This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/80c8537f-f518-4230-9f14-470ee4d649e2.roa File: 80c8537f-f518-4230-9f14-470ee4d649e2.roa (raw, json) Hash identifier: UY/68e9Qx1VtTcjhFLJlrugUlA1d+UlwUisZdEF2tDs= Subject key identifier: 17:2E:A9:BD:5E:88:59:10:8A:FC:E9:81:60:77:53:CF:C9:B6:58:99 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 5D8E06C84D24887C87A5B3F65E1BDBB5B6C86D66 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/80c8537f-f518-4230-9f14-470ee4d649e2.roa Signing time: Mon 08 Dec 2025 02:00:06 +0000 ROA not before: Mon 08 Dec 2025 02:00:06 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 51.0.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:8e:06:c8:4d:24:88:7c:87:a5:b3:f6:5e:1b:db:b5:b6:c8:6d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 8 02:00:06 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=b2539ed757cb97e87bf6df362d88130c8b095ee042b9d41da0cf6e76ed130166, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1f:3a:8e:95:98:c4:0a:f7:2d:17:32:48:7a: e0:1f:51:b7:d1:27:90:45:9e:a7:56:d9:98:74:fa: 43:d5:b7:cf:03:4a:22:a5:6d:2a:dc:ca:69:9e:a8: 16:70:ae:11:58:90:86:eb:9d:5c:59:99:b4:5c:56: c1:63:52:0d:6f:37:b5:05:3f:3c:1e:7a:26:7b:89: 28:c7:ed:e9:ee:9a:7c:0c:c0:e6:de:92:c5:ba:7c: cc:8c:92:c9:eb:a4:d5:14:d9:37:a1:67:b6:98:6c: 69:0d:f1:c0:6a:c1:75:f1:a0:5e:fa:7f:6d:a9:31: 64:be:17:04:9c:45:3f:2e:97:8f:72:b8:fa:42:46: 24:0d:07:46:8f:d7:a0:41:6d:df:62:65:ff:fa:ef: 81:b3:9b:c7:68:9c:0c:f8:c1:e5:92:87:ea:5f:4e: c3:23:4e:12:4e:ff:c9:00:81:20:75:80:34:c4:0b: f3:d0:e6:e7:92:82:0e:84:13:95:26:d3:60:a0:d1: ac:18:3d:0a:52:76:3e:21:ec:7b:27:77:ef:d4:d2: cd:b8:49:83:5f:0c:dd:68:b7:94:ed:1f:68:9b:16: f2:91:98:53:14:25:70:00:d9:a3:28:37:53:08:86: e2:a0:34:03:4a:0a:06:a3:e7:2d:9e:12:ad:0d:1d: a5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2E:A9:BD:5E:88:59:10:8A:FC:E9:81:60:77:53:CF:C9:B6:58:99 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/80c8537f-f518-4230-9f14-470ee4d649e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.0.136.0/23 Signature Algorithm: sha256WithRSAEncryption a1:d9:b0:d5:f1:ea:d5:e9:f3:64:8e:94:87:ce:e8:91:55:d6: 00:e6:27:07:6a:68:b3:2c:7b:e2:af:c3:87:97:5a:ae:ae:b0: 58:f6:db:a9:c2:02:5f:2d:2f:73:dc:2c:c5:98:19:c1:67:ad: 25:3a:87:60:d8:8b:bc:0a:30:67:50:22:8c:86:91:50:41:61: 65:74:a4:e0:5c:d4:00:17:67:03:0c:32:62:1d:ac:35:3f:0d: ad:96:ce:29:16:20:ff:6c:db:01:a9:e6:da:6c:f6:12:c2:fb: 27:b6:08:3f:33:1c:49:b0:fa:72:d6:b5:66:dc:ea:86:80:1b: 7e:4f:c3:c8:47:21:5d:11:5f:ac:03:4f:16:41:bf:56:c8:67: e0:d8:b7:a8:26:da:81:ac:39:09:e3:9a:e3:9c:27:bb:20:8c: 78:9f:3c:c5:a3:ce:a9:49:e0:06:e8:16:93:ad:5d:c8:2b:59: d3:24:13:26:67:e9:36:43:35:8e:c0:76:4a:37:51:3f:f6:df: b9:03:38:f0:11:d8:49:95:7b:11:1b:f6:c9:20:83:6b:f2:e1: c1:d3:83:d2:94:bf:3b:a5:0a:dc:e0:5a:7c:99:f1:89:e0:b1: 53:85:dd:d2:92:6b:4a:31:61:df:89:16:d0:4e:25:36:ac:46: 0f:81:b1:9a -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUXY4GyE0kiHyHpbP2XhvbtbbIbWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDgwMjAwMDZaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQGIyNTM5ZWQ3NTdjYjk3ZTg3YmY2ZGYzNjJkODgxMzBjOGIwOTVlZTA0MmI5 ZDQxZGEwY2Y2ZTc2ZWQxMzAxNjYxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIwfOo6VmMQK9y0XMkh64B9Rt9EnkEWep1bZmHT6Q9W3zwNKIqVtKtzKaZ6o FnCuEViQhuudXFmZtFxWwWNSDW83tQU/PB56JnuJKMft6e6afAzA5t6Sxbp8zIyS yeuk1RTZN6FntphsaQ3xwGrBdfGgXvp/bakxZL4XBJxFPy6Xj3K4+kJGJA0HRo/X oEFt32Jl//rvgbObx2icDPjB5ZKH6l9OwyNOEk7/yQCBIHWANMQL89Dm55KCDoQT lSbTYKDRrBg9ClJ2PiHseyd379TSzbhJg18M3Wi3lO0faJsW8pGYUxQlcADZoyg3 UwiG4qA0A0oKBqPnLZ4SrQ0dpScCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQXLqm9 XohZEIr86YFgd1PPybZYmTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv ODBjODUzN2YtZjUxOC00MjMwLTlmMTQtNDcwZWU0ZDY0OWUyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATMAiDAN BgkqhkiG9w0BAQsFAAOCAQEAodmw1fHq1enzZI6Uh87okVXWAOYnB2posyx74q/D h5darq6wWPbbqcICXy0vc9wsxZgZwWetJTqHYNiLvAowZ1AijIaRUEFhZXSk4FzU ABdnAwwyYh2sNT8NrZbOKRYg/2zbAanm2mz2EsL7J7YIPzMcSbD6cta1ZtzqhoAb fk/DyEchXRFfrANPFkG/Vshn4Ni3qCbagaw5CeOa45wnuyCMeJ88xaPOqUngBugW k61dyCtZ0yQTJmfpNkM1jsB2SjdRP/bfuQM48BHYSZV7ERv2ySCDa/LhwdOD0pS/ O6UK3OBafJnxieCxU4Xd0pJrSjFh34kW0E4lNqxGD4Gxmg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:45 2025 by rpki-client