This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/3135352e3130332e3235302e302f32342d3234203d3e20323135323438.roa
File: 3135352e3130332e3235302e302f32342d3234203d3e20323135323438.roa (raw, json)
Hash identifier: /fpMGWXALGLYJxxNAOT7bpZTstibldkVZBBA9gVNjNw=
Subject key identifier: 91:02:8C:3A:67:A5:8C:EB:1C:D0:5F:96:DA:DC:A2:56:C6:E1:3C:48
Certificate issuer: /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Certificate serial: 448EFFACFCDFC6131F592380F2227D9CB2AAB0E2
Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/3135352e3130332e3235302e302f32342d3234203d3e20323135323438.roa
Signing time: Tue 13 Jan 2026 21:07:56 +0000
ROA not before: Tue 13 Jan 2026 21:02:56 +0000
ROA not after: Tue 12 Jan 2027 21:07:56 +0000
asID: 215248
IP address blocks: 155.103.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/383bd50b-b192-44bd-9349-351225a13a33.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Jan 2026 04:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:8e:ff:ac:fc:df:c6:13:1f:59:23:80:f2:22:7d:9c:b2:aa:b0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Validity
Not Before: Jan 13 21:02:56 2026 GMT
Not After : Jan 12 21:07:56 2027 GMT
Subject: CN=91028C3A67A58CEB1CD05F96DADCA256C6E13C48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:82:bc:91:0f:53:25:ac:35:e2:76:1c:52:
fd:3e:77:2a:18:74:3d:bb:ff:17:a4:66:a2:65:b0:
78:07:ec:a7:a6:af:8c:a2:05:22:53:60:73:e5:54:
77:bd:66:ff:97:ac:4b:20:31:76:b8:48:ab:2b:09:
bd:f9:ff:94:a0:74:4a:b9:40:ed:a7:ea:98:31:0c:
7d:d3:13:9f:af:64:a8:9f:25:d7:48:87:4b:84:97:
a3:79:0f:76:8d:9f:4e:2d:d4:c4:98:8f:c9:c8:52:
87:7e:fd:76:01:95:b9:06:24:8e:25:5e:e9:1f:8b:
79:b2:2c:11:c1:9a:c3:7f:84:53:43:d5:a8:e6:9e:
d0:fb:f7:bd:51:d4:fc:af:62:07:e1:4c:b3:0c:fa:
a9:d7:1e:53:04:64:d6:e6:66:37:03:73:69:4b:38:
94:ef:dc:1b:8b:98:57:36:3c:0f:b0:f9:d3:2b:be:
5c:a4:f0:08:dd:9d:5d:8e:9a:7c:56:1c:88:0c:32:
95:67:00:89:5e:e0:b0:08:f0:33:4b:54:28:a9:92:
40:af:21:b5:c7:ee:49:16:a6:f9:6b:a6:49:c0:ac:
f8:f2:0c:44:8a:f0:73:30:5d:09:6b:61:3a:99:b3:
cc:c6:3c:75:a1:03:93:d4:50:16:0a:6f:18:6d:dd:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:02:8C:3A:67:A5:8C:EB:1C:D0:5F:96:DA:DC:A2:56:C6:E1:3C:48
X509v3 Authority Key Identifier:
keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/3135352e3130332e3235302e302f32342d3234203d3e20323135323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.103.250.0/24
Signature Algorithm: sha256WithRSAEncryption
95:bd:1e:a1:02:fc:c7:32:64:24:c1:4a:b8:ee:48:4a:76:20:
50:41:4a:b3:78:e6:78:fb:d7:e7:39:f6:ea:e9:ec:5f:e2:9c:
9d:14:b2:e7:20:4a:21:ff:fd:69:6c:b3:41:bd:c8:64:f4:58:
