This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea38b698-2d11-4401-949d-9e0f145ce40b.roa File: ea38b698-2d11-4401-949d-9e0f145ce40b.roa (raw, json) Hash identifier: +qhdguc2LYgZJ6750/NLKIgqiFU/xOs/zz09apXhD9Y= Subject key identifier: C5:D1:E4:0B:AE:5E:D5:10:47:51:A4:1C:C6:FB:F3:FA:51:65:D3:32 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 53A135DF7BDB92A37DCBC986D16C0BEB4BEF3E85 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea38b698-2d11-4401-949d-9e0f145ce40b.roa Signing time: Tue 13 Jan 2026 19:58:29 +0000 ROA not before: Tue 13 Jan 2026 19:58:29 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a1:35:df:7b:db:92:a3:7d:cb:c9:86:d1:6c:0b:eb:4b:ef:3e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:29 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=0815b54cfe57bf34bd01ff1aeea7e19efd048a68788efb55c41aa909182a1e4c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3e:c5:e8:f4:cb:b5:1d:14:e4:42:0b:e2:20: b9:07:62:d5:55:d6:9a:71:85:02:bc:cc:15:d6:cc: 51:b8:1f:ed:5f:41:93:6a:71:d4:44:aa:60:51:e1: 34:fd:51:80:f1:e2:54:de:6c:ec:ba:a9:a0:d9:6b: bf:89:68:72:63:c2:07:7d:8a:0e:19:52:5d:44:85: 25:57:6e:c7:53:21:be:80:97:f2:ab:4e:3c:8a:5a: 53:99:af:82:b8:2e:6c:5a:05:41:36:63:69:ff:02: 17:d1:ac:cc:54:48:9d:1f:ee:d2:c7:9a:1d:bb:fe: 3b:41:62:f8:51:bd:f4:d3:f1:44:54:32:e9:8b:31: 56:7c:cc:b1:6e:b1:6b:fb:96:98:5b:03:c0:f5:2d: c4:72:ed:c2:c4:3a:c0:0f:fb:e7:96:82:57:52:34: ea:57:cb:35:c7:1c:f0:19:6e:0e:37:09:b1:f9:79: 66:1d:7c:4f:b4:58:72:37:61:6e:24:fd:a9:7f:3c: 0f:86:f4:1e:b9:4a:6d:e9:37:72:36:3a:64:66:be: d1:cb:d6:79:d6:10:f9:11:3c:34:3b:fb:fc:34:50: 91:c7:f5:d7:c6:b0:e3:0d:66:7b:60:ab:9a:37:21: a4:c9:0f:03:56:5c:e2:c7:3e:92:2b:bd:39:82:3c: d6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D1:E4:0B:AE:5E:D5:10:47:51:A4:1C:C6:FB:F3:FA:51:65:D3:32 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea38b698-2d11-4401-949d-9e0f145ce40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:80c0::/48 Signature Algorithm: sha256WithRSAEncryption c3:2c:dd:3b:10:52:03:50:b9:ab:b3:da:15:c3:11:67:2d:49: 7a:43:d2:83:eb:f7:54:e7:58:2c:e3:68:5a:aa:98:e3:02:32: c8:61:7f:99:14:54:40:f6:b5:fb:84:a9:f5:bb:b5:b1:f9:2b: 12:cb:2c:40:45:c1:8f:7b:22:18:db:e3:94:ab:d2:fa:2a:b4: 53:c0:d8:27:98:07:6d:de:d3:48:6c:c1:38:f2:9e:9b:cd:23: 85:97:66:6e:67:17:35:d9:96:49:38:8f:78:19:07:d2:54:fb: 02:93:f6:84:17:72:de:98:a7:36:37:f1:bb:c9:7a:80:2e:83: f5:72:f5:6d:10:c2:52:96:9d:4d:2e:72:f7:07:85:1f:89:ae: c6:e7:b9:d1:3e:48:c9:4a:26:83:d3:8a:35:d6:6e:ba:d9:9a: 17:88:62:c8:16:c6:9c:7a:e9:73:6a:9c:76:44:ad:d5:dd:d2: f5:f9:31:b4:c3:93:23:8f:ee:7e:1f:37:10:b3:df:39:99:a9: f3:6a:a2:97:98:70:57:41:66:22:f0:7e:9b:6d:b4:f5:be:d6: a9:82:a0:74:a3:80:65:af:e6:01:4e:57:28:18:66:84:9a:f9: 60:8a:b9:f8:cb:4d:66:3f:fe:63:83:43:2a:63:b6:af:43:1d: 1c:fb:0a:15 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUU6E133vbkqN9y8mG0WwL60vvPoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MjlaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDA4MTViNTRjZmU1N2JmMzRiZDAxZmYxYWVlYTdlMTllZmQwNDhhNjg3ODhl ZmI1NWM0MWFhOTA5MTgyYTFlNGMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPE+xej0y7UdFORCC+IguQdi1VXWmnGFArzMFdbMUbgf7V9Bk2px1ESqYFHh NP1RgPHiVN5s7LqpoNlrv4locmPCB32KDhlSXUSFJVdux1MhvoCX8qtOPIpaU5mv grgubFoFQTZjaf8CF9GszFRInR/u0seaHbv+O0Fi+FG99NPxRFQy6YsxVnzMsW6x a/uWmFsDwPUtxHLtwsQ6wA/755aCV1I06lfLNccc8BluDjcJsfl5Zh18T7RYcjdh biT9qX88D4b0HrlKbek3cjY6ZGa+0cvWedYQ+RE8NDv7/DRQkcf118aw4w1me2Cr mjchpMkPA1Zc4sc+kiu9OYI81jkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTF0eQL rl7VEEdRpBzG+/P6UWXTMjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZWEzOGI2OTgtMmQxMS00NDAxLTk0OWQtOWUwZjE0NWNlNDBiLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GuA wDANBgkqhkiG9w0BAQsFAAOCAQEAwyzdOxBSA1C5q7PaFcMRZy1JekPSg+v3VOdY LONoWqqY4wIyyGF/mRRUQPa1+4Sp9bu1sfkrEsssQEXBj3siGNvjlKvS+iq0U8DY J5gHbd7TSGzBOPKem80jhZdmbmcXNdmWSTiPeBkH0lT7ApP2hBdy3pinNjfxu8l6 gC6D9XL1bRDCUpadTS5y9weFH4muxue50T5IyUomg9OKNdZuutmaF4hiyBbGnHrp c2qcdkSt1d3S9fkxtMOTI4/ufh83ELPfOZmp82qil5hwV0FmIvB+m2209b7WqYKg dKOAZa/mAU5XKBhmhJr5YIq5+MtNZj/+Y4NDKmO2r0MdHPsKFQ== -----END CERTIFICATE-----Generated at Sat Jan 17 08:19:12 2026 by rpki-client