This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9e51a10e-4122-46c4-8ad6-fd3986182184.roa File: 9e51a10e-4122-46c4-8ad6-fd3986182184.roa (raw, json) Hash identifier: KMRJ6ma9gzMx/SCX19BzM7f/9OBAXLSVW2+MxukuEw8= Subject key identifier: 2B:87:83:A1:55:2B:02:8B:7A:D9:E6:81:8B:CF:94:12:D2:AC:27:B0 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 4568E3AA454A5FD94B25B5A3BA886AC61DE7DAD3 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9e51a10e-4122-46c4-8ad6-fd3986182184.roa Signing time: Tue 11 Nov 2025 21:23:05 +0000 ROA not before: Tue 11 Nov 2025 21:23:05 +0000 ROA not after: Tue 16 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2001:3fc2:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:68:e3:aa:45:4a:5f:d9:4b:25:b5:a3:ba:88:6a:c6:1d:e7:da:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Nov 11 21:23:05 2025 GMT Not After : Dec 16 23:59:59 2025 GMT Subject: serialNumber=8c5993dc951e4fb203982b36562fcd5246befcb46d99dfd4b99b1a9f14122114, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:6b:3e:80:47:ae:89:f7:ee:3b:35:6d:f4: 5e:80:89:cf:e9:e0:e3:9a:cc:7c:26:41:bc:30:8f: 32:09:80:65:1f:b1:bb:e2:46:d5:3c:aa:d6:17:65: 0e:8a:0f:80:71:72:45:23:b7:98:d6:f7:7f:61:ed: 7e:3c:f8:d8:2d:24:78:df:6c:5b:e0:bf:65:f0:36: c8:41:1a:15:3a:a3:d0:86:9b:f2:2b:1e:88:a3:c3: 12:db:73:f9:fc:d3:d5:3d:6e:20:52:c7:45:94:f6: c4:05:32:56:9d:6a:dd:05:54:01:61:5f:37:5f:c6: c5:95:e8:c6:a9:4b:49:8a:09:b4:d2:09:10:e3:23: 5e:ea:83:73:b1:ee:73:02:5f:35:9f:f3:5a:2b:72: fe:ee:b5:8a:65:32:66:69:47:18:ed:b5:af:06:8b: fc:b8:b5:07:50:a3:12:1d:bf:37:77:06:bd:f9:d7: 3b:d5:05:b6:48:40:a4:a6:9a:1f:b6:f6:f1:61:13: 00:e6:b1:87:75:d4:4d:2a:6e:a8:87:dd:30:bb:e2: 63:1a:51:35:32:c9:53:66:25:1a:21:93:4c:68:fa: 53:42:96:54:70:2a:65:09:a5:7e:38:52:7e:72:36: c5:ec:27:6b:7e:3c:bd:99:93:86:03:43:30:50:57: dd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:87:83:A1:55:2B:02:8B:7A:D9:E6:81:8B:CF:94:12:D2:AC:27:B0 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9e51a10e-4122-46c4-8ad6-fd3986182184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc2:8000::/36 Signature Algorithm: sha256WithRSAEncryption 8a:bf:51:3a:a6:c5:f9:8c:61:3c:29:1b:ee:1c:8c:2d:3e:e0: 1f:ac:de:d8:83:b8:89:df:a2:50:89:55:4e:70:6d:86:c4:77: 20:75:01:75:53:02:da:5b:c3:d1:17:c4:db:fb:88:b2:82:17: db:83:54:cb:c1:e9:99:84:99:47:86:63:16:5c:98:ca:5b:80: 02:3f:62:8e:b8:0b:8c:cf:33:56:b5:13:a4:6a:5e:b5:f4:ce: 02:39:d8:03:52:5c:86:d9:d3:0a:6e:72:c2:ee:7f:8e:af:ea: 86:78:99:4e:96:92:01:46:81:97:51:a9:0d:6c:ab:25:42:10: 73:61:e6:fe:f3:36:e4:65:fe:d8:04:77:14:d7:d5:a6:7c:0f: ab:f3:7d:67:4a:f8:46:3c:78:e8:95:e9:f4:1e:39:db:44:24: 12:a7:d7:5f:5c:3e:98:10:6a:f1:e8:a2:2a:16:89:94:22:db: d5:f2:54:ac:e1:e8:23:19:44:a2:aa:53:8d:12:da:f3:47:5d: 58:08:5a:12:ea:76:8f:a6:58:e5:4b:7a:fb:73:f4:7a:97:1c: 46:00:ec:47:ac:d5:07:12:58:ec:f3:14:f3:01:76:83:97:ac: af:7f:56:70:d6:7f:06:f6:35:7b:8c:32:60:b6:1b:fe:1b:52: 9b:ad:70:71 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIURWjjqkVKX9lLJbWjuohqxh3n2tMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTExMTEyMTIzMDVaFw0yNTEyMTYyMzU5NTlaMHoxSTBHBgNV BAUTQDhjNTk5M2RjOTUxZTRmYjIwMzk4MmIzNjU2MmZjZDUyNDZiZWZjYjQ2ZDk5 ZGZkNGI5OWIxYTlmMTQxMjIxMTQxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdmaz6AR66J9+47NW30XoCJz+ng45rMfCZBvDCPMgmAZR+xu+JG1Tyq1hdl DooPgHFyRSO3mNb3f2Htfjz42C0keN9sW+C/ZfA2yEEaFTqj0Iab8iseiKPDEttz +fzT1T1uIFLHRZT2xAUyVp1q3QVUAWFfN1/GxZXoxqlLSYoJtNIJEOMjXuqDc7Hu cwJfNZ/zWity/u61imUyZmlHGO21rwaL/Li1B1CjEh2/N3cGvfnXO9UFtkhApKaa H7b28WETAOaxh3XUTSpuqIfdMLviYxpRNTLJU2YlGiGTTGj6U0KWVHAqZQmlfjhS fnI2xewna348vZmThgNDMFBX3ZECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQrh4Oh VSsCi3rZ5oGLz5QS0qwnsDAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv OWU1MWExMGUtNDEyMi00NmM0LThhZDYtZmQzOTg2MTgyMTg0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCABP8KA MA0GCSqGSIb3DQEBCwUAA4IBAQCKv1E6psX5jGE8KRvuHIwtPuAfrN7Yg7iJ36JQ iVVOcG2GxHcgdQF1UwLaW8PRF8Tb+4iyghfbg1TLwemZhJlHhmMWXJjKW4ACP2KO uAuMzzNWtROkal619M4COdgDUlyG2dMKbnLC7n+Or+qGeJlOlpIBRoGXUakNbKsl QhBzYeb+8zbkZf7YBHcU19WmfA+r831nSvhGPHjolen0HjnbRCQSp9dfXD6YEGrx 6KIqFomUItvV8lSs4egjGUSiqlONEtrzR11YCFoS6naPpljlS3r7c/R6lxxGAOxH rNUHEljs8xTzAXaDl6yvf1Zw1n8G9jV7jDJgthv+G1KbrXBx -----END CERTIFICATE-----Generated at Sat Nov 22 21:34:54 2025 by rpki-client