This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62653a3a2f34382d3438203d3e20323033353334.roa
File: 326130623a346530373a62653a3a2f34382d3438203d3e20323033353334.roa (raw, json)
Hash identifier: So3Pk6jTs/qE2GESw5V+SnmDzUd+UmWas7cvSTpOJ5Q=
Subject key identifier: F2:AC:0C:16:73:44:8C:46:75:7F:08:65:FC:E3:FF:04:5A:61:78:8A
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 13000DE99601C2E69B8E01C469F0A51AD53B1059
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62653a3a2f34382d3438203d3e20323033353334.roa
Signing time: Thu 22 Jan 2026 11:27:22 +0000
ROA not before: Thu 22 Jan 2026 11:22:22 +0000
ROA not after: Thu 21 Jan 2027 11:27:22 +0000
asID: 203534
IP address blocks: 2a0b:4e07:be::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:00:0d:e9:96:01:c2:e6:9b:8e:01:c4:69:f0:a5:1a:d5:3b:10:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Jan 22 11:22:22 2026 GMT
Not After : Jan 21 11:27:22 2027 GMT
Subject: CN=F2AC0C1673448C46757F0865FCE3FF045A61788A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:9b:e2:02:01:9d:28:d2:29:c3:17:29:fa:
f6:54:8b:98:fb:7a:a2:e8:a1:3b:65:fc:1d:ee:6e:
1f:ad:10:1c:34:2a:1c:75:62:e1:36:a2:70:46:56:
a9:34:0e:40:51:7c:ac:c0:86:3f:b7:d3:fc:48:4a:
b7:8c:c0:0b:8a:88:5d:20:16:a4:f7:12:6f:83:22:
66:c6:21:48:9f:9f:13:a1:43:21:5b:f6:9f:b8:d0:
7d:bb:bb:ad:cd:9d:a4:97:d0:e6:f6:2b:7f:8c:99:
19:b0:df:c2:b5:cd:40:7b:a6:50:ff:6b:73:9b:93:
2b:23:c8:9c:f2:f8:79:22:21:f0:04:bc:ee:0f:b9:
6c:f4:24:2f:aa:4b:6f:0b:f2:08:8a:69:45:20:4a:
b5:6a:d1:53:b0:52:99:2f:42:2f:66:44:92:37:d1:
57:45:8c:10:e9:3f:6b:6d:a3:87:d8:bc:3f:a0:c6:
70:40:d4:61:06:c7:71:86:00:72:e5:a4:06:e2:1e:
50:f6:15:57:e0:9c:5d:e0:de:c3:96:6e:57:34:b2:
c1:fb:e8:08:4d:e3:d5:36:0b:47:4f:89:3d:13:5d:
7c:aa:65:b2:66:9e:15:d5:b4:34:a5:a2:98:04:2d:
15:a7:43:a2:2b:8a:35:41:54:6e:17:95:14:a6:c2:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AC:0C:16:73:44:8C:46:75:7F:08:65:FC:E3:FF:04:5A:61:78:8A
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62653a3a2f34382d3438203d3e20323033353334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:be::/48
Signature Algorithm: sha256WithRSAEncryption
49:9f:d5:3e:e6:a2:b4:ee:c4:bf:15:c4:5a:8a:88:5d:42:e0:
85:8d:ba:20:39:bc:54:1d:35:fe:16:fc:b8:8f:61:60:f8:2f:
c9:12:6f:d4:93:05:98:e8:15:78:9d:c3:29:f6:43:17:40:e2:
42:54:b2:9c:53:2e:0e:4d:08:15:73:83:ce:03:8e:74:bc:68:
f6:3d:0a:a5:2d:17:ea:24:fe:fd:94:89:45:cf:5a:f8:b2:8c:
85:d0:8e:16:cc:2f:75:81:24:0c:6e:a2:f0:f8:11:7b:c1:d0:
2c:57:4a:dc:27:0f:0e:10:6b:01:70:6c:37:2d:03:ab:22:27:
cb:13:26:19:91:a8:67:23:28:5b:9c:c2:c7:ec:fd:c1:5a:73:
a2:43:0d:36:fd:fb:28:c8:b8:82:ed:3a:94:83:9f:cb:db:e2:
be:24:ac:9c:35:6d:33:51:47:d7:48:86:0c:c7:29:43:35:14:
a0:02:83:f5:36:19:57:23:74:38:7b:c5:75:16:28:b6:d0:27:
c0:ed:b9:3b:ff:86:cd:af:1e:5e:78:15:c4:b5:35:1b:2a:d6:
07:17:84:a4:cd:50:29:a0:4a:29:81:3d:79:12:e2:84:4a:2a:
a6:e9:92:ba:4a:ad:3b:76:72:fc:45:c1:86:7a:6f:cd:f7:66:
bc:00:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:10:07 2026 by rpki-client