This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fe3ce580-d204-4167-8723-0a480c50b6ad.roa File: fe3ce580-d204-4167-8723-0a480c50b6ad.roa (raw, json) Hash identifier: ux7G2m9Gzf9cSsfiYazvIS2kpMJPtkedRRBKl5Mbmr0= Subject key identifier: 5D:93:E2:75:FE:9B:7F:D6:0C:E5:F3:04:69:58:F1:DA:59:C6:5B:9A Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0 Certificate serial: 7969FFD0653697636BEED1D7441B5729FAD0EE36 Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fe3ce580-d204-4167-8723-0a480c50b6ad.roa Signing time: Mon 08 Dec 2025 02:00:04 +0000 ROA not before: Mon 08 Dec 2025 02:00:04 +0000 ROA not after: Sun 08 Mar 2026 23:59:59 +0000 asID: 16509 IP address blocks: 193.202.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:69:ff:d0:65:36:97:63:6b:ee:d1:d7:44:1b:57:29:fa:d0:ee:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0 Validity Not Before: Dec 8 02:00:04 2025 GMT Not After : Mar 8 23:59:59 2026 GMT Subject: serialNumber=0c777d2fbf5ca7a39c6f4dd063a4f03078dc3ddc307e6e5aa4273ca6902e7c33, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:22:fa:3d:04:7e:04:9b:27:ec:3e:5f:11: f2:9e:18:d6:ca:3c:67:a1:92:f0:62:64:04:6e:82: 66:1a:34:03:14:fb:04:10:41:df:47:a3:5c:e7:53: ed:bc:62:fe:85:d8:3d:77:af:4a:a4:c7:5e:f5:d4: f0:24:bb:f3:95:48:2b:d3:ea:84:4e:ab:c2:a1:15: 5d:7a:6e:ec:52:a2:53:52:3e:f7:06:a5:b1:83:cf: 3a:b6:28:c3:06:3e:89:54:13:ee:dc:1b:b1:34:f3: d2:05:44:e3:2a:16:3d:f2:8b:e0:e6:17:27:50:64: 9a:79:af:d1:eb:fa:3f:8f:98:25:88:b1:7d:44:f4: b9:48:15:03:c4:bf:db:44:e0:f5:f9:3c:ac:ef:03: 3e:58:f3:64:e5:bc:52:eb:19:38:d1:2b:72:d8:9c: 68:1c:c3:50:dc:28:17:0e:1c:4c:e2:5b:94:af:66: 6c:66:81:e6:f0:63:2d:a8:fd:22:31:07:b5:f8:c2: b1:d5:ed:47:fc:7c:7b:a4:ae:27:e0:53:57:96:3d: 0c:61:56:f8:98:da:e0:4e:e3:82:ab:95:47:82:46: 56:56:3e:44:c9:f7:50:3a:59:22:25:42:e3:92:63: a3:78:81:26:68:55:38:e2:4a:82:43:ac:77:10:f0: 7f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:93:E2:75:FE:9B:7F:D6:0C:E5:F3:04:69:58:F1:DA:59:C6:5B:9A X509v3 Authority Key Identifier: keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/fe3ce580-d204-4167-8723-0a480c50b6ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.202.192.0/19 Signature Algorithm: sha256WithRSAEncryption c1:17:ef:2a:ba:2b:3b:d6:eb:df:ba:88:1c:00:81:ff:e0:a4: 0f:41:7f:e7:77:34:84:94:f0:14:4b:26:d7:93:18:7c:b2:ea: 45:a7:77:3c:33:52:cf:59:71:70:5a:08:b1:dd:06:ce:6f:ba: 5b:63:1c:e3:2c:d3:39:64:e2:ab:aa:f6:ef:2a:f7:44:83:5d: 