This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e19327e-c6cf-454d-994b-aa031c9efdce.roa File: 4e19327e-c6cf-454d-994b-aa031c9efdce.roa (raw, json) Hash identifier: GrTqRfVN1v3ww1TjfYq6ENHkU3J/2ga8Txn/DBtdhbA= Subject key identifier: 1D:2F:86:68:6F:CD:4B:7B:3A:39:63:FF:BE:BD:1B:FE:5D:A3:15:C3 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 419B52B14E99345D680A01B3FD8460D608774A5C Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e19327e-c6cf-454d-994b-aa031c9efdce.roa Signing time: Wed 14 Jan 2026 20:36:47 +0000 ROA not before: Wed 14 Jan 2026 20:36:47 +0000 ROA not after: Tue 14 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc7:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:9b:52:b1:4e:99:34:5d:68:0a:01:b3:fd:84:60:d6:08:77:4a:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Jan 14 20:36:47 2026 GMT Not After : Apr 14 23:59:59 2026 GMT Subject: serialNumber=9c04b78cdae8f4745ae15d5b9122d14fd353f99d04d8fb71d24fabb202a89980, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:4c:68:17:b7:e2:b3:a7:00:e7:79:ff:a2: 3b:47:cb:d1:77:04:43:74:1a:c7:95:21:21:e8:4e: 57:8b:52:6b:76:1a:3d:9b:f4:df:4f:bb:c3:1e:b6: 7b:24:20:be:58:4d:0e:22:32:6d:1f:7e:19:a2:d6: 61:67:21:c1:a8:fb:75:3a:8d:2b:17:10:70:f0:52: 12:8c:e2:11:90:f8:83:9f:0d:ee:0a:31:63:97:6f: 88:50:59:34:9c:bf:25:9a:aa:64:56:59:f0:d4:89: ed:b5:e3:62:77:65:1a:0b:94:6b:3a:a3:fe:1e:7f: e8:1c:cb:77:ec:64:44:9c:f7:2e:2e:91:a9:4d:23: 58:e7:c2:db:90:48:ba:55:ca:36:78:8d:0a:50:96: 89:dd:96:1b:2e:13:92:80:16:4a:2f:50:8b:ed:f0: f2:6c:b3:49:58:2d:3d:1b:77:d7:e0:92:3f:c4:b9: 1c:cb:cd:7d:b3:78:3b:4b:c5:29:33:af:f2:bd:32: 45:1f:57:a0:c3:96:e9:a7:1b:37:ab:68:69:7d:f6: fd:d3:c5:47:1a:3e:8b:09:bf:a5:90:bf:2f:f4:54: ff:0a:20:0c:c6:43:bf:b2:10:07:33:47:a9:b1:8c: 30:56:e3:98:46:03:c1:f2:a1:6e:f5:e6:46:b0:dd: 3e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2F:86:68:6F:CD:4B:7B:3A:39:63:FF:BE:BD:1B:FE:5D:A3:15:C3 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/4e19327e-c6cf-454d-994b-aa031c9efdce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc7:3000::/40 Signature Algorithm: sha256WithRSAEncryption 9b:e2:23:e7:bb:0c:d8:47:40:6a:ae:30:fc:b9:ce:b6:80:a5: c0:27:a7:fa:14:f5:fc:ad:e4:e6:3d:81:9c:8d:f5:2e:e5:ae: 9b:c5:0a:e1:84:d8:1c:af:32:04:73:22:38:e6:8b:3a:0c:2a: 3a:9c:23:a3:b5:6b:7c:0f:40:e9:11:51:4e:08:ca:1a:ed:41: fe:fb:1f:1e:dd:c4:cd:bb:38:07:34:a7:e5:f0:36:fa:f1:da: bb:9f:22:c3:10:64:50:67:3d:c9:66:84:8e:4e:cf:b3:8e:6a: f2:b7:38:b5:67:37:36:15:3e:d4:75:2d:1b:96:4c:89:5c:89: 32:94:ee:c2:d0:d3:3d:21:a6:79:80:58:79:9a:fa:20:85:d8: d8:0f:53:7b:2e:9a:b0:02:a7:16:7f:52:0c:cc:ef:2a:65:d1: 63:58:4f:63:1f:32:7c:34:6a:86:c0:d8:d9:2f:17:9f:d0:c5: d3:f6:86:e1:de:57:6f:37:1b:91:7f:10:5c:44:4f:81:09:43: a8:4a:41:5e:21:e0:09:0c:47:c2:21:84:6d:6e:1f:f2:a4:38: e1:f3:61:94:63:4a:f3:cc:3c:53:48:54:7e:80:a0:75:45:2f: c8:4e:f6:5a:c9:9d:54:95:74:9b:c8:0c:93:a5:6f:f1:86:ad: 18:28:72:07 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUQZtSsU6ZNF1oCgGz/YRg1gh3SlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNjAxMTQyMDM2NDdaFw0yNjA0MTQyMzU5NTlaMHoxSTBHBgNV BAUTQDljMDRiNzhjZGFlOGY0NzQ1YWUxNWQ1YjkxMjJkMTRmZDM1M2Y5OWQwNGQ4 ZmI3MWQyNGZhYmIyMDJhODk5ODAxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK38TGgXt+KzpwDnef+iO0fL0XcEQ3Qax5UhIehOV4tSa3YaPZv030+7wx62 eyQgvlhNDiIybR9+GaLWYWchwaj7dTqNKxcQcPBSEoziEZD4g58N7goxY5dviFBZ NJy/JZqqZFZZ8NSJ7bXjYndlGguUazqj/h5/6BzLd+xkRJz3Li6RqU0jWOfC25BI ulXKNniNClCWid2WGy4TkoAWSi9Qi+3w8myzSVgtPRt31+CSP8S5HMvNfbN4O0vF KTOv8r0yRR9XoMOW6acbN6toaX32/dPFRxo+iwm/pZC/L/RU/wogDMZDv7IQBzNH qbGMMFbjmEYDwfKhbvXmRrDdPusCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQdL4Zo b81Lezo5Y/++vRv+XaMVwzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv NGUxOTMyN2UtYzZjZi00NTRkLTk5NGItYWEwMzFjOWVmZGNlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8cw MA0GCSqGSIb3DQEBCwUAA4IBAQCb4iPnuwzYR0BqrjD8uc62gKXAJ6f6FPX8reTm PYGcjfUu5a6bxQrhhNgcrzIEcyI45os6DCo6nCOjtWt8D0DpEVFOCMoa7UH++x8e 3cTNuzgHNKfl8Db68dq7nyLDEGRQZz3JZoSOTs+zjmrytzi1Zzc2FT7UdS0blkyJ XIkylO7C0NM9IaZ5gFh5mvoghdjYD1N7LpqwAqcWf1IMzO8qZdFjWE9jHzJ8NGqG wNjZLxef0MXT9obh3ldvNxuRfxBcRE+BCUOoSkFeIeAJDEfCIYRtbh/ypDjh82GU Y0rzzDxTSFR+gKB1RS/ITvZayZ1UlXSbyAyTpW/xhq0YKHIH -----END CERTIFICATE-----Generated at Sat Jan 17 08:19:13 2026 by rpki-client