This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4cf3d96-ec8a-4f82-8cbe-eeccd3701bfc.roa File: d4cf3d96-ec8a-4f82-8cbe-eeccd3701bfc.roa (raw, json) Hash identifier: wkPErrNgoRQkauKAKTJnUpSk9AYsm+2IxyFNoWm4xmw= Subject key identifier: 8F:EC:F0:0C:01:E1:B1:03:E7:09:63:CF:F1:54:A7:37:BB:1F:AC:1C Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 54981CE9F9B482B06C81FC7E8268D174447CCAF0 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4cf3d96-ec8a-4f82-8cbe-eeccd3701bfc.roa Signing time: Tue 13 Jan 2026 20:06:58 +0000 ROA not before: Tue 13 Jan 2026 20:06:58 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:98:1c:e9:f9:b4:82:b0:6c:81:fc:7e:82:68:d1:74:44:7c:ca:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 20:06:58 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=35007208bc1971e297e83e6cfdec75396ead487549763c2b31a868026910a3a2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c9:c0:cd:9f:40:79:5b:89:6f:45:40:59:8c: f2:cb:5a:32:e7:72:db:d9:65:07:96:69:79:d1:af: 46:de:a3:e8:a7:0d:70:cb:da:d5:86:4d:09:d9:84: fa:c3:8f:31:85:e3:fc:90:ee:89:d9:56:e4:f2:a3: c1:79:92:34:d4:6d:d8:c3:53:9a:7c:16:ed:a4:34: db:7e:78:e7:7d:2f:91:a5:27:5f:b9:63:4d:3d:e9: f6:3f:0f:33:0e:87:60:28:00:70:39:96:9d:db:bd: ae:29:a5:7c:f6:35:20:f2:31:24:0b:44:7a:05:48: 0d:e4:49:e5:71:de:71:a7:a8:bf:d1:10:b8:9c:61: c2:ee:eb:a6:e5:89:9e:8d:ff:58:07:3d:29:b0:39: 74:fe:6b:84:e0:4b:ce:c1:d1:f2:dd:2f:e5:41:e5: 50:10:da:c4:ad:97:56:6d:6c:eb:c6:b8:e4:76:c4: f2:df:00:13:7d:91:c5:b1:ba:52:30:23:23:61:93: 56:f0:ca:7c:fd:57:67:79:33:7e:cd:98:8d:bb:f0: 76:e5:ff:91:fc:a1:7c:80:f0:58:3e:47:8b:3a:00: b0:56:17:65:c7:dd:45:c5:c9:1e:e1:ec:bb:a7:c0: 35:7a:61:ab:96:8f:03:03:8f:86:a7:28:d6:bb:e5: 1d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EC:F0:0C:01:E1:B1:03:E7:09:63:CF:F1:54:A7:37:BB:1F:AC:1C X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4cf3d96-ec8a-4f82-8cbe-eeccd3701bfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:6000::/40 Signature Algorithm: sha256WithRSAEncryption 15:1a:1d:dc:7d:ab:47:96:62:51:37:d4:91:7f:0c:36:35:70: aa:7e:f8:74:7a:c2:04:70:bc:5d:ac:73:fa:e4:94:3b:38:12: 4c:fe:ed:e5:57:bb:7b:c2:48:03:1c:98:3f:8f:60:a1:f8:f2: 9b:f0:be:35:3c:dd:79:87:df:9e:f0:49:39:48:3e:20:69:6f: fd:cf:d6:14:67:14:a0:8f:ab:c8:60:d7:f1:86:41:fc:7e:cc: 95:04:f4:db:88:0d:3b:cd:bd:90:e7:90:09:12:c3:c7:16:00: fa:ba:e7:4a:59:b1:7a:90:6e:4b:cd:b8:7c:fc:3f:2c:fe:2a: 02:6d:41:d0:63:50:be:a3:3c:51:ef:55:ce:3b:2d:86:89:69: c1:d4:61:61:c8:a1:ec:46:d5:cc:04:d1:fb:5e:68:e7:bf:2e: e8:18:57:a4:ee:af:1a:1e:23:43:cd:92:2e:32:12:ab:1a:e7: 02:f0:70:57:7d:6e:89:3b:0d:fc:e6:6c:9e:1a:79:cb:ab:af: 2a:2c:ef:f5:f6:7c:89:ba:53:9e:64:d6:01:4e:05:7c:13:32: d1:4c:51:03:da:23:45:fb:eb:00:d2:34:35:b4:bc:67:b9:f9: c7:41:ce:ac:2c:02:8c:21:64:a9:42:a8:c0:9f:cf:9a:86:6a: 95:44:9c:dd -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUVJgc6fm0grBsgfx+gmjRdER8yvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMyMDA2NThaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDM1MDA3MjA4YmMxOTcxZTI5N2U4M2U2Y2ZkZWM3NTM5NmVhZDQ4NzU0OTc2 M2MyYjMxYTg2ODAyNjkxMGEzYTIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJPJwM2fQHlbiW9FQFmM8staMudy29llB5ZpedGvRt6j6KcNcMva1YZNCdmE +sOPMYXj/JDuidlW5PKjwXmSNNRt2MNTmnwW7aQ02354530vkaUnX7ljTT3p9j8P Mw6HYCgAcDmWndu9rimlfPY1IPIxJAtEegVIDeRJ5XHecaeov9EQuJxhwu7rpuWJ no3/WAc9KbA5dP5rhOBLzsHR8t0v5UHlUBDaxK2XVm1s68a45HbE8t8AE32RxbG6 UjAjI2GTVvDKfP1XZ3kzfs2YjbvwduX/kfyhfIDwWD5HizoAsFYXZcfdRcXJHuHs u6fANXphq5aPAwOPhqco1rvlHZsCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSP7PAM AeGxA+cJY8/xVKc3ux+sHDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZDRjZjNkOTYtZWM4YS00ZjgyLThjYmUtZWVjY2QzNzAxYmZjLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Gtg MA0GCSqGSIb3DQEBCwUAA4IBAQAVGh3cfatHlmJRN9SRfww2NXCqfvh0esIEcLxd rHP65JQ7OBJM/u3lV7t7wkgDHJg/j2Ch+PKb8L41PN15h9+e8Ek5SD4gaW/9z9YU ZxSgj6vIYNfxhkH8fsyVBPTbiA07zb2Q55AJEsPHFgD6uudKWbF6kG5Lzbh8/D8s /ioCbUHQY1C+ozxR71XOOy2GiWnB1GFhyKHsRtXMBNH7Xmjnvy7oGFek7q8aHiND zZIuMhKrGucC8HBXfW6JOw385myeGnnLq68qLO/19nyJulOeZNYBTgV8EzLRTFED 2iNF++sA0jQ1tLxnufnHQc6sLAKMIWSpQqjAn8+ahmqVRJzd -----END CERTIFICATE-----Generated at Sat Jan 17 10:00:41 2026 by rpki-client