This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a35393a3a2f36342d3634203d3e20333939313638.roa
File: 326130303a646438303a33663a35393a3a2f36342d3634203d3e20333939313638.roa (raw, json)
Hash identifier: NfiVnrES1LwrW8QHjv1TzeihklBKNkP/XqDb+Jm3BsU=
Subject key identifier: F4:FC:6F:7C:29:AE:D4:81:B7:19:8C:1A:EA:95:41:88:85:2B:BD:74
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 55CEDE887CEFB8525834C84BD83CB0AA9DFCE354
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a35393a3a2f36342d3634203d3e20333939313638.roa
Signing time: Sat 08 Nov 2025 13:14:34 +0000
ROA not before: Sat 08 Nov 2025 13:09:34 +0000
ROA not after: Sat 07 Nov 2026 13:14:34 +0000
asID: 399168
IP address blocks: 2a00:dd80:3f:59::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ce:de:88:7c:ef:b8:52:58:34:c8:4b:d8:3c:b0:aa:9d:fc:e3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Nov 8 13:09:34 2025 GMT
Not After : Nov 7 13:14:34 2026 GMT
Subject: CN=F4FC6F7C29AED481B7198C1AEA954188852BBD74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bf:13:5b:12:e8:e2:07:00:c7:af:c1:fd:d3:
37:32:e2:12:94:39:fb:57:1f:32:63:23:d6:27:0d:
c1:0e:e8:2f:a4:29:d3:4b:ee:a8:9c:0c:5b:68:da:
b8:9c:f5:c8:90:13:1c:d4:eb:62:49:1f:b8:fd:48:
fe:57:c9:9f:a4:56:9e:4c:ce:95:2a:ee:43:db:c0:
84:99:d1:84:7d:61:e1:6f:36:8b:66:aa:0a:8c:f5:
75:19:b8:cb:f1:a6:e2:cb:39:49:d6:ef:72:d4:34:
9e:9b:c9:35:40:c8:70:54:37:cc:7b:a0:89:29:4d:
85:79:82:4a:6f:65:27:c1:b3:20:d9:70:8f:00:6c:
2c:b6:64:f2:4a:78:2d:df:16:87:ae:8e:6a:69:f1:
17:c7:75:96:f0:e8:c0:f1:fa:1e:f3:a1:5f:df:4b:
05:d5:b0:fe:44:9e:9a:d8:ae:c5:09:8f:3d:31:50:
c6:68:aa:24:9e:4d:4a:a2:cd:37:4b:ea:07:91:b5:
ec:8a:3c:e2:99:7f:a8:01:0c:9f:85:5f:c1:0f:f5:
fe:44:8d:1e:10:3d:2f:e9:2b:13:98:01:c4:bf:40:
cf:d8:d1:3a:7e:d9:81:d9:00:ea:49:9b:83:e6:52:
1d:78:c2:e7:80:4d:8a:7a:5d:eb:9b:41:0a:a9:19:
15:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FC:6F:7C:29:AE:D4:81:B7:19:8C:1A:EA:95:41:88:85:2B:BD:74
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a35393a3a2f36342d3634203d3e20333939313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3f:59::/64
Signature Algorithm: sha256WithRSAEncryption
56:f7:5d:0e:77:98:8f:b9:6b:8e:e2:2d:d3:87:8b:c9:3e:0c:
76:d6:5a:10:14:4b:a5:8c:69:c7:96:eb:c6:dd:09:0c:a4:85:
4d:38:e1:31:cc:55:fd:4c:aa:48:69:32:62:93:bc:7f:1d:9d:
14:0c:15:13:b6:e3:2b:95:ef:88:da:17:42:3c:0d:00:5d:34:
35:35:ad:b7:f3:59:33:96:95:81:5e:80:c5:70:11:63:d5:35:
2d:08:f5:63:f8:9e:7d:0e:7a:3e:f9:7b:86:cc:ed:34:57:76:
15:03:0e:bc:1e:a6:c3:dc:b5:cc:e1:5e:86:24:e0:76:84:29:
96:7e:1e:45:c8:e8:96:75:72:e8:41:cb:52:b2:b1:fc:82:66:
48:20:d3:65:f9:97:28:d7:c7:ce:08:94:29:2f:b1:db:16:19:
2f:ed:73:bf:66:08:9a:31:7b:85:4e:28:2e:2a:57:1b:b6:33:
14:a5:a6:b6:9b:27:ca:da:a6:f0:d1:cf:2e:eb:d2:49:ad:8c:
86:e7:0a:a2:ed:9d:bc:e0:b6:51:21:df:6f:d0:8a:63:5d:c8:
82:6d:5f:55:f4:36:da:a9:f0:a6:6d:d2:38:c6:74:b9:d1:96:
69:81:fb:0e:0c:96:7b:29:26:0b:ad:15:53:3b:3a:31:a0:44:
b6:87:b6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:55:43 2025 by rpki-client