This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33383a3a2f34382d3438203d3e20323135373135.roa File: 326130623a346530373a33383a3a2f34382d3438203d3e20323135373135.roa (raw, json) Hash identifier: zz8b9iuYkUTJv0hCav/jcI3HyOZs7BGrhUgXyLgHWm4= Subject key identifier: BE:83:29:0B:B8:3E:C0:EE:AF:F8:DB:A4:DA:7E:6F:FA:9A:92:EC:FF Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 75805F14BFC4375F2EE0F2CF0BFF05DA52947A59 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33383a3a2f34382d3438203d3e20323135373135.roa Signing time: Thu 04 Dec 2025 11:21:47 +0000 ROA not before: Thu 04 Dec 2025 11:16:47 +0000 ROA not after: Thu 03 Dec 2026 11:21:47 +0000 asID: 215715 IP address blocks: 2a0b:4e07:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:80:5f:14:bf:c4:37:5f:2e:e0:f2:cf:0b:ff:05:da:52:94:7a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Dec 4 11:16:47 2025 GMT Not After : Dec 3 11:21:47 2026 GMT Subject: CN=BE83290BB83EC0EEAFF8DBA4DA7E6FFA9A92ECFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:07:b3:32:96:0b:99:f5:f2:b0:e4:f5:04:26: 4e:30:66:c8:9c:ca:34:ad:50:57:f2:23:1d:0a:45: 01:3b:b3:40:6a:cf:2c:c3:32:57:04:c4:be:89:48: 3f:c9:27:0b:ff:b4:b8:00:d9:f4:92:71:75:64:31: 35:53:dc:14:53:c9:d5:a1:5e:e3:a3:2b:c9:a1:4b: 44:d4:75:b3:7c:6c:af:ce:18:90:6e:bd:23:c6:56: 29:c1:a2:7c:f6:35:97:52:e4:85:06:02:eb:2b:83: 99:42:88:d0:73:9c:99:4f:d5:5c:03:0d:cb:e1:d0: 0b:30:f0:c5:ad:f1:df:7e:58:b7:fd:b3:6b:fb:fe: d6:31:e6:78:1f:eb:3d:f5:11:1b:17:e1:bc:ae:86: 48:19:42:cb:1d:57:3f:44:8e:9c:7d:39:3f:b1:e4: a5:04:77:a4:8d:a1:84:f0:34:db:0f:57:27:93:45: 87:5d:5b:91:c5:09:84:82:2a:5e:fe:49:5b:0b:b5: 34:9f:21:68:88:a8:61:4e:f0:a1:5b:12:d0:c2:0d: dd:7c:ae:13:74:ec:11:be:99:f9:ff:a2:9e:63:8c: 0d:8d:b3:af:b1:55:3a:23:5f:12:72:37:14:e8:32: 08:7b:c4:a3:fb:f0:12:1b:24:0f:03:5e:13:db:93: 10:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:83:29:0B:B8:3E:C0:EE:AF:F8:DB:A4:DA:7E:6F:FA:9A:92:EC:FF X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33383a3a2f34382d3438203d3e20323135373135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:38::/48 Signature Algorithm: sha256WithRSAEncryption 79:4d:e1:37:c4:26:bd:d0:19:4f:a8:f3:77:43:1b:0a:c4:90: 84:0d:c4:08:d8:29:4c:f5:c0:49:52:5f:ec:ed:a6:89:d5:be: 4b:0c:3c:6a:f5:09:35:ce:3e:df:3d:ba:9b:a5:ac:4d:ae:c5: 40:d9:26:47:13:55:d8:a0:47:6f:50:0f:3c:01:e2:e0:4e:ee: db:bb:48:4c:53:fe:c2:c8:9b:77:62:d6:e6:03:ff:1e:30:7b: 56:9e:31:20:cb:7b:02:26:eb:55:fd:2f:8b:33:96:c2:44:e0: 40:28:62:1e:7c:92:f9:99:66:1a:e0:59:88:db:1b:0b:34:1c: f3:02:af:52:ad:f5:6c:28:18:86:32:db:55:45:f2:d3:af:30: 10:42:06:40:18:a3:0a:66:74:42:57:8e:c0:f3:7d:4c:45:03: a3:c3:3a:86:af:8d:60:3b:77:78:c5:ca:17:2d:32:23:9c:cb: 50:fe:87:22:a4:33:72:46:50:10:de:69:67:7f:55:46:29:db: aa:d0:c9:87:82:53:b5:70:0d:57:d4:86:b7:76:0e:36:47:ea: 98:a3:e8:02:54:03:1b:64:5b:76:09:f0:b3:bc:77:9b:1b:3a: fd:34:45:de:22:d8:9c:7f:91:99:0d:9d:60:6c:a9:b5:a6:29: 6c:2a:ad:1b -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUdYBfFL/EN18u4PLPC/8F2lKUelkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTEyMDQxMTE2NDdaFw0yNjEyMDMxMTIxNDdaMDMxMTAvBgNV BAMTKEJFODMyOTBCQjgzRUMwRUVBRkY4REJBNERBN0U2RkZBOUE5MkVDRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcB7MylguZ9fKw5PUEJk4wZsic yjStUFfyIx0KRQE7s0BqzyzDMlcExL6JSD/JJwv/tLgA2fSScXVkMTVT3BRTydWh XuOjK8mhS0TUdbN8bK/OGJBuvSPGVinBonz2NZdS5IUGAusrg5lCiNBznJlP1VwD Dcvh0Asw8MWt8d9+WLf9s2v7/tYx5ngf6z31ERsX4byuhkgZQssdVz9Ejpx9OT+x 5KUEd6SNoYTwNNsPVyeTRYddW5HFCYSCKl7+SVsLtTSfIWiIqGFO8KFbEtDCDd18 rhN07BG+mfn/op5jjA2Ns6+xVTojXxJyNxToMgh7xKP78BIbJA8DXhPbkxDxAgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUvoMpC7g+wO6v+Nuk2n5v+pqS7P8wHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTMzMzgzYTNhMmYzNDM4 MmQzNDM4MjAzZDNlMjAzMjMxMzUzNzMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HADgwDQYJ KoZIhvcNAQELBQADggEBAHlN4TfEJr3QGU+o83dDGwrEkIQNxAjYKUz1wElSX+zt ponVvksMPGr1CTXOPt89upulrE2uxUDZJkcTVdigR29QDzwB4uBO7tu7SExT/sLI m3di1uYD/x4we1aeMSDLewIm61X9L4szlsJE4EAoYh58kvmZZhrgWYjbGws0HPMC r1Kt9WwoGIYy21VF8tOvMBBCBkAYowpmdEJXjsDzfUxFA6PDOoavjWA7d3jFyhct MiOcy1D+hyKkM3JGUBDeaWd/VUYp26rQyYeCU7VwDVfUhrd2DjZH6pij6AJUAxtk W3YJ8LO8d5sbOv00Rd4i2Jx/kZkNnWBsqbWmKWwqrRs= -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:10 2025 by rpki-client