This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f6db5bce-e352-420d-afe4-8a12365284c3.roa File: f6db5bce-e352-420d-afe4-8a12365284c3.roa (raw, json) Hash identifier: DljIZ3oLwM//wRDlCUqC5kroRqCIM4nr3yBH6UOk/f0= Subject key identifier: 01:27:A9:CA:E7:F6:DD:F5:A2:E8:8D:54:DB:B5:01:96:DA:76:0A:6D Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 721BB6BF04875FDF2CE5DF9D7C5CCDC61B15642E Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f6db5bce-e352-420d-afe4-8a12365284c3.roa Signing time: Wed 19 Nov 2025 21:36:54 +0000 ROA not before: Wed 19 Nov 2025 21:36:54 +0000 ROA not after: Tue 17 Feb 2026 23:59:59 +0000 asID: 16509 IP address blocks: 51.74.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1b:b6:bf:04:87:5f:df:2c:e5:df:9d:7c:5c:cd:c6:1b:15:64:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Nov 19 21:36:54 2025 GMT Not After : Feb 17 23:59:59 2026 GMT Subject: serialNumber=3027846a6c2a244f3aac74356307f8340efccd0c57f8108b428aa7d1c771e4b8, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:c3:d9:ff:fe:17:98:05:d8:1f:b8:e0:fd: f5:42:77:9a:f2:5c:3d:da:1c:95:36:14:0a:00:07: 3a:1f:87:7c:0f:2f:45:fd:1a:65:a1:26:50:96:3b: d9:f8:be:43:e3:61:2c:55:e2:aa:b0:fb:ab:3b:11: 9a:fe:f5:07:3b:f0:87:23:ba:8d:f9:f9:d7:58:b9: e8:eb:02:56:81:dd:56:8c:c6:e1:01:bc:b2:27:55: 38:74:f6:a3:a3:93:40:b5:fd:c2:09:bc:1c:8f:97: 8c:b5:75:60:4d:2b:60:14:9b:70:d5:74:82:28:53: ad:00:e3:1a:65:7c:68:a7:bb:30:59:2c:0f:b3:46: b2:4d:14:f0:c7:1d:af:ed:32:17:eb:7e:ea:b0:f1: 22:08:4a:cc:a6:48:38:78:60:ab:3c:d8:bd:31:dd: 1e:3a:59:0b:cb:34:e2:08:10:62:85:17:7b:07:b5: f6:79:72:03:9d:0f:08:25:6d:08:96:31:4f:34:8e: 84:c8:68:fc:26:2b:b6:46:49:67:dd:1a:cb:a3:fe: 3d:a9:db:8d:5e:b0:30:d7:3a:e7:87:b6:5e:52:b4: 6f:47:da:14:3a:1b:84:a8:62:1a:2f:8e:8e:e0:ad: ef:f8:fb:bd:f3:09:cf:92:41:47:ef:69:37:57:b0: 5a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:27:A9:CA:E7:F6:DD:F5:A2:E8:8D:54:DB:B5:01:96:DA:76:0A:6D X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/f6db5bce-e352-420d-afe4-8a12365284c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.74.16.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:0a:97:92:4e:1a:bc:e5:30:05:47:eb:fd:01:e5:56:8b:87: 6f:68:2a:be:be:df:6e:61:3f:ba:46:bf:10:c5:a0:8e:a0:79: fd:ca:b3:8f:36:11:0e:97:0e:8a:75:32:4a:b6:29:5f:ad:fc: be:fc:af:a5:f3:df:82:7c:c1:e7:13:5e:09:6c:d6:a4:54:ed: e5:46:54:bd:8c:9b:df:f4:ca:b0:83:2e:81:72:b4:e9:1e:ac: eb:49:b2:fe:da:7b:ae:84:e7:70:27:a0:cd:2d:83:b0:60:1a: 78:6c:61:d6:28:7f:84:25:87:67:35:05:3f:20:b3:f9:ee:fa: d8:ed:a4:6f:87:2a:a0:c0:41:9c:20:46:cf:ba:8e:9b:e5:16: f0:1f:a1:a6:36:4a:cf:ca:1e:48:a7:01:a7:dc:10:67:c2:ae: d7:a9:97:8d:79:bc:98:83:0a:27:a2:40:5f:e4:e8:56:ce:31: 8a:fd:7e:5c:b4:cc:5d:2b:5a:7c:10:f8:b5:15:5f:1a:d8:a2: 7f:39:20:39:12:e9:cc:91:ae:c5:a6:90:01:ba:ce:ff:ef:f5: fe:88:a4:a1:94:1a:1a:b3:ff:07:73:a0:da:c9:a0:16:05:17: e6:4b:73:80:eb:b8:a0:0c:98:ff:f5:a8:dc:d8:e0:21:ea:98: b7:e3:41:b9 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUchu2vwSHX98s5d+dfFzNxhsVZC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTExMTkyMTM2NTRaFw0yNjAyMTcyMzU5NTlaMHoxSTBHBgNV BAUTQDMwMjc4NDZhNmMyYTI0NGYzYWFjNzQzNTYzMDdmODM0MGVmY2NkMGM1N2Y4 MTA4YjQyOGFhN2QxYzc3MWU0YjgxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3ww9n//heYBdgfuOD99UJ3mvJcPdoclTYUCgAHOh+HfA8vRf0aZaEmUJY7 2fi+Q+NhLFXiqrD7qzsRmv71BzvwhyO6jfn511i56OsCVoHdVozG4QG8sidVOHT2 o6OTQLX9wgm8HI+XjLV1YE0rYBSbcNV0gihTrQDjGmV8aKe7MFksD7NGsk0U8Mcd r+0yF+t+6rDxIghKzKZIOHhgqzzYvTHdHjpZC8s04ggQYoUXewe19nlyA50PCCVt CJYxTzSOhMho/CYrtkZJZ90ay6P+PanbjV6wMNc654e2XlK0b0faFDobhKhiGi+O juCt7/j7vfMJz5JBR+9pN1ewWgsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQBJ6nK 5/bd9aLojVTbtQGW2nYKbTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv ZjZkYjViY2UtZTM1Mi00MjBkLWFmZTQtOGExMjM2NTI4NGMzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADNKEDAN BgkqhkiG9w0BAQsFAAOCAQEAGwqXkk4avOUwBUfr/QHlVouHb2gqvr7fbmE/uka/ EMWgjqB5/cqzjzYRDpcOinUySrYpX638vvyvpfPfgnzB5xNeCWzWpFTt5UZUvYyb 3/TKsIMugXK06R6s60my/tp7roTncCegzS2DsGAaeGxh1ih/hCWHZzUFPyCz+e76 2O2kb4cqoMBBnCBGz7qOm+UW8B+hpjZKz8oeSKcBp9wQZ8Ku16mXjXm8mIMKJ6JA X+ToVs4xiv1+XLTMXStafBD4tRVfGtiifzkgORLpzJGuxaaQAbrO/+/1/oikoZQa GrP/B3Og2smgFgUX5ktzgOu4oAyY//Wo3NjgIeqYt+NBuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:48:51 2025 by rpki-client