This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a08c07f-96f6-49d5-aa0a-c00dee2674ce.roa File: 7a08c07f-96f6-49d5-aa0a-c00dee2674ce.roa (raw, json) Hash identifier: pLeXQJeodYZ2hnbKy3Pf5i3nkv+Sa1cP3H3ntUx2vGk= Subject key identifier: 1E:E5:06:C7:AE:B9:C1:1F:BB:CE:B3:9D:86:5D:C3:5A:B2:27:B8:52 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 223A7B2E6C8B6D43A22B8ABB17B79A0B0F65C229 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a08c07f-96f6-49d5-aa0a-c00dee2674ce.roa Signing time: Tue 13 Jan 2026 19:58:19 +0000 ROA not before: Tue 13 Jan 2026 19:58:19 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3a:7b:2e:6c:8b:6d:43:a2:2b:8a:bb:17:b7:9a:0b:0f:65:c2:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:19 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=277b353c6fc596c9b979143e33bbc8caed48fbc54e3e0c7ede2f895d921062b5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:99:f5:2b:0a:d4:17:14:85:5b:49:ad:f1: a1:b8:84:0f:33:f9:fa:a4:cf:1b:35:f3:da:46:c4: b9:fd:56:8b:ba:b5:01:96:c6:da:68:8b:f7:73:52: 33:64:90:ed:97:c2:bf:52:d0:56:c9:4d:f3:40:52: f4:3f:94:7b:37:91:7c:c6:94:36:ff:86:cb:88:92: 06:00:7f:3c:ec:33:eb:22:98:8c:ca:fa:a3:1c:dd: e3:24:d3:1f:b6:27:31:22:bc:93:a0:e6:33:c1:5a: a1:4b:cd:75:7c:b6:e9:7d:03:14:41:b5:6e:00:ef: 86:e1:28:67:b8:c5:12:b0:6e:92:5a:e4:c5:ae:fe: c7:19:6f:d5:6f:b6:a9:41:87:68:95:d0:43:98:11: 1a:00:a6:e3:6d:d2:1c:73:62:98:26:1f:02:48:ea: 2e:88:e9:73:bb:ce:14:8a:2f:7e:6b:06:eb:d7:fe: ce:a3:04:02:da:a5:92:da:fb:0e:ff:0a:e1:20:b1: b0:e4:87:aa:86:1c:3f:de:a6:d6:26:5b:d3:2d:d3: 82:7b:d7:42:ca:90:92:44:cf:51:09:f0:10:7a:ba: 15:a1:92:f0:60:5b:c0:6b:64:7a:8d:2a:e2:1d:96: ec:ab:55:04:5d:fc:fb:9d:bb:40:7a:0d:20:53:02: 0f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E5:06:C7:AE:B9:C1:1F:BB:CE:B3:9D:86:5D:C3:5A:B2:27:B8:52 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7a08c07f-96f6-49d5-aa0a-c00dee2674ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:1040::/48 Signature Algorithm: sha256WithRSAEncryption 11:89:5c:f5:9f:ec:c3:df:19:45:99:bc:62:c6:57:d1:c2:48: 35:fc:26:b4:e8:70:53:37:50:b2:ab:ec:10:88:a8:b1:7c:49: a3:17:9b:96:90:74:f1:aa:e7:be:b1:5e:11:58:8f:17:0b:a4: 99:04:c9:3b:d3:ea:35:b0:7f:f2:5a:ef:22:8f:75:ed:22:53: 36:12:dd:93:ad:2a:71:8b:b5:b0:77:b8:e5:52:68:6f:6b:fd: c5:2a:ee:09:2b:4d:1e:52:b6:ad:c8:b7:35:90:82:b1:55:44: 18:22:d6:b9:e1:e3:53:6b:8a:44:ed:44:5f:81:9f:e6:c3:f3: 35:0e:4e:15:9d:c9:4a:f2:64:a2:88:45:e7:34:54:b4:8d:3c: 51:42:22:d3:a8:27:04:38:ea:02:ce:c5:3d:50:2e:3a:4b:f1: 99:d6:40:7e:54:1b:ef:d8:fb:a9:7f:a3:83:fd:09:52:ac:d8: c6:ef:5c:e6:67:ef:03:ba:ec:09:11:2d:da:d0:3c:d8:c4:59: f8:71:10:66:7f:31:a9:44:03:37:96:2d:5f:08:5e:79:1f:68: 5d:63:ac:a7:b7:3a:c2:98:d0:78:65:49:1a:1c:fd:50:ef:69: 97:2a:8e:a4:68:b1:1d:b2:25:5e:a8:eb:12:4b:8f:f1:35:c2: 2b:ae:f7:a0 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUIjp7LmyLbUOiK4q7F7eaCw9lwikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MTlaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDI3N2IzNTNjNmZjNTk2YzliOTc5MTQzZTMzYmJjOGNhZWQ0OGZiYzU0ZTNl MGM3ZWRlMmY4OTVkOTIxMDYyYjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoImfUrCtQXFIVbSa3xobiEDzP5+qTPGzXz2kbEuf1Wi7q1AZbG2miL93NS M2SQ7ZfCv1LQVslN80BS9D+UezeRfMaUNv+Gy4iSBgB/POwz6yKYjMr6oxzd4yTT H7YnMSK8k6DmM8FaoUvNdXy26X0DFEG1bgDvhuEoZ7jFErBuklrkxa7+xxlv1W+2 qUGHaJXQQ5gRGgCm423SHHNimCYfAkjqLojpc7vOFIovfmsG69f+zqMEAtqlktr7 Dv8K4SCxsOSHqoYcP96m1iZb0y3TgnvXQsqQkkTPUQnwEHq6FaGS8GBbwGtkeo0q 4h2W7KtVBF38+527QHoNIFMCD6ECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQe5QbH rrnBH7vOs52GXcNasie4UjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv N2EwOGMwN2YtOTZmNi00OWQ1LWFhMGEtYzAwZGVlMjY3NGNlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GsQ QDANBgkqhkiG9w0BAQsFAAOCAQEAEYlc9Z/sw98ZRZm8YsZX0cJINfwmtOhwUzdQ sqvsEIiosXxJoxeblpB08arnvrFeEViPFwukmQTJO9PqNbB/8lrvIo917SJTNhLd k60qcYu1sHe45VJob2v9xSruCStNHlK2rci3NZCCsVVEGCLWueHjU2uKRO1EX4Gf 5sPzNQ5OFZ3JSvJkoohF5zRUtI08UUIi06gnBDjqAs7FPVAuOkvxmdZAflQb79j7 qX+jg/0JUqzYxu9c5mfvA7rsCREt2tA82MRZ+HEQZn8xqUQDN5YtXwheeR9oXWOs p7c6wpjQeGVJGhz9UO9plyqOpGixHbIlXqjrEkuP8TXCK673oA== -----END CERTIFICATE-----Generated at Sat Jan 17 08:19:12 2026 by rpki-client