This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/255a5af9-e008-4c21-92b4-5e76cabb2a3b.roa File: 255a5af9-e008-4c21-92b4-5e76cabb2a3b.roa (raw, json) Hash identifier: I9ARLE7S+8MSLw5YrmRnmQQ7dSIlE0XtjUl6c8WxKTY= Subject key identifier: 7C:26:71:9F:E3:5B:BA:41:5C:C3:54:E3:F0:9A:42:92:B7:13:0C:AE Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5EFDE67B6BC41CBF39B84080AD226B92ACD9E107 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/255a5af9-e008-4c21-92b4-5e76cabb2a3b.roa Signing time: Tue 13 Jan 2026 20:06:58 +0000 ROA not before: Tue 13 Jan 2026 20:06:58 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:5000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fd:e6:7b:6b:c4:1c:bf:39:b8:40:80:ad:22:6b:92:ac:d9:e1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 20:06:58 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=ff854bb9358f56cfb1887039d0e8068d67aedd067364479df07e411d9dffc57a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:81:e8:95:ad:d6:cb:66:9a:79:fe:27:32:52: 31:20:3a:f9:6a:8e:06:07:f2:88:b1:50:79:bc:44: fd:a8:a7:73:d0:aa:a7:6b:51:6a:e4:4f:27:51:cf: ef:a4:30:d5:29:a3:87:01:c5:e4:91:78:bd:15:7e: 4e:cc:56:bd:ed:65:51:f2:ac:2f:17:de:93:e9:e8: 5c:00:61:18:bf:84:66:9a:ba:ed:5d:1f:4e:5d:14: 58:e4:f0:11:bc:e7:d8:d4:5e:7a:e4:8d:36:0b:b3: fd:2c:e3:23:bb:15:e3:38:13:d6:fd:4c:ec:43:68: c1:df:09:15:02:f5:16:e6:b8:f3:21:bb:39:84:a7: e7:0d:64:b7:cd:c2:3c:f3:52:37:21:5b:06:da:8e: 12:28:9e:de:d4:27:5a:48:4e:7d:82:da:df:37:e9: 7e:58:71:95:bf:32:39:32:93:40:d8:5e:d6:47:fd: 33:0a:1e:8d:d9:2b:71:e8:c1:e1:16:db:19:dd:fa: 35:6e:3a:19:54:34:60:f3:7b:fd:8e:aa:ab:69:53: 3b:3b:83:d8:ff:c3:a6:0d:b8:4d:4c:c4:c8:f6:c4: 93:3d:56:4d:46:07:44:d5:40:86:ee:a0:8d:4f:73: ab:ef:19:3a:71:5b:6b:52:82:3b:55:98:b7:e9:b5: c7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:26:71:9F:E3:5B:BA:41:5C:C3:54:E3:F0:9A:42:92:B7:13:0C:AE X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/255a5af9-e008-4c21-92b4-5e76cabb2a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:5000::/40 Signature Algorithm: sha256WithRSAEncryption 46:11:a9:d6:94:f3:66:8f:82:a7:5b:17:99:24:d5:a8:7c:3d: d6:cb:cc:23:0b:9b:6a:f4:63:0e:cf:a8:df:a3:64:df:8b:d9: b6:66:aa:b9:9f:3e:3b:e7:64:e7:78:1e:14:17:65:24:23:c3: d4:20:12:30:8b:dc:70:ae:bc:6b:59:73:17:10:fa:9b:e4:d8: d8:4c:72:78:50:4d:09:bc:f6:8d:e8:2b:95:17:7e:3a:77:ab: 9f:19:57:4f:ad:8d:67:f1:d0:ce:9e:c9:6e:c8:82:8d:30:11: 09:80:7b:4b:c6:5e:b9:26:54:b8:68:bc:36:a6:30:b7:9d:7c: f2:ef:f9:94:23:d3:c8:4b:ea:9b:44:2f:eb:c1:94:8e:3c:e6: 23:ef:5a:0c:e0:2b:b2:25:2f:92:b1:33:01:1f:34:1a:ad:fd: 2e:6e:b7:47:e4:04:09:21:63:1f:7e:65:1a:c1:88:cc:e7:42: 11:7a:c6:bd:33:7f:3a:12:24:b7:3e:32:ac:de:9e:83:de:57: 63:b1:7b:a8:27:8c:02:cd:43:59:2e:14:49:2a:d9:46:16:0e: 9a:7c:3c:db:ac:75:8a:50:fc:bc:24:69:68:83:ab:7a:21:f0: 6e:2f:cc:8d:6b:eb:6b:e1:96:1f:3b:8c:1d:23:50:aa:bf:aa: a2:77:05:51 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUXv3me2vEHL85uECArSJrkqzZ4QcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMyMDA2NThaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQGZmODU0YmI5MzU4ZjU2Y2ZiMTg4NzAzOWQwZTgwNjhkNjdhZWRkMDY3MzY0 NDc5ZGYwN2U0MTFkOWRmZmM1N2ExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ+B6JWt1stmmnn+JzJSMSA6+WqOBgfyiLFQebxE/ainc9Cqp2tRauRPJ1HP 76Qw1SmjhwHF5JF4vRV+TsxWve1lUfKsLxfek+noXABhGL+EZpq67V0fTl0UWOTw Ebzn2NReeuSNNguz/SzjI7sV4zgT1v1M7ENowd8JFQL1Fua48yG7OYSn5w1kt83C PPNSNyFbBtqOEiie3tQnWkhOfYLa3zfpflhxlb8yOTKTQNhe1kf9MwoejdkrcejB 4RbbGd36NW46GVQ0YPN7/Y6qq2lTOzuD2P/Dpg24TUzEyPbEkz1WTUYHRNVAhu6g jU9zq+8ZOnFba1KCO1WYt+m1x8cCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR8JnGf 41u6QVzDVOPwmkKStxMMrjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MjU1YTVhZjktZTAwOC00YzIxLTkyYjQtNWU3NmNhYmIyYTNiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GtQ MA0GCSqGSIb3DQEBCwUAA4IBAQBGEanWlPNmj4KnWxeZJNWofD3Wy8wjC5tq9GMO z6jfo2Tfi9m2Zqq5nz4752TneB4UF2UkI8PUIBIwi9xwrrxrWXMXEPqb5NjYTHJ4 UE0JvPaN6CuVF346d6ufGVdPrY1n8dDOnsluyIKNMBEJgHtLxl65JlS4aLw2pjC3 nXzy7/mUI9PIS+qbRC/rwZSOPOYj71oM4CuyJS+SsTMBHzQarf0ubrdH5AQJIWMf fmUawYjM50IResa9M386EiS3PjKs3p6D3ldjsXuoJ4wCzUNZLhRJKtlGFg6afDzb rHWKUPy8JGlog6t6IfBuL8yNa+tr4ZYfO4wdI1Cqv6qidwVR -----END CERTIFICATE-----Generated at Sat Jan 17 10:00:40 2026 by rpki-client