This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e1141acd-31e0-44c6-b6b1-afa7dcf10a77.roa File: e1141acd-31e0-44c6-b6b1-afa7dcf10a77.roa (raw, json) Hash identifier: zeeH/o1s7JtRAukE+ow+nT1O1hl5CfDUtVItbLaawo0= Subject key identifier: 64:F3:D1:FC:7E:26:2F:E9:41:1C:B7:81:EA:D6:C7:11:F3:F7:AD:1D Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 1780D8C80E0E479ED52E3144B61C6C8B291CB9E6 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e1141acd-31e0-44c6-b6b1-afa7dcf10a77.roa Signing time: Tue 13 Jan 2026 20:06:57 +0000 ROA not before: Tue 13 Jan 2026 20:06:57 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:80:d8:c8:0e:0e:47:9e:d5:2e:31:44:b6:1c:6c:8b:29:1c:b9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 20:06:57 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=08b8b84a96faf7c4e62ec2ddab1d42e16f58b70d21e5225a5e19e2499d7beb6e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9e:45:20:2b:39:e2:22:91:c9:81:6f:04:d7: 58:dd:52:ad:b1:96:14:68:0c:18:1c:53:4b:7e:6d: 2f:b3:a1:89:02:ee:1b:3f:dc:da:a9:a3:c5:04:b8: d8:0d:9c:a5:93:47:b0:83:e7:74:db:09:90:5c:4b: 63:1e:cc:ff:77:12:c7:d7:66:c0:dc:2c:dc:5c:93: d8:e4:bb:b2:74:93:60:db:df:bf:45:95:26:5d:7c: 5f:78:52:ab:d1:53:97:8e:87:3c:80:b1:53:da:e1: fb:7b:d4:dc:fd:b1:87:c2:fc:5e:87:2c:e2:d2:49: 62:0c:26:14:08:ef:61:53:70:33:db:99:9a:fe:b3: f1:90:6d:f5:69:09:26:0c:b8:87:f1:24:1c:1d:dc: 98:7c:31:77:61:e5:c1:a9:5c:10:df:bb:11:f0:8e: 4a:09:85:93:31:87:05:56:77:49:6b:cd:8f:17:08: 19:42:6f:de:fe:a9:b0:a8:8b:0a:c3:10:b6:b3:cb: a5:4f:17:af:54:b3:ad:88:66:83:2c:db:ea:42:58: 06:dd:a0:1f:78:e0:62:76:df:03:63:d7:1a:17:90: 01:90:58:0a:c2:f1:7c:df:a5:bb:fb:68:e2:55:82: 46:8d:7d:6d:10:6b:96:a2:f8:e0:dd:05:ff:0a:af: 30:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F3:D1:FC:7E:26:2F:E9:41:1C:B7:81:EA:D6:C7:11:F3:F7:AD:1D X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e1141acd-31e0-44c6-b6b1-afa7dcf10a77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:2000::/40 Signature Algorithm: sha256WithRSAEncryption 67:ab:71:9c:1d:8c:5a:29:49:ea:9c:eb:35:91:59:1c:0e:ce: dc:b2:09:07:6f:1a:24:ee:17:ad:46:52:09:ee:68:0d:54:36: de:55:e1:a1:c5:2e:95:45:e3:b4:24:a0:0e:e5:14:06:f6:30: f3:00:d5:93:f1:dd:af:bd:38:01:1d:e2:b1:7b:53:be:67:45: db:67:07:ae:d2:6f:a8:5c:e9:85:fc:b3:60:c6:36:e5:2f:52: 9f:20:5f:81:8d:60:2e:41:d7:e7:70:f7:70:b2:64:8e:1a:0a: 91:48:db:8b:fa:21:8f:9c:bf:31:55:55:03:ef:39:b3:19:f5: 1e:fe:c8:5e:a1:96:ad:21:ae:21:bc:bb:a3:77:62:f8:4a:ab: 3c:c4:73:61:e2:49:47:fc:58:53:ba:d3:96:c7:82:0c:4c:33: cd:6d:4d:80:bb:e0:e5:ba:ff:0d:61:3b:de:2b:76:e1:e1:8f: d1:ac:e8:a6:18:5f:c6:c6:65:9a:40:a1:69:2c:58:cd:9f:a2: 04:6c:2b:ad:3a:3f:36:87:d3:af:1a:50:84:05:83:ce:b6:23: e1:d9:fa:05:1e:1f:ef:00:0f:60:e4:cd:43:a4:43:c6:ca:b4: 98:0d:cf:a0:f4:02:af:ce:17:c1:63:73:ee:e9:43:a7:e4:bc: 10:da:62:ab -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUF4DYyA4OR57VLjFEthxsiykcueYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMyMDA2NTdaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDA4YjhiODRhOTZmYWY3YzRlNjJlYzJkZGFiMWQ0MmUxNmY1OGI3MGQyMWU1 MjI1YTVlMTllMjQ5OWQ3YmViNmUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAI2eRSArOeIikcmBbwTXWN1SrbGWFGgMGBxTS35tL7OhiQLuGz/c2qmjxQS4 2A2cpZNHsIPndNsJkFxLYx7M/3cSx9dmwNws3FyT2OS7snSTYNvfv0WVJl18X3hS q9FTl46HPICxU9rh+3vU3P2xh8L8Xocs4tJJYgwmFAjvYVNwM9uZmv6z8ZBt9WkJ Jgy4h/EkHB3cmHwxd2HlwalcEN+7EfCOSgmFkzGHBVZ3SWvNjxcIGUJv3v6psKiL CsMQtrPLpU8Xr1SzrYhmgyzb6kJYBt2gH3jgYnbfA2PXGheQAZBYCsLxfN+lu/to 4lWCRo19bRBrlqL44N0F/wqvMHECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRk89H8 fiYv6UEct4Hq1scR8/etHTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZTExNDFhY2QtMzFlMC00NGM2LWI2YjEtYWZhN2RjZjEwYTc3LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Gsg MA0GCSqGSIb3DQEBCwUAA4IBAQBnq3GcHYxaKUnqnOs1kVkcDs7csgkHbxok7het RlIJ7mgNVDbeVeGhxS6VReO0JKAO5RQG9jDzANWT8d2vvTgBHeKxe1O+Z0XbZweu 0m+oXOmF/LNgxjblL1KfIF+BjWAuQdfncPdwsmSOGgqRSNuL+iGPnL8xVVUD7zmz GfUe/sheoZatIa4hvLujd2L4Sqs8xHNh4klH/FhTutOWx4IMTDPNbU2Au+Dluv8N YTveK3bh4Y/RrOimGF/GxmWaQKFpLFjNn6IEbCutOj82h9OvGlCEBYPOtiPh2foF Hh/vAA9g5M1DpEPGyrSYDc+g9AKvzhfBY3Pu6UOn5LwQ2mKr -----END CERTIFICATE-----Generated at Sat Jan 17 08:19:12 2026 by rpki-client