This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2a82b03e-517c-4a81-96ab-2cf6049a7f3d.roa File: 2a82b03e-517c-4a81-96ab-2cf6049a7f3d.roa (raw, json) Hash identifier: FCwY7by/rebb4M12NfpcpRJrF2jKyoFtpw3y3/dEKGM= Subject key identifier: F1:CC:66:8C:4F:81:43:0D:B2:52:E6:AF:95:F0:3F:7A:3C:D8:EF:66 Certificate issuer: /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc Certificate serial: 02D65E87182EE58D52D34ED1A31C2E081087EF0D Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2a82b03e-517c-4a81-96ab-2cf6049a7f3d.roa Signing time: Fri 24 Oct 2025 00:31:04 +0000 ROA not before: Fri 24 Oct 2025 00:31:04 +0000 ROA not after: Fri 28 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2001:3fc3:6800::/40 maxlen: 40 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 02:d6:5e:87:18:2e:e5:8d:52:d3:4e:d1:a3:1c:2e:08:10:87:ef:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc Validity Not Before: Oct 24 00:31:04 2025 GMT Not After : Nov 28 23:59:59 2025 GMT Subject: serialNumber=a2ed65b02db924f9df6c44a9e69a2aaa9d06bc1fb9cac80228cea5a066b90894, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0c:a4:f5:4d:73:9a:f3:90:b6:4e:4b:c2:0c: 4c:51:82:1a:5f:64:24:7e:f6:dc:a2:11:1a:38:4b: 1c:36:74:9f:81:38:ad:ab:04:29:08:ec:09:9d:ad: 7d:1d:61:23:51:8e:ea:2d:d6:61:da:38:2d:f9:ac: a3:7b:a8:fb:bf:fe:4e:3e:b9:fb:ec:01:bc:5f:3c: 99:6f:16:48:b2:6c:af:b5:dd:2f:ff:81:d5:4a:9b: 8e:29:e5:05:2e:75:c0:32:ef:86:a0:f7:28:87:72: 6d:39:6b:05:5d:3b:c9:d8:c5:1b:e3:5b:cc:7f:3b: 5b:9e:2a:ca:86:44:14:1d:52:db:25:17:e2:c9:17: fb:c7:86:e0:a8:d6:00:af:76:8b:43:e9:b4:ae:7f: 61:53:da:5b:5d:f1:01:13:99:15:b1:0c:0f:30:7e: 66:73:83:a8:48:a4:c2:94:23:87:e4:ba:4e:30:28: b9:ec:30:ca:15:c0:04:20:e2:d7:f3:fc:6a:a0:5c: 06:e3:28:73:11:3c:15:dc:d6:27:e8:05:e3:cf:7f: 01:ee:50:60:5b:2d:42:0b:37:b3:b5:a1:7c:ff:02: ba:e7:39:1a:66:c2:e9:2a:c1:b3:58:9b:7f:fa:f7: 84:b2:b6:32:60:73:f2:db:6a:78:17:c9:4a:d1:3a: 8d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CC:66:8C:4F:81:43:0D:B2:52:E6:AF:95:F0:3F:7A:3C:D8:EF:66 X509v3 Authority Key Identifier: keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/2a82b03e-517c-4a81-96ab-2cf6049a7f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3fc3:6800::/40 Signature Algorithm: sha256WithRSAEncryption 2f:7e:88:f3:69:74:3f:6d:5f:fe:f7:23:a5:04:96:20:cd:73: f0:c3:d2:93:bf:bb:fb:cf:af:a3:c5:61:c0:41:31:81:5a:e2: c8:11:68:df:e3:4e:9f:a3:9c:95:f8:d6:09:37:e3:81:30:30: a3:a2:fe:66:5c:41:ce:94:95:7a:ef:4c:99:ee:98:32:dc:c9: b7:b9:b0:c1:fa:4b:05:f5:75:0f:95:96:85:f1:75:ed:8b:ca: 81:52:8d:9e:96:e2:66:53:9a:4c:ec:25:aa:da:7b:a7:e2:bd: c5:e3:f0:dc:e4:ee:ad:20:60:77:bd:97:ce:05:77:c5:74:fb: 95:0b:3e:68:9f:8b:c6:2d:71:2f:50:3d:64:16:7d:3c:71:0a: 16:6f:ac:4f:03:47:a1:75:f7:b4:93:52:78:e6:21:b3:38:6f: 16:af:7b:57:c3:c4:a3:8f:5b:3d:84:be:7f:61:a7:3e:4b:31: b4:22:41:e3:c7:7d:90:0f:7f:45:61:28:61:d9:68:6d:f4:20: 53:4c:b6:77:36:62:6d:f0:34:ee:8e:8a:64:4c:72:f2:54:5a: ea:99:a9:39:84:ee:fa:20:f0:ae:97:38:a0:60:e9:ac:31:a5: dc:4a:da:d4:95:ea:36:fb:6b:79:b1:f6:c6:98:54:b7:85:65: 95:84:7e:9b -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUAtZehxgu5Y1S007RoxwuCBCH7w0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1 NTU0ZGZiYzAeFw0yNTEwMjQwMDMxMDRaFw0yNTExMjgyMzU5NTlaMHoxSTBHBgNV BAUTQGEyZWQ2NWIwMmRiOTI0ZjlkZjZjNDRhOWU2OWEyYWFhOWQwNmJjMWZiOWNh YzgwMjI4Y2VhNWEwNjZiOTA4OTQxLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4 NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQMpPVNc5rzkLZOS8IMTFGCGl9kJH723KIRGjhLHDZ0n4E4rasEKQjsCZ2t fR1hI1GO6i3WYdo4Lfmso3uo+7/+Tj65++wBvF88mW8WSLJsr7XdL/+B1Uqbjinl BS51wDLvhqD3KIdybTlrBV07ydjFG+NbzH87W54qyoZEFB1S2yUX4skX+8eG4KjW AK92i0PptK5/YVPaW13xAROZFbEMDzB+ZnODqEikwpQjh+S6TjAouewwyhXABCDi 1/P8aqBcBuMocxE8FdzWJ+gF489/Ae5QYFstQgs3s7WhfP8Cuuc5GmbC6SrBs1ib f/r3hLK2MmBz8ttqeBfJStE6jf0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTxzGaM T4FDDbJS5q+V8D96PNjvZjAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv MmE4MmIwM2UtNTE3Yy00YTgxLTk2YWItMmNmNjA0OWE3ZjNkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACABP8No MA0GCSqGSIb3DQEBCwUAA4IBAQAvfojzaXQ/bV/+9yOlBJYgzXPww9KTv7v7z6+j xWHAQTGBWuLIEWjf406fo5yV+NYJN+OBMDCjov5mXEHOlJV670yZ7pgy3Mm3ubDB +ksF9XUPlZaF8XXti8qBUo2eluJmU5pM7CWq2nun4r3F4/Dc5O6tIGB3vZfOBXfF dPuVCz5on4vGLXEvUD1kFn08cQoWb6xPA0ehdfe0k1J45iGzOG8Wr3tXw8Sjj1s9 hL5/Yac+SzG0IkHjx32QD39FYShh2Wht9CBTTLZ3NmJt8DTujopkTHLyVFrqmak5 hO76IPCulzigYOmsMaXcStrUleo2+2t5sfbGmFS3hWWVhH6b -----END CERTIFICATE-----Generated at Wed Dec 17 00:25:34 2025 by rpki-client