This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4ffcdf4-52ab-4529-9a6e-bab429bf9ad7.roa File: d4ffcdf4-52ab-4529-9a6e-bab429bf9ad7.roa (raw, json) Hash identifier: Lr9qhLFK3UxTzt0fnuqk1/E4GH+Y5vGpQKsfCdqPrBY= Subject key identifier: F8:59:7D:01:BD:BB:71:C5:FD:34:CA:41:BE:AD:62:89:F3:E2:0B:81 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4E03ED0A286E580C5A0E1B54AA6742E8056CD7A4 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4ffcdf4-52ab-4529-9a6e-bab429bf9ad7.roa Signing time: Tue 13 Jan 2026 20:06:54 +0000 ROA not before: Tue 13 Jan 2026 20:06:54 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:c0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:03:ed:0a:28:6e:58:0c:5a:0e:1b:54:aa:67:42:e8:05:6c:d7:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 20:06:54 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=0a985169669fe33813f9cbebe46d41c1529a0b93b1c31a0542d911077c44f846, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:8f:ca:d5:9e:a5:6c:09:65:27:09:b0:c3: da:bc:ce:e0:fe:dc:57:5f:3e:6d:9a:b3:6f:03:1b: 8a:92:bd:50:08:ee:ee:91:9b:7d:7e:1d:d2:a2:72: 43:c4:70:7e:06:b4:c5:16:98:a6:52:dc:d3:6c:e9: 22:d4:b2:35:38:c6:7e:05:a3:4e:a1:ff:ee:9c:a7: ed:8a:24:38:3c:98:30:b6:0f:d2:bc:20:81:6f:44: e1:cc:93:6b:b6:05:60:fa:41:01:c5:00:81:c1:e3: bd:ce:89:96:bf:cf:a7:5e:d5:ce:d8:53:e7:00:32: 45:f8:f0:c6:22:8d:a1:cd:d2:c0:24:1d:d1:49:c8: 20:f2:5e:8e:0e:5f:3d:8a:db:4b:2b:00:7f:d2:31: 08:f2:b2:88:b0:0a:d6:02:c8:37:d6:62:93:3b:20: e5:54:a7:e8:d0:c7:18:b1:95:89:89:4b:1d:3d:a2: 7c:dd:22:d7:6f:8e:e9:5d:0e:f1:a6:4d:f1:56:70: 5c:85:86:ee:15:4a:94:1d:97:42:fc:f4:4e:4f:a6: a4:37:c9:e2:4d:d8:76:e6:23:68:dd:8c:81:30:0f: e7:5c:e7:8d:4d:ea:5d:20:40:6e:be:5b:16:81:5e: 3c:0a:97:c1:0f:9b:a4:f1:ee:16:0f:7a:11:b9:4f: 38:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:59:7D:01:BD:BB:71:C5:FD:34:CA:41:BE:AD:62:89:F3:E2:0B:81 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d4ffcdf4-52ab-4529-9a6e-bab429bf9ad7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:c0c0::/48 Signature Algorithm: sha256WithRSAEncryption c8:58:78:c8:af:22:de:27:f2:6d:71:30:81:6a:77:d1:ea:ca: 4d:39:f5:99:0d:fd:1a:12:69:df:3b:3f:e1:34:65:a5:cc:74: fe:f0:d4:49:af:cc:17:de:7e:dc:45:06:f0:7d:d2:59:7f:d8: d9:b3:66:4f:80:7c:4f:39:4d:38:1c:d6:7e:5e:3f:19:d2:6a: c4:00:53:d4:5f:49:77:a1:9a:d9:81:83:82:5e:f0:a8:8a:6f: 97:45:4b:d0:fe:22:d6:65:a9:5a:eb:e1:f8:2f:42:10:e7:89: 5a:d0:a9:e8:56:98:f3:be:2f:03:42:bf:a6:3c:99:8c:54:93: 70:94:44:90:a1:57:cc:6d:80:6d:cb:8f:9f:ed:ac:49:b1:b3: fa:1e:ec:8c:8a:cb:70:05:e7:73:35:4c:94:4a:da:de:24:70: 26:0b:84:04:0e:fd:15:20:eb:7a:8a:15:59:bd:9f:b9:55:b7: bc:9a:23:33:ae:c5:d6:5c:a1:c6:cb:26:20:5e:df:57:68:eb: ca:ac:5f:64:32:b3:49:83:aa:65:bc:54:b3:21:fb:fa:97:e3: 97:b6:0e:94:fd:f5:d2:f7:54:e3:0a:4d:d2:6e:96:f9:eb:33: 57:26:80:c4:41:60:2f:68:aa:2b:58:3a:6b:6f:6a:b1:6c:c6: 47:55:b4:fd -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUTgPtCihuWAxaDhtUqmdC6AVs16QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMyMDA2NTRaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDBhOTg1MTY5NjY5ZmUzMzgxM2Y5Y2JlYmU0NmQ0MWMxNTI5YTBiOTNiMWMz MWEwNTQyZDkxMTA3N2M0NGY4NDYxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALK4j8rVnqVsCWUnCbDD2rzO4P7cV18+bZqzbwMbipK9UAju7pGbfX4d0qJy Q8Rwfga0xRaYplLc02zpItSyNTjGfgWjTqH/7pyn7YokODyYMLYP0rwggW9E4cyT a7YFYPpBAcUAgcHjvc6Jlr/Pp17VzthT5wAyRfjwxiKNoc3SwCQd0UnIIPJejg5f PYrbSysAf9IxCPKyiLAK1gLIN9Zikzsg5VSn6NDHGLGViYlLHT2ifN0i12+O6V0O 8aZN8VZwXIWG7hVKlB2XQvz0Tk+mpDfJ4k3YduYjaN2MgTAP51znjU3qXSBAbr5b FoFePAqXwQ+bpPHuFg96EblPOEkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT4WX0B vbtxxf00ykG+rWKJ8+ILgTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZDRmZmNkZjQtNTJhYi00NTI5LTlhNmUtYmFiNDI5YmY5YWQ3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GvA wDANBgkqhkiG9w0BAQsFAAOCAQEAyFh4yK8i3ifybXEwgWp30erKTTn1mQ39GhJp 3zs/4TRlpcx0/vDUSa/MF95+3EUG8H3SWX/Y2bNmT4B8TzlNOBzWfl4/GdJqxABT 1F9Jd6Ga2YGDgl7wqIpvl0VL0P4i1mWpWuvh+C9CEOeJWtCp6FaY874vA0K/pjyZ jFSTcJREkKFXzG2AbcuPn+2sSbGz+h7sjIrLcAXnczVMlEra3iRwJguEBA79FSDr eooVWb2fuVW3vJojM67F1lyhxssmIF7fV2jryqxfZDKzSYOqZbxUsyH7+pfjl7YO lP310vdU4wpN0m6W+eszVyaAxEFgL2iqK1g6a29qsWzGR1W0/Q== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:29 2026 by rpki-client