This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ed813be-ccca-4959-8fb1-925830da32a8.roa File: 4ed813be-ccca-4959-8fb1-925830da32a8.roa (raw, json) Hash identifier: VRJXf9hrOrJULkUIBtFHW7i5FW/dtdzODesYwbJnLd4= Subject key identifier: 44:80:CD:D1:89:B4:A8:84:4B:77:20:26:D7:F2:A7:77:DF:91:0F:B9 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6D400C2522AB2E442A13584DEB13A1E30F533A8A Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ed813be-ccca-4959-8fb1-925830da32a8.roa Signing time: Tue 13 Jan 2026 19:58:34 +0000 ROA not before: Tue 13 Jan 2026 19:58:34 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:40:0c:25:22:ab:2e:44:2a:13:58:4d:eb:13:a1:e3:0f:53:3a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:34 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=932d7d30d38f45a7c84a91a68f9a4ec63fd4a5b2996416deefc24192f7f3fb87, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:0a:cf:4d:f8:77:1d:54:ef:84:f8:d6:a3: 64:4f:03:10:83:e4:22:30:90:2b:6f:d5:ab:1b:db: e1:22:ff:0f:36:e3:4e:92:5b:ed:7e:c7:56:d2:e1: 8d:cc:dc:92:87:7f:6d:e5:40:4c:b4:be:44:e8:37: 38:ee:b6:e4:b3:c2:21:9f:99:b5:3c:fe:23:af:8f: 9f:69:be:76:3a:b4:a1:ea:c1:0a:cd:3c:d2:66:44: 35:91:bb:97:5e:14:8f:ac:95:aa:ea:a5:18:bc:5b: bd:5f:44:ea:b5:6c:5f:e8:f7:0d:f0:cb:fd:18:6c: ef:c6:e4:64:29:60:81:9b:48:e3:72:df:ea:4d:a5: 08:70:9c:2b:26:f4:03:4f:60:ce:29:bd:b3:55:51: e9:a6:03:77:23:54:82:39:b7:d1:15:99:5e:c4:ab: 9b:84:5c:86:e7:7a:ba:57:3a:97:82:5e:f6:35:5e: 6e:6a:09:a8:42:f9:96:dc:12:82:ec:37:04:18:d6: 6f:b5:b2:b9:82:32:1b:1e:ac:6e:4a:21:91:a1:ee: c4:4f:73:04:7d:19:0c:24:39:0a:91:71:19:13:bc: b1:0f:2a:8b:10:60:8c:3b:ff:85:0f:e1:13:a0:bc: 16:94:d3:e7:13:ca:9b:65:e9:7c:bc:82:ce:a3:31: ba:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:80:CD:D1:89:B4:A8:84:4B:77:20:26:D7:F2:A7:77:DF:91:0F:B9 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4ed813be-ccca-4959-8fb1-925830da32a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:a080::/48 Signature Algorithm: sha256WithRSAEncryption 02:54:53:06:1b:e3:68:31:23:f2:be:bf:b3:a1:53:b2:3d:2b: 4e:64:b0:6f:b8:aa:ee:52:ab:e0:c3:5c:bf:e8:4b:ea:4f:f3: 74:fd:23:83:3f:2f:d6:2b:c5:ed:75:ba:4a:56:2c:a2:58:20: 80:cd:52:49:19:cf:5d:c9:14:a2:49:29:58:dc:63:9d:a0:a2: 07:d3:50:b5:a2:74:d0:06:3c:ed:2a:c5:6b:36:5f:de:c7:aa: 6b:3e:f5:48:f1:b6:ea:77:d1:fe:0c:17:92:69:68:0b:80:da: 57:2c:94:51:a2:63:cb:52:50:5a:09:81:6a:53:2e:85:1e:70: 8d:93:41:65:0d:10:db:42:28:f9:9f:2b:a4:28:a9:0c:11:f7: 6f:1b:66:8e:4c:b4:1b:a5:20:40:b2:09:ab:c5:89:59:ef:e9: 51:f6:57:94:bd:b6:b4:05:5d:19:38:36:21:9d:fc:95:37:9b: 0c:4b:a7:aa:7f:96:0a:d0:58:dd:67:e8:09:4c:42:43:4f:8a: 05:8e:d7:6e:9d:e0:bf:90:0c:7d:9a:4a:9d:86:a3:58:b0:b0: 95:f1:5b:e0:46:45:ce:e3:d3:60:4b:6a:80:cd:39:6c:1f:7c: 8e:90:c5:a1:91:aa:79:1b:ce:b6:c6:48:41:2f:e3:e2:0a:c8: da:69:e5:cd -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUbUAMJSKrLkQqE1hN6xOh4w9TOoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MzRaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDkzMmQ3ZDMwZDM4ZjQ1YTdjODRhOTFhNjhmOWE0ZWM2M2ZkNGE1YjI5OTY0 MTZkZWVmYzI0MTkyZjdmM2ZiODcxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMi7Cs9N+HcdVO+E+NajZE8DEIPkIjCQK2/Vqxvb4SL/DzbjTpJb7X7HVtLh jczckod/beVATLS+ROg3OO625LPCIZ+ZtTz+I6+Pn2m+djq0oerBCs080mZENZG7 l14Uj6yVquqlGLxbvV9E6rVsX+j3DfDL/Rhs78bkZClggZtI43Lf6k2lCHCcKyb0 A09gzim9s1VR6aYDdyNUgjm30RWZXsSrm4Rchud6ulc6l4Je9jVebmoJqEL5ltwS guw3BBjWb7WyuYIyGx6sbkohkaHuxE9zBH0ZDCQ5CpFxGRO8sQ8qixBgjDv/hQ/h E6C8FpTT5xPKm2XpfLyCzqMxuhcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBREgM3R ibSohEt3ICbX8qd335EPuTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGVkODEzYmUtY2NjYS00OTU5LThmYjEtOTI1ODMwZGEzMmE4LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gug gDANBgkqhkiG9w0BAQsFAAOCAQEAAlRTBhvjaDEj8r6/s6FTsj0rTmSwb7iq7lKr 4MNcv+hL6k/zdP0jgz8v1ivF7XW6SlYsolgggM1SSRnPXckUokkpWNxjnaCiB9NQ taJ00AY87SrFazZf3seqaz71SPG26nfR/gwXkmloC4DaVyyUUaJjy1JQWgmBalMu hR5wjZNBZQ0Q20Io+Z8rpCipDBH3bxtmjky0G6UgQLIJq8WJWe/pUfZXlL22tAVd GTg2IZ38lTebDEunqn+WCtBY3WfoCUxCQ0+KBY7Xbp3gv5AMfZpKnYajWLCwlfFb 4EZFzuPTYEtqgM05bB98jpDFoZGqeRvOtsZIQS/j4grI2mnlzQ== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:28 2026 by rpki-client