This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf8dc1bf-266b-4b26-bc54-6cbd3e6e2e2d.roa File: bf8dc1bf-266b-4b26-bc54-6cbd3e6e2e2d.roa (raw, json) Hash identifier: Y1clN8KUVHn2lzH/NK5/VJdueQCdFj0DP8vt4WwMABk= Subject key identifier: 09:71:2A:0E:52:2E:56:30:AC:05:4B:3E:8B:98:2E:58:B0:F7:D0:24 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 41C3ECF6E5066EAAF5833B65AB5E1D44DFF4F0F9 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf8dc1bf-266b-4b26-bc54-6cbd3e6e2e2d.roa Signing time: Tue 13 Jan 2026 19:58:23 +0000 ROA not before: Tue 13 Jan 2026 19:58:23 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c3:ec:f6:e5:06:6e:aa:f5:83:3b:65:ab:5e:1d:44:df:f4:f0:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:23 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=e9f012e66f87b94413be2d240df6f389220f8acddef76d50670c9f4a88c229e9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:a2:cc:73:f4:e2:d8:b4:0b:de:3c:fd:1f: 14:05:67:90:6e:a8:8e:1b:29:a0:99:a9:b1:3d:16: ca:2a:15:07:d6:43:3b:c4:0b:6f:7a:b2:0e:a5:a0: 6b:0b:91:3e:28:92:c6:12:93:ad:0f:ee:aa:23:71: 52:fa:dc:37:d2:81:e6:a9:3c:2a:95:a2:14:77:c4: 5a:44:7f:dd:a0:47:8c:eb:96:b4:84:07:e3:e5:4c: c3:2b:b9:0a:d4:d0:86:c1:3c:54:f4:0a:e3:c7:df: 8c:3f:dc:c3:67:5e:5c:6f:d2:d0:0c:80:91:d5:43: 7e:4e:38:92:fa:60:59:12:9d:9e:33:e3:39:12:d5: a7:e8:9d:d1:d0:1b:ec:d2:d3:77:4c:5b:eb:59:cc: a5:02:06:8b:3c:0c:e0:e7:f8:2d:82:41:9c:f1:de: e9:72:be:c6:df:ba:b7:65:18:ee:47:58:18:66:6d: 06:37:99:a1:3f:7a:d6:54:67:c5:b0:cc:e2:c0:24: f0:03:5a:6f:68:ad:6e:ab:86:cf:dc:d8:1c:f7:50: b3:2f:84:82:06:48:97:3f:fb:f1:51:d4:dc:85:de: 57:ac:00:ce:07:22:a0:c8:ba:87:4f:09:27:20:db: 3f:cd:16:79:50:ee:29:81:88:c7:bf:36:3d:99:2f: 0f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:71:2A:0E:52:2E:56:30:AC:05:4B:3E:8B:98:2E:58:B0:F7:D0:24 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bf8dc1bf-266b-4b26-bc54-6cbd3e6e2e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:4040::/48 Signature Algorithm: sha256WithRSAEncryption bf:82:93:e6:bd:17:e0:93:5a:df:11:2a:1a:5c:ac:f4:d1:67: 67:cf:5b:46:0e:3a:83:46:38:57:ff:b0:80:d4:b2:23:07:ab: f3:94:11:83:2c:b5:4e:b7:0d:a3:95:45:3c:78:d0:0d:1b:4c: 18:6a:6f:95:e7:7e:9c:85:07:6b:c7:51:d0:44:75:b7:34:c8: f0:6b:bf:36:47:af:49:6f:48:ea:3f:76:72:27:2e:92:ae:5f: 84:d7:dc:b3:b8:49:76:f3:78:51:37:b2:91:5d:85:38:02:16: 16:78:2d:74:f3:81:33:8e:a6:2f:a5:18:fe:cc:92:99:d8:16: 63:66:2b:25:d7:f9:ba:f9:db:9d:fe:9c:af:87:a5:67:f6:b8: f3:d3:04:bf:e4:a0:4d:a6:03:66:9b:8a:0f:6e:8f:03:b4:9f: 5e:f3:ca:36:7c:ec:1b:ba:49:c6:63:fc:5d:59:43:f7:e0:d6: a0:16:dc:b7:78:71:24:30:95:41:39:8d:5c:32:4a:4d:61:dc: 5a:9c:5e:26:cd:7e:67:80:3d:b8:10:62:1f:f3:1e:77:3c:4c: 41:44:b7:49:7f:21:d4:46:f5:d1:0e:b6:38:46:81:b6:e3:72: 84:4e:7f:8f:7e:75:fd:d4:a2:3e:2e:58:41:4c:39:5e:64:76: 27:da:5a:e5 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUQcPs9uUGbqr1gztlq14dRN/08PkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MjNaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQGU5ZjAxMmU2NmY4N2I5NDQxM2JlMmQyNDBkZjZmMzg5MjIwZjhhY2RkZWY3 NmQ1MDY3MGM5ZjRhODhjMjI5ZTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMg8osxz9OLYtAvePP0fFAVnkG6ojhspoJmpsT0WyioVB9ZDO8QLb3qyDqWg awuRPiiSxhKTrQ/uqiNxUvrcN9KB5qk8KpWiFHfEWkR/3aBHjOuWtIQH4+VMwyu5 CtTQhsE8VPQK48ffjD/cw2deXG/S0AyAkdVDfk44kvpgWRKdnjPjORLVp+id0dAb 7NLTd0xb61nMpQIGizwM4Of4LYJBnPHe6XK+xt+6t2UY7kdYGGZtBjeZoT961lRn xbDM4sAk8ANab2itbquGz9zYHPdQsy+EggZIlz/78VHU3IXeV6wAzgcioMi6h08J JyDbP80WeVDuKYGIx782PZkvD0ECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQJcSoO Ui5WMKwFSz6LmC5YsPfQJDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YmY4ZGMxYmYtMjY2Yi00YjI2LWJjNTQtNmNiZDNlNmUyZTJkLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GtA QDANBgkqhkiG9w0BAQsFAAOCAQEAv4KT5r0X4JNa3xEqGlys9NFnZ89bRg46g0Y4 V/+wgNSyIwer85QRgyy1TrcNo5VFPHjQDRtMGGpvled+nIUHa8dR0ER1tzTI8Gu/ NkevSW9I6j92cicukq5fhNfcs7hJdvN4UTeykV2FOAIWFngtdPOBM46mL6UY/syS mdgWY2YrJdf5uvnbnf6cr4elZ/a489MEv+SgTaYDZpuKD26PA7SfXvPKNnzsG7pJ xmP8XVlD9+DWoBbct3hxJDCVQTmNXDJKTWHcWpxeJs1+Z4A9uBBiH/MedzxMQUS3 SX8h1Eb10Q62OEaBtuNyhE5/j351/dSiPi5YQUw5XmR2J9pa5Q== -----END CERTIFICATE-----Generated at Sat Jan 17 10:00:40 2026 by rpki-client