This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cdec629-851f-4419-9f9b-59607b65b13a.roa File: 9cdec629-851f-4419-9f9b-59607b65b13a.roa (raw, json) Hash identifier: 4z9sRcHVpA96mhQXGFdkId+iknWnmfJ4p4mJSmb9LiU= Subject key identifier: 5F:B7:DF:7C:9B:C4:D8:42:E8:08:C2:4F:44:A3:14:6E:70:8E:01:D5 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1B01F5783A60060F747BCE46972BF5244D21682C Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cdec629-851f-4419-9f9b-59607b65b13a.roa Signing time: Tue 13 Jan 2026 20:06:59 +0000 ROA not before: Tue 13 Jan 2026 20:06:59 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:01:f5:78:3a:60:06:0f:74:7b:ce:46:97:2b:f5:24:4d:21:68:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 20:06:59 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=03075e7183b8351f98a4d722623dc61d058615dbf9227faaed10ef5b15810e86, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d5:9c:fe:40:4c:a7:7c:e7:17:9b:c0:7b:2d: e7:f7:f9:12:ed:ed:96:ab:a2:d6:c9:7e:a2:48:1b: 92:cf:42:f7:3f:e6:f1:9a:94:ca:0f:49:95:5e:4b: 6c:9c:d9:81:91:eb:eb:59:a6:38:e9:dd:71:4c:31: 85:62:12:07:4b:b2:83:af:cc:95:29:9f:7c:1c:4c: 70:27:11:16:93:e0:d8:74:a0:f5:72:a7:75:ad:36: 29:5a:e8:50:5e:ba:7e:db:a4:74:b6:c3:0d:cd:1f: 5e:fa:59:92:77:cf:02:59:84:21:ae:54:94:de:ac: 87:e9:52:6f:97:7a:31:61:96:1d:72:c5:d7:84:76: ee:24:67:52:50:db:e4:b9:97:b6:9d:6c:da:10:02: 94:a7:13:74:1d:98:cd:91:cc:5e:43:cd:d2:0c:bb: 42:53:f4:34:0c:86:02:b8:cc:d3:81:6b:17:ae:58: 72:f5:2c:ec:67:89:db:7e:3a:1d:58:f9:d4:84:bb: 67:cf:ed:5c:45:b4:aa:89:f5:06:79:77:45:e6:17: 3e:3f:75:8a:45:a0:d5:75:54:5b:4b:0e:73:fa:0f: 8e:ef:42:cb:2c:86:a8:2c:2f:01:8c:fd:4e:8a:be: e3:99:2f:5e:b7:4d:f1:16:a6:f0:78:69:98:3f:31: 44:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B7:DF:7C:9B:C4:D8:42:E8:08:C2:4F:44:A3:14:6E:70:8E:01:D5 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9cdec629-851f-4419-9f9b-59607b65b13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:8000::/40 Signature Algorithm: sha256WithRSAEncryption 58:a4:8e:89:cd:d0:c2:8a:95:31:29:c8:13:2d:55:6f:10:06: 37:08:61:04:ed:2d:db:f8:00:0b:0b:4f:71:9c:e2:1e:b6:58: 86:01:5d:fc:13:07:b4:a5:10:e7:21:2b:3e:f3:ed:7a:ac:38: 59:97:6f:63:4e:98:6f:8e:a2:c1:8e:c4:d5:f4:4c:a5:51:7c: 04:ef:36:d6:66:24:c7:24:8d:8d:76:07:79:c1:d5:37:7d:64: 76:30:ea:d6:5d:c8:32:3a:33:14:16:73:65:9c:00:53:b7:95: c6:57:27:a0:1c:4a:5c:5d:8c:e2:c8:fe:b6:dc:41:11:f5:35: cc:ad:6f:1d:32:9a:b5:33:bd:e5:6c:ec:b0:4f:93:f6:0d:2e: 6c:54:5e:c2:41:82:a6:6a:ae:c6:79:21:d9:7d:1c:01:5c:7b: ee:a6:69:10:b3:2c:8f:48:bc:31:d5:9d:45:ad:59:35:b8:f7: d5:cf:04:5a:39:4c:c1:20:59:35:e3:e9:ca:bb:30:44:fa:ab: 5a:49:d9:69:be:96:1d:7b:77:61:e1:81:ca:81:c4:d5:16:4e: e0:85:00:96:e1:7b:94:8f:be:6d:a0:9f:96:81:63:f8:a1:62: c4:d6:66:67:bd:93:ca:13:4a:8e:46:ea:d0:cd:2b:a1:b4:d6: 67:0a:7d:c8 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUGwH1eDpgBg90e85Glyv1JE0haCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMyMDA2NTlaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDAzMDc1ZTcxODNiODM1MWY5OGE0ZDcyMjYyM2RjNjFkMDU4NjE1ZGJmOTIy N2ZhYWVkMTBlZjViMTU4MTBlODYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJXVnP5ATKd85xebwHst5/f5Eu3tlqui1sl+okgbks9C9z/m8ZqUyg9JlV5L bJzZgZHr61mmOOndcUwxhWISB0uyg6/MlSmffBxMcCcRFpPg2HSg9XKnda02KVro UF66ftukdLbDDc0fXvpZknfPAlmEIa5UlN6sh+lSb5d6MWGWHXLF14R27iRnUlDb 5LmXtp1s2hAClKcTdB2YzZHMXkPN0gy7QlP0NAyGArjM04FrF65YcvUs7GeJ2346 HVj51IS7Z8/tXEW0qon1Bnl3ReYXPj91ikWg1XVUW0sOc/oPju9CyyyGqCwvAYz9 Toq+45kvXrdN8Ram8HhpmD8xRAkCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRft998 m8TYQugIwk9EoxRucI4B1TAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OWNkZWM2MjktODUxZi00NDE5LTlmOWItNTk2MDdiNjViMTNhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0GuA MA0GCSqGSIb3DQEBCwUAA4IBAQBYpI6JzdDCipUxKcgTLVVvEAY3CGEE7S3b+AAL C09xnOIetliGAV38Ewe0pRDnISs+8+16rDhZl29jTphvjqLBjsTV9EylUXwE7zbW ZiTHJI2Ndgd5wdU3fWR2MOrWXcgyOjMUFnNlnABTt5XGVyegHEpcXYziyP623EER 9TXMrW8dMpq1M73lbOywT5P2DS5sVF7CQYKmaq7GeSHZfRwBXHvupmkQsyyPSLwx 1Z1FrVk1uPfVzwRaOUzBIFk14+nKuzBE+qtaSdlpvpYde3dh4YHKgcTVFk7ghQCW 4XuUj75toJ+WgWP4oWLE1mZnvZPKE0qORurQzSuhtNZnCn3I -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:25 2026 by rpki-client