This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa File: aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa (raw, json) Hash identifier: eNagjzrz1/FFo8qTKv0j/6dOTCShHXMqDaB/uCkC2CQ= Subject key identifier: 2E:A7:B5:4A:2E:39:BF:87:BA:70:A6:4E:C3:44:6A:59:C1:07:35:6B Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 734F9F31BB8A7460A28DE28B4BCE6FD92C09EBA8 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa Signing time: Mon 08 Dec 2025 02:00:24 +0000 ROA not before: Mon 08 Dec 2025 02:00:24 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 51.224.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4f:9f:31:bb:8a:74:60:a2:8d:e2:8b:4b:ce:6f:d9:2c:09:eb:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 8 02:00:24 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=4df95bbbeea8493e0ca7624b1d3c391eca72a8cf618d01419560264c7a58842c, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:ac:b2:6c:d8:23:aa:36:15:77:91:31:74: 10:de:b1:03:22:5d:c5:34:86:43:60:1a:eb:e6:d0: 7c:42:65:eb:ae:80:b9:83:28:9b:c7:a8:82:e1:c1: 15:a5:0f:42:a5:c4:f2:30:01:ee:a5:20:d1:46:3b: b9:d0:e1:05:21:ef:bc:21:02:62:b8:ea:2b:f8:68: d5:fe:cb:c0:5b:c0:fc:7e:31:02:00:7d:09:ad:a0: 84:7e:2d:3e:d4:da:f0:f1:d2:35:fe:1e:58:8e:ae: 5f:28:ae:72:74:5a:08:6e:07:7a:25:2d:4e:9e:30: 36:fa:56:b3:30:83:50:f6:e7:77:0e:a4:4d:e2:9b: 38:29:80:a4:85:d4:e0:b2:b8:cb:77:4a:c4:96:de: cc:90:e4:b8:99:1b:ec:c8:1a:e4:86:24:39:9c:1c: d1:16:a0:f9:6c:3f:09:f3:a0:30:b2:44:37:ff:59: d8:88:ba:37:92:a3:3d:3e:9c:d6:ea:30:0c:a3:81: f7:82:8a:95:e4:d5:5f:66:56:84:5e:a4:28:7d:20: 20:8b:f4:68:f0:b7:5d:dd:99:78:56:e4:66:2f:c5: 2d:7b:3b:84:dc:d4:a3:91:ca:bf:0f:06:f2:f1:c1: 88:1a:27:ab:0b:02:8a:8a:48:d5:30:7b:12:64:20: 0e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A7:B5:4A:2E:39:BF:87:BA:70:A6:4E:C3:44:6A:59:C1:07:35:6B X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/aa9c4ef5-16fb-4222-a99f-9dc3e40c6973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.224.188.0/23 Signature Algorithm: sha256WithRSAEncryption 37:a6:14:26:71:f6:cc:4f:f3:6b:47:a6:4f:ab:f9:20:39:38: 9c:7e:4e:5a:17:3a:d2:ee:db:00:3f:c6:df:4d:b4:9f:ac:ff: eb:ff:87:66:12:9a:35:b4:dc:ab:f0:f6:81:02:22:93:98:28: 65:44:90:b0:dd:ee:22:bf:2f:27:26:be:16:59:4e:52:ce:7f: cb:3e:7b:63:2f:61:19:ed:a8:5e:dc:16:32:57:4e:2a:b4:b1: 6f:a7:8f:5b:d9:f7:1d:c2:d7:71:83:11:71:cd:23:10:c2:a3: 89:9a:5d:25:ef:1f:6e:d6:b2:38:65:41:85:26:7f:0f:83:da: cd:ab:00:b1:8e:25:87:54:a6:4c:85:38:5c:91:db:5d:cb:65: 3a:50:1e:7e:78:aa:26:fa:40:56:d2:db:df:70:fb:87:7f:9e: a3:0a:e8:14:4a:0c:7f:9a:2d:90:85:db:77:7c:b9:e9:bb:b7: 94:89:69:6f:31:2e:20:aa:04:9f:e5:ce:74:b6:2e:26:e2:03: 65:bd:36:6e:3e:aa:95:bc:65:94:6e:ef:85:ba:df:a3:51:93: 49:a8:4d:4d:6d:8b:ba:4c:84:ca:05:e5:b0:c7:04:c4:36:0f: 68:c1:2d:7d:89:de:5b:b7:e7:88:bb:c4:74:eb:ec:df:19:6d: 0f:78:2c:1e -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUc0+fMbuKdGCijeKLS85v2SwJ66gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDgwMjAwMjRaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQDRkZjk1YmJiZWVhODQ5M2UwY2E3NjI0YjFkM2MzOTFlY2E3MmE4Y2Y2MThk MDE0MTk1NjAyNjRjN2E1ODg0MmMxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQurLJs2COqNhV3kTF0EN6xAyJdxTSGQ2Aa6+bQfEJl666AuYMom8eoguHB FaUPQqXE8jAB7qUg0UY7udDhBSHvvCECYrjqK/ho1f7LwFvA/H4xAgB9Ca2ghH4t PtTa8PHSNf4eWI6uXyiucnRaCG4HeiUtTp4wNvpWszCDUPbndw6kTeKbOCmApIXU 4LK4y3dKxJbezJDkuJkb7Mga5IYkOZwc0Rag+Ww/CfOgMLJEN/9Z2Ii6N5KjPT6c 1uowDKOB94KKleTVX2ZWhF6kKH0gIIv0aPC3Xd2ZeFbkZi/FLXs7hNzUo5HKvw8G 8vHBiBonqwsCiopI1TB7EmQgDlsCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQup7VK Ljm/h7pwpk7DRGpZwQc1azAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv YWE5YzRlZjUtMTZmYi00MjIyLWE5OWYtOWRjM2U0MGM2OTczLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATPgvDAN BgkqhkiG9w0BAQsFAAOCAQEAN6YUJnH2zE/za0emT6v5IDk4nH5OWhc60u7bAD/G 3020n6z/6/+HZhKaNbTcq/D2gQIik5goZUSQsN3uIr8vJya+FllOUs5/yz57Yy9h Ge2oXtwWMldOKrSxb6ePW9n3HcLXcYMRcc0jEMKjiZpdJe8fbtayOGVBhSZ/D4Pa zasAsY4lh1SmTIU4XJHbXctlOlAefniqJvpAVtLb33D7h3+eowroFEoMf5otkIXb d3y56bu3lIlpbzEuIKoEn+XOdLYuJuIDZb02bj6qlbxllG7vhbrfo1GTSahNTW2L ukyEygXlsMcExDYPaMEtfYneW7fniLvEdOvs3xltD3gsHg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:52 2025 by rpki-client