This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f301beb-477a-41c9-9c3a-14517ff754d9.roa File: 0f301beb-477a-41c9-9c3a-14517ff754d9.roa (raw, json) Hash identifier: YGoxKWPUXldwYeP6y7Brevh6e4CxWFoNvAx4XFd0+9w= Subject key identifier: 8E:A4:20:29:45:EC:13:FB:D9:52:02:2C:1B:D5:C6:41:E5:C4:82:11 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 2664BB06C2EE78F2D3291EAD2A0F8587135891C7 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f301beb-477a-41c9-9c3a-14517ff754d9.roa Signing time: Tue 13 Jan 2026 19:58:21 +0000 ROA not before: Tue 13 Jan 2026 19:58:21 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:2040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:64:bb:06:c2:ee:78:f2:d3:29:1e:ad:2a:0f:85:87:13:58:91:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:21 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=e8b805b75bef53df72344138d4183e86b7ff2175a89f39578eb88ac11c47b04f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:77:c4:61:4e:07:be:0a:97:f1:af:98:a8:67: 7a:45:14:f0:43:8c:23:6b:91:3f:43:cd:bd:fa:4c: 65:0e:30:2e:4a:82:2e:63:c2:d5:a5:84:21:bd:f1: 65:90:7c:c6:64:af:9e:c5:ce:d3:5a:98:6b:80:23: 07:a8:e5:95:b5:f4:f5:5c:7c:3e:8c:9a:58:16:a6: 0f:8d:94:68:c7:97:5b:23:4e:7a:0f:c1:f9:0c:cb: 70:f6:f4:b0:7c:2b:3b:f9:51:d3:67:81:ab:21:e4: 8c:3c:98:9e:8c:47:7f:9b:bb:83:ff:11:35:d3:30: 32:94:28:e9:79:9e:21:40:d2:35:0c:71:6e:f7:1b: f8:3d:5e:c8:ed:15:d2:14:6c:cc:b9:ba:58:e2:62: e1:f5:a3:49:33:d2:58:23:90:37:4b:53:fe:ce:d2: c8:de:3c:eb:99:93:4c:f6:d2:b2:85:8b:bf:f9:f5: 13:5b:5c:e2:41:e2:80:04:0a:59:4c:03:fa:05:d1: fa:19:ad:58:32:f0:58:b4:9c:fe:cc:99:d5:47:a4: c1:37:8c:bb:01:25:b8:49:65:69:7a:f0:93:76:5c: cc:1a:09:0b:50:a7:96:c7:b2:88:82:4d:4a:89:c2: 11:c9:43:ea:3f:de:49:24:f8:2b:a4:db:58:af:45: 7e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A4:20:29:45:EC:13:FB:D9:52:02:2C:1B:D5:C6:41:E5:C4:82:11 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f301beb-477a-41c9-9c3a-14517ff754d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:2040::/48 Signature Algorithm: sha256WithRSAEncryption 07:20:e2:17:7b:a1:7d:53:86:0e:88:96:ff:9a:70:60:91:c1: dc:96:40:de:4c:51:f4:db:ae:be:ff:b7:06:d4:b3:4a:3a:e2: 7b:5f:ef:70:87:b2:7c:f0:a2:26:1a:6f:0b:73:4f:1e:09:11: 14:2f:50:48:fd:13:ad:34:08:de:58:9d:0f:29:be:a6:05:a1: 9c:11:74:dc:7b:2e:c0:7c:8c:59:6d:55:d0:36:29:c1:6d:0d: fa:27:be:51:bf:52:2f:db:a1:e3:e0:ee:56:2f:ce:44:61:ff: f8:15:18:99:77:eb:10:f1:6f:52:dd:2e:bb:ee:d9:db:7c:30: 7c:17:91:73:62:0a:e5:37:03:e7:55:b7:fa:f4:dc:12:35:e5: 51:35:f6:3f:22:cf:23:7c:0a:a3:ba:aa:78:3a:3b:9e:7c:c0: 7c:38:eb:55:24:ad:c1:bb:34:20:b8:89:7b:0a:d4:a5:9f:8d: 20:d8:82:71:28:f3:37:56:19:02:e3:49:ce:42:51:ff:5f:7e: 01:d4:b1:56:e8:d4:f7:65:97:b3:5b:10:de:92:46:80:12:8d: 0a:ac:01:7f:fe:d6:0c:b0:f5:ff:28:2d:4c:1b:74:6b:ef:09: 49:71:22:c6:a6:aa:fe:3e:23:1f:c0:84:3c:11:30:01:6b:0f: c5:b6:8e:ad -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUJmS7BsLuePLTKR6tKg+FhxNYkccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MjFaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQGU4YjgwNWI3NWJlZjUzZGY3MjM0NDEzOGQ0MTgzZTg2YjdmZjIxNzVhODlm Mzk1NzhlYjg4YWMxMWM0N2IwNGYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOl3xGFOB74Kl/GvmKhnekUU8EOMI2uRP0PNvfpMZQ4wLkqCLmPC1aWEIb3x ZZB8xmSvnsXO01qYa4AjB6jllbX09Vx8PoyaWBamD42UaMeXWyNOeg/B+QzLcPb0 sHwrO/lR02eBqyHkjDyYnoxHf5u7g/8RNdMwMpQo6XmeIUDSNQxxbvcb+D1eyO0V 0hRszLm6WOJi4fWjSTPSWCOQN0tT/s7SyN4865mTTPbSsoWLv/n1E1tc4kHigAQK WUwD+gXR+hmtWDLwWLSc/syZ1UekwTeMuwEluEllaXrwk3ZczBoJC1CnlseyiIJN SonCEclD6j/eSST4K6TbWK9Ffr0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSOpCAp RewT+9lSAiwb1cZB5cSCETAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MGYzMDFiZWItNDc3YS00MWM5LTljM2EtMTQ1MTdmZjc1NGQ5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gsg QDANBgkqhkiG9w0BAQsFAAOCAQEAByDiF3uhfVOGDoiW/5pwYJHB3JZA3kxR9Nuu vv+3BtSzSjrie1/vcIeyfPCiJhpvC3NPHgkRFC9QSP0TrTQI3lidDym+pgWhnBF0 3HsuwHyMWW1V0DYpwW0N+ie+Ub9SL9uh4+DuVi/ORGH/+BUYmXfrEPFvUt0uu+7Z 23wwfBeRc2IK5TcD51W3+vTcEjXlUTX2PyLPI3wKo7qqeDo7nnzAfDjrVSStwbs0 ILiJewrUpZ+NINiCcSjzN1YZAuNJzkJR/19+AdSxVujU92WXs1sQ3pJGgBKNCqwB f/7WDLD1/ygtTBt0a+8JSXEixqaq/j4jH8CEPBEwAWsPxbaOrQ== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:27 2026 by rpki-client