This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67337a3a-3355-4837-82d2-cf7e20d337c6.roa File: 67337a3a-3355-4837-82d2-cf7e20d337c6.roa (raw, json) Hash identifier: 9YqkEz8HHl8K6cedh1IjsYxb1QJ6dSkNinK+TegwyyQ= Subject key identifier: 01:2A:10:D9:FD:B0:5C:55:05:22:14:2D:EB:C4:7A:4E:BD:E9:FB:C4 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 24BFFC33C505B2F2B2F72905C3B2AFAD96354C40 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67337a3a-3355-4837-82d2-cf7e20d337c6.roa Signing time: Tue 13 Jan 2026 19:58:20 +0000 ROA not before: Tue 13 Jan 2026 19:58:20 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:bf:fc:33:c5:05:b2:f2:b2:f7:29:05:c3:b2:af:ad:96:35:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:20 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=751989805c10ea4fba41142bb08ea898feb8de0cf00f68381d052ada30c7827a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e7:77:07:e7:ef:0f:eb:a6:5d:77:ca:1e:15: 76:7a:1c:d7:3b:fc:d7:0c:cf:f1:94:ee:7f:79:58: bb:29:cb:4f:b9:d4:aa:43:68:61:d2:77:ac:76:c2: 02:a3:be:95:50:a5:f5:5c:15:bf:f9:12:41:31:66: fb:82:71:93:f0:61:61:9d:f3:e6:97:2b:79:20:c6: 32:38:0c:ac:ac:91:e9:36:b2:3a:db:62:df:d6:d9: 69:f6:9a:3a:d7:cd:90:f6:d1:09:98:ce:aa:35:1f: c5:3c:28:2d:84:0e:31:9c:96:88:11:35:24:c1:7b: 95:ba:c4:cf:5b:dd:65:8d:47:38:60:15:71:4d:95: fa:db:5f:47:42:2d:81:a9:2a:e9:cb:4b:f6:2a:f2: 0f:4f:50:13:51:67:31:2d:5a:ee:b7:78:9e:bf:ef: d7:2f:30:d8:8c:67:3b:10:dc:03:f4:a4:63:c5:d0: 7c:e0:29:f4:40:a1:6b:c0:71:28:4f:c4:e0:a5:51: 66:18:87:cd:99:17:a0:4c:99:16:93:6d:1f:7d:18: 87:98:45:c2:66:38:fe:d4:e7:bb:00:34:c7:a1:76: aa:6e:30:d6:f9:54:96:ec:7f:18:2b:c9:14:6d:89: 23:f1:dc:5e:72:d4:8d:48:80:30:fc:f4:c2:6e:cd: 77:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2A:10:D9:FD:B0:5C:55:05:22:14:2D:EB:C4:7A:4E:BD:E9:FB:C4 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/67337a3a-3355-4837-82d2-cf7e20d337c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:1080::/48 Signature Algorithm: sha256WithRSAEncryption 45:87:72:b5:47:19:35:89:54:bf:10:3f:1e:b4:fe:53:b0:5b: 69:2e:d6:86:f2:2e:0a:d8:19:ab:55:75:61:d7:8a:5b:98:e0: e2:f7:b4:9d:19:61:fd:0f:40:2f:47:03:1a:b2:30:3c:88:a9: 79:2b:93:c4:67:77:4c:49:b1:16:0d:fd:37:bf:c3:9e:4c:23: 45:3a:8b:11:b7:cf:67:24:c4:4d:76:cd:97:a4:ac:2e:6a:7d: 0a:31:7f:d8:bf:42:6a:f8:57:4f:d6:d4:b8:de:24:37:33:4a: 31:25:c4:2e:8f:4c:16:20:11:26:fb:ee:dd:34:4a:ea:2c:82: 7b:d2:cc:c8:bc:64:15:99:b5:e1:0d:aa:33:bd:9a:d0:67:2f: fc:99:ab:03:75:6d:49:96:a5:ef:02:4c:7e:81:67:85:ba:0a: cc:bd:cc:6c:3f:1d:a2:12:a4:d9:61:a0:55:4d:44:a7:30:95: 5a:88:3b:ca:94:8a:7a:da:e8:19:f9:f9:b6:1b:f8:b5:c1:01: b3:67:68:bb:94:7b:12:b6:7f:e4:0d:fc:16:3a:35:8b:7d:78: 1a:3a:6a:d0:dd:33:13:19:28:df:1a:fb:2a:e4:47:e5:39:fa: ca:a2:a2:5c:d8:43:bb:8d:0e:84:03:86:85:11:15:7f:34:94: a5:60:bd:cd -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUJL/8M8UFsvKy9ykFw7KvrZY1TEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MjBaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDc1MTk4OTgwNWMxMGVhNGZiYTQxMTQyYmIwOGVhODk4ZmViOGRlMGNmMDBm NjgzODFkMDUyYWRhMzBjNzgyN2ExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKfndwfn7w/rpl13yh4Vdnoc1zv81wzP8ZTuf3lYuynLT7nUqkNoYdJ3rHbC AqO+lVCl9VwVv/kSQTFm+4Jxk/BhYZ3z5pcreSDGMjgMrKyR6TayOtti39bZafaa OtfNkPbRCZjOqjUfxTwoLYQOMZyWiBE1JMF7lbrEz1vdZY1HOGAVcU2V+ttfR0It gakq6ctL9iryD09QE1FnMS1a7rd4nr/v1y8w2IxnOxDcA/SkY8XQfOAp9ECha8Bx KE/E4KVRZhiHzZkXoEyZFpNtH30Yh5hFwmY4/tTnuwA0x6F2qm4w1vlUlux/GCvJ FG2JI/HcXnLUjUiAMPz0wm7Nd7kCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQBKhDZ /bBcVQUiFC3rxHpOven7xDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NjczMzdhM2EtMzM1NS00ODM3LTgyZDItY2Y3ZTIwZDMzN2M2LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GsQ gDANBgkqhkiG9w0BAQsFAAOCAQEARYdytUcZNYlUvxA/HrT+U7BbaS7WhvIuCtgZ q1V1YdeKW5jg4ve0nRlh/Q9AL0cDGrIwPIipeSuTxGd3TEmxFg39N7/DnkwjRTqL EbfPZyTETXbNl6SsLmp9CjF/2L9CavhXT9bUuN4kNzNKMSXELo9MFiARJvvu3TRK 6iyCe9LMyLxkFZm14Q2qM72a0Gcv/JmrA3VtSZal7wJMfoFnhboKzL3MbD8dohKk 2WGgVU1EpzCVWog7ypSKetroGfn5thv4tcEBs2dou5R7ErZ/5A38Fjo1i314Gjpq 0N0zExko3xr7KuRH5Tn6yqKiXNhDu40OhAOGhREVfzSUpWC9zQ== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:28 2026 by rpki-client