This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa File: e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa (raw, json) Hash identifier: 0jDS9PMKQ80HZL1dsomJsYXly3QzKyUc3OasW1CxAGg= Subject key identifier: 82:91:28:3D:1D:75:AA:B5:6A:51:33:15:A9:0A:78:50:B8:0C:08:15 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 5F36321410D0D8AB0C806674ADDBB2190B30D61E Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa Signing time: Mon 08 Dec 2025 02:00:09 +0000 ROA not before: Mon 08 Dec 2025 02:00:09 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 51.224.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:36:32:14:10:d0:d8:ab:0c:80:66:74:ad:db:b2:19:0b:30:d6:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 8 02:00:09 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=787a2e58cf0c418773228d711309e22f26c2937aeb6a06a23cb69694a7d987c8, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9a:5d:96:93:28:6b:0a:e0:c4:ff:33:62:fe: 2a:2a:be:dd:80:b2:88:1a:17:f7:93:70:9d:19:3b: 9b:30:23:8b:35:b8:90:96:0f:8c:47:23:b0:fd:7d: 50:8c:fe:51:76:25:67:b6:fb:8b:df:3c:5c:f9:d3: 38:5a:bf:81:91:d8:be:aa:04:8a:cb:c9:33:8e:a0: e5:f0:03:f7:2c:46:23:15:9a:a2:69:fd:f9:9d:56: cd:77:44:40:02:51:3a:96:5d:70:30:36:ef:0b:30: c3:85:0a:d5:0d:4b:fe:4e:22:96:6f:a3:ee:cb:76: 02:b4:42:07:91:68:c5:78:25:d5:0d:72:b3:81:a2: c7:2b:d0:50:67:8f:81:22:7e:93:a1:a9:7d:59:45: 25:a9:e8:30:4c:40:13:7d:ca:cd:86:79:e5:5e:61: 4b:1c:64:c0:af:54:a1:08:a8:92:3c:a5:60:5b:a1: 8a:7e:35:12:d5:d5:9c:71:d7:75:43:ad:b9:64:26: 1c:4b:d5:c7:6e:f1:3c:1b:da:c2:d8:f8:8d:ba:1f: 96:59:72:ac:e1:a8:e2:89:4f:7f:ec:fa:20:38:f7: dd:63:af:31:28:a0:35:09:50:ea:63:b0:c3:2c:d7: 7d:be:26:e4:9e:b5:7c:e5:6f:0e:03:1c:ce:b2:e0: ad:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:91:28:3D:1D:75:AA:B5:6A:51:33:15:A9:0A:78:50:B8:0C:08:15 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/e31b4829-a8a6-4dd2-ba5c-985e6234c3f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.224.194.0/23 Signature Algorithm: sha256WithRSAEncryption 52:4d:b3:eb:31:e1:3c:a0:c6:4f:a6:9c:db:a3:13:f9:ed:a6: d7:59:89:43:4f:02:96:38:cc:bc:fb:60:91:59:12:ba:42:1c: 17:1a:ee:94:76:50:e4:85:a0:51:71:60:5e:6c:08:54:a2:82: 58:07:af:4a:70:06:29:de:23:43:9f:bb:93:9e:a8:57:35:b5: 6b:ee:1c:ec:8b:71:d0:c3:0a:78:7a:5a:0d:ba:a1:ad:11:92: 18:96:3c:a8:23:ab:83:ed:2c:2f:c3:39:24:cd:ef:8b:8c:14: da:6d:db:f9:16:46:5c:80:c3:bc:10:a8:ba:50:56:c4:58:90: c5:36:55:d0:76:39:e8:4e:06:38:35:44:02:88:0c:73:9e:5e: 5e:94:f8:2b:4a:e2:b8:55:96:43:8d:ea:6f:aa:29:d8:ef:73: 62:07:f6:51:f0:25:a3:9f:f9:70:bf:56:59:2d:ef:30:c2:e5: e4:f4:c8:2f:55:3b:ec:01:f7:04:96:e3:d6:d1:7c:c2:98:09: f5:b4:ee:09:29:2e:54:ff:8f:07:c3:24:6b:18:80:b5:1f:ad: e4:5a:df:44:73:57:74:3a:8e:5e:73:34:57:1a:18:10:4e:97: 84:bc:2b:ca:fc:f8:7a:83:d4:60:89:04:0e:cd:24:94:ef:e4: cd:5a:15:cb -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUXzYyFBDQ2KsMgGZ0rduyGQsw1h4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDgwMjAwMDlaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQDc4N2EyZTU4Y2YwYzQxODc3MzIyOGQ3MTEzMDllMjJmMjZjMjkzN2FlYjZh MDZhMjNjYjY5Njk0YTdkOTg3YzgxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALSaXZaTKGsK4MT/M2L+Kiq+3YCyiBoX95NwnRk7mzAjizW4kJYPjEcjsP19 UIz+UXYlZ7b7i988XPnTOFq/gZHYvqoEisvJM46g5fAD9yxGIxWaomn9+Z1WzXdE QAJROpZdcDA27wsww4UK1Q1L/k4ilm+j7st2ArRCB5FoxXgl1Q1ys4GixyvQUGeP gSJ+k6GpfVlFJanoMExAE33KzYZ55V5hSxxkwK9UoQiokjylYFuhin41EtXVnHHX dUOtuWQmHEvVx27xPBvawtj4jboflllyrOGo4olPf+z6IDj33WOvMSigNQlQ6mOw wyzXfb4m5J61fOVvDgMczrLgrQECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSCkSg9 HXWqtWpRMxWpCnhQuAwIFTAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv ZTMxYjQ4MjktYThhNi00ZGQyLWJhNWMtOTg1ZTYyMzRjM2Y3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATPgwjAN BgkqhkiG9w0BAQsFAAOCAQEAUk2z6zHhPKDGT6ac26MT+e2m11mJQ08CljjMvPtg kVkSukIcFxrulHZQ5IWgUXFgXmwIVKKCWAevSnAGKd4jQ5+7k56oVzW1a+4c7Itx 0MMKeHpaDbqhrRGSGJY8qCOrg+0sL8M5JM3vi4wU2m3b+RZGXIDDvBCoulBWxFiQ xTZV0HY56E4GODVEAogMc55eXpT4K0riuFWWQ43qb6op2O9zYgf2UfAlo5/5cL9W WS3vMMLl5PTIL1U77AH3BJbj1tF8wpgJ9bTuCSkuVP+PB8MkaxiAtR+t5FrfRHNX dDqOXnM0VxoYEE6XhLwryvz4eoPUYIkEDs0klO/kzVoVyw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:48 2025 by rpki-client