0b:12:b7:de:e0:40:27:eb:59:bf:3b:9b:5c:71:13:fe:20:8c: 31:39:eb:20:1b:8d:b5:de:19:f9:ec:07:20:ef:b0:c2:64:67: d3:dd:5e:c0:84:09:30:4b:56:21:c8:a2:64:11:18:6d:40:c9: 61:e1:af:08:e8:e2:16:70:39:5a:69:44:c6:81:a9:0a:a6:a8: 14:be:e3:7a:07:81:38:7a:9b:75:ce:89:78:e6:83:45:6a:15: f8:86:9b:28:2c:56:ae:97:4c:07:c9:a2:90:7a:a6:dc:60:89: d0:49:84:76:9a:c1:26:2d:0c:4f:c0:b7:9e:d8:84:63:50:52: a8:60:a4:67:68:89:c3:88:94:b1:21:d5:b5:a0:2d:71:c5:1b: a4:a8:c2:84:25:e8:26:df:51:fe:8b:bc:c2:46:9a:93:25:97: 3a:8d:0d:fd:7d:93:82:bf:0e:cb:44:9a:b8:ac:00:93:12:39: 67:56:06:8e -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUeWn/0GU2l2Nr7tHXRBtXKfrQ7jYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGY3NTliNWFmM2RhNmM5ZGYwMzNiMGRlOTk4OTcwYTRl Nzk2NTVkMDAeFw0yNTEyMDgwMjAwMDRaFw0yNjAzMDgyMzU5NTlaMHoxSTBHBgNV BAUTQDBjNzc3ZDJmYmY1Y2E3YTM5YzZmNGRkMDYzYTRmMDMwNzhkYzNkZGMzMDdl NmU1YWE0MjczY2E2OTAyZTdjMzMxLTArBgNVBAMTJDk4ZDY3ZGViLWJiNzUtNGU3 Ny1iMWEwLTM2MDE2YjJkNjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALp1Ivo9BH4EmyfsPl8R8p4Y1so8Z6GS8GJkBG6CZho0AxT7BBBB30ejXOdT 7bxi/oXYPXevSqTHXvXU8CS785VIK9PqhE6rwqEVXXpu7FKiU1I+9walsYPPOrYo wwY+iVQT7twbsTTz0gVE4yoWPfKL4OYXJ1Bkmnmv0ev6P4+YJYixfUT0uUgVA8S/ 20Tg9fk8rO8DPljzZOW8UusZONErcticaBzDUNwoFw4cTOJblK9mbGaB5vBjLaj9 IjEHtfjCsdXtR/x8e6SuJ+BTV5Y9DGFW+Jja4E7jgquVR4JGVlY+RMn3UDpZIiVC 45Jjo3iBJmhVOOJKgkOsdxDwf1MCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRdk+J1 /pt/1gzl8wRpWPHaWcZbmjAfBgNVHSMEGDAWgBTfdZta89psnfAzsN6ZiXCk55ZV 0DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzV2JXdlBh Ykozd003RGVtWWx3cE9lV1ZkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9mZTM3MzdmYi0wOTVkLTQ0NGMtOTJmNC0zZjcyMjFmYjU0NGMv ZmUzY2U1ODAtZDIwNC00MTY3LTg3MjMtMGE0ODBjNTBiNmFkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZmUzNzM3ZmItMDk1ZC00NDRjLTkyZjQtM2Y3MjIxZmI1 NDRjLzBYRTV0WlZ5dUdlYUFfaDctMXFCcDdhWTRTby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcHKwDAN BgkqhkiG9w0BAQsFAAOCAQEAwRfvKrorO9br37qIHACB/+CkD0F/53c0hJTwFEsm 15MYfLLqRad3PDNSz1lxcFoIsd0Gzm+6W2Mc4yzTOWTiq6r27yr3RINdCxK33uBA J+tZvzubXHET/iCMMTnrIBuNtd4Z+ewHIO+wwmRn091ewIQJMEtWIciiZBEYbUDJ YeGvCOjiFnA5WmlExoGpCqaoFL7jegeBOHqbdc6JeOaDRWoV+IabKCxWrpdMB8mi kHqm3GCJ0EmEdprBJi0MT8C3ntiEY1BSqGCkZ2iJw4iUsSHVtaAtccUbpKjChCXo Jt9R/ou8wkaakyWXOo0N/X2Tgr8Oy0SauKwAkxI5Z1YGjg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:41 2025 by rpki-client