This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea64b1fc-e503-4319-938f-0942f418ac39.roa File: ea64b1fc-e503-4319-938f-0942f418ac39.roa (raw, json) Hash identifier: +8z6q2l7Q9lW3r+5e0/hGvhH56j3wL6bSUiEaKbutpA= Subject key identifier: 5F:AA:AF:D5:3B:21:C8:B8:34:1C:2F:DA:3A:86:3B:D3:81:DF:AE:52 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 4EF8E2F5C2D04BF923E849AAAD13C2FCA536CF45 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea64b1fc-e503-4319-938f-0942f418ac39.roa Signing time: Tue 13 Jan 2026 19:58:30 +0000 ROA not before: Tue 13 Jan 2026 19:58:30 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f8:e2:f5:c2:d0:4b:f9:23:e8:49:aa:ad:13:c2:fc:a5:36:cf:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:30 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=b1440973cfb4fbaa6b5b49ede9b93fae6f9a7c201de00bbe3b450a684f5421ab, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9f:99:dc:a5:91:ad:16:68:05:2a:9c:ba:7b: ad:e8:c2:02:b2:e1:80:fd:ca:c3:dc:72:d6:37:22: e4:a7:f0:c7:4e:e7:11:c8:8e:85:74:f2:50:98:c6: f1:be:ef:34:35:88:b2:64:d6:32:82:89:09:1f:cb: be:05:f4:ab:c1:32:00:1b:ff:ca:db:49:76:46:6b: ea:4a:86:3d:b8:b3:76:32:2a:06:7e:25:d7:b4:ac: 6d:47:33:75:3d:53:00:c5:f5:e9:6f:0c:7d:be:8f: a8:07:bc:6a:a0:28:fe:57:23:9c:4e:f4:f4:8c:69: 58:c4:35:8b:76:26:7c:93:89:98:c4:56:c6:9b:aa: 16:38:10:0e:c5:41:a2:37:cf:c4:68:cc:b6:7e:ce: 98:61:1b:dd:93:e7:d4:00:71:83:43:e8:0e:81:ee: 5e:db:ae:d5:b3:52:2d:9e:0f:cf:10:79:68:f6:4f: e2:9e:ab:4d:df:30:b4:ea:e7:a6:ad:68:b3:49:34: f1:bd:5d:b5:73:b7:3d:56:cc:a9:a1:f4:d8:9a:b7: b6:2d:59:af:b7:e4:c4:f3:8a:4c:5f:12:b2:ca:71: 77:0c:48:e8:c4:dd:4f:ca:3b:a0:85:5a:5d:30:73: 06:85:89:46:14:80:47:2e:cb:f5:04:77:8b:57:9c: be:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AA:AF:D5:3B:21:C8:B8:34:1C:2F:DA:3A:86:3B:D3:81:DF:AE:52 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea64b1fc-e503-4319-938f-0942f418ac39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:840::/48 Signature Algorithm: sha256WithRSAEncryption b3:82:c8:e6:bf:f5:17:a7:c3:d8:b3:c2:26:81:46:c2:97:66: c7:fb:d5:9c:93:20:bf:eb:ab:ad:7a:ef:9b:a5:e8:50:e8:20: b7:f2:11:9d:14:eb:47:3c:c8:c4:41:9c:d7:45:4e:8c:dc:fd: da:1b:41:1f:54:13:15:f0:55:d7:29:4b:30:3c:09:af:60:c2: 33:a2:9b:73:82:e3:a3:bf:44:7c:07:d3:57:eb:71:82:9d:ab: 5d:dd:1a:58:4f:07:d4:f1:e4:41:d3:83:7d:84:23:21:a0:59: 03:23:48:f4:5f:95:1e:47:58:82:b7:42:8c:ca:ac:0d:be:38: 8d:3b:cd:16:df:ee:19:34:31:dc:67:e9:86:27:16:43:c2:02: 23:82:21:30:f1:5a:8e:21:3f:94:4d:d5:50:47:7f:9a:80:12: 0e:87:65:b6:94:00:c7:cb:72:d9:a5:a3:c8:cd:9f:de:2a:8c: 8a:10:8b:e1:bc:74:06:08:1d:f1:14:ad:b5:91:be:a6:74:78: 97:45:eb:a4:70:26:e6:ac:24:ff:20:cc:a4:5f:a3:d0:9b:13: 80:c0:fa:bf:b0:d0:02:9f:c5:22:2a:8b:d0:42:44:0e:65:73: 32:c0:9c:10:dc:00:44:56:2a:a0:ca:11:d4:86:8a:94:23:cb: b6:1a:2a:dd -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUTvji9cLQS/kj6EmqrRPC/KU2z0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MzBaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQGIxNDQwOTczY2ZiNGZiYWE2YjViNDllZGU5YjkzZmFlNmY5YTdjMjAxZGUw MGJiZTNiNDUwYTY4NGY1NDIxYWIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALifmdylka0WaAUqnLp7rejCArLhgP3Kw9xy1jci5Kfwx07nEciOhXTyUJjG 8b7vNDWIsmTWMoKJCR/LvgX0q8EyABv/yttJdkZr6kqGPbizdjIqBn4l17SsbUcz dT1TAMX16W8Mfb6PqAe8aqAo/lcjnE709IxpWMQ1i3YmfJOJmMRWxpuqFjgQDsVB ojfPxGjMtn7OmGEb3ZPn1ABxg0PoDoHuXtuu1bNSLZ4PzxB5aPZP4p6rTd8wtOrn pq1os0k08b1dtXO3PVbMqaH02Jq3ti1Zr7fkxPOKTF8SsspxdwxI6MTdT8o7oIVa XTBzBoWJRhSARy7L9QR3i1ecvjUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRfqq/V OyHIuDQcL9o6hjvTgd+uUjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZWE2NGIxZmMtZTUwMy00MzE5LTkzOGYtMDk0MmY0MThhYzM5LnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GsI QDANBgkqhkiG9w0BAQsFAAOCAQEAs4LI5r/1F6fD2LPCJoFGwpdmx/vVnJMgv+ur rXrvm6XoUOggt/IRnRTrRzzIxEGc10VOjNz92htBH1QTFfBV1ylLMDwJr2DCM6Kb c4Ljo79EfAfTV+txgp2rXd0aWE8H1PHkQdODfYQjIaBZAyNI9F+VHkdYgrdCjMqs Db44jTvNFt/uGTQx3GfphicWQ8ICI4IhMPFajiE/lE3VUEd/moASDodltpQAx8ty 2aWjyM2f3iqMihCL4bx0Bggd8RSttZG+pnR4l0XrpHAm5qwk/yDMpF+j0JsTgMD6 v7DQAp/FIiqL0EJEDmVzMsCcENwARFYqoMoR1IaKlCPLthoq3Q== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:27 2026 by rpki-client