This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c96bf604-3011-4557-9ec9-70093d8470a9.roa File: c96bf604-3011-4557-9ec9-70093d8470a9.roa (raw, json) Hash identifier: 3EO9khQWhNIBjYNvW0Lr3UPcPt2tW57UflpQBXnomrI= Subject key identifier: CE:61:AC:7A:AD:F5:B5:01:9C:66:FC:19:11:C6:A6:7D:66:56:6F:69 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7971DF13BF8404D49EF0F30B4B4C934D54E60F23 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c96bf604-3011-4557-9ec9-70093d8470a9.roa Signing time: Tue 13 Jan 2026 20:07:01 +0000 ROA not before: Tue 13 Jan 2026 20:07:01 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:71:df:13:bf:84:04:d4:9e:f0:f3:0b:4b:4c:93:4d:54:e6:0f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 20:07:01 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=d067992fcbe3fafa671e6506977239e680414ff4d84e3e5b66527a24d662fd51, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2c:c7:ea:26:d8:29:d1:e5:f9:80:3a:14:80: 9b:3d:37:90:bc:7a:7e:e8:a3:f6:6b:80:0a:91:ba: 8b:b7:6d:4e:d8:a4:ea:31:81:25:03:95:8a:7c:e9: 62:82:19:37:70:0a:24:24:7f:68:6f:db:b1:81:01: c8:c5:fd:57:cb:a9:e1:b2:2f:3a:44:ac:84:32:14: 0c:8f:2a:42:f2:75:f7:e1:62:53:62:d0:e2:ee:c8: 43:77:f7:f6:e9:86:64:e8:64:c6:40:ee:4d:10:91: 66:0a:f1:c5:ec:b3:8f:dc:d3:4a:00:f4:00:12:ef: 04:8d:82:dc:19:cc:41:d5:f5:b3:14:71:34:d8:fe: cf:8d:7c:6e:6e:d2:f6:dd:97:de:02:15:46:24:ae: 44:52:ab:4d:ba:29:78:ce:3f:12:1d:4f:71:6a:73: fb:3f:55:f4:af:67:10:e9:14:8e:5b:ab:6f:28:87: 71:b4:eb:cf:a3:c6:13:50:11:4b:2f:f1:d6:7e:ae: cc:b5:27:e3:8f:d9:44:36:5a:56:9d:50:0d:d2:87: 01:0f:13:7e:53:29:a9:46:5c:c7:ac:53:fc:1e:10: 6d:95:42:ca:a3:fa:27:23:3a:aa:3a:ff:91:de:fa: 7d:17:a8:3b:02:dc:eb:27:ad:ba:24:c6:85:ff:34: 37:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:61:AC:7A:AD:F5:B5:01:9C:66:FC:19:11:C6:A6:7D:66:56:6F:69 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c96bf604-3011-4557-9ec9-70093d8470a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:e000::/40 Signature Algorithm: sha256WithRSAEncryption 79:05:c2:de:0b:c1:82:5c:fd:0d:a0:2d:c0:31:79:30:c7:f2: 38:d2:1a:6a:e1:12:4e:a9:bd:4e:83:21:3f:77:83:05:3e:fe: bb:eb:e3:33:ca:a4:28:12:ce:69:bc:eb:39:fb:26:7f:a3:0a: 31:e7:e3:d1:7a:0a:8d:5f:06:42:06:e4:4d:0e:47:30:92:e6: a3:31:1a:f3:da:2c:e1:bc:ea:e4:85:71:8b:33:c6:ec:c8:48: 4b:b5:4d:93:77:8f:d4:50:f6:7d:7e:66:c6:d8:af:2b:af:11: 55:c0:4e:4e:0f:12:81:08:d6:be:4d:45:9b:c0:53:2a:11:8c: d4:7c:1e:44:06:cf:18:6d:97:1e:0c:3c:84:a4:92:0d:cc:25: 37:e0:b8:62:ff:55:d4:a4:f8:3a:95:fe:b3:1c:bb:d3:d8:d9: 47:90:bc:91:40:c2:58:6a:95:a3:e6:af:ae:01:de:60:55:d2: 12:a8:61:49:52:48:ab:59:26:d6:da:bb:c6:42:9e:c5:05:45: 47:fc:4e:18:58:d7:b7:79:0c:a8:44:0d:89:39:cc:ed:2a:07: 29:06:9b:d5:79:c3:83:5d:8f:fb:fb:81:98:c0:68:ca:4c:b6: a2:53:c2:c8:c3:87:25:7a:a5:d1:31:89:c0:b3:30:88:f0:51: c0:11:15:2c -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUeXHfE7+EBNSe8PMLS0yTTVTmDyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMyMDA3MDFaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQGQwNjc5OTJmY2JlM2ZhZmE2NzFlNjUwNjk3NzIzOWU2ODA0MTRmZjRkODRl M2U1YjY2NTI3YTI0ZDY2MmZkNTExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ8sx+om2CnR5fmAOhSAmz03kLx6fuij9muACpG6i7dtTtik6jGBJQOVinzp YoIZN3AKJCR/aG/bsYEByMX9V8up4bIvOkSshDIUDI8qQvJ19+FiU2LQ4u7IQ3f3 9umGZOhkxkDuTRCRZgrxxeyzj9zTSgD0ABLvBI2C3BnMQdX1sxRxNNj+z418bm7S 9t2X3gIVRiSuRFKrTbopeM4/Eh1PcWpz+z9V9K9nEOkUjlurbyiHcbTrz6PGE1AR Sy/x1n6uzLUn44/ZRDZaVp1QDdKHAQ8TflMpqUZcx6xT/B4QbZVCyqP6JyM6qjr/ kd76fReoOwLc6yetuiTGhf80N10CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBTOYax6 rfW1AZxm/BkRxqZ9ZlZvaTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv Yzk2YmY2MDQtMzAxMS00NTU3LTllYzktNzAwOTNkODQ3MGE5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Gvg MA0GCSqGSIb3DQEBCwUAA4IBAQB5BcLeC8GCXP0NoC3AMXkwx/I40hpq4RJOqb1O gyE/d4MFPv676+MzyqQoEs5pvOs5+yZ/owox5+PRegqNXwZCBuRNDkcwkuajMRrz 2izhvOrkhXGLM8bsyEhLtU2Td4/UUPZ9fmbG2K8rrxFVwE5ODxKBCNa+TUWbwFMq EYzUfB5EBs8YbZceDDyEpJINzCU34Lhi/1XUpPg6lf6zHLvT2NlHkLyRQMJYapWj 5q+uAd5gVdISqGFJUkirWSbW2rvGQp7FBUVH/E4YWNe3eQyoRA2JOcztKgcpBpvV ecODXY/7+4GYwGjKTLaiU8LIw4cleqXRMYnAszCI8FHAERUs -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:25 2026 by rpki-client