This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa File: b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa (raw, json) Hash identifier: lLbyojzwkzXA41udfne1NE69HLR5+N/Zt/gq4wNfUBU= Subject key identifier: CA:2E:DB:4D:90:02:7A:FA:12:5F:03:91:B3:01:9D:8C:6D:A5:17:7B Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1C2740698BE9098DFC2C9C79729972E0A4065E4A Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa Signing time: Fri 13 Feb 2026 15:21:03 +0000 ROA not before: Fri 13 Feb 2026 15:21:03 +0000 ROA not after: Thu 14 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d032:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Feb 2026 23:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:27:40:69:8b:e9:09:8d:fc:2c:9c:79:72:99:72:e0:a4:06:5e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Feb 13 15:21:03 2026 GMT Not After : May 14 23:59:59 2026 GMT Subject: serialNumber=a5453441f77c5a50352ed85e2b46fd58e8bf04d1b55f7706fad3c73809f312b1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:c9:b3:ab:99:f4:76:39:f6:32:55:f6:b3: 69:b6:10:ec:de:4f:72:37:9a:ce:34:ae:89:80:b6: 86:34:c1:38:ed:8f:b9:29:8b:19:53:b0:ef:9d:f3: c8:31:a9:8b:8a:a8:ea:7b:03:ee:71:b1:b1:18:18: 11:5c:b0:d2:84:cb:d3:f5:a4:d1:46:97:af:4b:55: 17:c8:8a:89:94:31:44:22:bc:19:16:d9:66:9d:ba: bf:cb:f3:2c:14:f0:37:a9:17:1e:40:0a:0d:b3:f2: ba:66:a8:0f:8b:15:e7:3a:4b:3d:ac:17:50:d1:b0: dc:da:c3:a7:27:03:b8:cb:b2:c9:e3:b0:ec:5a:f6: 09:ad:09:d2:1e:bf:50:7f:6d:24:05:29:2b:c2:f5: ce:51:36:76:6e:e0:90:6c:87:a2:28:08:ac:87:50: aa:ae:63:93:2c:31:60:26:32:5f:23:d9:7c:f3:f8: cd:6c:f2:78:5b:83:9d:f9:b1:2d:6e:7c:1d:37:a5: c6:f1:49:67:31:ce:6d:c8:65:90:c0:ea:a4:9b:68: bb:26:2a:82:8d:2f:17:4a:5d:d5:0b:0e:35:22:96: 52:aa:c8:65:99:d6:a7:b0:3e:f6:e7:1e:ab:9e:c9: 7f:55:6a:92:bf:65:91:76:8c:f3:a4:d8:6b:12:28: 13:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2E:DB:4D:90:02:7A:FA:12:5F:03:91:B3:01:9D:8C:6D:A5:17:7B X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b67c662a-6e73-47c9-9455-74ad9ce3cdb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d032:8000::/40 Signature Algorithm: sha256WithRSAEncryption 5f:4a:43:8d:2f:1c:64:af:cf:2c:04:97:c1:16:94:5e:28:cf: dc:0b:d5:52:3f:80:5c:a4:9a:66:03:68:c1:36:b2:ce:6b:61: bc:2a:eb:72:83:8d:d1:0f:60:21:fb:a6:d8:27:e7:30:8b:10: b1:a2:3e:06:21:69:2d:ec:ea:a9:5f:e3:ab:aa:d6:f7:07:39: ab:90:a8:d4:c5:ec:0b:71:44:41:95:19:1f:63:13:24:fa:74: 69:68:52:cd:98:f0:3a:ee:13:a6:ec:f5:93:48:f4:5e:1b:b2: db:0c:f4:38:dd:53:7d:f6:56:bb:98:53:1c:dd:45:d3:1a:c8: ad:9a:c0:44:15:3d:85:02:d6:ab:df:f7:ca:e9:c1:7f:33:79: ed:bf:5c:42:97:5d:04:4c:6f:0f:0f:58:94:28:d4:7a:4a:7f: 0e:e7:87:a3:29:5a:3f:b0:10:92:45:ae:70:8d:46:6d:ea:2c: d4:3c:15:0f:1c:67:2a:70:1d:b2:de:c1:dc:84:c9:ea:74:50: 90:8e:22:0f:b2:74:81:fe:cf:ab:68:03:24:04:46:40:11:54: 1e:08:38:4b:8b:51:35:18:1c:25:03:0e:c9:8e:7d:9c:21:74: c0:83:7f:7c:7c:10:08:54:a4:d3:cc:bd:3c:6f:02:90:be:dc: 6e:72:23:28 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUHCdAaYvpCY38LJx5cply4KQGXkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAyMTMxNTIxMDNaFw0yNjA1MTQyMzU5NTlaMHoxSTBHBgNV BAUTQGE1NDUzNDQxZjc3YzVhNTAzNTJlZDg1ZTJiNDZmZDU4ZThiZjA0ZDFiNTVm NzcwNmZhZDNjNzM4MDlmMzEyYjExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPTybOrmfR2OfYyVfazabYQ7N5PcjeazjSuiYC2hjTBOO2PuSmLGVOw753z yDGpi4qo6nsD7nGxsRgYEVyw0oTL0/Wk0UaXr0tVF8iKiZQxRCK8GRbZZp26v8vz LBTwN6kXHkAKDbPyumaoD4sV5zpLPawXUNGw3NrDpycDuMuyyeOw7Fr2Ca0J0h6/ UH9tJAUpK8L1zlE2dm7gkGyHoigIrIdQqq5jkywxYCYyXyPZfPP4zWzyeFuDnfmx LW58HTelxvFJZzHObchlkMDqpJtouyYqgo0vF0pd1QsONSKWUqrIZZnWp7A+9uce q57Jf1Vqkr9lkXaM86TYaxIoE4MCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTKLttN kAJ6+hJfA5GzAZ2MbaUXezAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YjY3YzY2MmEtNmU3My00N2M5LTk0NTUtNzRhZDljZTNjZGIzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0DKA MA0GCSqGSIb3DQEBCwUAA4IBAQBfSkONLxxkr88sBJfBFpReKM/cC9VSP4BcpJpm A2jBNrLOa2G8Kutyg43RD2Ah+6bYJ+cwixCxoj4GIWkt7OqpX+Orqtb3BzmrkKjU xewLcURBlRkfYxMk+nRpaFLNmPA67hOm7PWTSPReG7LbDPQ43VN99la7mFMc3UXT GsitmsBEFT2FAtar3/fK6cF/M3ntv1xCl10ETG8PD1iUKNR6Sn8O54ejKVo/sBCS Ra5wjUZt6izUPBUPHGcqcB2y3sHchMnqdFCQjiIPsnSB/s+raAMkBEZAEVQeCDhL i1E1GBwlAw7Jjn2cIXTAg398fBAIVKTTzL08bwKQvtxuciMo -----END CERTIFICATE-----Generated at Mon Feb 16 06:38:56 2026 by rpki-client