This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db3937d1-a151-4cd6-afbc-f221dc0ed3d5.roa File: db3937d1-a151-4cd6-afbc-f221dc0ed3d5.roa (raw, json) Hash identifier: WTotfX47dZyEZSwZs6UGKOLnoBs4lkQg5CVzRD3DKH0= Subject key identifier: FD:0B:A3:03:CA:08:22:C7:AF:C0:EE:33:AA:3A:4B:92:04:73:D9:2F Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 6F17B5606ABA3F0F596C6C0446BCEB2B2C17496B Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db3937d1-a151-4cd6-afbc-f221dc0ed3d5.roa Signing time: Tue 13 Jan 2026 19:58:31 +0000 ROA not before: Tue 13 Jan 2026 19:58:31 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:17:b5:60:6a:ba:3f:0f:59:6c:6c:04:46:bc:eb:2b:2c:17:49:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:31 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=b4e945b01c6da1210b56d1b45155e8d082b00733add7333c9702fbb4d90b6448, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fc:c8:14:cc:c3:87:39:06:cb:bd:86:f0:c4: c4:bc:5e:87:10:a0:78:28:ec:61:91:81:ed:1a:7c: 46:b7:21:ce:2e:31:05:a3:2d:98:19:1a:5e:b4:a5: 65:73:26:04:f2:e3:6d:70:18:a8:e4:2a:2d:a3:5d: 26:d6:54:c9:04:21:41:e9:3a:2b:6d:98:c4:00:14: 5c:6b:cc:f4:01:75:58:c3:52:48:38:42:d3:26:5c: cd:ad:a8:c9:f8:7e:43:d3:cf:d3:0e:37:e0:e0:f5: 51:6e:91:bd:bb:88:1a:a7:b1:d0:79:74:c3:1f:da: 98:7f:04:90:5e:c3:37:6b:85:b9:98:1e:27:9a:da: 7b:fe:65:56:98:d4:7a:7d:5f:9d:34:46:aa:d0:bb: 9c:75:cb:66:46:2a:28:0e:42:bf:cc:1e:43:06:2b: a9:52:eb:b8:bc:9f:a9:16:b6:fe:26:34:8a:9b:93: 94:63:d7:b6:c6:26:09:61:ae:23:a9:22:e7:db:d3: 01:8e:f7:b0:c0:0c:fc:26:c2:f8:89:72:04:cd:c4: a9:11:60:83:b4:ca:ef:e3:69:2a:38:41:2f:62:c3: 5f:21:bf:54:da:3b:62:d8:6a:55:f1:1f:c8:12:66: 02:d8:30:4b:23:75:d1:04:c8:5a:18:b8:c1:31:8b: 3b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0B:A3:03:CA:08:22:C7:AF:C0:EE:33:AA:3A:4B:92:04:73:D9:2F X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/db3937d1-a151-4cd6-afbc-f221dc0ed3d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:880::/48 Signature Algorithm: sha256WithRSAEncryption 01:50:36:77:32:4d:de:24:b5:a2:39:87:a0:d0:fb:b3:50:41: 11:59:70:67:ad:4d:22:6d:a0:02:1e:4f:a7:b6:ce:17:5e:de: 16:b7:1d:8b:8d:b7:60:56:a7:a2:e1:7a:e5:c9:2b:ba:17:de: 74:8b:4a:b1:f0:a6:f7:53:bf:5b:10:f0:de:4a:af:63:80:22: 67:cc:76:0b:9c:71:2b:a9:32:cf:26:3e:fb:3f:29:f1:d2:ae: 08:84:41:24:83:35:06:e3:89:c1:6a:95:e0:aa:4c:9d:56:f9: da:16:61:24:ec:f2:5d:72:17:54:6a:37:48:c9:3d:03:ef:c5: bd:f5:c8:f6:8c:d8:31:61:84:6c:b6:8f:03:3f:10:5b:61:e7: 5e:4d:75:43:ec:41:d2:d4:dc:fa:ec:45:17:35:80:85:7f:fe: fa:23:30:23:4a:2d:28:3a:95:72:9d:ff:8c:93:dc:c9:ce:59: 4b:0e:18:3f:0c:4f:a6:22:77:9b:50:6d:03:01:b9:80:1c:c9: 95:9e:3a:09:31:43:c6:bf:0b:4d:8b:48:b7:8a:6a:85:9a:57: a1:93:08:a1:e5:df:39:0b:d9:c3:b8:45:4e:29:5a:47:9e:ae: 98:69:22:ac:d4:f0:f3:34:11:eb:f2:0c:47:0d:4e:43:44:5d: fc:d5:43:a0 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUbxe1YGq6Pw9ZbGwERrzrKywXSWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MzFaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQGI0ZTk0NWIwMWM2ZGExMjEwYjU2ZDFiNDUxNTVlOGQwODJiMDA3MzNhZGQ3 MzMzYzk3MDJmYmI0ZDkwYjY0NDgxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOT8yBTMw4c5Bsu9hvDExLxehxCgeCjsYZGB7Rp8Rrchzi4xBaMtmBkaXrSl ZXMmBPLjbXAYqOQqLaNdJtZUyQQhQek6K22YxAAUXGvM9AF1WMNSSDhC0yZcza2o yfh+Q9PP0w434OD1UW6RvbuIGqex0Hl0wx/amH8EkF7DN2uFuZgeJ5rae/5lVpjU en1fnTRGqtC7nHXLZkYqKA5Cv8weQwYrqVLruLyfqRa2/iY0ipuTlGPXtsYmCWGu I6ki59vTAY73sMAM/CbC+IlyBM3EqRFgg7TK7+NpKjhBL2LDXyG/VNo7YthqVfEf yBJmAtgwSyN10QTIWhi4wTGLO0ECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBT9C6MD yggix6/A7jOqOkuSBHPZLzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZGIzOTM3ZDEtYTE1MS00Y2Q2LWFmYmMtZjIyMWRjMGVkM2Q1LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GsI gDANBgkqhkiG9w0BAQsFAAOCAQEAAVA2dzJN3iS1ojmHoND7s1BBEVlwZ61NIm2g Ah5Pp7bOF17eFrcdi423YFanouF65ckruhfedItKsfCm91O/WxDw3kqvY4AiZ8x2 C5xxK6kyzyY++z8p8dKuCIRBJIM1BuOJwWqV4KpMnVb52hZhJOzyXXIXVGo3SMk9 A+/FvfXI9ozYMWGEbLaPAz8QW2HnXk11Q+xB0tTc+uxFFzWAhX/++iMwI0otKDqV cp3/jJPcyc5ZSw4YPwxPpiJ3m1BtAwG5gBzJlZ46CTFDxr8LTYtIt4pqhZpXoZMI oeXfOQvZw7hFTilaR56umGkirNTw8zQR6/IMRw1OQ0Rd/NVDoA== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:25 2026 by rpki-client