This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33613a3a2f34382d3438203d3e20323032393334.roa File: 326130623a346530373a33613a3a2f34382d3438203d3e20323032393334.roa (raw, json) Hash identifier: Pzv+hen2V07g+XORvT5GScNHKgHspWM7URwSvaquTjg= Subject key identifier: 32:FE:5A:8E:6E:A0:04:41:1B:08:52:C2:5E:D8:2A:B5:FA:98:8F:99 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 191F46ECC52BCF34E2F1000635C3680632E60495 Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33613a3a2f34382d3438203d3e20323032393334.roa Signing time: Sat 13 Dec 2025 14:49:10 +0000 ROA not before: Sat 13 Dec 2025 14:44:10 +0000 ROA not after: Sat 12 Dec 2026 14:49:10 +0000 asID: 202934 IP address blocks: 2a0b:4e07:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:1f:46:ec:c5:2b:cf:34:e2:f1:00:06:35:c3:68:06:32:e6:04:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Dec 13 14:44:10 2025 GMT Not After : Dec 12 14:49:10 2026 GMT Subject: CN=32FE5A8E6EA004411B0852C25ED82AB5FA988F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:97:f5:cf:ef:18:fe:ab:a9:b8:1c:6a:6c: 65:28:3e:9c:cf:45:ec:f0:cd:13:da:b4:23:d0:a9: 19:3d:e8:75:41:d2:54:6b:9a:64:6a:4a:a7:fa:fe: 2d:2c:2e:56:be:2f:f1:32:41:a8:94:fb:ed:d0:c1: 0d:b6:ef:57:ad:db:2a:6f:69:22:9d:54:a4:78:20: af:18:fe:c3:55:2d:e2:8e:09:18:c6:28:c0:b9:45: 11:40:ff:62:fb:cf:a9:f6:83:17:ab:b6:71:cc:6a: 0b:a5:88:6d:96:88:2e:d1:63:ac:9a:91:84:ec:b9: f7:c3:4f:b6:cb:f3:af:df:61:0b:e6:76:ec:84:1a: b4:22:79:ee:56:1e:98:1e:f7:10:da:6a:7a:a2:3a: 5d:72:09:02:21:6b:4e:a3:d7:62:b7:c0:ec:bb:f3: b8:a9:bb:21:d7:38:70:e2:b6:63:90:12:a3:28:ce: 8c:b6:f8:24:6d:ff:ec:21:68:60:95:fb:9b:b5:8b: 9c:a8:07:f6:e7:9a:0b:60:90:d2:aa:ab:57:79:fe: 7d:b0:09:71:36:08:10:40:2c:dd:61:b8:d6:d4:66: e0:d6:10:d6:7c:68:a8:1f:68:26:68:eb:c8:2a:69: 31:c5:fe:7b:59:c4:1b:4f:83:86:5b:0b:a3:34:d7: 6d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FE:5A:8E:6E:A0:04:41:1B:08:52:C2:5E:D8:2A:B5:FA:98:8F:99 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33613a3a2f34382d3438203d3e20323032393334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:3a::/48 Signature Algorithm: sha256WithRSAEncryption 35:79:58:0a:2f:7e:8a:8d:7f:05:9f:ac:2d:b5:e6:3b:07:04: 5b:f7:76:5c:20:95:6e:57:d1:28:ca:d3:40:69:50:61:e5:71: 9b:6d:5c:d3:23:84:0c:05:2b:92:b5:56:b9:ac:c2:79:6d:48: e9:19:71:cb:31:f9:98:14:e4:87:c6:b0:de:82:7e:cd:e8:0c: ee:b7:2c:86:ac:c0:bc:95:5d:85:d5:3c:d2:ae:f3:4e:ed:b5: be:5f:c2:8c:e6:85:77:ee:4d:4f:60:db:55:9f:f6:9d:44:d7: f0:9e:62:b7:4c:97:d2:4c:03:db:80:93:f5:20:7d:2a:fd:ca: 4d:3d:dc:25:b3:93:b1:da:f1:25:1e:5f:d3:02:91:60:5e:81: 7a:ae:bc:20:06:59:bb:38:bf:ae:5c:1a:25:35:e8:9f:e2:0d: b9:2f:11:57:71:7f:64:fb:28:c2:ad:da:b3:80:a3:b7:06:3f: da:20:2c:fd:43:fd:94:6b:80:9f:45:66:ec:00:f5:b0:e4:50: 92:53:e5:ae:2f:af:8f:18:7a:09:18:ef:6a:6c:d7:3a:8a:7c: bf:01:6d:9d:98:8e:e6:80:7b:b6:ad:72:ed:48:fe:a8:86:5f: 7d:c6:d3:30:18:2e:60:ec:af:7d:65:82:4c:47:0c:1a:67:12: 20:54:0e:f7 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUGR9G7MUrzzTi8QAGNcNoBjLmBJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTEyMTMxNDQ0MTBaFw0yNjEyMTIxNDQ5MTBaMDMxMTAvBgNV BAMTKDMyRkU1QThFNkVBMDA0NDExQjA4NTJDMjVFRDgyQUI1RkE5ODhGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC99Jf1z+8Y/qupuBxqbGUoPpzP RezwzRPatCPQqRk96HVB0lRrmmRqSqf6/i0sLla+L/EyQaiU++3QwQ2271et2ypv aSKdVKR4IK8Y/sNVLeKOCRjGKMC5RRFA/2L7z6n2gxertnHMaguliG2WiC7RY6ya kYTsuffDT7bL86/fYQvmduyEGrQiee5WHpge9xDaanqiOl1yCQIha06j12K3wOy7 87ipuyHXOHDitmOQEqMozoy2+CRt/+whaGCV+5u1i5yoB/bnmgtgkNKqq1d5/n2w CXE2CBBALN1huNbUZuDWENZ8aKgfaCZo68gqaTHF/ntZxBtPg4ZbC6M0122xAgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUMv5ajm6gBEEbCFLCXtgqtfqYj5kwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTMzNjEzYTNhMmYzNDM4 MmQzNDM4MjAzZDNlMjAzMjMwMzIzOTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HADowDQYJ KoZIhvcNAQELBQADggEBADV5WAovfoqNfwWfrC215jsHBFv3dlwglW5X0SjK00Bp UGHlcZttXNMjhAwFK5K1VrmswnltSOkZccsx+ZgU5IfGsN6Cfs3oDO63LIaswLyV XYXVPNKu807ttb5fwozmhXfuTU9g21Wf9p1E1/CeYrdMl9JMA9uAk/UgfSr9yk09 3CWzk7Ha8SUeX9MCkWBegXquvCAGWbs4v65cGiU16J/iDbkvEVdxf2T7KMKt2rOA o7cGP9ogLP1D/ZRrgJ9FZuwA9bDkUJJT5a4vr48YegkY72ps1zqKfL8BbZ2YjuaA e7atcu1I/qiGX33G0zAYLmDsr31lgkxHDBpnEiBUDvc= -----END CERTIFICATE-----Generated at Thu Dec 18 07:42:25 2025 by rpki-client