This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/32332e3137302e37322e302f32342d3234203d3e203436373636.roa
File: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (raw, json)
Hash identifier: hfPLPQW0RCv33ma51bvJk8w/CbhypODZthVk4Z+KIYw=
Subject key identifier: 2D:80:D9:52:DF:D2:E8:92:7F:88:91:8A:65:E0:D6:7D:D4:3D:32:A5
Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Certificate serial: 2C73CB85DD4C812EBE64E0418D9211F62C722E36
Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/32332e3137302e37322e302f32342d3234203d3e203436373636.roa
Signing time: Thu 04 Dec 2025 21:16:06 +0000
ROA not before: Thu 04 Dec 2025 21:11:06 +0000
ROA not after: Thu 03 Dec 2026 21:16:06 +0000
asID: 46766
IP address blocks: 23.170.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Dec 2025 10:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:73:cb:85:dd:4c:81:2e:be:64:e0:41:8d:92:11:f6:2c:72:2e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61
Validity
Not Before: Dec 4 21:11:06 2025 GMT
Not After : Dec 3 21:16:06 2026 GMT
Subject: CN=2D80D952DFD2E8927F88918A65E0D67DD43D32A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4b:ac:7b:d4:a7:93:13:a0:44:42:34:7c:10:
92:1b:f1:e2:70:10:33:b2:54:01:22:a3:8e:09:37:
f3:2c:b0:c4:86:f1:7f:2f:11:95:88:4a:d3:45:39:
53:8f:69:9d:61:f6:f7:56:33:99:d5:f4:bc:a4:3d:
3b:b8:c8:7a:e4:be:ac:a7:b3:ae:66:20:02:47:75:
b8:0f:8f:8d:c5:b7:1f:de:dd:78:a6:bf:59:58:f5:
8c:49:bd:2d:cd:f7:4c:83:1e:4b:32:07:5c:49:3d:
28:72:9b:df:70:5d:23:42:09:a8:3a:31:99:aa:fb:
2c:ac:5d:c4:15:97:6d:b7:a9:a2:53:d4:ef:b1:87:
dc:b6:3e:18:03:57:b3:9c:88:bd:c4:2b:3a:ce:f6:
ba:f9:44:b2:0e:75:23:aa:cf:9e:bb:c4:0d:fe:a0:
82:1a:e9:39:7c:00:d4:67:e5:b3:ea:1d:64:16:45:
2b:2d:02:78:22:66:57:af:b3:99:17:c9:3e:5e:6d:
88:85:6b:c0:f7:4e:d7:02:96:b9:b7:ab:d3:c5:a7:
ab:2b:e6:2f:fc:31:3c:40:c7:d7:cd:c1:49:08:f5:
fd:97:5f:91:69:4d:9c:45:fc:54:a7:1b:44:f9:26:
18:99:e7:10:8a:70:72:b7:de:e5:80:7c:77:48:af:
2a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:80:D9:52:DF:D2:E8:92:7F:88:91:8A:65:E0:D6:7D:D4:3D:32:A5
X509v3 Authority Key Identifier:
keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/32332e3137302e37322e302f32342d3234203d3e203436373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.170.72.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:9f:9d:fb:ee:a5:83:5f:5f:d1:05:80:b4:cb:09:20:ee:cb:
95:19:fb:da:ba:99:b1:1d:2b:ef:a5:47:2c:1b:61:52:e3:41:
54:64:e2:1a:b2:0b:64:08:8c:04:2d:f4:7d:0e:0a:0d:79:44:
4d:88:19:bc:c5:0d:38:03:4d:fd:5d:97:7d:0b:15:1a:fe:ed:
10:e0:7d:8c:02:15:0a:c3:fa:85:fd:5f:0e:48:72:05:75:c2:
8f:a2:57:33:18:f7:b6:8d:c6:17:92:67:a5:d6:2d:cd:63:d7:
6e:1d:25:3a:ae:12:46:39:4c:86:44:d2:99:26:33:91:90:52:
aa:2c:e8:5a:fa:49:96:07:f8:80:5d:8b:03:7f:48:4c:0c:38:
5a:d5:d2:92:5a:06:61:de:9e:f2:ed:88:c6:1c:f5:b1:85:72:
7e:98:23:82:56:c9:32:3c:55:15:d6:53:e6:2a:50:93:72:12:
ae:40:1e:bd:90:45:39:36:1e:8b:f3:31:83:70:26:84:d3:ca:
77:70:47:9d:2f:3d:1b:cc:20:79:7f:4c:41:23:7a:75:9d:5d:
52:79:da:87:0c:df:6c:c3:34:a6:06:a2:7e:36:03:fd:f6:24:
7f:43:33:ac:a9:8e:12:7a:44:32:b5:69:b5:e6:76:77:af:a3:
db:22:70:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:53:30 2025 by rpki-client