This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6da53e4-b7a7-4105-ab36-d9755265b1d4.roa File: d6da53e4-b7a7-4105-ab36-d9755265b1d4.roa (raw, json) Hash identifier: tWwNxPT6G3z6kBi8yVd7iRi9zfBzgF8zrA1etpf+lGk= Subject key identifier: C3:D2:3D:D0:14:3D:1A:4A:78:3C:22:45:63:B5:D7:94:81:88:CB:67 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7BAF520A9DA9AE8A1500704DF37D294C8675CBED Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6da53e4-b7a7-4105-ab36-d9755265b1d4.roa Signing time: Tue 13 Jan 2026 19:58:34 +0000 ROA not before: Tue 13 Jan 2026 19:58:34 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:a0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:af:52:0a:9d:a9:ae:8a:15:00:70:4d:f3:7d:29:4c:86:75:cb:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:34 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=70b1c3565ad30a5f85eab69f952b3e2766d02de4bfdd021862aefebbe8082b6b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:e6:90:bb:b4:b0:61:3d:9c:0b:df:49:c1: 8f:0a:ec:bd:37:43:f0:e5:ec:bd:1a:50:2a:f6:a7: b0:05:2c:07:d2:38:ba:ce:f8:17:80:1c:7a:69:dd: 56:e9:0e:22:b2:8c:e9:da:15:73:0f:5a:11:f2:dd: 50:b4:6a:ad:a8:15:70:19:71:60:a3:1f:3b:fa:75: 36:59:f7:1e:f5:6a:cc:7b:d8:c2:6b:6a:50:d9:41: c3:10:6e:93:5c:4b:68:68:60:17:b9:f1:9f:f9:51: 4e:28:aa:5a:26:b5:6b:8e:30:4e:55:9b:9f:07:43: b3:45:a3:65:3b:bb:05:58:5e:76:7f:2d:8c:fc:86: ee:5f:73:3c:f2:1a:22:37:b8:57:f8:5f:b5:d1:8b: a1:a8:f7:a4:1e:28:10:b5:4f:e9:88:d0:65:0e:2b: cb:08:64:80:68:1d:77:89:0b:74:30:a0:1e:64:e8: 71:d8:7b:ca:27:8d:aa:ec:00:b2:32:ed:b3:01:88: fe:e6:71:07:9a:b6:40:01:d2:5e:4d:c5:50:05:57: af:2b:7c:e6:37:fb:a7:a6:2b:28:16:e7:24:ec:c3: 0c:4e:38:f2:fd:2e:00:53:bc:68:42:40:a1:58:24: eb:12:ba:1c:a2:f3:8b:20:1d:10:61:9a:7a:5a:90: ef:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D2:3D:D0:14:3D:1A:4A:78:3C:22:45:63:B5:D7:94:81:88:CB:67 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d6da53e4-b7a7-4105-ab36-d9755265b1d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:a0c0::/48 Signature Algorithm: sha256WithRSAEncryption aa:a1:c3:33:7e:b8:de:2a:78:ce:8e:9e:4f:bc:55:0e:77:30: 16:8f:73:bf:87:a1:62:ca:9e:a8:3e:8c:92:cf:3c:37:a3:76: da:1d:c9:a8:d7:19:b6:8f:10:8b:9c:8f:12:c5:2a:41:b9:e6: 9e:4c:76:5d:f1:8f:7b:1a:fa:b9:61:ba:ba:5d:56:42:b0:5b: 1b:83:ac:75:17:92:88:59:4b:9a:f4:a7:0e:3a:0d:4a:b8:23: af:e8:6f:3e:db:26:9c:ea:88:29:d6:42:6e:57:a8:ef:7a:25: 4f:78:51:9a:82:ad:03:0e:08:ed:fc:29:e4:ff:3b:12:5f:0a: 06:8a:a3:45:21:6a:3d:c7:3e:da:6a:af:a6:1d:29:7a:29:38: 2a:d4:31:6d:bf:6a:59:d9:bc:73:50:4f:e5:d7:6c:4a:9c:2f: d6:b0:f4:3d:0a:54:67:de:fd:3b:0a:bf:2a:4a:cc:01:4b:bb: ea:ce:bc:66:06:18:7b:73:a9:8f:7a:ae:71:c0:c6:47:f3:b7: b5:3f:cb:40:f1:39:93:3c:09:5d:e1:d1:48:93:df:24:22:d0: dc:b6:31:d6:b3:b8:16:06:65:b3:3e:de:34:fc:05:9c:71:0e: 3a:96:0a:28:11:42:27:9d:e3:2d:79:06:d9:81:3b:1e:bb:2c: e2:5e:6f:9a -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUe69SCp2prooVAHBN830pTIZ1y+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MzRaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDcwYjFjMzU2NWFkMzBhNWY4NWVhYjY5Zjk1MmIzZTI3NjZkMDJkZTRiZmRk MDIxODYyYWVmZWJiZTgwODJiNmIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALcU5pC7tLBhPZwL30nBjwrsvTdD8OXsvRpQKvansAUsB9I4us74F4Acemnd VukOIrKM6doVcw9aEfLdULRqragVcBlxYKMfO/p1Nln3HvVqzHvYwmtqUNlBwxBu k1xLaGhgF7nxn/lRTiiqWia1a44wTlWbnwdDs0WjZTu7BVhedn8tjPyG7l9zPPIa Ije4V/hftdGLoaj3pB4oELVP6YjQZQ4rywhkgGgdd4kLdDCgHmTocdh7yieNquwA sjLtswGI/uZxB5q2QAHSXk3FUAVXryt85jf7p6YrKBbnJOzDDE448v0uAFO8aEJA oVgk6xK6HKLziyAdEGGaelqQ73MCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTD0j3Q FD0aSng8IkVjtdeUgYjLZzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZDZkYTUzZTQtYjdhNy00MTA1LWFiMzYtZDk3NTUyNjViMWQ0LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gug wDANBgkqhkiG9w0BAQsFAAOCAQEAqqHDM3643ip4zo6eT7xVDncwFo9zv4ehYsqe qD6Mks88N6N22h3JqNcZto8Qi5yPEsUqQbnmnkx2XfGPexr6uWG6ul1WQrBbG4Os dReSiFlLmvSnDjoNSrgjr+hvPtsmnOqIKdZCbleo73olT3hRmoKtAw4I7fwp5P87 El8KBoqjRSFqPcc+2mqvph0peik4KtQxbb9qWdm8c1BP5ddsSpwv1rD0PQpUZ979 Owq/KkrMAUu76s68ZgYYe3Opj3quccDGR/O3tT/LQPE5kzwJXeHRSJPfJCLQ3LYx 1rO4FgZlsz7eNPwFnHEOOpYKKBFCJ53jLXkG2YE7Hrss4l5vmg== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:28 2026 by rpki-client