This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36303a3a2f36342d3634203d3e20333939313638.roa
File: 326130303a646438303a33663a36303a3a2f36342d3634203d3e20333939313638.roa (raw, json)
Hash identifier: bYzmDqzcxDEdZqhFkakP7vMr1RWmnYwUn+A7jWLwpNo=
Subject key identifier: 8F:21:E3:5F:AC:0F:27:9B:91:88:F0:A4:1E:01:A2:8E:EF:B9:8B:03
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 0233B8463865AB41BB2BBD30A552447348FC999C
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36303a3a2f36342d3634203d3e20333939313638.roa
Signing time: Sat 08 Nov 2025 13:14:34 +0000
ROA not before: Sat 08 Nov 2025 13:09:34 +0000
ROA not after: Sat 07 Nov 2026 13:14:34 +0000
asID: 399168
IP address blocks: 2a00:dd80:3f:60::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:33:b8:46:38:65:ab:41:bb:2b:bd:30:a5:52:44:73:48:fc:99:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Nov 8 13:09:34 2025 GMT
Not After : Nov 7 13:14:34 2026 GMT
Subject: CN=8F21E35FAC0F279B9188F0A41E01A28EEFB98B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:de:1c:10:47:c9:09:d9:a3:66:93:88:4e:
ac:ce:8c:99:4c:32:eb:37:a7:51:2d:87:a9:93:ee:
2c:65:2c:71:60:da:39:1f:a1:6d:23:3e:a2:5d:05:
04:7b:9a:25:4b:89:70:65:0b:3d:9b:16:11:aa:19:
c8:ea:6f:ba:e3:8a:af:69:4f:64:7e:80:ac:7f:b4:
52:57:e0:fd:41:29:1e:aa:1b:d4:6f:85:f5:45:53:
ce:50:c5:bc:f9:1a:22:38:a8:97:6e:2d:c0:8a:3e:
aa:47:a6:7e:07:6a:7c:ee:2b:4c:c5:7a:2d:6c:17:
73:4b:d8:3e:d7:92:38:a3:90:e2:a0:33:1f:bd:88:
b3:41:87:1d:e1:af:f7:3a:93:ff:3c:79:66:ff:e6:
cb:fd:47:01:d0:5e:d5:19:52:eb:2c:a9:ea:27:94:
ff:d1:fa:7a:ef:3a:3a:ec:1b:06:18:3a:3e:28:53:
6f:4a:40:d3:6f:71:a8:b8:e5:da:05:d9:db:b9:48:
3a:59:25:94:37:48:ff:da:c0:76:0f:ce:7e:f3:e8:
5a:5b:b7:e5:92:c6:f7:4a:c9:d0:44:13:30:89:5b:
35:c2:35:b5:ad:fb:a9:9d:2f:c6:6f:8a:b8:03:33:
37:a2:fd:bc:62:cd:c6:20:5e:32:df:47:8a:ec:57:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:21:E3:5F:AC:0F:27:9B:91:88:F0:A4:1E:01:A2:8E:EF:B9:8B:03
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a36303a3a2f36342d3634203d3e20333939313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3f:60::/64
Signature Algorithm: sha256WithRSAEncryption
97:24:dc:b6:89:bb:53:ed:f0:74:3d:b5:72:49:88:7d:d8:05:
f8:2f:8d:84:2e:d8:3e:f0:ab:0c:f3:1b:a5:16:90:02:ee:13:
fd:83:ae:42:e9:0d:a0:8d:1f:82:7d:75:a9:6c:07:9b:ca:79:
