This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5e0d9f-a979-451d-87fb-0f975625ddd3.roa File: 9d5e0d9f-a979-451d-87fb-0f975625ddd3.roa (raw, json) Hash identifier: WmNQD0u3EK+LFlIzWLm2c0kJMstF8K7vR+5vFa0jOq0= Subject key identifier: 49:74:63:53:94:2F:92:36:C1:2C:10:64:89:EB:7E:EC:12:BF:B3:C2 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 334767A7AED38B62339935155682EFB10208A28F Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5e0d9f-a979-451d-87fb-0f975625ddd3.roa Signing time: Tue 13 Jan 2026 19:58:33 +0000 ROA not before: Tue 13 Jan 2026 19:58:33 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:90c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:47:67:a7:ae:d3:8b:62:33:99:35:15:56:82:ef:b1:02:08:a2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:33 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=a13782535d51c54eb47e6cb7e6f14be07c76e006f034426d3e55e55ccfcd4aa2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:da:e2:86:dd:5b:6d:25:8f:a9:46:f3:00:73: 27:fc:1a:74:78:05:9f:08:b3:3d:77:52:a8:36:8e: f1:43:10:cd:69:c2:5b:36:2a:9c:e3:92:a0:da:8b: 7f:d8:55:99:ef:bc:0c:91:45:93:2c:f7:56:af:e3: a0:f1:82:c0:07:76:24:b3:54:51:34:e0:75:3e:cf: ca:51:1c:99:e2:93:ea:c3:26:e9:dd:46:c0:72:29: dc:1d:53:90:71:1e:13:2a:5b:1d:07:f6:f7:9c:8e: 0e:5d:d7:d5:7f:a7:51:3e:62:ea:c1:c0:96:87:0d: df:e6:94:03:03:34:6b:ca:d3:d6:1b:61:9b:5d:b1: ce:0e:20:9d:88:ea:b0:20:65:a7:07:9a:6c:13:e7: 13:ff:c4:0b:8d:0d:4c:d5:85:7e:a7:fa:7e:07:a6: 1c:e8:e4:a7:ea:59:7b:fb:53:28:8f:1b:79:b3:16: 46:a5:b3:c4:1c:66:a7:35:ce:78:0d:0d:4f:86:c3: 97:ed:76:7c:21:88:8a:3b:ad:04:38:82:ff:15:5d: 49:19:95:03:3e:99:08:21:67:26:be:3e:77:f7:15: 1b:d3:92:f8:0c:09:df:b7:8e:92:18:bb:4e:a3:0f: 6a:ed:b9:85:3a:4d:68:1d:2a:49:dc:9a:33:26:66: ae:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:74:63:53:94:2F:92:36:C1:2C:10:64:89:EB:7E:EC:12:BF:B3:C2 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9d5e0d9f-a979-451d-87fb-0f975625ddd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:90c0::/48 Signature Algorithm: sha256WithRSAEncryption 95:45:52:45:bf:4c:64:0b:1a:b0:81:a1:2d:68:64:02:78:4e: d3:7e:b9:a4:36:c3:5f:88:79:53:53:4e:e3:b5:9b:4b:dc:e9: b7:0f:70:0c:a4:31:03:04:a1:de:3e:7f:95:7f:44:97:2e:9e: 57:72:ae:1d:06:69:17:7a:16:e2:f0:b7:60:18:cf:43:dc:3b: f5:b4:89:3f:91:ea:fe:80:1a:92:ea:e3:5b:ef:f5:f9:a7:c0: 56:32:14:3f:7b:14:76:cc:70:91:08:c1:6c:a6:c1:2b:d6:30: 7f:39:d8:66:2d:5f:46:1b:b4:00:05:2b:e3:a3:eb:6d:2e:d6: f4:98:a6:1c:a3:20:a1:e8:91:ed:3b:90:e9:66:cc:0e:f6:b1: 55:a2:45:94:84:ee:84:4f:09:5f:9a:ca:af:59:91:2e:4d:6f: f6:44:80:09:94:82:c9:2e:fd:00:13:ee:96:97:db:95:d5:0e: bb:46:d5:cf:80:56:17:0b:82:21:c1:1e:2a:43:10:82:a5:fb: 6a:9f:a8:e0:7a:d1:77:04:dd:8e:92:ab:32:d4:4b:28:3a:56: a9:67:53:0c:a6:27:c9:ab:32:02:30:8c:f5:43:30:7e:05:36: cf:ed:29:f8:37:55:69:a5:d2:26:f5:00:a2:d1:11:3c:35:5d: b9:0e:36:7d -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUM0dnp67Ti2IzmTUVVoLvsQIIoo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MzNaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQGExMzc4MjUzNWQ1MWM1NGViNDdlNmNiN2U2ZjE0YmUwN2M3NmUwMDZmMDM0 NDI2ZDNlNTVlNTVjY2ZjZDRhYTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALTa4obdW20lj6lG8wBzJ/wadHgFnwizPXdSqDaO8UMQzWnCWzYqnOOSoNqL f9hVme+8DJFFkyz3Vq/joPGCwAd2JLNUUTTgdT7PylEcmeKT6sMm6d1GwHIp3B1T kHEeEypbHQf295yODl3X1X+nUT5i6sHAlocN3+aUAwM0a8rT1hthm12xzg4gnYjq sCBlpweabBPnE//EC40NTNWFfqf6fgemHOjkp+pZe/tTKI8bebMWRqWzxBxmpzXO eA0NT4bDl+12fCGIijutBDiC/xVdSRmVAz6ZCCFnJr4+d/cVG9OS+AwJ37eOkhi7 TqMPau25hTpNaB0qSdyaMyZmrk8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRJdGNT lC+SNsEsEGSJ637sEr+zwjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv OWQ1ZTBkOWYtYTk3OS00NTFkLTg3ZmItMGY5NzU2MjVkZGQzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GuQ wDANBgkqhkiG9w0BAQsFAAOCAQEAlUVSRb9MZAsasIGhLWhkAnhO0365pDbDX4h5 U1NO47WbS9zptw9wDKQxAwSh3j5/lX9Ely6eV3KuHQZpF3oW4vC3YBjPQ9w79bSJ P5Hq/oAakurjW+/1+afAVjIUP3sUdsxwkQjBbKbBK9YwfznYZi1fRhu0AAUr46Pr bS7W9JimHKMgoeiR7TuQ6WbMDvaxVaJFlITuhE8JX5rKr1mRLk1v9kSACZSCyS79 ABPulpfbldUOu0bVz4BWFwuCIcEeKkMQgqX7ap+o4HrRdwTdjpKrMtRLKDpWqWdT DKYnyasyAjCM9UMwfgU2z+0p+DdVaaXSJvUAotERPDVduQ42fQ== -----END CERTIFICATE-----Generated at Sat Jan 17 08:19:11 2026 by rpki-client