This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3816340e-2101-41e7-af42-6ab2123b5c04.roa File: 3816340e-2101-41e7-af42-6ab2123b5c04.roa (raw, json) Hash identifier: wOB9IYh+6VNvayGk4Oz1VZAl3gjxgGDxyfXic0fm+0I= Subject key identifier: 41:96:D9:D1:D1:76:33:69:DD:3A:02:6C:16:A1:9A:A9:68:97:10:39 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 293AAF7BB934567B93CF3F621B9700AAD3A37B8E Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3816340e-2101-41e7-af42-6ab2123b5c04.roa Signing time: Tue 13 Jan 2026 19:58:31 +0000 ROA not before: Tue 13 Jan 2026 19:58:31 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:3a:af:7b:b9:34:56:7b:93:cf:3f:62:1b:97:00:aa:d3:a3:7b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:31 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=b95cba0534d3d63350853f68465cee4d23516121493afcc0af787ec212238aee, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:02:3e:58:94:91:31:7f:92:63:63:37:32:80: bb:bf:05:55:4c:54:92:58:22:7b:0d:17:29:c6:55: d3:38:ba:29:0f:bb:59:31:3d:6f:13:02:0a:ee:1f: 63:58:4d:da:fa:1d:18:f9:31:77:38:8d:1f:54:23: b6:0a:82:8b:08:af:47:e0:e6:4a:a7:47:e9:a9:45: fe:09:ce:b2:d4:a0:e6:1e:6b:47:f7:1c:e3:0b:47: 21:df:43:a5:ca:30:36:82:3b:84:46:5d:28:ff:e8: da:e7:c5:0e:d2:fc:27:43:1c:9c:22:87:6f:02:11: 9d:70:a6:73:fa:95:fd:d4:91:e7:44:95:e0:96:91: 5f:00:7d:5f:80:63:f9:2a:1a:56:06:95:41:a7:89: 27:17:e6:ff:5a:b2:0f:5e:74:0f:1b:d6:2e:c1:d3: 9c:b2:f2:e7:da:80:83:27:8c:7c:3a:a7:56:93:e7: 7c:39:c7:7e:1a:72:2f:e3:66:ba:0f:f7:8a:78:a1: 74:11:64:d7:71:dc:ba:48:73:29:89:8a:a0:b7:14: 90:3e:c3:fe:7f:70:bc:26:c3:36:9f:24:d5:fe:80: 4a:c9:95:3f:1b:1b:e2:7d:be:8c:d3:aa:ed:d0:52: a6:2a:47:76:0f:d7:82:53:68:87:ba:6c:e3:b7:72: 65:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:96:D9:D1:D1:76:33:69:DD:3A:02:6C:16:A1:9A:A9:68:97:10:39 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3816340e-2101-41e7-af42-6ab2123b5c04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:8c0::/48 Signature Algorithm: sha256WithRSAEncryption 87:48:41:5d:67:f6:1a:db:c7:1c:8c:c7:c6:16:48:4b:d0:ae: ea:08:e3:b8:be:a8:9e:2a:af:ef:33:d4:d3:76:fa:79:06:00: f5:8a:5a:cc:9b:11:f9:62:10:ce:7f:fb:00:32:56:40:09:a8: 29:d9:47:b9:4b:5e:5d:34:41:c1:50:d8:41:d8:e5:a6:26:5b: 37:9c:63:89:c3:a4:f4:58:60:54:c1:06:8e:10:06:ca:7a:4b: d0:68:6c:c5:cb:71:d6:a0:18:83:a2:0a:39:93:33:03:9f:f3: ae:09:84:ec:d9:e0:08:f0:89:c4:77:d3:95:40:4e:26:77:b5: b1:55:56:e0:50:c4:c6:b7:47:67:49:40:83:34:8e:23:59:3e: a2:3d:cc:ac:ba:51:00:56:88:90:76:c4:05:75:04:bd:53:2e: d9:2e:20:9b:33:54:11:30:0c:e4:8d:1d:30:23:45:d8:a6:4e: 83:31:f6:75:eb:88:01:64:84:d8:40:c6:84:9d:59:82:f9:18: 3a:d6:43:46:fc:f6:ce:63:b0:a7:c2:9b:9f:08:e5:f1:8e:d2: 72:18:71:67:5a:8f:1b:cb:59:5a:03:6e:01:67:da:16:f6:63: 86:13:25:b1:99:4d:76:1c:59:b5:de:b1:bc:0d:c3:ca:11:80: 94:85:4d:55 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUKTqve7k0VnuTzz9iG5cAqtOje44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MzFaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQGI5NWNiYTA1MzRkM2Q2MzM1MDg1M2Y2ODQ2NWNlZTRkMjM1MTYxMjE0OTNh ZmNjMGFmNzg3ZWMyMTIyMzhhZWUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUCPliUkTF/kmNjNzKAu78FVUxUklgiew0XKcZV0zi6KQ+7WTE9bxMCCu4f Y1hN2vodGPkxdziNH1QjtgqCiwivR+DmSqdH6alF/gnOstSg5h5rR/cc4wtHId9D pcowNoI7hEZdKP/o2ufFDtL8J0McnCKHbwIRnXCmc/qV/dSR50SV4JaRXwB9X4Bj +SoaVgaVQaeJJxfm/1qyD150DxvWLsHTnLLy59qAgyeMfDqnVpPnfDnHfhpyL+Nm ug/3inihdBFk13HcukhzKYmKoLcUkD7D/n9wvCbDNp8k1f6ASsmVPxsb4n2+jNOq 7dBSpipHdg/XglNoh7ps47dyZTcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRBltnR 0XYzad06AmwWoZqpaJcQOTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv MzgxNjM0MGUtMjEwMS00MWU3LWFmNDItNmFiMjEyM2I1YzA0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GsI wDANBgkqhkiG9w0BAQsFAAOCAQEAh0hBXWf2GtvHHIzHxhZIS9Cu6gjjuL6oniqv 7zPU03b6eQYA9YpazJsR+WIQzn/7ADJWQAmoKdlHuUteXTRBwVDYQdjlpiZbN5xj icOk9FhgVMEGjhAGynpL0Ghsxctx1qAYg6IKOZMzA5/zrgmE7NngCPCJxHfTlUBO Jne1sVVW4FDExrdHZ0lAgzSOI1k+oj3MrLpRAFaIkHbEBXUEvVMu2S4gmzNUETAM 5I0dMCNF2KZOgzH2deuIAWSE2EDGhJ1ZgvkYOtZDRvz2zmOwp8Kbnwjl8Y7Schhx Z1qPG8tZWgNuAWfaFvZjhhMlsZlNdhxZtd6xvA3DyhGAlIVNVQ== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:24 2026 by rpki-client