This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ccc743f-3f5d-41c6-aa9c-154a3077afce.roa File: 7ccc743f-3f5d-41c6-aa9c-154a3077afce.roa (raw, json) Hash identifier: 2oh1HJtxpNiA5QgOFE2IotMVRJnJ+2OC2Y22WzPOGws= Subject key identifier: 90:09:DA:7E:8E:5F:01:7C:A0:33:E0:B2:D5:3F:6C:18:C1:79:02:E5 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 0AC189B7E144313ED4F24F88901E028345A504C4 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ccc743f-3f5d-41c6-aa9c-154a3077afce.roa Signing time: Tue 13 Jan 2026 19:58:32 +0000 ROA not before: Tue 13 Jan 2026 19:58:32 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:9040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c1:89:b7:e1:44:31:3e:d4:f2:4f:88:90:1e:02:83:45:a5:04:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:32 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=9ad04f3bbc3d2aa9aee877c37199f87d8595ce771fd6104b20f20e85e39e2e98, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:b7:63:2c:ae:4a:7b:7f:c1:2a:cb:a8:de: 39:88:51:c8:c5:04:eb:04:94:c9:85:d7:2b:5b:46: 7d:58:39:6c:41:a7:ed:a2:fb:66:1e:32:2a:20:cc: 00:fc:b9:f7:e0:b9:fc:f8:97:f6:e7:ab:e8:cc:1b: f0:f4:08:d8:00:9e:2c:81:3a:66:65:99:75:8c:7e: b4:a9:81:9c:a0:8a:99:b3:d3:0b:b9:ff:f1:e6:ca: c1:01:e0:6d:06:93:af:5e:07:a2:c4:2b:c3:80:ed: ab:17:f5:aa:38:6b:42:02:4a:6e:5c:c8:73:f9:f5: 8d:78:de:4c:78:d0:64:2b:72:bc:dc:33:5a:58:5a: 28:f3:8a:29:1d:54:64:6c:11:da:3d:9b:c9:fe:11: 91:5c:f6:98:73:cb:e0:63:08:1c:1f:2d:41:da:97: 45:1a:80:3a:53:b2:00:d1:d8:26:81:aa:95:7d:3f: fe:cb:bd:67:77:c2:a4:65:db:50:68:ce:79:27:99: ff:d7:a7:7c:97:07:77:6c:47:dd:e6:a1:f9:af:d3: ba:76:51:b7:70:4f:a8:2c:d9:00:f6:26:9b:ba:ac: 62:ba:41:e3:26:72:68:f9:d6:43:fb:4a:43:22:25: 1f:66:8c:48:72:15:78:0a:a2:f4:5a:08:be:ab:9c: 0d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:09:DA:7E:8E:5F:01:7C:A0:33:E0:B2:D5:3F:6C:18:C1:79:02:E5 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ccc743f-3f5d-41c6-aa9c-154a3077afce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:9040::/48 Signature Algorithm: sha256WithRSAEncryption 36:e5:aa:d2:67:0c:f5:07:d8:e6:d3:55:46:81:f7:b0:7b:3c: fd:93:05:e1:d9:0f:bc:e9:32:4b:ef:1f:30:bf:40:70:91:28: 2c:dd:37:b0:da:55:2b:84:50:42:4f:6f:1e:22:c3:7c:f9:64: 76:b7:d7:0c:4e:9d:5c:d2:3a:0f:fd:de:ed:77:70:fa:8d:5f: 6e:21:a2:f9:b7:56:f6:27:cc:cc:3b:ae:d6:6a:56:e5:65:50: a0:94:db:d2:67:70:32:5f:a2:d1:14:6a:7f:ce:2d:df:34:50: 6a:a1:59:50:b5:26:78:f9:a4:bc:8b:7d:61:3e:aa:35:2d:32: 22:c0:9a:37:7c:36:ab:2d:54:d6:dd:59:75:d3:7a:c3:7c:76: a2:d2:54:0e:69:bb:78:0b:50:6a:4b:30:81:49:41:27:1f:58: 85:ca:7d:89:27:a1:06:57:7d:9f:03:bc:0c:c2:6c:e6:83:22: fd:e0:87:8d:09:7e:32:84:bc:52:93:3a:03:50:8d:26:dd:cd: 53:85:cb:0c:74:af:09:b8:58:01:6b:1a:0b:8a:fa:55:a7:b9: 10:20:a4:60:64:e4:78:d8:bb:e7:24:c6:f0:e5:e0:fe:d6:83: cf:8d:dc:13:0f:99:c0:28:01:01:d4:f2:a6:8d:25:40:6b:c4: 2d:65:ac:3c -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUCsGJt+FEMT7U8k+IkB4Cg0WlBMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MzJaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDlhZDA0ZjNiYmMzZDJhYTlhZWU4NzdjMzcxOTlmODdkODU5NWNlNzcxZmQ2 MTA0YjIwZjIwZTg1ZTM5ZTJlOTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALL9t2Msrkp7f8Eqy6jeOYhRyMUE6wSUyYXXK1tGfVg5bEGn7aL7Zh4yKiDM APy59+C5/PiX9uer6Mwb8PQI2ACeLIE6ZmWZdYx+tKmBnKCKmbPTC7n/8ebKwQHg bQaTr14HosQrw4Dtqxf1qjhrQgJKblzIc/n1jXjeTHjQZCtyvNwzWlhaKPOKKR1U ZGwR2j2byf4RkVz2mHPL4GMIHB8tQdqXRRqAOlOyANHYJoGqlX0//su9Z3fCpGXb UGjOeSeZ/9enfJcHd2xH3eah+a/TunZRt3BPqCzZAPYmm7qsYrpB4yZyaPnWQ/tK QyIlH2aMSHIVeAqi9FoIvqucDS8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSQCdp+ jl8BfKAz4LLVP2wYwXkC5TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv N2NjYzc0M2YtM2Y1ZC00MWM2LWFhOWMtMTU0YTMwNzdhZmNlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GuQ QDANBgkqhkiG9w0BAQsFAAOCAQEANuWq0mcM9QfY5tNVRoH3sHs8/ZMF4dkPvOky S+8fML9AcJEoLN03sNpVK4RQQk9vHiLDfPlkdrfXDE6dXNI6D/3e7Xdw+o1fbiGi +bdW9ifMzDuu1mpW5WVQoJTb0mdwMl+i0RRqf84t3zRQaqFZULUmePmkvIt9YT6q NS0yIsCaN3w2qy1U1t1ZddN6w3x2otJUDmm7eAtQakswgUlBJx9Yhcp9iSehBld9 nwO8DMJs5oMi/eCHjQl+MoS8UpM6A1CNJt3NU4XLDHSvCbhYAWsaC4r6Vae5ECCk YGTkeNi75yTG8OXg/taDz43cEw+ZwCgBAdTypo0lQGvELWWsPA== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:28 2026 by rpki-client