This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c03c2e6a-b6b9-43c0-86bd-1f13ad1b1ae7.roa File: c03c2e6a-b6b9-43c0-86bd-1f13ad1b1ae7.roa (raw, json) Hash identifier: U7kUGwFIgo1ASOhfl1L2NeI0F6qARPfjVDV/71Ej2jU= Subject key identifier: CC:18:46:D6:01:11:6D:DD:AF:3D:ED:9C:E8:29:04:8A:12:82:CA:59 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 23EDE409B3F4F8E6BD107DCF0ABCA9CDECE73C17 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c03c2e6a-b6b9-43c0-86bd-1f13ad1b1ae7.roa Signing time: Tue 13 Jan 2026 19:58:35 +0000 ROA not before: Tue 13 Jan 2026 19:58:35 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ed:e4:09:b3:f4:f8:e6:bd:10:7d:cf:0a:bc:a9:cd:ec:e7:3c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:35 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=0d30808ed04acdca54ceeaeb0a519c1129b95238a26a550754c6bcbce623a459, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:de:d8:7f:6a:48:08:19:22:e2:b5:75:7d:bd: 9e:ae:ed:af:79:4e:20:54:1f:e6:a2:0d:32:11:a9: c6:cd:01:ea:0e:08:f2:dc:9e:e1:f6:ac:df:6e:5c: 17:03:ac:39:07:35:99:c8:c0:08:70:d2:c9:f3:bb: 83:6c:c7:12:36:1c:c7:3f:be:f2:43:0b:a2:c5:80: 8f:3a:ee:50:05:25:85:ae:99:e3:17:af:da:71:8d: 58:93:67:6c:40:92:0d:10:1f:60:54:27:0f:59:ab: 31:ae:9d:f4:57:6e:c1:16:8b:aa:b9:e6:c6:ac:f0: b1:f1:04:98:df:2e:ea:90:d9:08:1e:19:75:21:90: d0:30:00:8a:d0:53:91:2a:77:84:99:fd:95:a4:11: 84:dd:58:7e:12:08:d9:36:dc:01:e3:0d:fa:2b:e6: 3e:cb:06:2d:18:6b:62:91:00:9b:64:dc:1f:92:4b: 1e:55:9d:f8:a5:d7:fe:43:d9:5b:3e:9d:03:76:7e: a0:fd:8c:98:33:4a:dd:b2:16:b8:f2:9f:5f:a5:3a: f6:e7:e1:5f:33:48:68:69:94:17:60:f4:af:25:44: aa:f6:5f:06:d6:f1:0a:17:8c:22:64:bc:9d:84:53: 22:c5:6f:85:50:62:91:f9:f9:90:f9:ea:b0:39:89: ba:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:18:46:D6:01:11:6D:DD:AF:3D:ED:9C:E8:29:04:8A:12:82:CA:59 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c03c2e6a-b6b9-43c0-86bd-1f13ad1b1ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:b080::/48 Signature Algorithm: sha256WithRSAEncryption 32:ec:fb:74:38:41:fa:4b:d7:bd:36:d4:1d:31:6f:a8:58:67: 01:3d:8f:26:ef:88:34:17:a9:08:46:21:9c:35:86:f7:f4:78: 6e:a3:82:5e:cd:47:db:30:ea:d0:b9:56:f5:f3:03:f3:01:14: ba:e3:60:06:17:7c:89:39:4a:27:cd:39:dc:e8:24:48:c2:4d: f1:5f:58:51:3b:19:4b:8a:27:0a:2f:89:de:27:bf:1c:73:fb: fb:64:51:32:ea:e8:75:29:76:15:6c:50:b3:fb:54:4a:05:3b: 49:fe:2a:ca:50:44:0e:09:10:fa:6d:ad:f7:f9:0f:97:8e:3e: 4d:a5:05:fb:64:30:63:c2:ba:67:6b:7f:df:70:ae:56:4e:f8: 83:a3:25:de:c2:8f:87:42:70:ff:0b:8a:7b:22:fb:31:42:7d: ac:2b:74:e9:e5:d7:a4:40:b2:4a:35:f7:77:c2:c0:b3:48:00: 0a:4c:91:9a:00:e6:01:32:0b:27:a5:d9:73:9f:74:8b:c3:5b: 31:ac:b3:db:60:76:f6:20:59:76:37:eb:78:02:7f:0a:68:dd: 77:9f:b1:d7:9f:84:a7:c3:7a:96:31:2c:ed:a1:94:df:5c:38: ed:62:bb:92:cd:2d:47:92:15:3a:4b:d5:13:de:0c:4f:8e:74: 13:2e:4d:7b -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUI+3kCbP0+Oa9EH3PCrypzeznPBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MzVaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDBkMzA4MDhlZDA0YWNkY2E1NGNlZWFlYjBhNTE5YzExMjliOTUyMzhhMjZh NTUwNzU0YzZiY2JjZTYyM2E0NTkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJre2H9qSAgZIuK1dX29nq7tr3lOIFQf5qINMhGpxs0B6g4I8tye4fas325c FwOsOQc1mcjACHDSyfO7g2zHEjYcxz++8kMLosWAjzruUAUlha6Z4xev2nGNWJNn bECSDRAfYFQnD1mrMa6d9FduwRaLqrnmxqzwsfEEmN8u6pDZCB4ZdSGQ0DAAitBT kSp3hJn9laQRhN1YfhII2TbcAeMN+ivmPssGLRhrYpEAm2TcH5JLHlWd+KXX/kPZ Wz6dA3Z+oP2MmDNK3bIWuPKfX6U69ufhXzNIaGmUF2D0ryVEqvZfBtbxCheMImS8 nYRTIsVvhVBikfn5kPnqsDmJun0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTMGEbW ARFt3a897ZzoKQSKEoLKWTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv YzAzYzJlNmEtYjZiOS00M2MwLTg2YmQtMWYxM2FkMWIxYWU3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Guw gDANBgkqhkiG9w0BAQsFAAOCAQEAMuz7dDhB+kvXvTbUHTFvqFhnAT2PJu+INBep CEYhnDWG9/R4bqOCXs1H2zDq0LlW9fMD8wEUuuNgBhd8iTlKJ8053OgkSMJN8V9Y UTsZS4onCi+J3ie/HHP7+2RRMurodSl2FWxQs/tUSgU7Sf4qylBEDgkQ+m2t9/kP l44+TaUF+2QwY8K6Z2t/33CuVk74g6Ml3sKPh0Jw/wuKeyL7MUJ9rCt06eXXpECy SjX3d8LAs0gACkyRmgDmATILJ6XZc590i8NbMayz22B29iBZdjfreAJ/Cmjdd5+x 15+Ep8N6ljEs7aGU31w47WK7ks0tR5IVOkvVE94MT450Ey5New== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:28 2026 by rpki-client