This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eadba346-c29f-4797-9fab-fc53bf489862.roa File: eadba346-c29f-4797-9fab-fc53bf489862.roa (raw, json) Hash identifier: MVT+PaLr2FfMbyta0MHYDAlh77ZkDzUG0OC5aP1pSNQ= Subject key identifier: AD:86:94:29:98:05:D4:6B:6F:CE:52:A1:95:ED:CA:5B:3C:FD:9E:14 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 737BCAD66B4E51E4FFB9BBD68F5DE742C048478D Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eadba346-c29f-4797-9fab-fc53bf489862.roa Signing time: Tue 13 Jan 2026 20:06:53 +0000 ROA not before: Tue 13 Jan 2026 20:06:53 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:c020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7b:ca:d6:6b:4e:51:e4:ff:b9:bb:d6:8f:5d:e7:42:c0:48:47:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 20:06:53 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=0ee3cdb072261ca1acaa164c2ef6288feed7f7fcc49a991a4785adecdd62c3c0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:26:30:cd:e3:6a:03:fd:1f:2b:fe:2b:3f: 30:9c:11:eb:52:f4:49:d2:df:21:87:8c:f5:b1:36: 79:f5:e0:19:d5:5d:06:6f:76:07:f2:29:a8:26:5b: f8:4e:e1:48:03:00:e4:96:08:fa:c3:67:4e:06:5a: ce:8a:a9:c2:54:ae:4a:3b:df:55:3e:0c:e3:c3:86: 73:e0:f7:41:2e:aa:e8:04:24:e4:ee:26:d5:63:54: 54:ee:82:11:70:22:2c:96:41:66:54:f7:9c:c7:a4: 1d:3c:f4:4e:42:b2:0b:54:e1:a3:93:95:ce:2e:51: f8:1a:8d:59:2a:e8:07:58:53:dc:6d:95:dc:11:62: 9b:c7:e7:57:84:24:8c:13:ed:69:6f:83:5c:94:87: ef:69:02:6c:75:83:2f:f8:ce:3d:79:7d:bc:8d:1f: 88:48:e0:28:53:f9:94:98:90:3f:b6:6e:39:22:ab: ba:1e:70:6d:6f:14:c3:42:c4:ec:b5:62:ef:30:c4: f6:91:7f:39:18:23:99:30:6b:b1:5e:5e:b4:82:d6: 3c:66:41:d1:a9:a2:cf:d5:d7:be:0b:57:cc:50:d2: 85:58:4c:0a:2b:63:c9:c8:52:a7:c0:14:5d:44:a3: 24:a5:52:d9:7b:35:2f:8a:88:70:4e:1e:8f:1e:a2: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:86:94:29:98:05:D4:6B:6F:CE:52:A1:95:ED:CA:5B:3C:FD:9E:14 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eadba346-c29f-4797-9fab-fc53bf489862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:c020::/48 Signature Algorithm: sha256WithRSAEncryption 70:d6:55:14:33:eb:d7:9c:b1:fc:8e:20:75:70:c1:b3:4b:36: 3c:43:ba:59:5a:30:0f:69:eb:b7:64:85:b0:6a:03:57:36:d1: 3d:a5:0b:b2:18:75:25:93:0d:cb:82:3a:02:a9:03:c8:e9:77: eb:87:20:2f:2c:c5:9b:f1:22:03:51:1e:79:1f:fa:3d:ec:f3: df:67:91:d0:99:d8:34:8d:33:87:68:5c:d6:df:08:f0:cd:bd: 0e:ba:2a:62:ea:62:57:da:70:56:70:74:86:8c:13:bd:36:43: e8:46:38:01:8b:31:e1:1a:06:6b:bf:6d:82:0b:c1:ee:6e:cf: b4:cd:e7:0a:a9:69:5d:c5:ff:56:54:c1:9c:5f:2e:45:62:c6: ae:6d:c4:8c:94:1b:a0:d7:cf:e8:fa:78:c8:27:0e:5b:a3:5f: a4:a1:5a:f0:3f:14:c0:27:30:84:d7:56:90:61:3d:11:17:5e: 7e:d3:83:de:7f:ed:b2:30:d7:21:b0:bb:0b:fe:2d:1e:bb:d0: c1:86:ba:97:2f:84:18:2c:4c:18:0b:97:45:6e:6d:b6:dd:69: 93:c4:73:6b:e3:90:af:d2:72:2f:aa:32:6c:95:f8:a8:d8:74: 2d:77:70:80:ca:b8:de:69:19:e2:61:ff:80:80:fe:a4:66:7e: c1:79:d5:15 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUc3vK1mtOUeT/ubvWj13nQsBIR40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMyMDA2NTNaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQDBlZTNjZGIwNzIyNjFjYTFhY2FhMTY0YzJlZjYyODhmZWVkN2Y3ZmNjNDlh OTkxYTQ3ODVhZGVjZGQ2MmMzYzAxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMlKJjDN42oD/R8r/is/MJwR61L0SdLfIYeM9bE2efXgGdVdBm92B/IpqCZb +E7hSAMA5JYI+sNnTgZazoqpwlSuSjvfVT4M48OGc+D3QS6q6AQk5O4m1WNUVO6C EXAiLJZBZlT3nMekHTz0TkKyC1Tho5OVzi5R+BqNWSroB1hT3G2V3BFim8fnV4Qk jBPtaW+DXJSH72kCbHWDL/jOPXl9vI0fiEjgKFP5lJiQP7ZuOSKruh5wbW8Uw0LE 7LVi7zDE9pF/ORgjmTBrsV5etILWPGZB0amiz9XXvgtXzFDShVhMCitjychSp8AU XUSjJKVS2Xs1L4qIcE4ejx6i8WECAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSthpQp mAXUa2/OUqGV7cpbPP2eFDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZWFkYmEzNDYtYzI5Zi00Nzk3LTlmYWItZmM1M2JmNDg5ODYyLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GvA IDANBgkqhkiG9w0BAQsFAAOCAQEAcNZVFDPr15yx/I4gdXDBs0s2PEO6WVowD2nr t2SFsGoDVzbRPaULshh1JZMNy4I6AqkDyOl364cgLyzFm/EiA1EeeR/6Pezz32eR 0JnYNI0zh2hc1t8I8M29DroqYupiV9pwVnB0howTvTZD6EY4AYsx4RoGa79tggvB 7m7PtM3nCqlpXcX/VlTBnF8uRWLGrm3EjJQboNfP6Pp4yCcOW6NfpKFa8D8UwCcw hNdWkGE9ERdeftOD3n/tsjDXIbC7C/4tHrvQwYa6ly+EGCxMGAuXRW5ttt1pk8Rz a+OQr9JyL6oybJX4qNh0LXdwgMq43mkZ4mH/gID+pGZ+wXnVFQ== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:49 2026 by rpki-client