This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633065303a3a2f34342d3438203d3e20323136333330.roa
File: 326130363a313238333a633065303a3a2f34342d3438203d3e20323136333330.roa (raw, json)
Hash identifier: zrfihWgd+Tkxa5TLypPRgw8ggBGjOQU3k3JKCDIx32A=
Subject key identifier: 9A:7A:C3:D6:03:A7:A2:63:7B:18:DD:28:21:00:3C:BE:72:AE:52:03
Certificate issuer: /CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Certificate serial: 6082D293EEDAD0D0A7AD0E211D69E2F8ECB8FE1B
Authority key identifier: 48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633065303a3a2f34342d3438203d3e20323136333330.roa
Signing time: Fri 05 Dec 2025 21:11:39 +0000
ROA not before: Fri 05 Dec 2025 21:06:39 +0000
ROA not after: Fri 04 Dec 2026 21:11:39 +0000
asID: 216330
IP address blocks: 2a06:1283:c0e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:82:d2:93:ee:da:d0:d0:a7:ad:0e:21:1d:69:e2:f8:ec:b8:fe:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4807C118BD348934B5CC59B3E8A7A8C14F29C3FB
Validity
Not Before: Dec 5 21:06:39 2025 GMT
Not After : Dec 4 21:11:39 2026 GMT
Subject: CN=9A7AC3D603A7A2637B18DD2821003CBE72AE5203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:06:e0:d0:82:20:07:6e:de:b7:2a:f5:b7:
d6:94:35:8f:3c:d4:21:ac:47:84:43:a4:5e:4b:89:
0c:65:be:d1:9b:f2:0c:45:a8:f9:d3:fd:39:9f:6d:
81:d9:ea:d7:3f:f8:88:7d:fa:f9:ec:58:5a:50:dc:
c1:ba:e2:53:a8:56:92:2b:0c:aa:9a:b9:c4:40:49:
d6:79:3a:c7:f5:98:89:6c:1b:57:25:dd:63:6a:ea:
d9:80:44:a1:93:87:2d:c4:c9:a3:c4:35:19:4c:22:
76:72:95:c1:86:ac:66:98:04:28:7b:f1:82:43:66:
9a:4b:ce:3e:b3:fb:cf:ca:5c:55:81:e9:03:14:e1:
7b:ca:6f:b9:21:a8:6a:6e:9b:72:11:e7:2e:9c:bc:
b9:04:9b:48:20:3a:e6:b0:bb:09:d0:ee:1f:f8:85:
b5:64:e8:ce:ef:be:ee:e7:c3:5f:05:98:a7:95:5e:
9e:e8:96:36:f9:38:51:51:74:9d:29:c4:bb:e3:84:
5c:35:24:a7:3e:df:cb:02:43:73:b7:29:a8:14:33:
ea:04:91:cc:a0:c0:b2:58:94:86:dc:41:7b:c4:36:
f4:59:e6:ab:38:77:a6:1f:dc:68:05:e6:8a:a5:b4:
f9:f4:a4:e6:c8:75:35:cc:d9:cc:07:11:21:3d:dd:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7A:C3:D6:03:A7:A2:63:7B:18:DD:28:21:00:3C:BE:72:AE:52:03
X509v3 Authority Key Identifier:
keyid:48:07:C1:18:BD:34:89:34:B5:CC:59:B3:E8:A7:A8:C1:4F:29:C3:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/326130363a313238333a633065303a3a2f34342d3438203d3e20323136333330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1283:c0e0::/44
Signature Algorithm: sha256WithRSAEncryption
71:04:a4:24:ea:a5:57:a1:eb:aa:36:43:2a:41:fd:e5:fa:09:
80:d8:b8:9e:28:36:43:64:1a:00:7b:6c:a7:a4:fd:21:e1:f5:
24:b4:74:8e:c5:f2:e9:d7:c5:89:54:06:c1:3a:d1:57:18:33:
23:68:b1:d9:e0:4d:0b:c9:71:47:d7:9f:9f:bb:59:e2:71:05:
15:e9:d6:ef:21:e5:e6:e5:b7:b6:2b:b9:48:f8:a4:3b:4a:2a:
17:f6:1d:91:90:cf:76:85:f3:f5:e9:75:55:29:af:85:05:62:
32:e8:05:29:69:82:98:6e:c9:19:b2:b7:81:df:00:cd:c8:b6:
8d:03:5c:ec:c7:a8:ad:d6:9d:84:26:d4:87:04:04:2b:03:bf:
eb:18:c9:24:8f:8f:1e:88:c5:bd:c5:a0:e9:1e:84:c6:34:08:
f0:bc:43:e7:17:57:4b:6f:14:79:59:9d:26:3c:00:c5:a3:61:
6b:28:6f:d5:40:11:21:d2:c5:67:4d:25:72:07:fe:9b:7b:32:
33:7c:f4:e2:48:02:a8:22:9a:ae:88:55:b8:33:44:d4:24:6c:
7a:20:dd:b6:8f:14:5f:52:cc:24:ad:79:65:19:19:37:01:62:
d1:68:82:c7:3d:1e:bd:8b:47:f6:aa:7a:e7:1a:bf:df:3a:bb:
d1:7e:22:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:51:15 2025 by rpki-client