This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d9c73f5c-1d23-457e-affb-45387b6cc5e9.roa File: d9c73f5c-1d23-457e-affb-45387b6cc5e9.roa (raw, json) Hash identifier: dHnyi0kXEWu8YD/nsNhK98METGlJHUNGc3iQ4uDnM9c= Subject key identifier: 4C:1B:E1:53:03:CD:AD:88:74:04:ED:6F:1F:13:5B:7E:9B:CE:3C:11 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 4BBBFBD3D302726ADB7A808A1CD012AB17BC56B7 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d9c73f5c-1d23-457e-affb-45387b6cc5e9.roa Signing time: Sat 06 Dec 2025 00:30:12 +0000 ROA not before: Sat 06 Dec 2025 00:30:12 +0000 ROA not after: Fri 06 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 51.74.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bb:fb:d3:d3:02:72:6a:db:7a:80:8a:1c:d0:12:ab:17:bc:56:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 6 00:30:12 2025 GMT Not After : Mar 6 23:59:59 2026 GMT Subject: serialNumber=95607ece29cb57b3e082a614ebbeef4b60642e2482f9d8cac3586090204b073a, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3b:7a:05:59:db:b0:8c:a3:7e:7d:4e:59:88: 4e:61:3c:6c:ab:42:57:bb:e6:06:bb:71:ef:23:e7: e2:89:f0:0c:97:99:b6:59:be:54:60:3d:95:5e:5d: 1f:e7:bc:37:a6:27:6a:bd:e3:2b:38:48:ce:84:98: 79:2d:25:d2:29:d8:6e:47:73:af:36:11:1d:31:15: 95:98:22:b5:64:bd:07:8b:0f:b3:ee:09:8f:8e:7f: f8:26:82:10:5c:8c:5b:35:5b:ad:39:9f:39:37:31: f1:53:0f:42:15:cc:03:c0:d0:62:25:f6:38:2a:2c: c9:70:ba:b4:a4:34:ac:c0:85:eb:d5:00:4f:f1:e1: 2b:db:56:63:15:31:8b:a1:ab:3b:67:7c:f4:19:32: a4:0b:19:79:ed:4c:9c:6f:5c:c2:e5:d0:56:9d:b1: e5:3a:a3:9a:de:9a:88:12:94:2d:bb:91:af:62:11: 06:d2:a6:0d:e3:90:36:b1:92:83:23:27:ea:7d:13: 54:8b:90:a6:b2:72:bf:84:28:43:81:0f:1b:bb:2b: 8a:76:8e:41:33:b6:16:ff:9f:31:81:40:b7:e1:db: 5b:82:21:ca:20:3b:33:5d:8e:9e:50:6c:c5:df:d9: eb:55:4e:66:79:66:b4:e2:b5:79:5f:8c:60:80:de: 9f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1B:E1:53:03:CD:AD:88:74:04:ED:6F:1F:13:5B:7E:9B:CE:3C:11 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/d9c73f5c-1d23-457e-affb-45387b6cc5e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.74.0.0/20 Signature Algorithm: sha256WithRSAEncryption 23:7a:66:1d:4a:61:62:39:81:77:51:58:7f:c9:6d:02:20:9f: be:74:36:1a:27:28:1d:da:13:a3:c5:55:9a:4f:24:19:f5:7d: 52:29:ec:e2:07:d0:ce:95:10:8a:17:02:11:54:5b:c8:14:34: 7a:9f:99:2d:d0:90:f3:35:87:6e:fa:dc:30:47:18:d4:5e:ce: 4f:2a:43:11:cc:73:8c:2b:20:bc:fa:18:7d:3e:aa:ab:0e:a0: 27:f4:46:19:5f:bf:3b:99:47:03:71:b0:f7:75:42:5a:8c:2c: d4:87:d2:99:5b:f3:7f:ae:71:0f:88:6d:a5:bf:c0:68:11:b5: aa:32:4b:21:72:9a:4f:f6:46:50:9e:be:eb:a9:c3:9b:55:25: 21:ac:c6:81:eb:09:fc:cb:97:e9:38:0f:f6:37:4e:82:86:eb: 74:6e:b6:39:eb:ba:44:f9:ad:7e:31:df:4b:7f:6a:07:ff:fd: 85:3a:57:09:a0:94:12:58:10:d4:40:57:8a:06:8c:c9:3d:7e: 5c:3d:67:21:6d:84:f7:ba:58:5b:fd:e8:43:7c:42:7a:e8:d2: 3d:f5:04:ab:27:1e:bb:9f:08:4a:5c:62:15:11:d0:d2:9c:17: 4d:3d:2f:50:bf:0a:30:0a:20:d3:a2:ff:78:7f:25:24:d2:c9: 22:77:8e:93 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUS7v709MCcmrbeoCKHNASqxe8VrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDYwMDMwMTJaFw0yNjAzMDYyMzU5NTlaMHoxSTBHBgNV BAUTQDk1NjA3ZWNlMjljYjU3YjNlMDgyYTYxNGViYmVlZjRiNjA2NDJlMjQ4MmY5 ZDhjYWMzNTg2MDkwMjA0YjA3M2ExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANo7egVZ27CMo359TlmITmE8bKtCV7vmBrtx7yPn4onwDJeZtlm+VGA9lV5d H+e8N6Ynar3jKzhIzoSYeS0l0inYbkdzrzYRHTEVlZgitWS9B4sPs+4Jj45/+CaC EFyMWzVbrTmfOTcx8VMPQhXMA8DQYiX2OCosyXC6tKQ0rMCF69UAT/HhK9tWYxUx i6GrO2d89BkypAsZee1MnG9cwuXQVp2x5Tqjmt6aiBKULbuRr2IRBtKmDeOQNrGS gyMn6n0TVIuQprJyv4QoQ4EPG7srinaOQTO2Fv+fMYFAt+HbW4IhyiA7M12OnlBs xd/Z61VOZnlmtOK1eV+MYIDen98CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRMG+FT A82tiHQE7W8fE1t+m848ETAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv ZDljNzNmNWMtMWQyMy00NTdlLWFmZmItNDUzODdiNmNjNWU5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBDNKADAN BgkqhkiG9w0BAQsFAAOCAQEAI3pmHUphYjmBd1FYf8ltAiCfvnQ2GicoHdoTo8VV mk8kGfV9Uins4gfQzpUQihcCEVRbyBQ0ep+ZLdCQ8zWHbvrcMEcY1F7OTypDEcxz jCsgvPoYfT6qqw6gJ/RGGV+/O5lHA3Gw93VCWows1IfSmVvzf65xD4htpb/AaBG1 qjJLIXKaT/ZGUJ6+66nDm1UlIazGgesJ/MuX6TgP9jdOgobrdG62Oeu6RPmtfjHf S39qB//9hTpXCaCUElgQ1EBXigaMyT1+XD1nIW2E97pYW/3oQ3xCeujSPfUEqyce u58ISlxiFRHQ0pwXTT0vUL8KMAog06L/eH8lJNLJIneOkw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:51:15 2025 by rpki-client