This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da3ee01b-51e2-4de0-8d0e-6b80428565ea.roa File: da3ee01b-51e2-4de0-8d0e-6b80428565ea.roa (raw, json) Hash identifier: mWHc3radLBnbCbQOZWOHmTHichlsxWQHS+AlTairPCg= Subject key identifier: A6:B9:E8:05:CA:36:0C:67:78:DD:56:B8:3B:E6:77:8C:D6:CC:81:45 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 38C0A5F4EEE9D5209F96E1A5376E13E126AC35F8 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da3ee01b-51e2-4de0-8d0e-6b80428565ea.roa Signing time: Tue 13 Jan 2026 19:58:27 +0000 ROA not before: Tue 13 Jan 2026 19:58:27 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c0:a5:f4:ee:e9:d5:20:9f:96:e1:a5:37:6e:13:e1:26:ac:35:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:27 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=8ebc6fd39916f69cf486761c5e272f3c4c8ad2bc4a3fd56911eea919823dda41, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:4c:c2:e9:5c:19:c5:c5:1b:72:0d:dd:c9: d3:0a:aa:bf:48:2c:8f:3c:32:d1:dd:d0:55:b1:13: be:22:7f:57:3c:50:4a:7e:61:60:70:f4:61:57:a0: b5:02:49:a9:15:71:ab:31:64:79:e6:61:84:b0:b1: 77:1d:34:ef:08:12:f4:32:fe:f1:27:94:ed:92:03: f1:34:ae:b4:ce:33:18:1d:ba:82:f5:4f:27:21:a4: b4:1d:87:ff:bb:b7:af:8c:24:4c:86:90:b4:57:27: cb:16:1d:4a:27:2d:6f:a4:d5:7d:c6:d7:9a:f1:7b: 52:98:81:a7:86:5a:98:13:b1:f1:d2:4a:90:c6:b4: ae:d2:30:b8:17:3e:5f:6f:ec:8e:42:ea:7e:fd:4a: d3:4d:d6:7f:c8:73:85:6c:e3:63:6d:cd:1d:27:54: 2f:30:59:f6:37:8b:0d:56:af:40:18:d7:e2:0e:cd: 45:f5:a8:45:df:60:e3:8c:e2:16:82:eb:d6:7b:47: 09:93:17:28:f2:09:78:d3:c7:79:82:74:44:82:62: b3:cd:2a:84:fc:50:11:8e:de:ad:46:ac:96:86:57: 0c:6e:2a:cb:dc:7a:f3:dd:db:8d:c9:e1:8c:73:fb: ae:a9:0f:5d:57:a0:bd:bd:72:15:4e:97:b2:fe:8b: cf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B9:E8:05:CA:36:0C:67:78:DD:56:B8:3B:E6:77:8C:D6:CC:81:45 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/da3ee01b-51e2-4de0-8d0e-6b80428565ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:6040::/48 Signature Algorithm: sha256WithRSAEncryption 7a:1e:9b:51:29:0c:f0:22:52:51:36:c3:cb:fe:9d:75:f5:eb: 30:d0:10:ab:78:0f:52:e9:17:f5:e0:6e:62:e1:32:c0:7c:31: ed:9e:1d:4d:82:ea:df:29:62:3a:32:22:95:9a:c9:4d:c3:df: 3d:12:d5:6f:83:b2:bf:9f:55:6b:af:54:37:de:99:ff:21:87: 59:7a:2d:81:f2:74:4f:fd:e6:1c:98:25:ed:7d:6a:ba:eb:85: 9d:77:2a:9c:4f:a9:0a:9f:20:cd:b7:cd:a9:5c:24:8a:80:5b: ab:29:33:d3:18:f8:7c:83:06:46:e0:23:c5:07:e1:06:30:2f: 03:af:92:a8:4e:08:4d:3d:60:97:0e:5b:03:e9:8b:85:0a:f0: 6b:b0:af:ae:2f:f3:25:dc:9b:ad:9f:79:78:1b:9a:6b:71:e5: 6b:e7:b0:9c:52:09:a4:8f:70:1c:17:a6:72:8f:e1:b0:6f:94: 92:3e:6b:c2:2a:45:20:9d:65:21:45:d1:57:e1:9a:a1:9a:96: 1d:8e:ff:dd:7c:e2:38:0e:fb:2d:00:c5:f1:5c:70:7a:df:08: 94:d1:80:1c:5c:10:be:7d:70:09:44:ff:3a:cc:b7:c8:76:e7: 0c:35:8a:14:58:4c:28:a6:bb:8c:d7:ae:d0:2f:93:0f:f9:ab: c9:ba:60:9f -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUOMCl9O7p1SCfluGlN24T4SasNfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MjdaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDhlYmM2ZmQzOTkxNmY2OWNmNDg2NzYxYzVlMjcyZjNjNGM4YWQyYmM0YTNm ZDU2OTExZWVhOTE5ODIzZGRhNDExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUXTMLpXBnFxRtyDd3J0wqqv0gsjzwy0d3QVbETviJ/VzxQSn5hYHD0YVeg tQJJqRVxqzFkeeZhhLCxdx007wgS9DL+8SeU7ZID8TSutM4zGB26gvVPJyGktB2H /7u3r4wkTIaQtFcnyxYdSictb6TVfcbXmvF7UpiBp4ZamBOx8dJKkMa0rtIwuBc+ X2/sjkLqfv1K003Wf8hzhWzjY23NHSdULzBZ9jeLDVavQBjX4g7NRfWoRd9g44zi FoLr1ntHCZMXKPIJeNPHeYJ0RIJis80qhPxQEY7erUasloZXDG4qy9x6893bjcnh jHP7rqkPXVegvb1yFU6Xsv6Lz7UCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSmuegF yjYMZ3jdVrg75neM1syBRTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZGEzZWUwMWItNTFlMi00ZGUwLThkMGUtNmI4MDQyODU2NWVhLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0Gtg QDANBgkqhkiG9w0BAQsFAAOCAQEAeh6bUSkM8CJSUTbDy/6ddfXrMNAQq3gPUukX 9eBuYuEywHwx7Z4dTYLq3yliOjIilZrJTcPfPRLVb4Oyv59Va69UN96Z/yGHWXot gfJ0T/3mHJgl7X1quuuFnXcqnE+pCp8gzbfNqVwkioBbqykz0xj4fIMGRuAjxQfh BjAvA6+SqE4ITT1glw5bA+mLhQrwa7Cvri/zJdybrZ95eBuaa3Hla+ewnFIJpI9w HBemco/hsG+Ukj5rwipFIJ1lIUXRV+GaoZqWHY7/3XziOA77LQDF8Vxwet8IlNGA HFwQvn1wCUT/Osy3yHbnDDWKFFhMKKa7jNeu0C+TD/mrybpgnw== -----END CERTIFICATE-----Generated at Sat Jan 17 10:00:40 2026 by rpki-client