This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e1761481-a0e9-4093-b4d3-7919660f0dfa.roa File: e1761481-a0e9-4093-b4d3-7919660f0dfa.roa (raw, json) Hash identifier: VdrxuKVyOIwOiy9RuOhbxPziIpDRnNpGBnfBcMrKnFQ= Subject key identifier: 3F:DB:E8:9B:AF:4F:34:6A:75:A8:CC:DC:22:C5:2B:33:1E:1A:12:7C Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 5F04426C10CE06AA020538873C34FD52EB2882C0 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e1761481-a0e9-4093-b4d3-7919660f0dfa.roa Signing time: Tue 02 Dec 2025 01:40:08 +0000 ROA not before: Tue 02 Dec 2025 01:40:08 +0000 ROA not after: Mon 02 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc7:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:04:42:6c:10:ce:06:aa:02:05:38:87:3c:34:fd:52:eb:28:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 2 01:40:08 2025 GMT Not After : Mar 2 23:59:59 2026 GMT Subject: serialNumber=3967217fcd7db87d6c21275841534a54b50e17099ba4d3a19224b225dcc04075, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:f5:ba:40:dc:87:ce:40:07:76:ad:53:45: 84:2c:21:86:24:57:32:0f:01:90:86:e7:99:7f:5c: 64:65:6a:80:cf:ab:b5:36:c5:04:ac:96:10:10:ad: a4:cd:ce:fe:15:fa:a5:bf:53:2d:eb:c1:ea:0c:62: 2b:8a:95:54:cb:f4:a4:f8:c6:79:bb:79:07:97:bd: df:48:bd:d7:e1:72:e1:07:66:34:8c:b8:04:b6:04: 02:6a:5d:84:57:37:2f:62:03:c3:68:a4:36:ad:29: 59:e1:fa:66:b8:32:15:d9:7b:52:0f:f2:3a:2c:54: cf:e8:48:60:eb:ec:18:fc:1a:8f:64:17:64:76:12: 74:b7:21:7e:2d:66:20:5c:aa:28:4d:b8:6c:21:54: 7b:7e:88:3d:30:20:97:b4:56:80:9b:14:d5:f5:cb: d0:78:a7:25:43:b3:c3:b4:04:05:d8:0a:0e:f0:71: f3:7b:ac:48:90:f2:6f:c8:42:53:be:55:94:91:b7: fd:37:05:a8:e4:c4:38:2a:b7:60:23:34:05:1f:31: 25:11:ed:a8:b7:66:5a:b2:cf:64:d3:e4:c6:f9:51: 17:52:2a:34:74:fd:55:53:8d:21:62:34:1b:e5:46: 31:ff:e2:e2:65:fe:38:ba:f0:75:09:17:25:63:69: 89:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DB:E8:9B:AF:4F:34:6A:75:A8:CC:DC:22:C5:2B:33:1E:1A:12:7C X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e1761481-a0e9-4093-b4d3-7919660f0dfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc7:4800::/40 Signature Algorithm: sha256WithRSAEncryption 54:fe:fc:17:5b:3e:1d:78:7c:d6:4c:ca:84:c8:04:41:a9:5a: 33:4b:f2:5f:30:a9:c6:04:b1:4b:a3:d5:43:bf:f4:55:f0:18: bc:f4:35:92:58:26:52:99:39:23:2a:7b:d9:5a:fe:56:70:0b: 9c:98:f3:d8:41:d4:5e:4c:37:aa:32:fb:67:2f:f8:bb:3b:f9: 56:c9:52:1a:f0:1b:69:f8:b9:cd:62:a2:b6:40:a7:d8:b3:d2: ab:58:39:8f:d2:eb:c2:f7:23:61:2b:de:4f:e6:c0:ca:0c:41: 7c:a5:0a:db:e1:42:ca:2d:fa:77:94:d3:ea:b6:96:d7:a7:d4: c0:e2:16:a8:1f:9c:37:97:8d:a7:87:fa:39:1a:cf:15:7b:29: 72:57:9a:d6:79:e6:98:ad:af:22:3a:2d:58:7b:9c:21:29:01: c8:61:36:72:c4:6f:47:84:26:61:3f:35:2f:57:f2:af:9b:be: 60:02:c9:8d:f5:ec:a9:8c:ef:76:7e:7b:05:df:e7:ad:0b:bf: 27:54:7e:1a:57:8e:68:24:5e:3c:4a:c6:6d:a9:d7:65:bb:83: 0e:ed:fd:0e:32:83:f2:52:19:0d:a4:7e:51:6d:e5:d6:45:18: e8:6c:62:7d:1d:b9:fd:01:58:df:c3:a1:9d:00:2d:1e:27:1e: 9c:07:99:2c -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUXwRCbBDOBqoCBTiHPDT9UusogsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDIwMTQwMDhaFw0yNjAzMDIyMzU5NTlaMHoxSTBHBgNV BAUTQDM5NjcyMTdmY2Q3ZGI4N2Q2YzIxMjc1ODQxNTM0YTU0YjUwZTE3MDk5YmE0 ZDNhMTkyMjRiMjI1ZGNjMDQwNzUxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJh9bpA3IfOQAd2rVNFhCwhhiRXMg8BkIbnmX9cZGVqgM+rtTbFBKyWEBCt pM3O/hX6pb9TLevB6gxiK4qVVMv0pPjGebt5B5e930i91+Fy4QdmNIy4BLYEAmpd hFc3L2IDw2ikNq0pWeH6ZrgyFdl7Ug/yOixUz+hIYOvsGPwaj2QXZHYSdLchfi1m IFyqKE24bCFUe36IPTAgl7RWgJsU1fXL0HinJUOzw7QEBdgKDvBx83usSJDyb8hC U75VlJG3/TcFqOTEOCq3YCM0BR8xJRHtqLdmWrLPZNPkxvlRF1IqNHT9VVONIWI0 G+VGMf/i4mX+OLrwdQkXJWNpiaMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ/2+ib r080anWozNwixSszHhoSfDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv ZTE3NjE0ODEtYTBlOS00MDkzLWI0ZDMtNzkxOTY2MGYwZGZhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8dI MA0GCSqGSIb3DQEBCwUAA4IBAQBU/vwXWz4deHzWTMqEyARBqVozS/JfMKnGBLFL o9VDv/RV8Bi89DWSWCZSmTkjKnvZWv5WcAucmPPYQdReTDeqMvtnL/i7O/lWyVIa 8Btp+LnNYqK2QKfYs9KrWDmP0uvC9yNhK95P5sDKDEF8pQrb4ULKLfp3lNPqtpbX p9TA4haoH5w3l42nh/o5Gs8VeylyV5rWeeaYra8iOi1Ye5whKQHIYTZyxG9HhCZh PzUvV/Kvm75gAsmN9eypjO92fnsF3+etC78nVH4aV45oJF48SsZtqddlu4MO7f0O MoPyUhkNpH5RbeXWRRjobGJ9Hbn9AVjfw6GdAC0eJx6cB5ks -----END CERTIFICATE-----Generated at Sat Dec 6 10:49:18 2025 by rpki-client