This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5e0372f9-155c-44b5-a4db-e3da48adfab2.roa File: 5e0372f9-155c-44b5-a4db-e3da48adfab2.roa (raw, json) Hash identifier: RLof76XRP1ipaXVpw0sf+RVi3E1VpjKO4YyiK146Usg= Subject key identifier: 9E:E9:68:1B:F3:AA:88:B8:59:F2:40:16:4E:B2:7A:13:1E:DA:05:43 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 6B46A9B58CC762204465845672AAF07D9FAA62F2 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5e0372f9-155c-44b5-a4db-e3da48adfab2.roa Signing time: Thu 13 Nov 2025 16:21:49 +0000 ROA not before: Thu 13 Nov 2025 16:21:49 +0000 ROA not after: Thu 18 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 51.0.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 19 Nov 2025 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:46:a9:b5:8c:c7:62:20:44:65:84:56:72:aa:f0:7d:9f:aa:62:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Nov 13 16:21:49 2025 GMT Not After : Dec 18 23:59:59 2025 GMT Subject: serialNumber=2210236117621eb10a01adb90bcaa844e8be71a423e04e0b5a658a9914357373, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:d0:ae:e3:ef:61:d5:e1:a5:85:a1:7d:c8: be:a8:c2:8f:9b:97:5c:38:ff:aa:05:ec:6a:c9:0b: aa:58:2b:cc:e8:7c:a3:00:ac:d7:22:a4:2b:50:85: d6:15:bc:ce:eb:7d:a3:00:2a:f8:6c:d9:2b:88:ae: c5:55:0f:0a:be:91:d2:74:e5:e1:43:5d:4a:9c:c9: d5:2c:c5:e3:b6:28:20:66:25:a1:3e:9a:03:6c:92: d7:27:78:80:51:81:9c:99:ea:2d:cd:85:94:4d:08: 8c:14:f3:1f:ba:b9:82:10:7f:35:8f:18:f5:fe:73: c1:b9:90:4d:54:9d:1f:16:53:f2:a9:36:22:b7:59: ef:11:8b:16:f3:65:26:0d:bc:2a:9d:de:4e:19:a4: 92:db:c4:36:f1:1e:6a:e0:8c:13:37:88:3d:98:c5: 47:77:f5:9f:6d:92:63:34:f0:39:f9:89:11:14:b2: c8:38:33:f6:70:8a:6e:43:0c:04:d9:ca:f0:15:12: 79:46:4d:6e:49:3c:c4:c1:8f:fc:12:7f:ec:37:9e: 9d:14:c3:97:ce:9b:36:0c:de:49:3f:8b:99:dc:c6: c3:fe:11:07:47:f0:ff:87:6a:d3:2b:73:0f:33:8a: 6f:e4:a4:a9:db:08:3f:eb:2b:84:cf:84:90:73:e4: f7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E9:68:1B:F3:AA:88:B8:59:F2:40:16:4E:B2:7A:13:1E:DA:05:43 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/5e0372f9-155c-44b5-a4db-e3da48adfab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.0.0.0/20 Signature Algorithm: sha256WithRSAEncryption 6a:6b:a7:c6:b9:d8:d4:d1:42:d9:9c:61:80:3b:74:9d:9a:07: af:a0:da:f9:1b:d5:93:e5:1f:09:c4:6f:c7:0f:47:37:99:1e: bc:9a:3f:43:e8:c9:0d:c9:c0:56:f8:6a:e2:4e:4b:08:45:94: d1:14:a0:43:eb:50:df:0c:07:57:7a:25:3b:c1:73:bd:7c:d4: fd:51:5a:70:53:75:e5:a3:3c:89:a1:b4:62:45:0c:1b:d0:5b: f6:cc:5d:ce:e4:35:2f:24:d7:b6:8c:4c:ef:49:50:5a:27:1f: 92:cf:0b:56:4e:8e:d8:87:9d:af:65:4a:11:bd:ea:cc:fb:79: 43:52:47:a8:51:cd:41:cd:11:69:66:53:6a:cf:55:0f:c0:e8: 42:4e:00:fd:c7:a7:96:55:26:ff:74:b5:db:73:f2:1d:e3:65: 02:e8:8b:99:c4:ff:32:32:ac:7d:22:55:3b:5d:16:9a:1c:f0: e4:81:21:54:51:64:1e:bd:2e:2e:62:5b:5f:1e:90:3b:0f:62: 16:7c:81:86:4f:6c:90:9e:c7:fb:7d:ca:4a:b1:be:18:b3:8b: 6a:26:20:86:3c:57:ad:32:36:46:ca:7f:a1:9a:41:c1:a9:82: 10:98:83:f0:2d:9f:cd:36:30:68:14:13:a1:fe:30:7f:64:83: 27:5a:83:f7 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUa0aptYzHYiBEZYRWcqrwfZ+qYvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTExMTMxNjIxNDlaFw0yNTEyMTgyMzU5NTlaMHoxSTBHBgNV BAUTQDIyMTAyMzYxMTc2MjFlYjEwYTAxYWRiOTBiY2FhODQ0ZThiZTcxYTQyM2Uw NGUwYjVhNjU4YTk5MTQzNTczNzMxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKcm0K7j72HV4aWFoX3IvqjCj5uXXDj/qgXsaskLqlgrzOh8owCs1yKkK1CF 1hW8zut9owAq+GzZK4iuxVUPCr6R0nTl4UNdSpzJ1SzF47YoIGYloT6aA2yS1yd4 gFGBnJnqLc2FlE0IjBTzH7q5ghB/NY8Y9f5zwbmQTVSdHxZT8qk2IrdZ7xGLFvNl Jg28Kp3eThmkktvENvEeauCMEzeIPZjFR3f1n22SYzTwOfmJERSyyDgz9nCKbkMM BNnK8BUSeUZNbkk8xMGP/BJ/7DeenRTDl86bNgzeST+LmdzGw/4RB0fw/4dq0ytz DzOKb+SkqdsIP+srhM+EkHPk96UCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSe6Wgb 86qIuFnyQBZOsnoTHtoFQzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv NWUwMzcyZjktMTU1Yy00NGI1LWE0ZGItZTNkYTQ4YWRmYWIyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBDMAADAN BgkqhkiG9w0BAQsFAAOCAQEAamunxrnY1NFC2ZxhgDt0nZoHr6Da+RvVk+UfCcRv xw9HN5kevJo/Q+jJDcnAVvhq4k5LCEWU0RSgQ+tQ3wwHV3olO8FzvXzU/VFacFN1 5aM8iaG0YkUMG9Bb9sxdzuQ1LyTXtoxM70lQWicfks8LVk6O2Iedr2VKEb3qzPt5 Q1JHqFHNQc0RaWZTas9VD8DoQk4A/cenllUm/3S123PyHeNlAuiLmcT/MjKsfSJV O10Wmhzw5IEhVFFkHr0uLmJbXx6QOw9iFnyBhk9skJ7H+33KSrG+GLOLaiYghjxX rTI2Rsp/oZpBwamCEJiD8C2fzTYwaBQTof4wf2SDJ1qD9w== -----END CERTIFICATE-----Generated at Tue Nov 18 11:55:40 2025 by rpki-client