This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a03743d5-cfd6-4197-b45f-ad742e8f2a99.roa File: a03743d5-cfd6-4197-b45f-ad742e8f2a99.roa (raw, json) Hash identifier: CsAPbSpOnLjggjg3iZmxksRJlmRpYYVi91gttYLRt08= Subject key identifier: 6D:12:26:0F:17:EE:7A:0F:FC:EC:27:AD:19:98:C8:C7:6A:CE:1C:E3 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 070F2F45E17B3811256166056F8C6929FFD68E18 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a03743d5-cfd6-4197-b45f-ad742e8f2a99.roa Signing time: Mon 08 Dec 2025 02:00:23 +0000 ROA not before: Mon 08 Dec 2025 02:00:23 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 51.72.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:0f:2f:45:e1:7b:38:11:25:61:66:05:6f:8c:69:29:ff:d6:8e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 8 02:00:23 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=d2fbc0ad40120a934077edfef900deb03a0b29bedb6466f1b7e12556f3c26918, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a4:dd:7f:ad:36:44:10:db:d6:23:2f:60:99: ea:19:07:dd:25:23:16:3b:41:2a:7f:26:70:c6:41: 7e:71:cc:0c:b9:7e:f2:4f:63:e1:e7:15:c1:c5:df: d5:59:87:cc:2b:9c:24:b1:05:b6:2e:a9:0e:21:a0: ba:75:a2:7f:16:23:0b:a2:7d:b8:61:37:92:fa:0b: 47:5a:ce:93:89:13:b8:b8:85:26:75:67:b5:18:12: de:3d:40:5c:93:3c:f1:68:cd:02:70:03:15:e8:6c: 31:55:dd:78:62:eb:f3:e2:9a:5f:29:d9:b0:89:53: 5e:b1:df:0a:25:26:dc:99:a6:66:f6:6e:ca:9f:ae: 1f:7c:7a:67:d6:e8:f6:18:f3:87:2d:48:de:75:0a: 5f:53:5d:b3:5a:21:5a:2d:df:3b:9e:a5:7d:7d:73: 2a:08:aa:9c:75:15:d2:0a:95:21:84:86:e5:41:40: 04:88:f9:e4:c8:76:2c:10:0a:ff:94:dd:4f:55:0c: 3d:00:19:f2:eb:34:08:04:72:24:4a:75:8e:f4:39: ed:e5:cc:01:8f:51:63:d1:75:4e:74:f5:9f:ff:b3: f2:2e:76:42:02:6e:29:69:48:4a:bf:bc:88:a3:db: 43:97:bf:35:d0:88:d7:ca:30:1f:a5:9a:7a:4b:7f: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:12:26:0F:17:EE:7A:0F:FC:EC:27:AD:19:98:C8:C7:6A:CE:1C:E3 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/a03743d5-cfd6-4197-b45f-ad742e8f2a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.72.0.0/15 Signature Algorithm: sha256WithRSAEncryption 82:64:bc:de:63:c5:e6:4f:56:a0:5a:4c:2f:50:ac:ff:1c:79: ce:4a:96:36:89:e2:02:cc:53:f6:f0:4d:96:96:5a:8f:6b:6b: 5c:ec:73:0f:35:4f:6d:10:8b:a1:84:80:73:fd:94:c7:e2:92: 37:0e:8f:cb:13:7f:0f:c4:ef:7f:70:45:d8:e6:00:5a:0e:ec: f0:85:24:23:99:83:bc:ea:f3:3c:18:8e:71:75:b4:76:a3:7a: d3:e0:db:44:56:25:2f:d6:a5:d6:b2:fe:1d:d3:ec:ba:c4:d7: fa:e9:e7:72:00:6a:f3:9d:60:54:aa:8a:f4:89:28:31:7c:1c: 4c:75:5d:69:83:27:8b:77:f1:09:21:34:8d:00:8e:01:38:cf: a3:8e:c0:b8:c8:59:51:77:eb:63:50:e9:62:20:dd:26:21:8d: 45:4d:01:e3:7e:83:2c:cb:56:e0:88:8e:17:b8:c9:0e:9e:08: f8:9f:3f:de:da:45:ff:d9:ba:59:6d:1c:e3:a1:8c:dd:99:fd: b5:d5:b4:df:50:c6:3b:54:be:f4:ea:86:4f:12:08:e0:7a:df: ef:c3:fe:a5:94:04:ba:ed:86:c1:d7:7f:ac:16:c0:17:5f:fe: 86:75:81:6c:10:d2:77:8f:29:5a:a6:3b:bc:b9:d4:cd:13:f4: 83:89:14:75 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUBw8vReF7OBElYWYFb4xpKf/WjhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDgwMjAwMjNaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQGQyZmJjMGFkNDAxMjBhOTM0MDc3ZWRmZWY5MDBkZWIwM2EwYjI5YmVkYjY0 NjZmMWI3ZTEyNTU2ZjNjMjY5MTgxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMyk3X+tNkQQ29YjL2CZ6hkH3SUjFjtBKn8mcMZBfnHMDLl+8k9j4ecVwcXf 1VmHzCucJLEFti6pDiGgunWifxYjC6J9uGE3kvoLR1rOk4kTuLiFJnVntRgS3j1A XJM88WjNAnADFehsMVXdeGLr8+KaXynZsIlTXrHfCiUm3JmmZvZuyp+uH3x6Z9bo 9hjzhy1I3nUKX1Nds1ohWi3fO56lfX1zKgiqnHUV0gqVIYSG5UFABIj55Mh2LBAK /5TdT1UMPQAZ8us0CARyJEp1jvQ57eXMAY9RY9F1TnT1n/+z8i52QgJuKWlISr+8 iKPbQ5e/NdCI18owH6Waekt/pvsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBRtEiYP F+56D/zsJ60ZmMjHas4c4zAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv YTAzNzQzZDUtY2ZkNi00MTk3LWI0NWYtYWQ3NDJlOGYyYTk5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATNIMA0G CSqGSIb3DQEBCwUAA4IBAQCCZLzeY8XmT1agWkwvUKz/HHnOSpY2ieICzFP28E2W llqPa2tc7HMPNU9tEIuhhIBz/ZTH4pI3Do/LE38PxO9/cEXY5gBaDuzwhSQjmYO8 6vM8GI5xdbR2o3rT4NtEViUv1qXWsv4d0+y6xNf66edyAGrznWBUqor0iSgxfBxM dV1pgyeLd/EJITSNAI4BOM+jjsC4yFlRd+tjUOliIN0mIY1FTQHjfoMsy1bgiI4X uMkOngj4nz/e2kX/2bpZbRzjoYzdmf211bTfUMY7VL706oZPEgjget/vw/6llAS6 7YbB13+sFsAXX/6GdYFsENJ3jylapju8udTNE/SDiRR1 -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:52 2025 by rpki-client