This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2bdbaa29-cc56-4293-9c64-b4245c939f65.roa File: 2bdbaa29-cc56-4293-9c64-b4245c939f65.roa (raw, json) Hash identifier: l3w1/h9WdXP6vn3JmUtzUm+TVa77ATvWW411mKdy1cU= Subject key identifier: 3D:60:54:4F:DA:87:BF:D0:D5:3D:58:45:AB:C4:13:E5:E6:2C:9D:3F Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 7020DB78B898D9C08BE349AB651DC852AFEAE487 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2bdbaa29-cc56-4293-9c64-b4245c939f65.roa Signing time: Wed 19 Nov 2025 22:36:48 +0000 ROA not before: Wed 19 Nov 2025 22:36:48 +0000 ROA not after: Tue 17 Feb 2026 23:59:59 +0000 asID: 14618 IP address blocks: 51.74.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:20:db:78:b8:98:d9:c0:8b:e3:49:ab:65:1d:c8:52:af:ea:e4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Nov 19 22:36:48 2025 GMT Not After : Feb 17 23:59:59 2026 GMT Subject: serialNumber=2a0ee4221c30e7f72b9417488bfcdd350be93267366f947c92e8835e6fbc87ba, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:35:58:38:80:6a:a3:85:7c:61:48:05:ab: e9:55:14:5c:a8:a2:d8:b1:96:54:16:4c:dc:a4:93: a2:54:ee:1c:6d:72:db:8b:9b:b5:47:2b:35:5a:c9: 10:e1:43:1d:a8:f7:01:78:2f:c4:ed:44:b0:81:f7: 4b:59:03:a7:50:7a:90:80:d0:18:4c:b9:81:7b:5c: dd:bd:bf:2c:44:e6:81:5c:61:77:34:e8:c7:a7:e8: 2e:39:28:2c:01:91:34:cb:58:58:50:aa:98:88:30: 22:d2:02:87:3f:4a:21:ff:7c:96:27:37:06:4b:4b: ef:08:07:30:a6:2b:76:17:e7:f4:20:76:c2:84:20: fb:8e:76:7c:45:88:0d:2e:fa:7d:b4:5a:0b:8e:6e: 96:5b:39:29:56:52:44:7c:32:80:da:60:16:e1:18: 72:86:b6:2e:03:c3:17:9c:f3:d8:92:68:30:f8:e0: 3b:bc:a3:4a:d4:11:04:67:5a:86:a5:fe:18:d8:1d: b5:20:56:c4:34:a6:21:5d:fd:96:9c:1a:90:bb:88: 7c:fb:0e:63:c2:f5:e1:da:25:87:57:72:f9:69:20: 46:e7:46:21:67:92:80:8f:82:9b:8c:0a:03:fe:d8: 76:5e:93:0d:83:51:55:40:33:a7:08:b3:27:2d:a0: 45:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:60:54:4F:DA:87:BF:D0:D5:3D:58:45:AB:C4:13:E5:E6:2C:9D:3F X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/2bdbaa29-cc56-4293-9c64-b4245c939f65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.74.16.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:65:05:3c:87:2a:99:c9:cf:b5:0b:41:cc:bd:24:4d:a0:3a: ee:63:a7:16:d0:27:19:10:6a:40:35:b7:4d:30:54:51:6f:dd: c3:a7:1a:69:79:04:9d:97:83:2c:a7:a5:0d:cc:34:c9:fc:63: 33:56:e4:29:47:43:bf:6a:9e:17:ed:1d:ce:b3:56:c9:19:50: 12:7d:be:b5:d1:cb:40:2e:11:5e:3a:9c:4b:a4:f9:2d:61:d5: c5:d5:94:18:72:10:7c:1c:ac:4d:9a:eb:72:8e:f9:3f:51:d4: 61:2f:2f:65:cf:ff:7b:40:bd:ea:4a:18:e1:73:0e:0a:fd:ba: 67:c6:1d:63:71:72:80:96:41:a3:c0:9c:95:1f:77:7b:77:b7: 05:68:2d:e6:d3:8d:0c:a8:7c:57:a6:8b:fd:5e:9e:9c:12:56: 37:b3:18:d9:b1:ac:67:05:0b:11:3f:a0:0d:ff:5d:ce:98:01: b8:52:72:c1:c1:e2:10:86:33:b8:7f:dc:d6:57:62:a5:e6:35: d1:4f:b1:24:83:ac:1e:fc:af:63:e8:e8:9b:0f:50:78:fb:95: 9f:4d:f4:ff:56:6d:62:d9:bf:55:d6:1e:18:6a:83:88:84:04: 77:e1:77:7f:35:78:6a:2e:77:b7:2d:cc:1f:e3:ec:f9:cc:88: e5:48:d0:0d -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUcCDbeLiY2cCL40mrZR3IUq/q5IcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTExMTkyMjM2NDhaFw0yNjAyMTcyMzU5NTlaMHoxSTBHBgNV BAUTQDJhMGVlNDIyMWMzMGU3ZjcyYjk0MTc0ODhiZmNkZDM1MGJlOTMyNjczNjZm OTQ3YzkyZTg4MzVlNmZiYzg3YmExLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKz2NVg4gGqjhXxhSAWr6VUUXKii2LGWVBZM3KSTolTuHG1y24ubtUcrNVrJ EOFDHaj3AXgvxO1EsIH3S1kDp1B6kIDQGEy5gXtc3b2/LETmgVxhdzTox6foLjko LAGRNMtYWFCqmIgwItIChz9KIf98lic3BktL7wgHMKYrdhfn9CB2woQg+452fEWI DS76fbRaC45ulls5KVZSRHwygNpgFuEYcoa2LgPDF5zz2JJoMPjgO7yjStQRBGda hqX+GNgdtSBWxDSmIV39lpwakLuIfPsOY8L14dolh1dy+WkgRudGIWeSgI+Cm4wK A/7Ydl6TDYNRVUAzpwizJy2gRfMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQ9YFRP 2oe/0NU9WEWrxBPl5iydPzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv MmJkYmFhMjktY2M1Ni00MjkzLTljNjQtYjQyNDVjOTM5ZjY1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADNKEDAN BgkqhkiG9w0BAQsFAAOCAQEAX2UFPIcqmcnPtQtBzL0kTaA67mOnFtAnGRBqQDW3 TTBUUW/dw6caaXkEnZeDLKelDcw0yfxjM1bkKUdDv2qeF+0dzrNWyRlQEn2+tdHL QC4RXjqcS6T5LWHVxdWUGHIQfBysTZrrco75P1HUYS8vZc//e0C96koY4XMOCv26 Z8YdY3FygJZBo8CclR93e3e3BWgt5tONDKh8V6aL/V6enBJWN7MY2bGsZwULET+g Df9dzpgBuFJywcHiEIYzuH/c1ldipeY10U+xJIOsHvyvY+jomw9QePuVn030/1Zt Ytm/VdYeGGqDiIQEd+F3fzV4ai53ty3MH+Ps+cyI5UjQDQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:53 2025 by rpki-client