This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a05c86c-e8bd-4b85-8873-5c5f3572e4a4.roa File: 5a05c86c-e8bd-4b85-8873-5c5f3572e4a4.roa (raw, json) Hash identifier: dhUpyGvKkVg03JTBUSIysUtdPVZteUEXev5Fp+x3Ub8= Subject key identifier: C7:4D:60:6C:A7:32:8D:95:60:C0:4E:A2:3C:71:8E:24:DE:35:D1:69 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 76332B86000EBA872818D9B08157F2362CF3D5F9 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a05c86c-e8bd-4b85-8873-5c5f3572e4a4.roa Signing time: Tue 13 Jan 2026 20:06:56 +0000 ROA not before: Tue 13 Jan 2026 20:06:56 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:33:2b:86:00:0e:ba:87:28:18:d9:b0:81:57:f2:36:2c:f3:d5:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 20:06:56 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=7c5600c7396f0f6a4d2712f00a6fc586fcfdd6cd25774629c63b350c92cff8ba, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a7:9b:f9:57:29:be:7c:ca:e9:89:02:e8:d7: 0b:a2:56:7a:37:9b:b0:0b:04:55:94:0e:11:85:b4: 70:d6:32:ae:1b:dd:95:43:1b:20:ea:f7:c2:0b:b5: 22:b6:53:f7:8c:18:b8:1d:77:e7:21:87:3c:85:56: 7e:0e:dd:b2:f9:cc:69:1a:15:d1:93:16:49:84:8e: 11:e2:13:03:f4:57:bd:0f:5b:b7:c1:17:7e:6a:90: 26:00:93:99:54:56:5b:e2:06:2d:6a:20:5a:8d:4d: 82:42:67:09:54:3e:54:7c:a9:4a:16:f3:29:74:78: 67:f3:a2:6a:a3:1e:98:ad:de:12:3c:3c:7f:38:e4: 7f:7f:27:b9:11:83:cb:b7:26:5a:2a:5a:a7:fe:8f: 1c:0b:6c:7a:f8:38:32:dd:fc:37:8e:6b:9b:cd:d5: 82:aa:97:2d:61:0d:a0:a2:74:85:c0:a2:18:06:82: 2e:4b:92:bb:04:e4:24:a0:ea:80:51:7a:8a:90:75: c4:5d:46:e0:8e:aa:f5:d6:ab:f4:79:8f:c5:46:c9: b1:b2:2d:96:bf:32:fc:06:37:93:07:4d:10:42:b5: d5:0d:ab:c1:2d:53:e0:19:70:14:7e:f3:5e:21:aa: 7c:22:9f:68:dc:52:ce:6b:eb:bf:8d:bd:97:83:d7: ec:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4D:60:6C:A7:32:8D:95:60:C0:4E:A2:3C:71:8E:24:DE:35:D1:69 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/5a05c86c-e8bd-4b85-8873-5c5f3572e4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:e080::/48 Signature Algorithm: sha256WithRSAEncryption 2d:e5:7a:1d:3d:50:19:d8:f2:5f:ab:f3:5d:36:4a:4e:85:5b: 80:59:f3:03:1e:e6:e6:29:f9:3b:53:14:85:bf:f6:d9:3a:ca: a1:c8:e5:d8:e6:84:92:01:5f:46:57:22:d1:99:44:4a:02:f5: da:80:35:52:28:ba:63:ce:38:a7:a2:1d:74:0f:03:9c:f5:98: bb:1a:a7:9c:e3:d1:0a:14:90:a0:2d:2f:d6:db:3a:d1:0c:5d: c9:5c:d2:52:28:2c:7f:2a:c4:df:01:17:30:6c:60:90:67:5f: e8:b1:d7:87:e3:76:9c:27:74:dc:1f:9d:21:11:a2:c9:7b:e2: 47:91:4f:c2:f9:3e:86:75:64:d7:9c:3d:44:de:71:c6:56:cc: f7:5d:04:e0:a6:1d:a9:fa:70:f1:f2:c3:88:30:34:e0:ba:c1: f5:a3:90:3a:34:3c:a6:f0:80:e1:97:de:91:f2:34:45:4d:15: 7d:c3:0d:53:64:58:c1:b2:dd:cd:fa:03:22:2a:5d:39:21:3b: 4e:64:da:62:b4:63:a9:86:7f:eb:60:42:cc:c3:22:36:4d:cc: ac:42:85:a0:07:c5:94:6b:1a:49:7f:54:bd:35:b5:dc:49:56: 63:12:d9:a5:1f:a6:e8:e2:c3:7f:a3:02:ac:62:14:df:d9:a6: 70:70:d6:8e -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUdjMrhgAOuocoGNmwgVfyNizz1fkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMyMDA2NTZaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDdjNTYwMGM3Mzk2ZjBmNmE0ZDI3MTJmMDBhNmZjNTg2ZmNmZGQ2Y2QyNTc3 NDYyOWM2M2IzNTBjOTJjZmY4YmExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKinm/lXKb58yumJAujXC6JWejebsAsEVZQOEYW0cNYyrhvdlUMbIOr3wgu1 IrZT94wYuB135yGHPIVWfg7dsvnMaRoV0ZMWSYSOEeITA/RXvQ9bt8EXfmqQJgCT mVRWW+IGLWogWo1NgkJnCVQ+VHypShbzKXR4Z/OiaqMemK3eEjw8fzjkf38nuRGD y7cmWipap/6PHAtsevg4Mt38N45rm83VgqqXLWENoKJ0hcCiGAaCLkuSuwTkJKDq gFF6ipB1xF1G4I6q9dar9HmPxUbJsbItlr8y/AY3kwdNEEK11Q2rwS1T4BlwFH7z XiGqfCKfaNxSzmvrv429l4PX7N0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTHTWBs pzKNlWDATqI8cY4k3jXRaTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NWEwNWM4NmMtZThiZC00Yjg1LTg4NzMtNWM1ZjM1NzJlNGE0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gvg gDANBgkqhkiG9w0BAQsFAAOCAQEALeV6HT1QGdjyX6vzXTZKToVbgFnzAx7m5in5 O1MUhb/22TrKocjl2OaEkgFfRlci0ZlESgL12oA1Uii6Y844p6IddA8DnPWYuxqn nOPRChSQoC0v1ts60QxdyVzSUigsfyrE3wEXMGxgkGdf6LHXh+N2nCd03B+dIRGi yXviR5FPwvk+hnVk15w9RN5xxlbM910E4KYdqfpw8fLDiDA04LrB9aOQOjQ8pvCA 4ZfekfI0RU0VfcMNU2RYwbLdzfoDIipdOSE7TmTaYrRjqYZ/62BCzMMiNk3MrEKF oAfFlGsaSX9UvTW13ElWYxLZpR+m6OLDf6MCrGIU39mmcHDWjg== -----END CERTIFICATE-----Generated at Sat Jan 17 10:00:40 2026 by rpki-client