This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83bc447e-84c7-47ac-8c22-fa9d48a96d41.roa File: 83bc447e-84c7-47ac-8c22-fa9d48a96d41.roa (raw, json) Hash identifier: AoKO6dVWFlBqebuvB2R3uyygyxZw4zrqVmRkA2WEmVI= Subject key identifier: D6:CD:46:3D:42:B0:96:7D:53:CF:92:94:60:B4:7E:52:30:DE:55:93 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 048972E91F24B94DC981DD19AE03CD8BA267249B Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83bc447e-84c7-47ac-8c22-fa9d48a96d41.roa Signing time: Tue 13 Jan 2026 19:58:28 +0000 ROA not before: Tue 13 Jan 2026 19:58:28 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:89:72:e9:1f:24:b9:4d:c9:81:dd:19:ae:03:cd:8b:a2:67:24:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:28 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=13378ac29d9a317a2f6f7e4ef156cc1ca7ae3030265906b63f22aa8600404245, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8a:53:ba:4f:85:2b:8b:d0:b7:e5:6f:77:49: 2c:fe:56:f6:6f:11:97:18:50:28:ac:79:70:f3:a8: 99:51:1c:76:33:b1:3f:aa:9a:5b:ec:67:84:4c:6b: c9:c4:ea:7c:1b:b2:61:72:f6:61:4e:96:0c:54:0c: 16:58:8e:f9:fa:62:67:d5:3c:d2:c3:cc:98:9c:2e: 78:8b:db:9c:dd:91:0c:ef:af:e4:0d:7f:23:c8:5f: 2b:11:b4:6d:33:3f:a9:49:f9:c1:4b:92:f1:f5:7a: ad:87:1c:79:15:8a:d6:6c:95:f2:0c:bd:72:44:b5: 78:e7:31:00:07:e9:61:bb:0c:e3:cb:d7:5a:9c:a3: 92:39:47:c0:42:a5:6a:58:7a:71:bf:ff:2d:9e:8d: dc:ea:98:4a:64:a5:dd:96:d2:f2:84:cc:e5:ef:29: 02:dd:cf:c3:4a:b0:2e:dc:cf:f5:0b:4f:b9:75:b3: 86:d7:d9:7c:e8:25:3e:86:d9:d7:3b:3b:c2:4e:84: ef:d0:67:37:14:35:78:c3:c1:5e:62:f2:8d:ee:98: b3:75:27:67:56:70:28:48:68:6d:82:17:ae:0a:36: 9a:65:cf:f6:02:0b:42:d7:82:53:c2:e8:90:26:b3: 95:da:71:6e:8d:31:8b:f7:ef:d6:dc:e9:72:48:99: 79:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CD:46:3D:42:B0:96:7D:53:CF:92:94:60:B4:7E:52:30:DE:55:93 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83bc447e-84c7-47ac-8c22-fa9d48a96d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 38:3c:df:7b:fa:cc:a6:16:ee:5c:82:cc:09:36:02:2d:b4:bc: f4:4b:6b:01:7d:1c:b5:65:a0:28:74:80:35:71:27:78:f6:60: a9:d6:05:8c:ad:80:de:0f:00:95:26:ca:a7:07:c3:31:a2:af: 3e:21:8d:bc:f9:28:26:44:c7:8a:18:90:1c:d7:16:42:9c:59: a6:c0:f9:d5:fd:dd:62:a8:95:85:17:54:87:2f:cf:a3:74:52: aa:dd:ca:44:1c:26:48:13:ac:d8:d0:09:c7:46:d2:d6:d8:93: fb:c9:16:40:fe:88:05:22:56:b4:cd:8d:c7:af:01:07:5a:b1: f9:37:34:bc:49:50:31:96:fe:9a:49:98:b8:28:e7:f5:f6:e6: 5f:ac:6f:9b:b4:77:ee:6f:6e:c4:f3:eb:df:c8:d9:21:c4:8b: 7c:0e:07:0a:bd:a2:a5:b0:7d:30:8c:8e:a7:16:02:1d:a2:8a: 40:23:f9:c4:6c:30:99:79:2a:2c:ae:fd:db:48:0a:3a:5f:c2: 44:d5:50:2c:47:c6:f4:ef:0a:71:0a:e2:1d:0b:83:b2:03:28: 12:57:06:d5:ef:da:ef:4f:53:07:76:d5:d4:af:e0:c9:e8:cb: 26:14:1b:ee:cc:e0:81:96:ba:4a:96:83:e0:30:c7:c8:92:c0: 5c:78:b4:72 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUBIly6R8kuU3Jgd0ZrgPNi6JnJJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MjhaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDEzMzc4YWMyOWQ5YTMxN2EyZjZmN2U0ZWYxNTZjYzFjYTdhZTMwMzAyNjU5 MDZiNjNmMjJhYTg2MDA0MDQyNDUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJGKU7pPhSuL0Lflb3dJLP5W9m8RlxhQKKx5cPOomVEcdjOxP6qaW+xnhExr ycTqfBuyYXL2YU6WDFQMFliO+fpiZ9U80sPMmJwueIvbnN2RDO+v5A1/I8hfKxG0 bTM/qUn5wUuS8fV6rYcceRWK1myV8gy9ckS1eOcxAAfpYbsM48vXWpyjkjlHwEKl alh6cb//LZ6N3OqYSmSl3ZbS8oTM5e8pAt3Pw0qwLtzP9QtPuXWzhtfZfOglPobZ 1zs7wk6E79BnNxQ1eMPBXmLyje6Ys3UnZ1ZwKEhobYIXrgo2mmXP9gILQteCU8Lo kCazldpxbo0xi/fv1tzpckiZef0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTWzUY9 QrCWfVPPkpRgtH5SMN5VkzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ODNiYzQ0N2UtODRjNy00N2FjLThjMjItZmE5ZDQ4YTk2ZDQxLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gtg wDANBgkqhkiG9w0BAQsFAAOCAQEAODzfe/rMphbuXILMCTYCLbS89EtrAX0ctWWg KHSANXEnePZgqdYFjK2A3g8AlSbKpwfDMaKvPiGNvPkoJkTHihiQHNcWQpxZpsD5 1f3dYqiVhRdUhy/Po3RSqt3KRBwmSBOs2NAJx0bS1tiT+8kWQP6IBSJWtM2Nx68B B1qx+Tc0vElQMZb+mkmYuCjn9fbmX6xvm7R37m9uxPPr38jZIcSLfA4HCr2ipbB9 MIyOpxYCHaKKQCP5xGwwmXkqLK7920gKOl/CRNVQLEfG9O8KcQriHQuDsgMoElcG 1e/a709TB3bV1K/gyejLJhQb7szggZa6SpaD4DDHyJLAXHi0cg== -----END CERTIFICATE-----Generated at Sat Jan 17 08:19:12 2026 by rpki-client