This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/566f9159-e271-4224-9cc9-33a554331509.roa File: 566f9159-e271-4224-9cc9-33a554331509.roa (raw, json) Hash identifier: tjK/KXfvd2ub9dnilcZxE6gkEqCghNgonTdaP94jBKc= Subject key identifier: AF:6E:6C:9E:99:37:0C:4E:97:91:EA:9B:A1:E5:C7:E5:01:14:42:1B Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 6311E35880EAC47ED414EAD508DFA07831AFBF93 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/566f9159-e271-4224-9cc9-33a554331509.roa Signing time: Mon 08 Dec 2025 02:00:07 +0000 ROA not before: Mon 08 Dec 2025 02:00:07 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 51.0.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:11:e3:58:80:ea:c4:7e:d4:14:ea:d5:08:df:a0:78:31:af:bf:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 8 02:00:07 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=350c5c1202f0c9f3b6bac215ef5591ad6ce5b468afd2b1353f4668df58b68f69, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d3:76:70:ed:e2:fc:21:0a:81:b4:73:04:8a: dd:ed:89:00:be:59:e7:b1:93:09:2f:49:82:b9:5f: 7c:7f:52:3d:c2:aa:94:73:55:22:b0:8e:69:6a:8f: 22:03:5f:73:3c:6d:60:e6:34:aa:b5:13:28:56:91: fa:56:53:35:a0:a5:07:35:67:82:1f:96:00:4d:34: 74:77:ed:26:1e:39:90:11:29:94:aa:92:ab:93:6a: fb:de:e8:eb:68:4c:27:da:26:fc:9a:4f:da:f2:25: a4:e8:e8:5a:29:7f:82:dc:30:be:f6:00:c3:e3:35: 96:ec:f2:2b:27:89:c5:96:ce:57:67:a6:e8:ac:48: d3:5f:15:f3:3f:c9:86:de:04:07:97:ea:48:a2:65: 76:71:81:c1:d6:19:cb:74:5a:33:7a:cf:8e:25:4c: 4f:13:52:31:4a:a3:bb:9a:7c:6c:39:a7:34:7d:c0: 20:b6:50:48:33:58:75:b1:6a:d2:07:0e:9a:b7:8a: 45:d2:10:d9:fd:8f:b1:76:fb:c2:74:21:90:96:73: ce:96:37:97:cf:54:2e:9c:7a:34:6d:bf:88:1c:54: 65:87:2e:b0:24:30:22:3e:71:10:9e:d7:ee:4b:d7: 52:70:58:3a:a0:5b:75:2c:91:e9:21:52:ad:cb:ec: 96:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6E:6C:9E:99:37:0C:4E:97:91:EA:9B:A1:E5:C7:E5:01:14:42:1B X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/566f9159-e271-4224-9cc9-33a554331509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.0.0.0/19 Signature Algorithm: sha256WithRSAEncryption b9:3f:9a:8d:1b:2f:e6:0e:b2:83:8a:b7:7a:de:48:38:51:c9: cf:be:63:ab:2c:b2:e5:93:f7:9b:8f:51:98:98:09:8d:5c:3b: ea:fa:53:bd:6d:11:93:43:e0:7b:eb:41:9c:f7:1d:25:2c:f6: 25:58:f0:93:c9:17:94:6e:54:23:50:01:a2:14:9a:43:f1:00: b7:5c:18:42:3e:f5:2f:62:83:8f:af:30:b2:37:ac:e0:95:28: d8:bc:ab:a5:2e:0b:71:40:09:fe:13:9a:7d:25:be:34:66:36: 38:63:84:a5:48:93:2a:f5:24:86:1a:50:b0:17:f0:a0:8a:a0: 1f:4a:da:1f:b3:29:91:51:6e:41:23:54:11:68:fd:ab:b5:25: 8c:2d:e3:9f:9b:81:a6:d5:db:e4:0b:86:2c:29:da:f4:4f:2e: 2c:98:04:f0:be:bd:d4:97:8d:65:cd:d3:bd:be:79:e8:42:fb: 4c:99:56:0a:04:df:74:d2:20:62:6d:40:75:c6:eb:d1:a6:20: 25:45:7c:1c:e3:97:90:c6:fc:be:e8:dc:61:ec:46:cd:20:da: 03:ce:98:ff:c6:5e:f9:84:82:eb:8d:04:e5:45:d7:3b:ae:cf: 5a:08:96:e0:d2:ca:ab:38:48:07:3b:d1:a0:d6:5e:ca:b1:f0: d3:8d:1e:91 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUYxHjWIDqxH7UFOrVCN+geDGvv5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDgwMjAwMDdaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQDM1MGM1YzEyMDJmMGM5ZjNiNmJhYzIxNWVmNTU5MWFkNmNlNWI0NjhhZmQy YjEzNTNmNDY2OGRmNThiNjhmNjkxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJvTdnDt4vwhCoG0cwSK3e2JAL5Z57GTCS9JgrlffH9SPcKqlHNVIrCOaWqP IgNfczxtYOY0qrUTKFaR+lZTNaClBzVngh+WAE00dHftJh45kBEplKqSq5Nq+97o 62hMJ9om/JpP2vIlpOjoWil/gtwwvvYAw+M1luzyKyeJxZbOV2em6KxI018V8z/J ht4EB5fqSKJldnGBwdYZy3RaM3rPjiVMTxNSMUqju5p8bDmnNH3AILZQSDNYdbFq 0gcOmreKRdIQ2f2PsXb7wnQhkJZzzpY3l89ULpx6NG2/iBxUZYcusCQwIj5xEJ7X 7kvXUnBYOqBbdSyR6SFSrcvslpUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSvbmye mTcMTpeR6puh5cflARRCGzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv NTY2ZjkxNTktZTI3MS00MjI0LTljYzktMzNhNTU0MzMxNTA5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTMAADAN BgkqhkiG9w0BAQsFAAOCAQEAuT+ajRsv5g6yg4q3et5IOFHJz75jqyyy5ZP3m49R mJgJjVw76vpTvW0Rk0Pge+tBnPcdJSz2JVjwk8kXlG5UI1ABohSaQ/EAt1wYQj71 L2KDj68wsjes4JUo2LyrpS4LcUAJ/hOafSW+NGY2OGOEpUiTKvUkhhpQsBfwoIqg H0raH7MpkVFuQSNUEWj9q7UljC3jn5uBptXb5AuGLCna9E8uLJgE8L691JeNZc3T vb556EL7TJlWCgTfdNIgYm1Adcbr0aYgJUV8HOOXkMb8vujcYexGzSDaA86Y/8Ze +YSC640E5UXXO67PWgiW4NLKqzhIBzvRoNZeyrHw040ekQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:41 2025 by rpki-client