This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/490b358b-f6aa-40cb-8469-31081e257eb7.roa File: 490b358b-f6aa-40cb-8469-31081e257eb7.roa (raw, json) Hash identifier: nkEG8I5BlJ8t9rqzGOt05KCKG8/KeF8XOBR4QNFbxC4= Subject key identifier: DF:27:0E:53:A4:5A:87:8E:E0:BE:D1:8F:DA:35:E4:F1:10:F2:4F:8A Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 5BFB62E65C3EA247A17A6B2B2FD21539FABFB03F Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/490b358b-f6aa-40cb-8469-31081e257eb7.roa Signing time: Tue 13 Jan 2026 19:58:28 +0000 ROA not before: Tue 13 Jan 2026 19:58:28 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:8020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fb:62:e6:5c:3e:a2:47:a1:7a:6b:2b:2f:d2:15:39:fa:bf:b0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:28 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=e49ce506631149d87c6299342c8491342672fd73cb520a38529fa91d495d7966, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:4a:ec:9c:51:19:44:bc:b8:a0:1d:39:0f: 32:64:68:32:5b:b2:cf:fb:fd:ca:86:63:f9:1b:e8: 29:70:10:9c:ac:92:84:ce:26:96:6c:e7:4b:c6:8a: 3f:f1:97:a1:cd:7a:97:88:82:6f:72:61:41:ae:7f: 90:e3:56:d7:fa:7e:20:e1:f9:5f:3d:6c:bc:4a:77: 50:6c:db:9e:64:b7:a1:3d:66:d9:8f:3f:a8:5b:4f: c6:e0:d5:c5:04:a8:23:fb:47:f2:3b:01:4b:af:0b: 50:c9:09:ae:09:ea:cc:09:72:72:fd:05:f4:2d:78: 8c:62:2e:3f:be:cb:3c:43:e5:d0:be:b9:bc:4b:16: 84:20:5c:5f:dd:1b:9a:58:a9:6c:47:69:e8:d2:06: 35:25:35:c3:c3:3c:72:2c:bf:0f:87:29:17:6b:ec: 9f:c0:60:63:86:72:b8:71:08:ab:69:41:fe:e8:47: 32:a9:59:f0:4a:be:94:af:77:c5:bd:a4:90:1e:b8: c7:72:64:fc:01:bf:e9:bc:5d:51:c9:b6:b5:f5:7f: 5d:cd:c8:31:34:48:92:26:29:c0:a0:85:8d:b9:d0: 1a:9d:64:fa:c6:24:73:71:b4:41:58:8b:9a:7a:56: b9:a8:d7:28:51:aa:7a:a4:76:f1:c4:30:97:38:cd: 19:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:27:0E:53:A4:5A:87:8E:E0:BE:D1:8F:DA:35:E4:F1:10:F2:4F:8A X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/490b358b-f6aa-40cb-8469-31081e257eb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:8020::/48 Signature Algorithm: sha256WithRSAEncryption 96:7c:99:c1:a8:49:75:4a:21:4a:2d:c5:18:15:53:fd:fd:7d: 9e:1b:fd:fd:1c:7e:32:61:c9:78:a4:97:c6:d6:ec:74:1a:96: 1c:f5:d9:89:3c:a2:9d:6b:c7:4f:50:34:7d:0b:96:61:22:6a: 2a:6d:4f:28:70:81:29:f5:48:32:31:4f:4e:f2:c0:e3:bb:9f: 5a:88:d1:14:c0:cf:af:8b:4b:7b:88:1c:6d:5f:22:f6:1b:e4: 76:e8:d6:8e:9a:d7:24:07:05:bd:00:8e:cd:80:3e:85:36:1c: 81:a7:0c:52:0c:2c:9e:47:00:3a:39:55:f7:45:ea:9c:b1:da: 07:b1:dd:22:bf:d4:64:4d:30:bc:b8:f3:f9:19:47:7a:8b:dc: 09:72:17:b9:4c:34:0f:f0:51:46:b0:30:27:83:61:4a:82:20: 49:d0:ee:a1:38:e2:9c:91:78:97:10:43:d0:a4:ce:62:6d:75: 06:93:dc:86:e1:32:ee:7a:2f:29:69:46:1b:b0:04:c0:de:4a: 4c:e3:c8:ad:6b:15:c7:4f:77:2d:d0:b1:6a:f2:f4:35:10:23: a1:10:a7:b9:43:6d:1c:5b:3d:91:dc:49:a5:fa:4b:61:6e:92: 67:1f:68:88:f5:0f:48:1d:99:79:fb:9c:8d:b1:45:70:35:bc: d8:c7:8d:82 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUW/ti5lw+okehemsrL9IVOfq/sD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MjhaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQGU0OWNlNTA2NjMxMTQ5ZDg3YzYyOTkzNDJjODQ5MTM0MjY3MmZkNzNjYjUy MGEzODUyOWZhOTFkNDk1ZDc5NjYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANFYSuycURlEvLigHTkPMmRoMluyz/v9yoZj+RvoKXAQnKyShM4mlmznS8aK P/GXoc16l4iCb3JhQa5/kONW1/p+IOH5Xz1svEp3UGzbnmS3oT1m2Y8/qFtPxuDV xQSoI/tH8jsBS68LUMkJrgnqzAlycv0F9C14jGIuP77LPEPl0L65vEsWhCBcX90b mlipbEdp6NIGNSU1w8M8ciy/D4cpF2vsn8BgY4ZyuHEIq2lB/uhHMqlZ8Eq+lK93 xb2kkB64x3Jk/AG/6bxdUcm2tfV/Xc3IMTRIkiYpwKCFjbnQGp1k+sYkc3G0QViL mnpWuajXKFGqeqR28cQwlzjNGc0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTfJw5T pFqHjuC+0Y/aNeTxEPJPijAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NDkwYjM1OGItZjZhYS00MGNiLTg0NjktMzEwODFlMjU3ZWI3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GuA IDANBgkqhkiG9w0BAQsFAAOCAQEAlnyZwahJdUohSi3FGBVT/f19nhv9/Rx+MmHJ eKSXxtbsdBqWHPXZiTyinWvHT1A0fQuWYSJqKm1PKHCBKfVIMjFPTvLA47ufWojR FMDPr4tLe4gcbV8i9hvkdujWjprXJAcFvQCOzYA+hTYcgacMUgwsnkcAOjlV90Xq nLHaB7HdIr/UZE0wvLjz+RlHeovcCXIXuUw0D/BRRrAwJ4NhSoIgSdDuoTjinJF4 lxBD0KTOYm11BpPchuEy7novKWlGG7AEwN5KTOPIrWsVx093LdCxavL0NRAjoRCn uUNtHFs9kdxJpfpLYW6SZx9oiPUPSB2ZefucjbFFcDW82MeNgg== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:16 2026 by rpki-client