This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/efb99c18-4a45-4f07-9c1c-080a66f77889.roa File: efb99c18-4a45-4f07-9c1c-080a66f77889.roa (raw, json) Hash identifier: 1DMdA1IZ0QRB5ADD7jLv076rse/QojS9Wc3Aph+SEJk= Subject key identifier: E9:50:30:89:AF:5E:12:97:A4:A1:C8:7E:27:59:A9:5A:73:49:62:17 Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 5EE2408C1239F8E87FA86D64259B4B2DDAD3532D Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/efb99c18-4a45-4f07-9c1c-080a66f77889.roa Signing time: Mon 08 Dec 2025 02:00:26 +0000 ROA not before: Mon 08 Dec 2025 02:00:26 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 51.0.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e2:40:8c:12:39:f8:e8:7f:a8:6d:64:25:9b:4b:2d:da:d3:53:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 8 02:00:26 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=3dbdb88fa3417176a79017ef61f8636cafb447930e9787bf300f35d33c93396e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:04:81:83:da:04:15:70:4f:3d:48:8f:11:52: e7:4e:a4:1e:f6:55:4d:86:ad:76:35:72:eb:98:87: ce:d4:de:14:da:0d:8e:0d:a8:36:fd:cd:9c:d1:b0: ae:59:07:09:22:c9:ab:79:b1:ab:5a:4a:10:71:67: 35:64:24:4a:f7:34:aa:a9:ad:5f:ad:f3:39:22:8a: 2b:ec:b6:3e:a4:20:66:7f:a0:c2:30:ea:82:a0:63: da:e5:be:1b:4f:7a:04:5c:d7:cf:d4:7a:a5:84:9f: 65:e7:25:cf:2d:df:d9:a7:72:10:e4:04:44:8e:df: c9:d7:ce:5d:0b:f2:a9:55:df:74:1d:3a:4d:51:a3: 04:46:07:c6:23:bb:d7:9c:87:d6:1e:99:f7:67:a4: 87:c8:b6:71:3c:7b:33:43:9c:e3:b8:06:61:08:ca: ca:f8:55:e6:3a:dd:9d:a5:35:57:b7:a8:64:c4:ef: 7e:65:48:25:cb:6f:ce:fd:c3:57:22:69:a4:c4:e5: b1:b3:1b:c7:7c:60:ea:d9:f7:73:2d:92:50:e2:98: fc:46:a8:10:1f:5d:6a:97:d8:31:77:81:74:15:7d: af:6d:fa:77:5e:ad:db:78:b9:83:5d:20:55:ef:a6: cf:6a:72:ad:80:7a:48:4c:30:af:be:a3:b6:02:12: 38:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:50:30:89:AF:5E:12:97:A4:A1:C8:7E:27:59:A9:5A:73:49:62:17 X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/efb99c18-4a45-4f07-9c1c-080a66f77889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.0.24.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:7d:de:bc:ad:f3:d8:6f:69:87:ae:d4:f6:c0:bc:89:b4:56: a1:23:e4:a0:95:3c:36:eb:84:d9:b4:3c:3f:8e:97:c8:e5:b6: 2e:14:80:2d:69:c5:e1:24:09:27:09:96:15:0d:d1:b8:95:13: 66:54:4c:67:5c:7f:49:57:6d:30:02:ca:a5:6d:48:5c:11:8c: 58:16:4f:e0:86:ec:d3:20:1b:65:1d:0b:d9:44:72:06:4e:83: 00:bf:9a:15:47:ae:3b:3b:35:9a:6e:df:60:c1:46:51:15:dd: c8:6e:d9:ab:80:93:1c:20:c4:bd:31:cb:16:c6:9a:9c:01:a0: c1:13:57:1e:93:0f:27:15:12:8e:4d:d1:4c:90:35:4c:3e:67: 13:bc:cf:47:f9:e2:a5:5a:64:34:75:94:ac:ab:ed:51:65:f6: b8:7b:f4:26:b2:6a:e0:33:52:87:c5:17:a1:eb:9e:a0:d4:f0: e8:2c:ab:0c:36:60:c9:ad:1a:be:ab:d1:e6:95:55:ae:15:53: 1a:ad:5c:68:3a:c3:09:8a:0e:79:de:40:8d:48:1d:17:a6:80: d1:04:60:7a:d1:88:59:4a:e1:5f:4e:c1:fa:f3:f4:88:05:01: 0f:e1:a8:29:28:de:f1:e6:f3:8a:72:bc:cc:8c:e5:e7:c8:5e: ca:a3:0f:03 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUXuJAjBI5+Oh/qG1kJZtLLdrTUy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDgwMjAwMjZaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQDNkYmRiODhmYTM0MTcxNzZhNzkwMTdlZjYxZjg2MzZjYWZiNDQ3OTMwZTk3 ODdiZjMwMGYzNWQzM2M5MzM5NmUxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0EgYPaBBVwTz1IjxFS506kHvZVTYatdjVy65iHztTeFNoNjg2oNv3NnNGw rlkHCSLJq3mxq1pKEHFnNWQkSvc0qqmtX63zOSKKK+y2PqQgZn+gwjDqgqBj2uW+ G096BFzXz9R6pYSfZeclzy3f2adyEOQERI7fydfOXQvyqVXfdB06TVGjBEYHxiO7 15yH1h6Z92ekh8i2cTx7M0Oc47gGYQjKyvhV5jrdnaU1V7eoZMTvfmVIJctvzv3D VyJppMTlsbMbx3xg6tn3cy2SUOKY/EaoEB9dapfYMXeBdBV9r236d16t23i5g10g Ve+mz2pyrYB6SEwwr76jtgISOBMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTpUDCJ r14Sl6ShyH4nWalac0liFzAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv ZWZiOTljMTgtNGE0NS00ZjA3LTljMWMtMDgwYTY2Zjc3ODg5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAjMAGDAN BgkqhkiG9w0BAQsFAAOCAQEAH33evK3z2G9ph67U9sC8ibRWoSPkoJU8NuuE2bQ8 P46XyOW2LhSALWnF4SQJJwmWFQ3RuJUTZlRMZ1x/SVdtMALKpW1IXBGMWBZP4Ibs 0yAbZR0L2URyBk6DAL+aFUeuOzs1mm7fYMFGURXdyG7Zq4CTHCDEvTHLFsaanAGg wRNXHpMPJxUSjk3RTJA1TD5nE7zPR/nipVpkNHWUrKvtUWX2uHv0JrJq4DNSh8UX oeueoNTw6CyrDDZgya0avqvR5pVVrhVTGq1caDrDCYoOed5AjUgdF6aA0QRgetGI WUrhX07B+vP0iAUBD+GoKSje8ebzinK8zIzl58heyqMPAw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:50 2025 by rpki-client