This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33643a3a2f34382d3438203d3e20323134393436.roa File: 326130623a346530373a33643a3a2f34382d3438203d3e20323134393436.roa (raw, json) Hash identifier: A6M0YD9f43X8LJ3cNWB67R+oT539aW6fTnJro5+QWCM= Subject key identifier: 17:D4:88:D8:E4:9D:B0:5E:72:B0:B4:5C:BB:41:EE:BE:58:E7:28:EC Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 4954420DB220970075C94950413F70E5DF4E9B9B Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33643a3a2f34382d3438203d3e20323134393436.roa Signing time: Tue 16 Dec 2025 13:30:46 +0000 ROA not before: Tue 16 Dec 2025 13:25:46 +0000 ROA not after: Tue 15 Dec 2026 13:30:46 +0000 asID: 214946 IP address blocks: 2a0b:4e07:3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:54:42:0d:b2:20:97:00:75:c9:49:50:41:3f:70:e5:df:4e:9b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Dec 16 13:25:46 2025 GMT Not After : Dec 15 13:30:46 2026 GMT Subject: CN=17D488D8E49DB05E72B0B45CBB41EEBE58E728EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6c:d0:9f:b9:7a:a2:fe:fa:38:b3:78:46:04: 09:23:85:9e:31:5a:fb:2a:7b:1d:1c:f6:6f:dd:63: df:cd:f6:73:ef:2e:fb:ca:85:eb:af:1d:f7:3e:db: ab:1d:45:d3:1f:25:26:6a:fa:4a:bb:99:54:8a:55: 17:1a:54:45:bd:61:16:b6:82:f4:d1:e0:ce:cf:82: 5f:c1:c0:53:ea:ae:b7:6d:3d:92:1f:2e:a5:30:9b: 70:b2:d5:30:93:4f:6d:b8:55:8f:cc:2b:c5:ba:74: 78:d9:62:de:5a:3a:ef:45:4a:cd:c2:cb:82:e0:a4: 70:21:11:d4:10:65:9f:6e:c4:b1:38:f9:4a:39:eb: 72:5c:46:01:d9:41:99:6c:29:51:67:87:be:c0:f5: c4:6b:d8:d5:dc:36:56:87:c1:e8:a0:57:f0:76:d2: 92:42:77:8a:e5:ca:99:1d:ba:73:c5:62:1a:79:b2: 0b:68:79:ce:39:cb:59:35:7a:cc:58:15:68:8a:fa: 88:27:39:85:4d:4d:5d:21:06:18:7e:3d:93:89:96: ac:8a:56:f8:ab:61:c5:e3:3c:15:73:6a:ce:11:28: f0:76:7b:ed:1e:50:a2:ba:40:d0:09:4a:5e:32:aa: f2:ff:4a:ee:7d:82:13:05:5a:7d:6f:ee:70:f1:e3: 3d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D4:88:D8:E4:9D:B0:5E:72:B0:B4:5C:BB:41:EE:BE:58:E7:28:EC X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33643a3a2f34382d3438203d3e20323134393436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:3d::/48 Signature Algorithm: sha256WithRSAEncryption 04:35:13:e2:e8:00:99:c3:35:af:59:02:2e:6b:5e:2d:d3:00: 70:c0:13:5b:5b:3a:a7:8a:9d:00:19:50:d8:4a:c9:40:ea:d3: b3:1f:e2:2b:e6:1b:72:88:b3:a9:0a:ba:09:3c:76:a5:67:b2: 3e:38:71:cd:ed:8b:4b:35:3e:e8:56:c9:d2:62:40:18:d0:1d: 9b:35:12:0b:a1:e3:cb:dd:cd:13:e7:5d:5c:e4:60:ae:ad:0b: 94:1b:4f:33:ed:6c:21:45:56:45:93:d7:bf:67:e5:38:b5:df: a2:98:7a:ee:98:01:bf:74:2f:13:a8:0d:15:20:01:f5:35:47: 52:62:cf:5a:fb:54:53:9c:fa:30:9b:d0:91:e4:18:68:a0:38: e5:83:8a:f2:7d:09:96:e6:c5:7d:36:8c:b8:5b:f8:c6:3b:c3: c5:84:1b:6d:e0:c3:45:4f:3d:5c:da:02:9d:e4:4a:9b:d7:a3: b9:c3:ff:5a:08:60:fc:46:ca:46:99:b0:9c:46:e3:6e:1d:f3: 12:35:ad:d7:d1:fd:04:20:24:6b:44:67:ed:a4:2d:4a:20:d8: 61:dd:ed:29:93:2d:13:b6:7a:38:bf:d2:db:88:df:2e:95:08: 9e:07:50:e9:08:cf:b7:bb:d6:f0:38:39:a0:54:23:4c:c0:b9: 88:f0:ec:84 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUSVRCDbIglwB1yUlQQT9w5d9Om5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTEyMTYxMzI1NDZaFw0yNjEyMTUxMzMwNDZaMDMxMTAvBgNV BAMTKDE3RDQ4OEQ4RTQ5REIwNUU3MkIwQjQ1Q0JCNDFFRUJFNThFNzI4RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjbNCfuXqi/vo4s3hGBAkjhZ4x Wvsqex0c9m/dY9/N9nPvLvvKheuvHfc+26sdRdMfJSZq+kq7mVSKVRcaVEW9YRa2 gvTR4M7Pgl/BwFPqrrdtPZIfLqUwm3Cy1TCTT224VY/MK8W6dHjZYt5aOu9FSs3C y4LgpHAhEdQQZZ9uxLE4+Uo563JcRgHZQZlsKVFnh77A9cRr2NXcNlaHweigV/B2 0pJCd4rlypkdunPFYhp5sgtoec45y1k1esxYFWiK+ognOYVNTV0hBhh+PZOJlqyK VvirYcXjPBVzas4RKPB2e+0eUKK6QNAJSl4yqvL/Su59ghMFWn1v7nDx4z1VAgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUF9SI2OSdsF5ysLRcu0HuvljnKOwwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTMzNjQzYTNhMmYzNDM4 MmQzNDM4MjAzZDNlMjAzMjMxMzQzOTM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC04HAD0wDQYJ KoZIhvcNAQELBQADggEBAAQ1E+LoAJnDNa9ZAi5rXi3TAHDAE1tbOqeKnQAZUNhK yUDq07Mf4ivmG3KIs6kKugk8dqVnsj44cc3ti0s1PuhWydJiQBjQHZs1Eguh48vd zRPnXVzkYK6tC5QbTzPtbCFFVkWT179n5Ti136KYeu6YAb90LxOoDRUgAfU1R1Ji z1r7VFOc+jCb0JHkGGigOOWDivJ9CZbmxX02jLhb+MY7w8WEG23gw0VPPVzaAp3k SpvXo7nD/1oIYPxGykaZsJxG424d8xI1rdfR/QQgJGtEZ+2kLUog2GHd7SmTLRO2 eji/0tuI3y6VCJ4HUOkIz7e71vA4OaBUI0zAuYjw7IQ= -----END CERTIFICATE-----Generated at Sat Dec 20 13:00:41 2025 by rpki-client