This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10862bca-cf4b-4780-8288-bd658c6a5f77.roa File: 10862bca-cf4b-4780-8288-bd658c6a5f77.roa (raw, json) Hash identifier: atJ0Z2g1Ri8kPd6AY/yO07zRZSu1FtFZR/FUH8okrVI= Subject key identifier: 7D:12:15:B1:0F:19:88:39:C6:57:F8:20:B9:C6:EA:A6:9E:C0:DB:96 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6185E6D30505392112B5388AAE94D36925AA5468 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10862bca-cf4b-4780-8288-bd658c6a5f77.roa Signing time: Tue 13 Jan 2026 20:06:53 +0000 ROA not before: Tue 13 Jan 2026 20:06:53 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:85:e6:d3:05:05:39:21:12:b5:38:8a:ae:94:d3:69:25:aa:54:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 20:06:53 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=0a541379ac3639e413656ef09ce0f66f7e7934ec185e40d93d8f84c651253287, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:84:b8:24:a7:e6:99:ed:91:47:a8:de:97: 15:de:09:59:8b:ef:97:f0:55:88:b6:69:60:18:6d: 03:13:29:02:38:fe:5d:d2:62:34:14:1b:d6:ba:31: d3:a2:31:29:94:20:fe:4b:19:95:bd:50:92:5f:40: ee:74:a0:7d:c4:85:9c:f7:5d:55:4e:a3:af:bf:9c: 86:dc:43:50:ff:ef:9e:1e:32:f6:d0:69:bf:a3:b2: c2:7f:76:a6:fa:9c:c9:2b:6a:59:69:67:fc:b6:7d: 55:92:d2:f4:b5:03:a8:31:ef:ea:43:28:38:1b:68: b4:86:0c:4b:1e:1e:3a:03:2c:10:7b:3e:ae:70:cf: d5:ad:01:ff:f3:d3:06:49:54:ef:e8:96:54:63:85: a2:3f:9d:89:ea:5b:63:5e:1b:d2:e1:c2:32:d6:96: db:30:bb:85:59:dc:e3:80:79:7c:fc:2f:03:ea:4f: 14:40:ec:b2:d8:eb:64:20:88:52:85:67:69:fd:d7: 66:91:f2:98:3b:3c:fb:bb:8a:90:34:f1:26:13:8c: 0d:f1:79:4b:f0:92:00:61:36:f3:5d:5a:7d:f6:cf: 53:30:a4:0d:81:e9:87:86:ef:04:8b:1c:1e:fd:ac: f4:98:8f:4c:b4:ca:a1:85:5a:7d:59:8b:6f:47:f6: 67:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:12:15:B1:0F:19:88:39:C6:57:F8:20:B9:C6:EA:A6:9E:C0:DB:96 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10862bca-cf4b-4780-8288-bd658c6a5f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:c040::/48 Signature Algorithm: sha256WithRSAEncryption 46:7e:bc:cf:46:53:8b:2e:86:25:8a:81:98:c4:75:75:05:77: e4:c1:3c:dc:fd:a3:0d:1b:05:bd:c6:89:a0:d1:83:64:28:37: 22:f1:e6:55:14:a8:ae:2e:0c:30:9b:ff:e8:a3:ff:a1:31:83: bb:e9:ca:74:1f:d4:fc:5f:eb:1a:71:f6:0d:ce:03:3f:87:96: e9:3a:1e:cd:1f:7b:ec:b4:0a:f0:ae:4b:06:dd:20:6f:dd:b3: ca:57:a4:ae:72:eb:d7:9a:87:d9:1e:07:ce:7d:4d:71:de:8f: ec:62:86:5c:82:92:af:03:ea:19:a6:c5:49:8f:47:9e:18:d7: 93:57:22:26:be:8c:70:aa:2c:e9:0d:d3:f7:54:7b:ca:0e:85: 54:2e:97:ee:65:34:bb:4b:20:74:bb:14:14:2a:38:d7:3c:9c: f4:b2:e3:1d:c5:61:d5:5b:b1:5f:58:5f:3c:38:c7:bd:23:fd: 9c:36:40:43:e8:92:c0:66:ed:c7:5b:77:3e:d3:40:7e:41:37: 1a:45:ba:72:f4:44:b0:d1:5c:24:05:ff:70:bf:0c:fa:07:1f: 83:aa:cc:d1:16:0d:eb:92:c5:58:2e:c1:e9:04:3a:73:45:f6: 1a:e2:88:43:2d:47:83:bf:1d:85:c7:95:f8:d8:33:43:7d:cb: 95:68:90:f6 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUYYXm0wUFOSEStTiKrpTTaSWqVGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMyMDA2NTNaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDBhNTQxMzc5YWMzNjM5ZTQxMzY1NmVmMDljZTBmNjZmN2U3OTM0ZWMxODVl NDBkOTNkOGY4NGM2NTEyNTMyODcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVKhLgkp+aZ7ZFHqN6XFd4JWYvvl/BViLZpYBhtAxMpAjj+XdJiNBQb1rox 06IxKZQg/ksZlb1Qkl9A7nSgfcSFnPddVU6jr7+chtxDUP/vnh4y9tBpv6Oywn92 pvqcyStqWWln/LZ9VZLS9LUDqDHv6kMoOBtotIYMSx4eOgMsEHs+rnDP1a0B//PT BklU7+iWVGOFoj+diepbY14b0uHCMtaW2zC7hVnc44B5fPwvA+pPFEDsstjrZCCI UoVnaf3XZpHymDs8+7uKkDTxJhOMDfF5S/CSAGE2811affbPUzCkDYHph4bvBIsc Hv2s9JiPTLTKoYVafVmLb0f2Z/ECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR9EhWx DxmIOcZX+CC5xuqmnsDbljAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MTA4NjJiY2EtY2Y0Yi00NzgwLTgyODgtYmQ2NThjNmE1Zjc3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GvA QDANBgkqhkiG9w0BAQsFAAOCAQEARn68z0ZTiy6GJYqBmMR1dQV35ME83P2jDRsF vcaJoNGDZCg3IvHmVRSori4MMJv/6KP/oTGDu+nKdB/U/F/rGnH2Dc4DP4eW6Toe zR977LQK8K5LBt0gb92zylekrnLr15qH2R4Hzn1Ncd6P7GKGXIKSrwPqGabFSY9H nhjXk1ciJr6McKos6Q3T91R7yg6FVC6X7mU0u0sgdLsUFCo41zyc9LLjHcVh1Vux X1hfPDjHvSP9nDZAQ+iSwGbtx1t3PtNAfkE3GkW6cvREsNFcJAX/cL8M+gcfg6rM 0RYN65LFWC7B6QQ6c0X2GuKIQy1Hg78dhceV+NgzQ33LlWiQ9g== -----END CERTIFICATE-----Generated at Sat Jan 17 08:19:12 2026 by rpki-client