This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef54a52f-b872-4fd7-9b56-c61887e32ffe.roa File: ef54a52f-b872-4fd7-9b56-c61887e32ffe.roa (raw, json) Hash identifier: 68M0FlI0VQrGZ4BwZeW9hdHAeAmynlbsGNvDZU7J53w= Subject key identifier: 7C:3A:C1:CD:38:8C:62:8F:F8:86:7E:3D:F0:2D:EB:5B:76:B7:C2:45 Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Certificate serial: 026E3A03CF7B65D4F6D22ED28170CDA0951FE2F8 Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef54a52f-b872-4fd7-9b56-c61887e32ffe.roa Signing time: Tue 13 Jan 2026 19:58:26 +0000 ROA not before: Tue 13 Jan 2026 19:58:26 +0000 ROA not after: Mon 13 Apr 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2a05:d06b:50c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6e:3a:03:cf:7b:65:d4:f6:d2:2e:d2:81:70:cd:a0:95:1f:e2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc Validity Not Before: Jan 13 19:58:26 2026 GMT Not After : Apr 13 23:59:59 2026 GMT Subject: serialNumber=a275046acd490c54291b3e294ec9eaa637a14b6c47a6c2b266f4dd93816a7935, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1a:f1:fd:78:e0:29:45:2f:48:29:9d:08:05: 12:ac:db:44:76:b3:d6:3e:b8:31:53:ea:5e:3c:7c: df:f0:1e:ba:d6:37:46:17:b0:20:f7:21:a6:a3:62: 9d:1a:3f:22:48:e4:16:c5:f2:e3:07:a6:d5:24:db: 63:9f:5d:bb:73:2f:46:09:af:c5:31:d7:35:32:ae: df:71:f2:ff:ef:a9:af:1a:ac:c1:78:12:d5:9e:08: c7:42:e8:4c:e9:06:69:c0:ae:bf:bd:9c:82:cf:7b: 5a:4f:56:ea:0b:1b:a8:5e:6b:66:94:e7:1b:14:a8: 4a:88:59:79:d6:fe:47:ae:58:d0:bf:5f:85:53:ca: f4:c7:f3:63:de:3b:3b:db:1a:af:2e:21:23:a9:d8: d1:08:c4:f8:08:e6:9d:2e:59:d6:e6:bc:c4:12:a9: e6:42:30:c1:5a:03:cd:16:0d:e5:6b:0a:56:25:4a: 56:88:bf:30:be:34:49:5d:82:66:c6:b0:a3:e5:ab: 5e:67:42:6a:47:c3:b4:e5:87:df:1c:35:85:84:97: 46:68:45:34:b4:5f:ae:f7:0e:78:d7:47:20:b0:73: 9d:44:71:84:7e:02:75:6c:24:74:1d:2b:19:1c:49: b3:b6:ed:e6:01:1e:40:d4:24:8f:11:7a:fb:d7:cd: 01:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3A:C1:CD:38:8C:62:8F:F8:86:7E:3D:F0:2D:EB:5B:76:B7:C2:45 X509v3 Authority Key Identifier: keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ef54a52f-b872-4fd7-9b56-c61887e32ffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:d06b:50c0::/48 Signature Algorithm: sha256WithRSAEncryption 5b:ac:08:4e:8a:68:ae:6b:fb:94:60:d1:e0:e3:eb:c3:6e:a7: 2e:c5:3d:71:11:2a:96:94:72:aa:5e:cd:6f:05:e7:49:f6:c3: 40:12:5b:d0:c4:fb:f1:aa:54:be:7e:10:e5:91:b4:b6:7c:a3: 3c:15:57:67:94:ca:2d:26:f5:37:e0:d5:1a:6c:c7:c6:9c:81: 07:c8:3e:a8:b3:e6:68:17:7f:de:bb:d9:d3:34:36:f9:c5:47: fd:1c:0f:99:cb:a1:46:24:15:6e:12:51:a6:83:e4:78:01:ea: 6b:22:06:e9:6c:88:b5:ad:dc:4f:b8:9a:5a:16:ac:36:12:64: f4:2f:42:13:b9:e5:d9:b4:d3:3c:d3:1b:da:03:d1:39:d6:48: e9:ce:0e:f6:f2:1a:e5:73:42:1e:3e:59:8e:16:12:dd:1a:a5: 6f:08:45:aa:f8:1e:d1:21:3a:dd:97:dd:9e:94:6b:ea:7d:94: b1:5d:cd:dd:7d:85:c6:27:30:8b:67:1f:19:81:fc:24:cc:aa: 20:77:d9:f2:05:56:d2:52:e9:00:e7:31:ef:1f:23:24:88:30: ec:1c:a9:db:62:91:cc:58:05:a4:7a:94:de:3b:00:ee:91:1b: ad:62:63:b6:e9:10:e1:eb:1f:cc:63:c9:fa:bd:ea:ae:e8:51: 30:7c:b5:bf -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUAm46A897ZdT20i7SgXDNoJUf4vgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4 NDk5NzBiYzAeFw0yNjAxMTMxOTU4MjZaFw0yNjA0MTMyMzU5NTlaMHoxSTBHBgNV BAUTQGEyNzUwNDZhY2Q0OTBjNTQyOTFiM2UyOTRlYzllYWE2MzdhMTRiNmM0N2E2 YzJiMjY2ZjRkZDkzODE2YTc5MzUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANMa8f144ClFL0gpnQgFEqzbRHaz1j64MVPqXjx83/AeutY3RhewIPchpqNi nRo/IkjkFsXy4wem1STbY59du3MvRgmvxTHXNTKu33Hy/++prxqswXgS1Z4Ix0Lo TOkGacCuv72cgs97Wk9W6gsbqF5rZpTnGxSoSohZedb+R65Y0L9fhVPK9MfzY947 O9sary4hI6nY0QjE+AjmnS5Z1ua8xBKp5kIwwVoDzRYN5WsKViVKVoi/ML40SV2C Zsawo+WrXmdCakfDtOWH3xw1hYSXRmhFNLRfrvcOeNdHILBznURxhH4CdWwkdB0r GRxJs7bt5gEeQNQkjxF6+9fNAR0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBR8OsHN OIxij/iGfj3wLetbdrfCRTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1 bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv ZWY1NGE1MmYtYjg3Mi00ZmQ3LTliNTYtYzYxODg3ZTMyZmZlLnJvYTCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5 Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0GtQ wDANBgkqhkiG9w0BAQsFAAOCAQEAW6wITopormv7lGDR4OPrw26nLsU9cREqlpRy ql7NbwXnSfbDQBJb0MT78apUvn4Q5ZG0tnyjPBVXZ5TKLSb1N+DVGmzHxpyBB8g+ qLPmaBd/3rvZ0zQ2+cVH/RwPmcuhRiQVbhJRpoPkeAHqayIG6WyIta3cT7iaWhas NhJk9C9CE7nl2bTTPNMb2gPROdZI6c4O9vIa5XNCHj5ZjhYS3RqlbwhFqvge0SE6 3ZfdnpRr6n2UsV3N3X2Fxicwi2cfGYH8JMyqIHfZ8gVW0lLpAOcx7x8jJIgw7Byp 22KRzFgFpHqU3jsA7pEbrWJjtukQ4esfzGPJ+r3qruhRMHy1vw== -----END CERTIFICATE-----Generated at Sat Jan 17 06:44:28 2026 by rpki-client