This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a042ab1-69ef-4c1c-9a97-55c469cefdb9.roa File: 2a042ab1-69ef-4c1c-9a97-55c469cefdb9.roa (raw, json) Hash identifier: ZjoBb3Ny2lfAiHw6YP0Lo7FL4gJ+IMchqHaIxbkdsmg= Subject key identifier: FA:43:4B:66:B9:64:39:A6:95:69:FE:F4:B3:75:CC:B7:48:EC:78:61 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6D88684957DE3B5C009CDE6D340ACD2AB2C2C660 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a042ab1-69ef-4c1c-9a97-55c469cefdb9.roa Signing time: Tue 13 Jan 2026 19:58:24 +0000 ROA not before: Tue 13 Jan 2026 19:58:24 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:88:68:49:57:de:3b:5c:00:9c:de:6d:34:0a:cd:2a:b2:c2:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:24 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=cea9265c5cc28f102a6f10ea33ec4a7cfdfead09d2798f481efb31656a639ec1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3f:e2:dd:5b:9e:2e:29:42:36:70:21:46:37: d7:f3:11:9a:92:df:24:73:b0:60:d5:8e:16:c7:7d: bb:8d:82:ba:b2:47:a2:82:e6:2b:4d:af:ac:c9:15: 97:b1:a0:23:b5:1b:7c:b8:15:4f:1f:b0:2f:1a:fd: 1b:5d:19:71:c7:18:51:54:a7:0f:52:6d:84:9b:73: d7:2c:79:91:dd:df:73:41:f4:9c:a8:04:7e:67:0c: 06:82:80:61:d8:38:9d:69:7c:2e:85:b5:7b:a7:9e: 1b:7f:f1:bd:57:60:1a:1f:ca:03:08:99:f7:e8:6c: 1d:12:b5:06:58:cd:ba:ef:38:32:74:ad:ba:2f:2c: 58:5e:84:ac:4b:e2:26:7f:4e:0e:d1:39:90:3b:bf: 1e:19:54:68:81:24:16:68:ed:68:01:93:59:38:4e: 4b:42:0f:07:2e:61:e0:18:fd:86:72:86:ea:09:64: 16:cc:1f:8f:4c:74:d2:58:5b:13:2d:42:c7:b6:f1: cc:2a:f8:95:c4:29:f3:34:0b:88:53:c9:ad:3f:78: 39:fa:c6:8c:22:21:e0:e0:d2:71:6d:59:9d:b8:fd: 31:ab:75:e9:20:ce:32:82:f1:67:09:c6:14:b2:05: 0e:bc:1f:10:55:f9:78:03:24:61:c5:47:ec:42:81: 89:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:43:4B:66:B9:64:39:A6:95:69:FE:F4:B3:75:CC:B7:48:EC:78:61 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2a042ab1-69ef-4c1c-9a97-55c469cefdb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:4080::/48 Signature Algorithm: sha256WithRSAEncryption bf:2a:b8:97:92:de:d9:26:a2:b9:61:fe:a0:74:60:df:45:f8: ca:be:64:25:88:a8:b4:dd:88:00:79:57:5b:f4:8a:a5:33:e9: 9f:a1:bf:02:a3:42:2b:6b:70:b0:b5:78:68:02:80:39:15:5e: 3d:5d:d9:63:3c:cb:f9:17:59:2e:8e:72:66:0d:75:56:4c:07: ad:4e:a8:dd:25:ed:85:ad:c1:71:44:1d:d4:c0:58:2d:b4:81: 23:5d:a6:07:97:dc:3b:48:43:1f:cd:47:22:50:39:a9:95:7a: d4:ad:75:86:64:0c:18:f5:57:a8:a2:2a:aa:84:bb:14:66:ad: 98:77:8d:4a:af:69:7f:33:6e:4f:8f:95:e5:5f:11:b3:62:1b: 4f:9d:67:3b:fb:bd:7f:7e:db:17:d8:1d:3b:57:89:ca:cb:d9: 50:c3:26:fd:66:3b:61:62:29:1f:36:0c:ac:6c:a1:2d:c1:2d: d9:bb:ae:67:29:ca:ae:fa:b7:09:5b:a5:eb:2a:ba:a4:e4:1f: 8e:ee:97:5c:a9:0a:51:46:20:df:e4:82:c5:29:f8:69:f2:da: 94:b6:6c:f8:69:30:fe:de:76:85:a7:1d:37:4f:ce:e6:1a:f2: ff:8d:7d:38:3f:d3:f7:81:77:f0:14:45:a0:84:45:5a:74:3e: bb:b8:1b:a5 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUbYhoSVfeO1wAnN5tNArNKrLCxmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MjRaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQGNlYTkyNjVjNWNjMjhmMTAyYTZmMTBlYTMzZWM0YTdjZmRmZWFkMDlkMjc5 OGY0ODFlZmIzMTY1NmE2MzllYzExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4/4t1bni4pQjZwIUY31/MRmpLfJHOwYNWOFsd9u42CurJHooLmK02vrMkV l7GgI7UbfLgVTx+wLxr9G10ZcccYUVSnD1JthJtz1yx5kd3fc0H0nKgEfmcMBoKA Ydg4nWl8LoW1e6eeG3/xvVdgGh/KAwiZ9+hsHRK1BljNuu84MnStui8sWF6ErEvi Jn9ODtE5kDu/HhlUaIEkFmjtaAGTWThOS0IPBy5h4Bj9hnKG6glkFswfj0x00lhb Ey1Cx7bxzCr4lcQp8zQLiFPJrT94OfrGjCIh4ODScW1Znbj9Mat16SDOMoLxZwnG FLIFDrwfEFX5eAMkYcVH7EKBicECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT6Q0tm uWQ5ppVp/vSzdcy3SOx4YTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MmEwNDJhYjEtNjllZi00YzFjLTlhOTctNTVjNDY5Y2VmZGI5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GtA gDANBgkqhkiG9w0BAQsFAAOCAQEAvyq4l5Le2SaiuWH+oHRg30X4yr5kJYiotN2I AHlXW/SKpTPpn6G/AqNCK2twsLV4aAKAORVePV3ZYzzL+RdZLo5yZg11VkwHrU6o 3SXtha3BcUQd1MBYLbSBI12mB5fcO0hDH81HIlA5qZV61K11hmQMGPVXqKIqqoS7 FGatmHeNSq9pfzNuT4+V5V8Rs2IbT51nO/u9f37bF9gdO1eJysvZUMMm/WY7YWIp HzYMrGyhLcEt2buuZynKrvq3CVul6yq6pOQfju6XXKkKUUYg3+SCxSn4afLalLZs +Gkw/t52hacdN0/O5hry/419OD/T94F38BRFoIRFWnQ+u7gbpQ== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:28 2026 by rpki-client