This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa File: 4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa (raw, json) Hash identifier: iw0+9IshFqKgmSIWByePK34sPmcNJgLiO6wcowN8JbA= Subject key identifier: 46:3E:34:AD:49:C2:1D:B2:2F:3A:50:00:1E:4F:EE:81:3E:C3:2C:C4 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 2A493D42E04C305BD840BE9B05B6CBA356F3B379 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa Signing time: Wed 14 Jan 2026 20:36:47 +0000 ROA not before: Wed 14 Jan 2026 20:36:47 +0000 ROA not after: Tue 14 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc7:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:49:3d:42:e0:4c:30:5b:d8:40:be:9b:05:b6:cb:a3:56:f3:b3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Jan 14 20:36:47 2026 GMT Not After : Apr 14 23:59:59 2026 GMT Subject: serialNumber=8edbecedcecd7b2953595562019b5fbd25dc65f4b5ced6a7bdadf1b112c27c21, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:85:b3:98:cb:b4:3e:ba:3b:5b:74:7c:c0:91: f8:08:a6:5e:89:7e:5e:77:b8:08:ec:e0:a9:ce:ce: 6b:bd:a6:d3:2f:b0:e5:09:61:e2:4a:e5:ab:c0:3b: 61:be:1e:bb:cf:bd:72:f0:81:3c:57:3d:b3:0b:ef: 61:7d:a0:3b:a5:71:01:6f:44:df:ff:a2:43:75:21: aa:9c:50:dd:95:bb:9a:29:34:e6:50:1d:08:85:44: 24:05:8c:94:0b:97:92:44:9d:21:02:0a:a7:30:cc: a3:75:4a:fd:40:86:b7:d4:15:5d:c6:12:ed:b5:51: be:f3:3f:fe:74:49:c6:12:77:28:af:30:1a:7c:2b: 0d:71:1a:ac:c5:f5:9a:a8:ff:73:99:10:96:0b:c8: de:f2:b4:eb:bd:5a:f1:2d:e8:39:95:bc:94:93:d2: 9a:46:33:e0:04:42:6a:fa:db:1f:b5:c4:01:7b:89: 50:d2:43:af:91:50:53:fb:ba:e0:f3:9b:1b:19:05: 6f:bf:0d:e0:a9:41:c4:f2:07:ac:9f:9a:79:e6:d9: 4e:a3:e4:51:1d:7d:4c:4e:03:aa:9c:07:2c:ad:e1: 79:2b:d2:45:ef:e6:a4:c9:89:5e:5d:89:5d:e6:40: a4:07:95:a4:4c:7a:8c:86:18:33:4a:09:65:2f:14: 0b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3E:34:AD:49:C2:1D:B2:2F:3A:50:00:1E:4F:EE:81:3E:C3:2C:C4 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4385f0b9-6e02-4e47-9a00-c64aafffd4e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc7:3000::/36 Signature Algorithm: sha256WithRSAEncryption 61:56:91:2e:35:5f:93:46:14:c5:1d:25:9f:0b:60:ca:e5:9b: c5:e9:50:f1:c2:b7:f0:cb:0d:95:b9:87:37:98:c4:03:3f:7a: b6:b5:5d:c0:c6:36:29:a6:96:b0:68:5d:aa:b1:d1:76:df:94: 1a:96:8e:4e:8c:b7:86:be:27:a5:b4:4a:96:e3:12:0a:60:85: 65:55:76:ea:68:cb:2e:c4:0e:b5:73:07:cd:48:7a:bf:95:b0: d0:54:59:b5:15:2e:96:48:ca:50:45:76:4a:8e:f0:e4:d6:66: 55:ed:0e:8b:2a:09:62:d8:12:ef:f2:4f:bf:a1:9e:53:5c:07: c0:20:ab:e6:28:9b:fa:e3:c5:4b:2b:94:cc:46:19:58:57:95: ce:d8:ec:85:8b:7f:10:67:78:2e:84:1a:21:e3:53:a4:a0:50: 1f:00:eb:80:c9:ba:73:41:04:f0:30:58:4c:bf:14:d9:f5:2d: 10:24:23:47:e0:1d:0d:bf:56:12:80:80:82:20:77:de:9a:1c: ff:ad:f2:1b:db:0b:a0:0b:b6:d5:0b:77:83:45:c8:de:c4:3f: f5:e9:76:e8:84:5f:32:99:d5:43:ee:e5:22:3e:4d:48:63:2a: 7d:8e:35:8d:78:b7:1b:29:84:f6:13:26:53:e7:c9:f4:c9:6c: 8a:2b:f5:01 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUKkk9QuBMMFvYQL6bBbbLo1bzs3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNjAxMTQyMDM2NDdaFw0yNjA0MTQyMzU5NTlaMHoxSTBHBgNV BAUTQDhlZGJlY2VkY2VjZDdiMjk1MzU5NTU2MjAxOWI1ZmJkMjVkYzY1ZjRiNWNl ZDZhN2JkYWRmMWIxMTJjMjdjMjExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANyFs5jLtD66O1t0fMCR+AimXol+Xne4COzgqc7Oa72m0y+w5Qlh4krlq8A7 Yb4eu8+9cvCBPFc9swvvYX2gO6VxAW9E3/+iQ3UhqpxQ3ZW7mik05lAdCIVEJAWM lAuXkkSdIQIKpzDMo3VK/UCGt9QVXcYS7bVRvvM//nRJxhJ3KK8wGnwrDXEarMX1 mqj/c5kQlgvI3vK0671a8S3oOZW8lJPSmkYz4ARCavrbH7XEAXuJUNJDr5FQU/u6 4PObGxkFb78N4KlBxPIHrJ+aeebZTqPkUR19TE4DqpwHLK3heSvSRe/mpMmJXl2J XeZApAeVpEx6jIYYM0oJZS8UCysCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRGPjSt ScIdsi86UAAeT+6BPsMsxDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv NDM4NWYwYjktNmUwMi00ZTQ3LTlhMDAtYzY0YWFmZmZkNGU5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8cw MA0GCSqGSIb3DQEBCwUAA4IBAQBhVpEuNV+TRhTFHSWfC2DK5ZvF6VDxwrfwyw2V uYc3mMQDP3q2tV3AxjYpppawaF2qsdF235Qalo5OjLeGvieltEqW4xIKYIVlVXbq aMsuxA61cwfNSHq/lbDQVFm1FS6WSMpQRXZKjvDk1mZV7Q6LKgli2BLv8k+/oZ5T XAfAIKvmKJv648VLK5TMRhlYV5XO2OyFi38QZ3guhBoh41OkoFAfAOuAybpzQQTw MFhMvxTZ9S0QJCNH4B0Nv1YSgICCIHfemhz/rfIb2wugC7bVC3eDRcjexD/16Xbo hF8ymdVD7uUiPk1IYyp9jjWNeLcbKYT2EyZT58n0yWyKK/UB -----END CERTIFICATE-----Generated at Sat Jan 17 10:00:40 2026 by rpki-client