This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/273b93a3-cef1-4c97-a543-26188767c199.roa File: 273b93a3-cef1-4c97-a543-26188767c199.roa (raw, json) Hash identifier: tCZFxvlSvyRBIXw3qXqXmxmJViZfLLvOq9KAint0U68= Subject key identifier: 7A:1E:E9:05:8A:23:30:94:B7:CE:BE:08:6F:8F:AC:7A:C0:79:D7:87 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 272376836661744D8807A7C2CC8D0FB32214CA53 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/273b93a3-cef1-4c97-a543-26188767c199.roa Signing time: Tue 13 Jan 2026 20:06:58 +0000 ROA not before: Tue 13 Jan 2026 20:06:58 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:4000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:23:76:83:66:61:74:4d:88:07:a7:c2:cc:8d:0f:b3:22:14:ca:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 20:06:58 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=1663671dee602ce0299920c04f1b42a5273c06712d5a160f2dcec40904323ff7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:7a:60:e2:12:6e:80:75:6f:60:88:bc:11: 28:29:e4:2e:ff:77:73:35:3c:94:51:64:9e:6c:5f: 3b:34:46:a7:1b:88:f2:e3:c6:c6:00:3a:5b:41:cc: 93:7d:49:37:fd:78:9f:c9:ba:af:09:04:37:ed:09: 16:bc:f5:31:5f:5f:e9:1b:12:ce:60:f2:b9:96:e4: 67:58:77:0a:89:37:87:b6:9d:84:12:e3:bb:c2:a2: 04:59:1b:48:4c:e8:7b:3d:1b:43:d9:2f:a7:5c:c4: 49:1f:85:0c:f6:c6:fd:f7:d9:e6:b4:6d:67:3b:3a: 06:0f:8e:d8:72:cc:9e:40:69:20:9c:f7:c1:0f:2b: 3b:b9:93:d5:d3:9d:9e:ef:3c:77:fd:5d:4a:eb:c0: 6e:36:9f:2d:c6:dd:8a:d0:dc:09:5f:93:c7:b3:91: b3:91:8b:16:39:35:3d:9a:b9:49:67:a1:1a:6c:ce: 0e:20:d3:53:0d:7e:06:4c:46:57:1e:25:03:39:70: 5b:3f:9d:53:c2:14:61:f9:0d:ac:11:8b:75:44:92: 8b:02:dc:2f:97:c1:59:a8:db:44:1e:bc:5d:03:27: 28:ff:c5:c6:de:dc:0f:71:c9:d6:8a:71:b4:cb:10: da:33:9d:57:95:10:68:f5:f8:b8:97:35:1e:6b:23: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1E:E9:05:8A:23:30:94:B7:CE:BE:08:6F:8F:AC:7A:C0:79:D7:87 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/273b93a3-cef1-4c97-a543-26188767c199.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:4000::/40 Signature Algorithm: sha256WithRSAEncryption 4c:17:71:6b:d7:0b:c7:0c:65:55:6e:b5:58:5b:00:28:18:5f: 62:e4:5d:e8:2b:4d:e2:5d:79:4b:da:7e:de:12:09:43:43:c9: 99:15:28:4b:ca:3f:9b:63:ad:d7:de:8c:aa:93:19:55:bb:38: ff:c7:39:0d:65:6c:ae:41:e4:27:55:65:de:6c:45:a8:45:f3: 9a:97:ef:45:c5:4c:86:bf:b2:b2:a4:5a:e4:1c:67:8e:92:4d: 61:8d:db:73:a7:68:e3:7d:f0:47:b0:40:c3:f6:f1:ff:41:d4: e4:c2:d9:5c:e3:b9:80:23:e6:f6:3e:90:27:c8:6f:1c:db:d4: e1:f8:28:e7:b2:fa:c2:b3:4b:ea:ad:53:52:7e:38:20:ec:c8: 1a:4b:72:93:c0:d5:8a:46:47:44:2c:de:61:c1:10:62:09:9d: 58:7a:b9:5d:77:54:2e:57:32:24:0e:e3:bd:4c:07:ba:ec:43: 59:a4:41:6c:74:58:6d:44:a2:d1:5e:fa:24:b4:25:c9:e9:ce: d6:d6:8b:ee:cb:10:7a:31:6c:17:db:78:fc:84:37:53:65:f6: 03:78:a5:7a:da:11:9a:5f:3a:23:e4:96:f0:4f:83:17:77:d4: 5a:b5:90:46:a7:7b:86:9c:99:56:ec:28:ca:6b:e6:99:46:91: ba:7c:1c:1f -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUJyN2g2ZhdE2IB6fCzI0PsyIUylMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMyMDA2NThaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDE2NjM2NzFkZWU2MDJjZTAyOTk5MjBjMDRmMWI0MmE1MjczYzA2NzEyZDVh MTYwZjJkY2VjNDA5MDQzMjNmZjcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKF9emDiEm6AdW9giLwRKCnkLv93czU8lFFknmxfOzRGpxuI8uPGxgA6W0HM k31JN/14n8m6rwkEN+0JFrz1MV9f6RsSzmDyuZbkZ1h3Cok3h7adhBLju8KiBFkb SEzoez0bQ9kvp1zESR+FDPbG/ffZ5rRtZzs6Bg+O2HLMnkBpIJz3wQ8rO7mT1dOd nu88d/1dSuvAbjafLcbditDcCV+Tx7ORs5GLFjk1PZq5SWehGmzODiDTUw1+BkxG Vx4lAzlwWz+dU8IUYfkNrBGLdUSSiwLcL5fBWajbRB68XQMnKP/Fxt7cD3HJ1opx tMsQ2jOdV5UQaPX4uJc1HmsjofMCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR6HukF iiMwlLfOvghvj6x6wHnXhzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MjczYjkzYTMtY2VmMS00Yzk3LWE1NDMtMjYxODg3NjdjMTk5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GtA MA0GCSqGSIb3DQEBCwUAA4IBAQBMF3Fr1wvHDGVVbrVYWwAoGF9i5F3oK03iXXlL 2n7eEglDQ8mZFShLyj+bY63X3oyqkxlVuzj/xzkNZWyuQeQnVWXebEWoRfOal+9F xUyGv7KypFrkHGeOkk1hjdtzp2jjffBHsEDD9vH/QdTkwtlc47mAI+b2PpAnyG8c 29Th+CjnsvrCs0vqrVNSfjgg7MgaS3KTwNWKRkdELN5hwRBiCZ1Yerldd1QuVzIk DuO9TAe67ENZpEFsdFhtRKLRXvoktCXJ6c7W1ovuyxB6MWwX23j8hDdTZfYDeKV6 2hGaXzoj5JbwT4MXd9RatZBGp3uGnJlW7CjKa+aZRpG6fBwf -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:22 2026 by rpki-client