue 02 Dec 2025 01:40:19 +0000 ROA not before: Tue 02 Dec 2025 01:40:19 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc3:a000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f1:25:8a:31:ba:1e:cf:ed:05:7f:10:7a:bb:19:2a:7d:32:64:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 2 01:40:19 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=8e6678574e7a4ed5696221a13ffaa5a922264080469c4954f5bf0bd2a21017df, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:af:c9:62:f3:57:21:2f:00:38:53:cf:0c:4d: 0c:e2:99:59:10:d6:1d:90:56:39:7e:92:69:51:6f: 42:7e:1d:91:45:55:e3:4c:dd:ff:06:41:cf:6c:86: e3:02:21:dc:64:fb:d0:22:30:2d:ae:81:f8:d3:d9: ee:e9:4a:64:6c:1c:5e:4f:3e:65:d7:72:b2:12:a5: 6f:8d:e9:b0:23:3c:83:ef:02:1f:51:fb:3b:e9:39: d4:19:87:c4:cd:dd:58:d7:9c:2f:83:f3:43:5b:09: ab:fc:d2:06:e3:b5:93:a1:07:12:41:5d:61:2a:28: cd:e3:97:43:9a:70:0c:88:3c:c0:ac:a1:15:24:fc: 34:97:61:21:82:44:8d:96:9f:be:3a:e8:e0:7f:13: bd:fa:6e:7f:57:2c:92:f2:fd:42:bb:79:19:84:07: 8f:ad:46:37:39:8e:81:b3:73:95:fb:c8:28:a3:94: fe:3a:13:c4:47:7b:49:f2:b0:c4:a2:a1:4b:3b:8a: d0:5f:1c:93:c2:63:27:23:3b:13:49:bd:e2:cc:de: 36:9e:da:0b:1b:0b:90:f8:0f:f8:fa:8b:eb:16:4c: a9:3b:1d:34:0c:a4:b0:4c:ce:14:0b:9c:0b:46:dd: 5d:9e:7d:5c:61:dc:e8:e7:d8:af:92:d9:30:89:30: 38:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7D:C1:38:AC:96:25:66:B4:55:56:3C:7A:E0:3E:57:A8:F4:17:EC X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d203f3b7-b0ac-4a90-8d89-cbcf13c69e19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc3:a000::/36 Signature Algorithm: sha256WithRSAEncryption 88:60:fd:ef:fa:28:58:90:32:98:8c:d5:c6:25:e3:2a:c5:b6: 7e:04:f9:6f:66:52:37:e4:05:6f:be:a4:0e:c9:f9:b1:ab:3b: c7:81:e9:70:22:2b:20:94:b4:10:4f:1e:80:c5:75:fb:3e:51: 28:9b:56:46:cb:ab:8c:4c:27:26:f2:4b:33:b4:7c:39:47:de: 51:93:81:17:76:06:3c:a5:ac:21:53:fe:17:6e:85:55:29:90: e1:a3:0a:e0:a4:da:8f:4b:73:c0:ed:4c:97:37:96:ae:a9:d1: ba:1b:94:10:7b:ed:9a:4f:e0:a0:9c:0f:f5:aa:cc:7b:fc:56: 6f:5b:b5:c1:2b:2b:27:4c:67:20:ed:f6:22:fb:42:4a:88:ce: c7:24:6c:68:4a:92:a6:fc:f8:af:c6:0b:f1:f2:a1:40:8c:ad: 16:8d:7f:52:89:36:6e:bf:24:b8:ed:34:6a:f6:fc:a1:33:24: 95:17:b0:58:8b:0e:44:2e:d4:f4:d2:f7:d5:38:2a:76:b1:ee: aa:7d:14:ec:16:91:66:87:3f:1c:39:2d:e4:b4:b0:e7:d2:9b: 0a:10:00:a8:2d:d6:2d:c6:ed:21:83:36:50:d6:ea:56:fe:dd: 5b:23:af:69:03:ab:51:d6:0c:e0:a5:ae:f0:31:98:6b:0c:97: cc:32:0f:dc -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUSfElijG6Hs/tBX8QersZKn0yZN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDIwMTQwMTlaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQDhlNjY3ODU3NGU3YTRlZDU2OTYyMjFhMTNmZmFhNWE5MjIyNjQwODA0Njlj NDk1NGY1YmYwYmQyYTIxMDE3ZGYxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPOvyWLzVyEvADhTzwxNDOKZWRDWHZBWOX6SaVFvQn4dkUVV40zd/wZBz2yG 4wIh3GT70CIwLa6B+NPZ7ulKZGwcXk8+ZddyshKlb43psCM8g+8CH1H7O+k51BmH xM3dWNecL4PzQ1sJq/zSBuO1k6EHEkFdYSoozeOXQ5pwDIg8wKyhFST8NJdhIYJE jZafvjro4H8Tvfpuf1cskvL9Qrt5GYQHj61GNzmOgbNzlfvIKKOU/joTxEd7SfKw xKKhSzuK0F8ck8JjJyM7E0m94szeNp7aCxsLkPgP+PqL6xZMqTsdNAyksEzOFAuc C0bdXZ59XGHc6OfYr5LZMIkwOGsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTzfcE4 rJYlZrRVVjx64D5XqPQX7DAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv ZDIwM2YzYjctYjBhYy00YTkwLThkODktY2JjZjEzYzY5ZTE5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8Og MA0GCSqGSIb3DQEBCwUAA4IBAQCIYP3v+ihYkDKYjNXGJeMqxbZ+BPlvZlI35AVv vqQOyfmxqzvHgelwIisglLQQTx6AxXX7PlEom1ZGy6uMTCcm8ksztHw5R95Rk4EX dgY8pawhU/4XboVVKZDhowrgpNqPS3PA7UyXN5auqdG6G5QQe+2aT+CgnA/1qsx7 /FZvW7XBKysnTGcg7fYi+0JKiM7HJGxoSpKm/Pivxgvx8qFAjK0WjX9SiTZuvyS4 7TRq9vyhMySVF7BYiw5ELtT00vfVOCp2se6qfRTsFpFmhz8cOS3ktLDn0psKEACo LdYtxu0hgzZQ1upW/t1bI69pA6tR1gzgpa7wMZhrDJfMMg/c -----END CERTIFICATE-----Generated at Sat Dec 6 11:45:44 2025 by rpki-client