This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f0efd3f-1dc0-4aba-9819-2849a27041f6.roa File: 4f0efd3f-1dc0-4aba-9819-2849a27041f6.roa (raw, json) Hash identifier: xvnnQNlnUJihbXWVsvZNSKfOOzrZPsLNYmJoEagvAao= Subject key identifier: 36:9A:CB:CF:FF:19:4E:2A:E2:69:C5:D2:7E:82:AC:1F:2C:54:29:12 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7DFE558B4E352AE8D9F62A8DE8E211AB29E00076 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f0efd3f-1dc0-4aba-9819-2849a27041f6.roa Signing time: Tue 13 Jan 2026 20:06:54 +0000 ROA not before: Tue 13 Jan 2026 20:06:54 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:c080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fe:55:8b:4e:35:2a:e8:d9:f6:2a:8d:e8:e2:11:ab:29:e0:00:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 20:06:54 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=8233688ffe2bdf65379f374fd0bec014406cc082475f01f981b4f8a8afed39ea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:92:e6:77:b2:bc:b5:3a:97:ec:e2:dd:16: 73:aa:db:d5:27:fc:47:42:1c:f4:3d:44:df:3d:cb: 07:e4:2a:19:9d:59:de:ed:f7:fc:9c:5c:0d:f3:99: a5:0b:96:3a:64:ca:96:d4:bd:5f:05:07:10:84:6e: 6b:fb:0e:b0:52:83:9b:9e:55:17:b6:fe:f5:71:ac: c4:ed:92:27:8e:19:50:5b:ce:d4:3e:c9:84:0d:39: 1a:02:89:e4:b8:2e:52:6c:ce:3f:24:77:8a:96:62: df:34:38:ea:a0:50:67:62:ea:db:44:64:e3:cb:83: 54:f0:ca:07:25:cf:71:8e:a2:4c:06:f8:c5:63:ea: 60:37:d8:15:97:71:61:c8:bf:a4:98:fa:6c:0b:4c: 70:ac:b2:1e:5f:9b:86:ab:2c:54:c8:12:64:fd:07: 25:e3:ab:75:19:83:f5:fb:06:21:34:e5:35:03:f8: fa:70:e3:b5:94:f7:bd:38:a2:75:88:2d:0d:b3:67: 2a:76:1c:d1:de:c7:86:3b:18:95:26:5f:eb:a4:91: d3:92:a9:96:6e:bc:b2:34:1b:83:04:2d:77:73:6d: e3:ec:65:44:d1:09:c1:14:fb:b7:6f:00:ec:d1:d6: 0b:50:3c:f9:eb:47:4f:55:d8:3e:62:b5:1e:f2:6b: 6d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9A:CB:CF:FF:19:4E:2A:E2:69:C5:D2:7E:82:AC:1F:2C:54:29:12 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4f0efd3f-1dc0-4aba-9819-2849a27041f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:c080::/48 Signature Algorithm: sha256WithRSAEncryption 1a:98:1e:87:8a:a3:1a:d9:32:d7:0b:5e:4f:0c:a8:8e:af:8c: d6:46:fd:73:e8:51:a8:f7:32:c1:79:cc:7e:22:c8:61:55:24: dd:33:f0:c3:3d:f9:ae:13:63:13:04:a0:1e:37:d5:63:82:55: 4e:b2:9f:9f:63:a8:6e:aa:fc:90:af:43:67:ec:c0:86:59:fc: b7:02:a3:ed:a7:a0:4e:5c:fd:40:87:f0:4a:fe:fb:52:b9:ff: d6:81:b5:a3:8f:a7:83:53:69:53:11:53:48:87:be:98:d7:a7: a3:bc:b0:36:03:58:38:9c:d6:b9:a3:58:9e:ee:1c:09:57:cf: 7e:8a:d0:73:5e:a6:a3:ff:7a:f3:e9:d4:a2:1f:eb:66:ef:6a: a5:52:79:39:53:5f:3f:8c:f2:9b:f9:ad:9c:58:b3:28:8d:5f: d0:67:7c:6d:b9:db:9b:91:dc:84:29:cd:55:53:8f:33:37:48: 59:cd:04:71:99:36:8e:84:0a:2d:14:e4:0d:29:ab:10:6c:ab: e2:51:45:7c:02:96:4d:b1:75:77:43:b5:39:a9:83:c6:d7:28: a3:7f:ab:3e:ef:e0:a7:a6:9a:f4:e5:b3:89:60:03:dd:ee:93: c9:4e:7b:fe:98:40:99:2b:36:73:43:c9:64:f0:95:c3:67:5c: f2:86:19:bf -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUff5Vi041KujZ9iqN6OIRqyngAHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMyMDA2NTRaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDgyMzM2ODhmZmUyYmRmNjUzNzlmMzc0ZmQwYmVjMDE0NDA2Y2MwODI0NzVm MDFmOTgxYjRmOGE4YWZlZDM5ZWExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwzkuZ3sry1Opfs4t0Wc6rb1Sf8R0Ic9D1E3z3LB+QqGZ1Z3u33/JxcDfOZ pQuWOmTKltS9XwUHEIRua/sOsFKDm55VF7b+9XGsxO2SJ44ZUFvO1D7JhA05GgKJ 5LguUmzOPyR3ipZi3zQ46qBQZ2Lq20Rk48uDVPDKByXPcY6iTAb4xWPqYDfYFZdx Yci/pJj6bAtMcKyyHl+bhqssVMgSZP0HJeOrdRmD9fsGITTlNQP4+nDjtZT3vTii dYgtDbNnKnYc0d7HhjsYlSZf66SR05Kplm68sjQbgwQtd3Nt4+xlRNEJwRT7t28A 7NHWC1A8+etHT1XYPmK1HvJrbV8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ2msvP /xlOKuJpxdJ+gqwfLFQpEjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NGYwZWZkM2YtMWRjMC00YWJhLTk4MTktMjg0OWEyNzA0MWY2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GvA gDANBgkqhkiG9w0BAQsFAAOCAQEAGpgeh4qjGtky1wteTwyojq+M1kb9c+hRqPcy wXnMfiLIYVUk3TPwwz35rhNjEwSgHjfVY4JVTrKfn2Oobqr8kK9DZ+zAhln8twKj 7aegTlz9QIfwSv77Urn/1oG1o4+ng1NpUxFTSIe+mNeno7ywNgNYOJzWuaNYnu4c CVfPforQc16mo/968+nUoh/rZu9qpVJ5OVNfP4zym/mtnFizKI1f0Gd8bbnbm5Hc hCnNVVOPMzdIWc0EcZk2joQKLRTkDSmrEGyr4lFFfAKWTbF1d0O1OamDxtcoo3+r Pu/gp6aa9OWziWAD3e6TyU57/phAmSs2c0PJZPCVw2dc8oYZvw== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:27 2026 by rpki-client