This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/51195615-aa01-4b44-ab00-63024ac9ba29.roa File: 51195615-aa01-4b44-ab00-63024ac9ba29.roa (raw, json) Hash identifier: 47ag8t+O9t/QybXIk2rOWYJKg69hUJzCFq9xUSXDc0Q= Subject key identifier: 9D:85:63:32:78:47:B3:22:CE:C1:C0:E2:03:87:B6:54:4A:42:FA:4D Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 4BE5AC2726CBED575A83EF5F5E2267D29642FEC7 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/51195615-aa01-4b44-ab00-63024ac9ba29.roa Signing time: Mon 08 Dec 2025 02:00:09 +0000 ROA not before: Mon 08 Dec 2025 02:00:09 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 51.224.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e5:ac:27:26:cb:ed:57:5a:83:ef:5f:5e:22:67:d2:96:42:fe:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 8 02:00:09 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=79931faf0bbfa78e45f4f82278c934f467068fade415e9d325d5f1004b46dc86, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:8e:ad:a2:82:1b:79:a7:1a:2a:fa:23:73: 8f:db:f2:bc:af:fa:1c:b4:df:e9:3f:e8:1b:9a:bb: ba:e6:54:29:16:9c:73:3c:51:25:0c:bf:40:08:94: 41:3e:17:ae:ce:6a:9a:58:b8:54:d7:33:7e:f2:0f: a7:02:7a:9a:4a:ac:79:02:50:bb:e8:91:5f:05:82: bb:52:03:d6:24:66:e5:45:9b:84:37:65:d1:e0:0e: 4b:5e:54:f8:54:11:e5:c9:7d:04:07:ab:14:bf:c5: 0c:25:63:be:b0:1c:c6:1f:e5:85:be:b5:93:5e:15: c9:51:dd:f8:b5:3b:53:48:89:02:6b:7d:ad:7c:9a: 05:21:8d:62:81:70:1a:eb:1f:a5:0b:ba:60:91:b0: 4e:9c:1e:ef:d6:47:86:91:cf:29:ba:14:9f:65:c8: 00:88:da:09:39:b7:b3:15:53:b6:5f:94:b9:42:59: db:36:f3:5c:45:48:b7:81:bf:84:3a:07:68:d3:7b: 31:d5:06:ea:95:c3:09:d5:7b:38:22:7b:af:86:42: 86:53:cd:be:d6:44:ac:f3:0b:71:30:cc:23:80:72: d1:c2:a7:79:c2:9b:e2:65:05:15:2d:82:94:f9:df: f3:92:58:02:65:32:b8:13:91:af:38:13:cb:bc:67: 4c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:85:63:32:78:47:B3:22:CE:C1:C0:E2:03:87:B6:54:4A:42:FA:4D X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/51195615-aa01-4b44-ab00-63024ac9ba29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.224.196.0/23 Signature Algorithm: sha256WithRSAEncryption 80:48:f2:f4:77:60:78:54:c3:3d:59:15:84:f8:ee:90:1a:38: 3a:a7:84:c7:a1:c7:8c:4c:78:29:1b:29:e4:8b:50:c3:59:61: f0:4b:1b:63:c0:f5:cc:52:03:42:09:69:82:1a:8b:f4:72:ed: 98:0f:33:92:6e:5e:db:c2:6c:f1:71:5c:7b:5e:cf:47:49:e0: 4b:73:1d:16:54:f8:e9:27:d7:ae:6c:63:e6:e3:fb:e4:53:0f: b6:81:83:8d:8f:86:71:a8:fd:29:c4:e7:52:9f:cc:ce:12:73: 5f:41:e3:4f:b0:6a:6f:f1:91:d3:d0:e3:6e:66:3e:6e:76:6d: 36:70:74:48:c2:9e:3d:9b:1a:4c:bc:27:ae:84:9f:b1:81:e0: 0c:99:0b:4d:26:92:f8:92:dd:3a:fc:b5:bf:ef:82:01:9b:84: 93:29:b6:a1:6d:f3:c4:a7:59:29:70:78:a3:ce:c7:68:21:3f: 55:22:37:42:83:43:28:17:94:ff:71:c7:64:ec:3b:8d:68:fb: 2f:75:03:9e:5f:21:21:40:bf:8c:5d:a7:ed:eb:4c:d3:8c:27: 18:28:f6:83:09:00:38:7a:35:e9:85:a9:c7:1f:e4:8e:ad:90: 80:4b:71:29:7d:7e:11:5b:76:b5:70:ee:bf:22:2d:83:99:34: a2:64:bf:7f -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUS+WsJybL7Vdag+9fXiJn0pZC/scwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDgwMjAwMDlaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQDc5OTMxZmFmMGJiZmE3OGU0NWY0ZjgyMjc4YzkzNGY0NjcwNjhmYWRlNDE1 ZTlkMzI1ZDVmMTAwNGI0NmRjODYxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMH1jq2ight5pxoq+iNzj9vyvK/6HLTf6T/oG5q7uuZUKRacczxRJQy/QAiU QT4Xrs5qmli4VNczfvIPpwJ6mkqseQJQu+iRXwWCu1ID1iRm5UWbhDdl0eAOS15U +FQR5cl9BAerFL/FDCVjvrAcxh/lhb61k14VyVHd+LU7U0iJAmt9rXyaBSGNYoFw GusfpQu6YJGwTpwe79ZHhpHPKboUn2XIAIjaCTm3sxVTtl+UuUJZ2zbzXEVIt4G/ hDoHaNN7MdUG6pXDCdV7OCJ7r4ZChlPNvtZErPMLcTDMI4By0cKnecKb4mUFFS2C lPnf85JYAmUyuBORrzgTy7xnTOkCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSdhWMy eEezIs7BwOIDh7ZUSkL6TTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv NTExOTU2MTUtYWEwMS00YjQ0LWFiMDAtNjMwMjRhYzliYTI5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATPgxDAN BgkqhkiG9w0BAQsFAAOCAQEAgEjy9HdgeFTDPVkVhPjukBo4OqeEx6HHjEx4KRsp 5ItQw1lh8EsbY8D1zFIDQglpghqL9HLtmA8zkm5e28Js8XFce17PR0ngS3MdFlT4 6SfXrmxj5uP75FMPtoGDjY+Gcaj9KcTnUp/MzhJzX0HjT7Bqb/GR09DjbmY+bnZt NnB0SMKePZsaTLwnroSfsYHgDJkLTSaS+JLdOvy1v++CAZuEkym2oW3zxKdZKXB4 o87HaCE/VSI3QoNDKBeU/3HHZOw7jWj7L3UDnl8hIUC/jF2n7etM04wnGCj2gwkA OHo16YWpxx/kjq2QgEtxKX1+EVt2tXDuvyItg5k0omS/fw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:20:41 2025 by rpki-client