8a:18:91:0e:99:81:fb:ac:0c:89:7c:ee:62:12:25:d3:09:4e:
3c:e6:5d:b7:23:1b:e1:d9:32:e9:70:d3:ad:d4:f5:2a:54:21:
b5:91:09:84:2b:70:df:cb:9c:7c:75:05:dc:9a:67:95:65:b0:
79:3d:20:8d:bf:ae:62:a7:53:08:7e:32:7a:28:84:be:07:2d:
0e:24:7d:53:f5:11:44:11:27:66:f7:17:f8:0b:5e:10:05:f5:
5a:64:a5:17:e2:8e:08:d7:5f:28:d4:3f:f8:df:48:df:26:7d:
fc:62:63:18:cd:5d:14:ad:d3:8d:87:54:a1:57:af:02:62:ae:
c5:d3:4a:12:88:88:c3:b2:22:05:af:c0:15:d1:b4:fc:5f:7c:
77:bf:47:e2:7e:6a:71:c4:10:64:89:38:72:38:4a:a3:b1:49:
10:ce:23:6a:e9:29:c0:a7:69:9f:a3:44:d6:0d:6d:89:6d:76:
1e:c7:e4:61:e1:c1:e4:19:44:b6:be:f0:10:26:e1:2e:f6:ca:
69:3a:f4:c3
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUAjO4Rjhlq0G7K70wpVJEc0j8mZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIyYzdlNjI1MDNiMDYzNGViNGFiNTNmODhjMDY5NTBh
Yzc2ZGNkMTAeFw0yNTExMDgxMzA5MzRaFw0yNjExMDcxMzE0MzRaMDMxMTAvBgNV
BAMTKDhGMjFFMzVGQUMwRjI3OUI5MTg4RjBBNDFFMDFBMjhFRUZCOThCMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Ed4cEEfJCdmjZpOITqzOjJlM
Mus3p1Eth6mT7ixlLHFg2jkfoW0jPqJdBQR7miVLiXBlCz2bFhGqGcjqb7rjiq9p
T2R+gKx/tFJX4P1BKR6qG9RvhfVFU85Qxbz5GiI4qJduLcCKPqpHpn4HanzuK0zF
ei1sF3NL2D7XkjijkOKgMx+9iLNBhx3hr/c6k/88eWb/5sv9RwHQXtUZUussqeon
lP/R+nrvOjrsGwYYOj4oU29KQNNvcai45doF2du5SDpZJZQ3SP/awHYPzn7z6Fpb
t+WSxvdKydBEEzCJWzXCNbWt+6mdL8ZvirgDMzei/bxizcYgXjLfR4rsV80pAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUjyHjX6wPJ5uRiPCkHgGiju+5iwMwHwYDVR0j
BBgwFoAU6yx+YlA7BjTrSrU/iMBpUKx23NEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMS9FQjJDN0U2MjUw
M0IwNjM0RUI0QUI1M0Y4OEMwNjk1MEFDNzZEQ0QxLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNnl4LVlsQTdCalRyU3JVX2lNQnBVS3gyM05FLmNlcjCBrgYIKwYB
BQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzEvMzI2MTMwMzAzYTY0NjQzODMwM2EzMzY2M2EzNjMwM2EzYTJmMzYzNDJkMzYz
NDIwM2QzZTIwMzMzOTM5MzEzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAKgDdgAA/AGAwDQYJKoZI
hvcNAQELBQADggEBAJck3LaJu1Pt8HQ9tXJJiH3YBfgvjYQu2D7wqwzzG6UWkALu
E/2DrkLpDaCNH4J9dalsB5vKeYoYkQ6ZgfusDIl87mISJdMJTjzmXbcjG+HZMulw
063U9SpUIbWRCYQrcN/LnHx1BdyaZ5VlsHk9II2/rmKnUwh+MnoohL4HLQ4kfVP1
EUQRJ2b3F/gLXhAF9VpkpRfijgjXXyjUP/jfSN8mffxiYxjNXRSt042HVKFXrwJi
rsXTShKIiMOyIgWvwBXRtPxffHe/R+J+anHEEGSJOHI4SqOxSRDOI2rpKcCnaZ+j
RNYNbYltdh7H5GHhweQZRLa+8BAm4S72ymk69MM=
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:55:34 2025 by rpki-client