This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b481025-758b-4274-9258-687a3a99b530.roa File: 1b481025-758b-4274-9258-687a3a99b530.roa (raw, json) Hash identifier: 8/73j9NKbWORkoDm+R6vRhAk4laaZ1QTsqipPBWWv4M= Subject key identifier: EA:BE:D1:69:9D:4C:0F:2B:41:7E:6D:6E:04:26:EE:C0:00:94:F9:AA Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6233D0896CF2B17D836BE1DB8E64C2D84838342E Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b481025-758b-4274-9258-687a3a99b530.roa Signing time: Tue 13 Jan 2026 20:06:55 +0000 ROA not before: Tue 13 Jan 2026 20:06:55 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:33:d0:89:6c:f2:b1:7d:83:6b:e1:db:8e:64:c2:d8:48:38:34:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 20:06:55 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=3855d3782c763d143f847ffdaa7a60702ee09f202819ac4e0b472e577f349dfc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:69:f0:4d:2b:bb:03:97:62:b6:93:c3:83: 87:d7:93:b0:27:b5:b7:c2:4c:57:ce:35:69:ab:31: 13:ce:0c:69:0e:4f:f0:5c:75:79:57:c4:8a:46:64: 2d:a8:c5:d3:2a:67:9c:ab:22:7b:5d:53:39:3c:81: b9:f8:12:76:4c:f4:80:20:08:ef:c9:d0:fc:03:7a: be:00:97:12:8c:cd:1d:be:6a:78:19:da:a6:94:2a: bf:48:be:72:94:15:43:7b:82:4f:16:b6:1c:5d:55: 7d:c9:6d:c1:63:f2:09:d1:f5:fc:76:5e:05:03:73: e9:9c:18:e2:66:c1:28:11:91:c5:dd:b6:2d:22:14: 08:84:d2:a7:f8:54:39:0e:4e:3e:22:93:8f:07:5f: 28:7a:7d:ed:3c:48:54:7d:84:d5:96:87:f9:9e:93: d0:9f:6c:48:7d:6c:a5:e2:ed:33:fe:de:4e:86:bb: 9b:2a:c3:22:36:9f:c7:f5:e0:12:de:19:0e:e8:b3: b7:a3:67:6c:04:ea:81:38:1b:03:fc:6a:6c:aa:37: 2f:7d:84:d6:7b:a8:83:0e:62:6d:38:b2:0e:b9:34: f7:09:ff:52:1e:2a:81:b9:a8:ca:86:2e:b1:95:21: 7c:38:69:ef:d5:3f:da:9d:bb:04:fb:7c:94:fb:d4: 9e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BE:D1:69:9D:4C:0F:2B:41:7E:6D:6E:04:26:EE:C0:00:94:F9:AA X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1b481025-758b-4274-9258-687a3a99b530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:e040::/48 Signature Algorithm: sha256WithRSAEncryption 4c:50:df:e2:77:0e:d6:10:11:60:0c:a0:55:3c:af:75:54:ec: c9:63:cd:e0:49:bb:a6:6e:b3:d8:e2:4e:ab:07:b1:41:ec:f9: ab:b9:40:54:d0:77:bc:b0:e3:97:52:fa:80:8f:d4:77:17:e4: 24:05:ea:d0:5f:cc:28:43:c8:28:89:e8:16:f2:dc:ea:d9:72: bb:38:3f:78:78:36:51:94:03:ae:fe:07:58:98:71:06:17:6c: 8e:5c:7a:22:d1:08:39:eb:23:03:5c:3a:95:84:1c:79:6a:36: fe:11:d2:2c:5a:65:55:f6:a3:71:dd:78:8e:21:c9:33:9d:74: 4b:09:72:dd:64:04:10:a1:19:16:4a:8b:51:50:0a:2b:98:cf: 57:9f:df:3f:ca:68:d5:fa:54:7b:8e:42:0f:87:2c:10:92:e1: e3:de:ca:46:ad:20:82:d6:d0:6b:cf:e9:ea:9e:89:d8:e7:60: 9b:39:d6:8e:ba:78:f7:f3:f6:2e:0b:9f:f5:7c:73:b6:11:dc: 45:82:50:4b:83:18:e5:ab:6f:46:c1:dd:22:90:c5:9c:f3:a6: b1:62:33:c3:26:5d:2a:e0:0e:05:91:31:40:a0:e3:49:9f:0d: 42:0d:bf:7e:87:fc:6b:b2:cc:55:fe:3b:de:79:9b:eb:49:f6: d7:25:76:f0 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUYjPQiWzysX2Da+HbjmTC2Eg4NC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMyMDA2NTVaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDM4NTVkMzc4MmM3NjNkMTQzZjg0N2ZmZGFhN2E2MDcwMmVlMDlmMjAyODE5 YWM0ZTBiNDcyZTU3N2YzNDlkZmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALiJafBNK7sDl2K2k8ODh9eTsCe1t8JMV841aasxE84MaQ5P8Fx1eVfEikZk LajF0ypnnKsie11TOTyBufgSdkz0gCAI78nQ/AN6vgCXEozNHb5qeBnappQqv0i+ cpQVQ3uCTxa2HF1VfcltwWPyCdH1/HZeBQNz6ZwY4mbBKBGRxd22LSIUCITSp/hU OQ5OPiKTjwdfKHp97TxIVH2E1ZaH+Z6T0J9sSH1speLtM/7eToa7myrDIjafx/Xg Et4ZDuizt6NnbATqgTgbA/xqbKo3L32E1nuogw5ibTiyDrk09wn/Uh4qgbmoyoYu sZUhfDhp79U/2p27BPt8lPvUniECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTqvtFp nUwPK0F+bW4EJu7AAJT5qjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MWI0ODEwMjUtNzU4Yi00Mjc0LTkyNTgtNjg3YTNhOTliNTMwLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gvg QDANBgkqhkiG9w0BAQsFAAOCAQEATFDf4ncO1hARYAygVTyvdVTsyWPN4Em7pm6z 2OJOqwexQez5q7lAVNB3vLDjl1L6gI/UdxfkJAXq0F/MKEPIKInoFvLc6tlyuzg/ eHg2UZQDrv4HWJhxBhdsjlx6ItEIOesjA1w6lYQceWo2/hHSLFplVfajcd14jiHJ M510Swly3WQEEKEZFkqLUVAKK5jPV5/fP8po1fpUe45CD4csEJLh497KRq0ggtbQ a8/p6p6J2OdgmznWjrp49/P2Lguf9XxzthHcRYJQS4MY5atvRsHdIpDFnPOmsWIz wyZdKuAOBZExQKDjSZ8NQg2/fof8a7LMVf473nmb60n21yV28A== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:11 2026 by rpki-client