This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6738fcad-f4a2-497d-8234-1ac95dadb03d.roa File: 6738fcad-f4a2-497d-8234-1ac95dadb03d.roa (raw, json) Hash identifier: Q/TW0qnOv7qnwHHXebvhmP4SM5usRXo0p0EiPx5fRxI= Subject key identifier: 3F:C2:A2:FD:FF:24:79:6B:38:BA:CB:43:30:F9:6C:CE:B5:14:91:11 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 01D048E279360E0398FAEC4670C56796A43FB627 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6738fcad-f4a2-497d-8234-1ac95dadb03d.roa Signing time: Tue 13 Jan 2026 19:58:22 +0000 ROA not before: Tue 13 Jan 2026 19:58:22 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d0:48:e2:79:36:0e:03:98:fa:ec:46:70:c5:67:96:a4:3f:b6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:22 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=ae9eaa0faf0017f7f6a26e374fa5e62c43981c5832ceba5a13540820abbdd1fb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a8:f1:f5:a1:05:69:25:ef:bc:a2:50:e2:08: 3f:84:d6:6b:e8:58:8b:34:e8:79:06:f1:12:a6:8b: 36:c5:80:f7:5c:3b:aa:ec:6e:14:42:20:9a:59:e1: 6b:fa:4b:5f:b8:66:d4:0a:b7:7c:52:26:4b:ef:16: a3:33:48:5c:0f:63:bf:bd:00:69:69:e9:f1:62:16: fe:d2:43:25:ff:72:ea:09:ee:24:6a:08:42:43:d4: b8:76:a0:4c:37:92:b3:45:32:7d:a9:1e:50:ee:0a: 8a:64:05:8b:cf:48:2a:77:f1:b4:e8:df:14:43:fb: c0:56:5e:4c:2a:0a:c5:b3:7d:39:54:f5:4c:7e:31: f6:ef:b1:7e:7c:8c:ac:0c:8f:57:24:bb:b6:97:19: 5a:b2:5d:4d:31:33:a8:8b:17:ce:3b:43:d4:63:84: ea:ff:da:e3:f7:e7:c9:e3:2d:27:eb:1b:6a:21:9e: df:91:49:b0:7a:31:c6:be:b1:e1:66:26:e2:0f:f9: 93:f4:e1:74:8a:f1:e7:e9:16:75:e8:9b:fe:2d:68: 76:07:76:ee:f8:68:8a:76:87:30:5d:0c:4f:8c:68: 0e:98:3b:1b:dc:99:55:81:14:d6:48:13:2c:b3:e9: e6:96:db:9e:94:6e:5f:b7:e3:f0:9c:94:1b:6c:7d: cc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C2:A2:FD:FF:24:79:6B:38:BA:CB:43:30:F9:6C:CE:B5:14:91:11 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6738fcad-f4a2-497d-8234-1ac95dadb03d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:2080::/48 Signature Algorithm: sha256WithRSAEncryption 22:a5:80:5e:8a:c4:3f:10:d8:f7:7a:09:dd:79:77:93:f6:46: 63:6d:b5:96:16:c4:76:d9:7d:a5:91:1a:56:1c:92:87:01:69: d4:e3:ab:52:71:01:1d:5b:9a:43:c0:f1:3a:04:84:39:7c:62: 5d:b8:09:c6:d8:d8:0e:d2:f2:29:67:37:72:e8:8e:af:5c:c2: b1:da:0c:4c:bf:4f:63:54:0c:25:14:2d:25:c7:62:fd:41:e0: b0:26:d1:47:1d:1f:c6:51:21:73:4e:b4:f1:03:b9:1b:3e:d9: 9b:3e:01:f5:81:97:a8:bf:db:08:34:da:16:a9:ce:6b:e6:c1: 39:e9:80:05:0e:b0:46:bb:a5:c9:6e:f0:a3:72:50:91:52:39: 93:ca:a1:a5:ca:5c:87:da:65:47:fc:a8:12:24:dd:e3:59:b0: 54:f4:ef:44:64:5b:aa:22:b4:92:9e:ac:14:a1:88:c2:6f:7f: 1c:d0:dd:d0:36:9a:c3:fe:f6:c8:93:af:80:01:82:a0:a1:ce: d1:bd:6a:2a:16:27:1c:30:bc:43:95:eb:fb:2e:80:3d:86:4a: a6:9f:58:bc:7e:c5:55:f7:66:c3:f9:8f:e8:fc:ba:ed:04:4b: 45:c3:b8:48:e6:0a:93:e4:7c:af:10:24:36:83:ec:0f:3b:2a: 1b:9f:3d:1d -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUAdBI4nk2DgOY+uxGcMVnlqQ/ticwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MjJaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQGFlOWVhYTBmYWYwMDE3ZjdmNmEyNmUzNzRmYTVlNjJjNDM5ODFjNTgzMmNl YmE1YTEzNTQwODIwYWJiZGQxZmIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALOo8fWhBWkl77yiUOIIP4TWa+hYizToeQbxEqaLNsWA91w7quxuFEIgmlnh a/pLX7hm1Aq3fFImS+8WozNIXA9jv70AaWnp8WIW/tJDJf9y6gnuJGoIQkPUuHag TDeSs0UyfakeUO4KimQFi89IKnfxtOjfFEP7wFZeTCoKxbN9OVT1TH4x9u+xfnyM rAyPVyS7tpcZWrJdTTEzqIsXzjtD1GOE6v/a4/fnyeMtJ+sbaiGe35FJsHoxxr6x 4WYm4g/5k/ThdIrx5+kWdeib/i1odgd27vhoinaHMF0MT4xoDpg7G9yZVYEU1kgT LLPp5pbbnpRuX7fj8JyUG2x9zLcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ/wqL9 /yR5azi6y0Mw+WzOtRSRETAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv NjczOGZjYWQtZjRhMi00OTdkLTgyMzQtMWFjOTVkYWRiMDNkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gsg gDANBgkqhkiG9w0BAQsFAAOCAQEAIqWAXorEPxDY93oJ3Xl3k/ZGY221lhbEdtl9 pZEaVhyShwFp1OOrUnEBHVuaQ8DxOgSEOXxiXbgJxtjYDtLyKWc3cuiOr1zCsdoM TL9PY1QMJRQtJcdi/UHgsCbRRx0fxlEhc0608QO5Gz7Zmz4B9YGXqL/bCDTaFqnO a+bBOemABQ6wRrulyW7wo3JQkVI5k8qhpcpch9plR/yoEiTd41mwVPTvRGRbqiK0 kp6sFKGIwm9/HNDd0Daaw/72yJOvgAGCoKHO0b1qKhYnHDC8Q5Xr+y6APYZKpp9Y vH7FVfdmw/mP6Py67QRLRcO4SOYKk+R8rxAkNoPsDzsqG589HQ== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:16 2026 by rpki-client