This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba30de9d-f722-4d58-b8ed-e2a4641131f3.roa File: ba30de9d-f722-4d58-b8ed-e2a4641131f3.roa (raw, json) Hash identifier: 3du/04xaicSXrPl1YBnJ+F5ih+u0cbgXijmHOURGeTA= Subject key identifier: 6D:90:70:0B:1D:41:1D:2A:E7:E7:3B:DA:6B:6E:8E:CA:14:2B:74:2C Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 21B1BB6A2F2B70B5C66292F24B279B074AFA3901 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba30de9d-f722-4d58-b8ed-e2a4641131f3.roa Signing time: Tue 13 Jan 2026 19:58:29 +0000 ROA not before: Tue 13 Jan 2026 19:58:29 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:8040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b1:bb:6a:2f:2b:70:b5:c6:62:92:f2:4b:27:9b:07:4a:fa:39:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:29 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=b0d382ce463861dcec9842f56d45d780aafd50d90bd5851640a240f40b8186bc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fc:b1:73:4a:fe:d7:03:2e:ed:7a:95:ee:28: e6:05:35:02:dc:47:2f:c6:e7:55:ce:fa:2b:05:87: 34:3a:d8:19:41:a6:52:86:f6:85:7d:43:40:d4:77: 9b:7a:57:ed:7f:d6:11:5a:f5:cb:f4:7b:bb:d2:b1: 00:4a:23:17:d2:c9:0b:09:9e:f8:db:e6:55:60:63: 83:12:aa:f0:df:4b:88:e4:8c:20:e7:4e:74:48:8b: cd:01:32:8c:64:05:6e:03:3e:12:db:f3:2e:91:82: 8f:27:48:ad:45:08:ca:c2:63:50:9f:08:78:7c:83: bc:e5:af:f4:b5:f4:98:f6:42:16:0e:21:bb:dd:05: 12:c6:b5:68:26:b7:0a:c0:3d:08:a0:fa:1d:ae:8c: 8f:8d:4e:d8:2d:8d:12:2d:f8:0c:3e:f6:fe:0d:b9: f9:64:ae:ca:a8:c4:6f:b6:3f:43:cd:59:8f:29:20: 6d:a2:a8:4c:3c:b2:a1:8c:a4:c8:70:6f:be:72:48: 4b:79:8f:62:16:2d:f8:7a:1f:98:4c:3b:6a:39:49: 66:49:f0:d4:c8:5d:b6:44:95:69:88:7e:46:57:84: 79:63:a0:99:62:8d:a2:b7:22:be:dc:c9:6d:37:7b: 62:e2:5e:f2:03:dc:3f:a2:91:3d:e7:5a:46:8d:e2: 08:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:90:70:0B:1D:41:1D:2A:E7:E7:3B:DA:6B:6E:8E:CA:14:2B:74:2C X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba30de9d-f722-4d58-b8ed-e2a4641131f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:8040::/48 Signature Algorithm: sha256WithRSAEncryption 7d:93:fe:37:0b:06:9c:8a:9d:3c:0b:13:e0:b0:36:f9:b7:04: fd:38:fe:31:14:a2:c9:d7:43:99:59:4a:47:e5:19:7a:8c:dc: 2c:86:35:05:fa:aa:72:fb:7a:71:4c:fd:aa:db:67:cd:1a:ce: 9b:10:57:a9:ed:fb:69:2a:cf:75:1a:d5:51:65:5f:72:09:51: 06:21:b2:5d:cf:96:aa:48:c5:72:93:52:f6:d3:5c:b3:a1:9c: 57:ea:7d:05:28:54:db:39:b4:6a:ac:f3:1f:7c:0f:11:42:72: 97:1a:f6:a0:88:5d:f6:40:a1:af:33:1f:80:e5:1e:a2:2f:8b: 19:3b:cf:f0:1e:63:07:ad:ca:d9:81:6c:77:c1:09:79:36:93: ea:48:d6:57:0f:18:db:db:0c:31:b2:5d:3f:7a:1f:6e:02:24: bc:9d:66:af:e7:0c:36:13:74:95:0c:8c:77:a4:d8:94:ed:46: 62:09:f2:87:12:00:3c:0c:22:77:e2:bd:63:01:50:e8:cc:32: 52:db:4f:bb:12:f3:c7:f3:65:1b:74:9b:e5:ec:03:52:8a:7d: 53:d4:84:be:2a:8b:1d:7b:8e:45:24:8b:a7:d4:65:d7:e1:a6: 89:fc:e3:ee:fc:61:43:5f:80:23:3d:9c:fc:29:5a:f5:d5:c2: 42:4a:78:40 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUIbG7ai8rcLXGYpLySyebB0r6OQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MjlaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQGIwZDM4MmNlNDYzODYxZGNlYzk4NDJmNTZkNDVkNzgwYWFmZDUwZDkwYmQ1 ODUxNjQwYTI0MGY0MGI4MTg2YmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/8sXNK/tcDLu16le4o5gU1AtxHL8bnVc76KwWHNDrYGUGmUob2hX1DQNR3 m3pX7X/WEVr1y/R7u9KxAEojF9LJCwme+NvmVWBjgxKq8N9LiOSMIOdOdEiLzQEy jGQFbgM+EtvzLpGCjydIrUUIysJjUJ8IeHyDvOWv9LX0mPZCFg4hu90FEsa1aCa3 CsA9CKD6Ha6Mj41O2C2NEi34DD72/g25+WSuyqjEb7Y/Q81ZjykgbaKoTDyyoYyk yHBvvnJIS3mPYhYt+HofmEw7ajlJZknw1MhdtkSVaYh+RleEeWOgmWKNorcivtzJ bTd7YuJe8gPcP6KRPedaRo3iCJsCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRtkHAL HUEdKufnO9prbo7KFCt0LDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YmEzMGRlOWQtZjcyMi00ZDU4LWI4ZWQtZTJhNDY0MTEzMWYzLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GuA QDANBgkqhkiG9w0BAQsFAAOCAQEAfZP+NwsGnIqdPAsT4LA2+bcE/Tj+MRSiyddD mVlKR+UZeozcLIY1Bfqqcvt6cUz9qttnzRrOmxBXqe37aSrPdRrVUWVfcglRBiGy Xc+WqkjFcpNS9tNcs6GcV+p9BShU2zm0aqzzH3wPEUJylxr2oIhd9kChrzMfgOUe oi+LGTvP8B5jB63K2YFsd8EJeTaT6kjWVw8Y29sMMbJdP3ofbgIkvJ1mr+cMNhN0 lQyMd6TYlO1GYgnyhxIAPAwid+K9YwFQ6MwyUttPuxLzx/NlG3Sb5ewDUop9U9SE viqLHXuORSSLp9Rl1+Gmifzj7vxhQ1+AIz2c/Cla9dXCQkp4QA== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:28 2026 by rpki-client