This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa File: 7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa (raw, json) Hash identifier: TddbcBaGYzppyPX8oMYznbOh1luYbaGnmST0mS0/u8o= Subject key identifier: 3E:9E:00:41:ED:3F:98:B3:AA:58:A7:90:A9:33:BC:BF:FC:67:05:7F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 2D342FC5ED85CE88D43942B9BF8A3AD0B817AB09 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa Signing time: Tue 13 Jan 2026 19:58:23 +0000 ROA not before: Tue 13 Jan 2026 19:58:23 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:34:2f:c5:ed:85:ce:88:d4:39:42:b9:bf:8a:3a:d0:b8:17:ab:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:23 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=eb044545a98da3511cd04549e38df74debeac6b3e48d55ea29f396b3a391aa3b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:52:5a:2c:ed:e6:69:5c:8c:d3:64:aa:ac:81: a4:a1:31:4b:7e:d5:27:02:0d:b2:4d:a0:16:1c:aa: c2:f2:c5:cf:32:33:3e:77:8f:9f:e6:96:4f:fe:79: 8a:9a:42:f0:59:ac:8e:a4:44:db:82:50:55:64:af: 7c:9e:51:56:49:7f:83:49:dc:62:27:8f:92:92:3e: 1e:9b:8b:2e:ce:46:9f:dd:1f:17:a2:8a:94:96:b3: 03:b0:18:ec:86:40:37:43:cb:50:43:75:ca:13:1e: 36:90:af:8a:66:6b:3d:88:b5:9b:f1:68:33:e5:0b: 17:b1:4c:7c:a6:83:40:fd:87:8d:6a:8a:69:40:84: 8a:9c:b3:29:47:76:65:11:90:c4:cb:56:30:ae:5e: 2d:21:ed:55:d4:e5:fb:49:c0:74:40:3f:36:83:89: ea:5d:b8:f4:8f:cc:56:b7:ef:e2:07:75:d4:bf:e4: 90:ff:e7:32:9e:7c:80:34:5c:0d:45:63:d5:35:27: c5:18:84:5c:8b:60:ff:24:4d:84:17:6c:0e:63:20: 41:bb:93:06:3d:b6:11:27:33:15:c6:cc:e8:ea:e2: 91:9a:cf:33:1b:65:53:d3:d5:53:d5:40:96:11:a6: 8e:e4:ec:66:38:5c:53:c6:bf:bf:59:dc:27:41:4d: e8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9E:00:41:ED:3F:98:B3:AA:58:A7:90:A9:33:BC:BF:FC:67:05:7F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7f5d48b1-1228-4f29-b834-b92f0577f3d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:4020::/48 Signature Algorithm: sha256WithRSAEncryption 00:db:dd:64:c3:14:fc:ce:45:be:69:cd:d1:a7:08:86:f6:7d: da:a3:73:d1:d8:b3:80:6e:37:e6:07:ce:3d:b3:cc:8c:8f:3f: 02:81:38:00:27:d3:01:e1:eb:61:a8:c7:93:b1:15:21:33:c8: 95:b3:8d:71:16:d5:cd:1e:43:a8:19:8d:2e:fb:b4:e6:27:8f: ac:57:9e:0b:b4:49:79:bd:d2:67:30:0e:96:37:21:96:cf:32: 34:76:cd:c7:77:19:a2:a9:7b:37:80:34:9a:28:34:81:73:9d: 4d:b8:11:f3:d8:26:ef:35:f1:61:29:96:40:2c:fe:14:0e:a1: 03:ca:94:83:86:21:44:af:d6:43:ae:4b:cd:06:1c:69:b3:0b: 83:da:49:be:64:a4:4b:01:78:3d:14:5e:f2:06:fc:12:02:f1: 56:24:56:a2:43:86:e2:3f:fe:11:88:72:26:93:4c:b3:d8:56: 87:67:be:e0:b2:6c:ee:f7:8d:68:73:11:bc:29:27:75:1d:e1: 5b:19:5d:4c:e1:30:af:6e:97:d4:df:49:a9:a1:7d:58:0c:ac: 65:54:ae:eb:45:e8:5e:c5:71:20:35:30:5f:35:f7:b9:3e:59: ea:7d:fe:69:11:7c:7a:59:b7:f6:d6:be:dc:7d:9d:08:ba:fa: 3b:a7:8b:3d -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIULTQvxe2FzojUOUK5v4o60LgXqwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MjNaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQGViMDQ0NTQ1YTk4ZGEzNTExY2QwNDU0OWUzOGRmNzRkZWJlYWM2YjNlNDhk NTVlYTI5ZjM5NmIzYTM5MWFhM2IxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJBSWizt5mlcjNNkqqyBpKExS37VJwINsk2gFhyqwvLFzzIzPnePn+aWT/55 ippC8FmsjqRE24JQVWSvfJ5RVkl/g0ncYiePkpI+HpuLLs5Gn90fF6KKlJazA7AY 7IZAN0PLUEN1yhMeNpCvimZrPYi1m/FoM+ULF7FMfKaDQP2HjWqKaUCEipyzKUd2 ZRGQxMtWMK5eLSHtVdTl+0nAdEA/NoOJ6l249I/MVrfv4gd11L/kkP/nMp58gDRc DUVj1TUnxRiEXItg/yRNhBdsDmMgQbuTBj22ESczFcbM6OrikZrPMxtlU9PVU9VA lhGmjuTsZjhcU8a/v1ncJ0FN6KcCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ+ngBB 7T+Ys6pYp5CpM7y//GcFfzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv N2Y1ZDQ4YjEtMTIyOC00ZjI5LWI4MzQtYjkyZjA1NzdmM2QzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GtA IDANBgkqhkiG9w0BAQsFAAOCAQEAANvdZMMU/M5FvmnN0acIhvZ92qNz0dizgG43 5gfOPbPMjI8/AoE4ACfTAeHrYajHk7EVITPIlbONcRbVzR5DqBmNLvu05iePrFee C7RJeb3SZzAOljchls8yNHbNx3cZoql7N4A0mig0gXOdTbgR89gm7zXxYSmWQCz+ FA6hA8qUg4YhRK/WQ65LzQYcabMLg9pJvmSkSwF4PRRe8gb8EgLxViRWokOG4j/+ EYhyJpNMs9hWh2e+4LJs7veNaHMRvCkndR3hWxldTOEwr26X1N9JqaF9WAysZVSu 60XoXsVxIDUwXzX3uT5Z6n3+aRF8elm39ta+3H2dCLr6O6eLPQ== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:27 2026 by rpki-client