This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a353a3a2f36342d3634203d3e20333939313630.roa
File: 326130303a646438303a33653a353a3a2f36342d3634203d3e20333939313630.roa (raw, json)
Hash identifier: jkJ+B21z/dhX9lwgoCSOLU+L6g/heyqKwBqOFDQypmk=
Subject key identifier: 7C:2B:F6:32:E4:04:1B:7C:0A:12:17:2D:31:02:92:10:C9:21:E2:F3
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 4035E96F7BBB8433DFC61EC63F12C8CC4D8B8452
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a353a3a2f36342d3634203d3e20333939313630.roa
Signing time: Sat 08 Nov 2025 12:14:32 +0000
ROA not before: Sat 08 Nov 2025 12:09:32 +0000
ROA not after: Sat 07 Nov 2026 12:14:32 +0000
asID: 399160
IP address blocks: 2a00:dd80:3e:5::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 11:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:35:e9:6f:7b:bb:84:33:df:c6:1e:c6:3f:12:c8:cc:4d:8b:84:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Nov 8 12:09:32 2025 GMT
Not After : Nov 7 12:14:32 2026 GMT
Subject: CN=7C2BF632E4041B7C0A12172D31029210C921E2F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:a6:3d:e0:1a:65:b1:6b:e3:36:87:44:04:
1b:06:cc:99:e3:7e:d2:12:61:7d:8e:23:84:1d:69:
ed:86:0f:ed:be:c7:55:6d:a9:5c:88:8c:0e:b4:7f:
fb:a9:70:dc:af:60:c4:4d:2c:ae:56:c3:50:a1:8e:
50:c5:24:30:dc:bd:9e:f2:73:b2:dd:67:f8:50:32:
b2:35:90:7e:eb:ea:ad:cd:e7:07:c1:be:e0:5d:74:
c6:39:a3:02:3a:b0:f0:83:21:d8:e7:2c:89:53:8f:
b9:58:ab:1a:40:35:2c:e7:a7:c4:16:de:09:5e:f4:
9d:49:64:d7:1f:b8:49:dd:c0:aa:ef:09:79:ec:a9:
05:1a:3e:d6:42:ca:d0:0d:ac:2e:6a:6b:33:a4:a2:
ad:d9:94:a4:35:fc:bd:99:2c:17:80:ba:34:2a:b1:
34:a3:1f:78:c1:56:c5:85:4c:45:0b:02:31:d2:cd:
22:40:0b:26:f4:79:1b:fe:31:67:95:22:9b:2d:46:
dc:a2:05:7c:da:c5:8b:e1:29:a3:b9:33:04:5c:1a:
91:f3:8e:57:6f:87:5c:e2:a9:d0:27:09:4b:e1:47:
5e:fd:c8:52:84:ac:3d:f2:7a:56:61:49:d6:97:79:
68:6a:71:fb:2e:02:2f:63:26:ec:52:34:3f:29:7c:
e7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2B:F6:32:E4:04:1B:7C:0A:12:17:2D:31:02:92:10:C9:21:E2:F3
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a353a3a2f36342d3634203d3e20333939313630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3e:5::/64
Signature Algorithm: sha256WithRSAEncryption
82:0d:0a:71:ac:1e:54:f7:cc:5b:18:6a:ab:e0:1e:76:6d:b0:
3b:06:3a:2a:45:ce:d2:53:01:e0:05:ca:78:8c:b3:f8:6d:ed:
e1:ad:74:3a:13:94:ea:71:c5:99:79:9f:93:d1:33:22:3c:7c:
04:f1:50:25:2d:a1:54:cf:57:47:10:2f:53:39:a0:14:77:9f:
a2:d3:ec:dc:88:b8:fc:9d:79:26:3f:a5:1b:90:85:4a:32:3a:
7b:43:73:54:01:34:13:28:24:22:94:cb:c7:79:0f:f3:6f:d1:
79:7a:2d:c5:7f:ee:3e:9c:68:25:bf:31:7e:6b:b4:4d:ca:28:
58:43:48:20:f1:43:e9:64:49:9e:61:65:6a:7b:bb:50:97:ce:
c6:fe:d5:ca:ab:0e:1d:ec:0b:cf:3a:24:38:00:91:54:3b:e5:
d6:62:61:d2:c6:08:f7:5e:00:7f:eb:06:29:68:f7:37:df:79:
13:c6:34:30:da:3f:32:86:58:cf:d0:2c:84:35:d4:27:e1:7d:
d3:65:83:f1:6e:ea:79:f6:23:89:a1:1c:48:12:d6:30:82:09:
92:1e:72:fd:cc:b1:03:f5:2b:f8:82:f7:32:4f:0d:22:8a:d4:
21:2e:6a:61:6d:da:8d:fc:a8:80:d8:1f:ad:97:6a:ed:c7:bb:
cf:e1:a9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:13:59 2025 by rpki-client