This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d79381e2-4ba9-46c7-aaa2-caf3995cd15a.roa File: d79381e2-4ba9-46c7-aaa2-caf3995cd15a.roa (raw, json) Hash identifier: nnlKt0vWMxJ3InHFUw51ERuzOk0M37bKMnv/hOx7Q+E= Subject key identifier: 35:BC:F0:20:A6:32:EE:16:EE:F9:01:CE:4E:CF:BA:55:5F:35:4B:E8 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 7D3392CA0596A325DFDC3E19E6238958BBBC9AA9 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d79381e2-4ba9-46c7-aaa2-caf3995cd15a.roa Signing time: Tue 13 Jan 2026 20:07:00 +0000 ROA not before: Tue 13 Jan 2026 20:07:00 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:b000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:33:92:ca:05:96:a3:25:df:dc:3e:19:e6:23:89:58:bb:bc:9a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 20:07:00 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=d4f2dd9a2a57fb993d23761d2db714171ce05649428f419b1327d995725fc9e8, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fe:ce:14:28:22:6a:76:08:ae:f7:97:37:78: c2:52:00:6b:62:e5:60:d1:5c:4d:70:90:5b:36:ce: 44:4b:9c:43:15:75:6e:a9:e1:67:7f:51:62:a1:50: 79:1b:76:6a:81:46:aa:b8:9e:3e:0d:ae:53:78:20: eb:12:0a:22:be:4f:80:8d:4a:f5:89:d0:cf:e0:de: 71:7f:de:5f:70:50:b0:4c:c5:17:7a:66:a4:36:69: 20:28:52:59:37:48:ec:0f:57:74:b2:93:61:97:9f: c5:48:54:6f:52:8a:2f:4c:63:b4:c8:8f:99:86:70: 8d:d0:cc:bc:c3:25:5d:72:96:af:00:d1:c1:99:78: 7f:17:9c:52:a5:86:74:5a:78:15:7f:14:3a:2f:71: 53:52:83:c3:99:9b:70:cb:df:8a:f3:ac:b6:17:fe: eb:dc:4b:93:bb:1f:8c:43:f0:13:65:eb:cd:16:d6: 88:9b:e1:de:cd:03:76:3b:f4:97:42:73:ac:54:0f: ab:78:25:de:49:82:49:a5:90:3c:e9:00:37:00:d9: dd:2e:a7:3b:1b:dd:21:2e:cf:6b:fd:2e:b7:e6:bb: e2:3e:96:4a:12:dd:f2:d2:29:3f:7e:ae:d7:60:95: 18:1b:a3:63:b2:ed:45:ba:a1:ce:14:02:75:42:8a: 2f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BC:F0:20:A6:32:EE:16:EE:F9:01:CE:4E:CF:BA:55:5F:35:4B:E8 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d79381e2-4ba9-46c7-aaa2-caf3995cd15a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:b000::/40 Signature Algorithm: sha256WithRSAEncryption 27:12:94:9c:df:82:7b:a5:5c:b3:37:49:7c:cc:22:51:63:73: 3d:6d:86:f7:40:7e:e5:20:59:b4:d7:5f:f6:e3:cf:f7:f7:46: 19:9d:d3:39:6d:23:75:5a:01:0b:b5:98:12:ca:18:0e:85:ac: f7:48:33:4d:92:e7:e5:5c:a5:5c:4d:f9:ff:28:e5:43:61:66: 8e:0b:45:89:d8:3c:eb:80:83:d0:17:f3:8f:79:2f:e8:62:d5: 09:7c:44:75:1d:c1:ee:b2:70:2f:50:e4:d8:7c:37:27:18:9c: 62:8e:9d:ea:a9:53:e2:87:28:8c:a9:88:08:51:c7:48:4e:5f: 02:53:c5:4c:b8:50:49:36:85:72:07:0a:76:d6:29:61:ea:1d: b7:2d:d7:53:ce:3e:bf:1f:57:a1:6a:3e:44:24:c7:6e:58:b5: f2:21:e4:4f:3e:d3:b7:e3:fc:56:86:a7:2e:f7:08:99:71:83: 94:06:e7:d9:dc:18:6e:7f:19:b0:b8:ca:ab:1f:e5:b6:1f:57: 32:31:f2:40:3a:75:e1:13:17:bf:53:03:e0:94:90:6a:db:ba: af:43:21:26:88:a2:b0:45:b3:b6:71:a2:8d:55:10:b8:9c:d0: 2a:8e:75:d7:e3:dd:d5:56:b3:34:a9:1b:3d:be:26:73:17:11: e6:ab:8e:db -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUfTOSygWWoyXf3D4Z5iOJWLu8mqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMyMDA3MDBaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQGQ0ZjJkZDlhMmE1N2ZiOTkzZDIzNzYxZDJkYjcxNDE3MWNlMDU2NDk0Mjhm NDE5YjEzMjdkOTk1NzI1ZmM5ZTgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMr+zhQoImp2CK73lzd4wlIAa2LlYNFcTXCQWzbOREucQxV1bqnhZ39RYqFQ eRt2aoFGqriePg2uU3gg6xIKIr5PgI1K9YnQz+DecX/eX3BQsEzFF3pmpDZpIChS WTdI7A9XdLKTYZefxUhUb1KKL0xjtMiPmYZwjdDMvMMlXXKWrwDRwZl4fxecUqWG dFp4FX8UOi9xU1KDw5mbcMvfivOsthf+69xLk7sfjEPwE2XrzRbWiJvh3s0Ddjv0 l0JzrFQPq3gl3kmCSaWQPOkANwDZ3S6nOxvdIS7Pa/0ut+a74j6WShLd8tIpP36u 12CVGBujY7LtRbqhzhQCdUKKL7ECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ1vPAg pjLuFu75Ac5Oz7pVXzVL6DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZDc5MzgxZTItNGJhOS00NmM3LWFhYTItY2FmMzk5NWNkMTVhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Guw MA0GCSqGSIb3DQEBCwUAA4IBAQAnEpSc34J7pVyzN0l8zCJRY3M9bYb3QH7lIFm0 11/248/390YZndM5bSN1WgELtZgSyhgOhaz3SDNNkuflXKVcTfn/KOVDYWaOC0WJ 2DzrgIPQF/OPeS/oYtUJfER1HcHusnAvUOTYfDcnGJxijp3qqVPihyiMqYgIUcdI Tl8CU8VMuFBJNoVyBwp21ilh6h23LddTzj6/H1ehaj5EJMduWLXyIeRPPtO34/xW hqcu9wiZcYOUBufZ3BhufxmwuMqrH+W2H1cyMfJAOnXhExe/UwPglJBq27qvQyEm iKKwRbO2caKNVRC4nNAqjnXX493VVrM0qRs9viZzFxHmq47b -----END CERTIFICATE-----Generated at Sat Jan 17 08:19:13 2026 by rpki-client