e2:b3:25:ca:c5:02:18:51:7e:ba:eb:5e:8a:88:9b:9b:10:a7:
c8:cd:d2:4e:b3:39:5a:51:65:7a:e2:ff:14:54:e2:cb:eb:a7:
f4:10:bf:a8:2a:87:ad:7e:59:d5:e3:f7:66:0d:40:aa:b1:7a:
03:a2:74:39:0a:11:f8:37:dc:ac:03:fd:b1:80:85:cf:c9:b3:
15:95:52:bf:1b:c3:63:6c:6a:0d:36:b3:33:10:9f:c6:40:8b:
6a:a0:56:b9:8c:34:48:f7:2c:6b:86:d6:eb:2a:c8:34:f8:df:
82:6a:92:07:bf:d1:ad:7a:b7:f7:21:13:4b:fb:9e:27:55:2f:
94:60:0b:32:8d:9a:29:e3:64:7a:86:4f:18:3c:48:e0:e3:84:
c1:20:8c:99:f3:a9:e9:99:62:5a:6e:44:53:3c:21:30:1c:eb:
5c:fe:c5:72:41:d5:50:77:fe:70:48:3e:3b:e0:c0:d1:34:b5:
d8:48:38:ca:03:d9:01:bf:14:76:b7:5b:d6:0d:2b:7f:94:0e:
e8:3e:ad:d0
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIURI7/rPzfxhMfWSOA8iJ9nLKqsOIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0
NDI5ZjE2NmI2NTMwMWE5ZGQwHhcNMjYwMTEzMjEwMjU2WhcNMjcwMTEyMjEwNzU2
WjAzMTEwLwYDVQQDEyg5MTAyOEMzQTY3QTU4Q0VCMUNEMDVGOTZEQURDQTI1NkM2
RTEzQzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpKCvJEPUyWs
NeJ2HFL9PncqGHQ9u/8XpGaiZbB4B+ynpq+MogUiU2Bz5VR3vWb/l6xLIDF2uEir
Kwm9+f+UoHRKuUDtp+qYMQx90xOfr2SonyXXSIdLhJejeQ92jZ9OLdTEmI/JyFKH
fv12AZW5BiSOJV7pH4t5siwRwZrDf4RTQ9Wo5p7Q+/e9UdT8r2IH4UyzDPqp1x5T
BGTW5mY3A3NpSziU79wbi5hXNjwPsPnTK75cpPAI3Z1djpp8VhyIDDKVZwCJXuCw
CPAzS1QoqZJAryG1x+5JFqb5a6ZJwKz48gxEivBzMF0Ja2E6mbPMxjx1oQOT1FAW
Cm8Ybd2AXQIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFJECjDpnpYzrHNBfltrcolbG
4TxIMB8GA1UdIwQYMBaAFB9/ckmmgfjNQScLUNjX54FYgdo2MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0
LTU4MGQxMzY5YjdjNC8xLzFGN0Y3MjQ5QTY4MUY4Q0Q0MTI3MEI1MEQ4RDdFNzgx
NTg4MURBMzYuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMt
NDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zODNiZDUwYi1iMTkyLTQ0YmQtOTM0OS0z
NTEyMjVhMTNhMzMvMjNmYjNkMjllN2Y2N2M2MzRkZjNiN2Y0YTk2MDA4MmU0NDI5
ZjE2NmI2NTMwMWE5ZGQuY2VyMIGxBggrBgEFBQcBCwSBpDCBoTCBngYIKwYBBQUH
MAuGgZFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2NkMTlkYjIwLTQ2NTMtNDhkNC04ZmM0LTU4MGQxMzY5YjdjNC8xLzMxMzUzNTJl
MzEzMDMzMmUzMjM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzMjM0
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACbZ/owDQYJKoZIhvcNAQELBQADggEBAJW9HqEC/McyZCTB
SrjuSEp2IFBBSrN45nj71+c59urp7F/inJ0UsucgSiH//Wlss0G9yGT0WOKzJcrF
AhhRfrrrXoqIm5sQp8jN0k6zOVpRZXri/xRU4svrp/QQv6gqh61+WdXj92YNQKqx
egOidDkKEfg33KwD/bGAhc/JsxWVUr8bw2Nsag02szMQn8ZAi2qgVrmMNEj3LGuG
1usqyDT434Jqkge/0a16t/chE0v7nidVL5RgCzKNminjZHqGTxg8SODjhMEgjJnz
qemZYlpuRFM8ITAc61z+xXJB1VB3/nBIPjvgwNE0tdhIOMoD2QG/FHa3W9YNK3+U
Dug+rdA=
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:55:30 2026 by rpki-client