This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a353030303a3a2f33362d3438203d3e20323135363835.roa File: 326130623a346530373a353030303a3a2f33362d3438203d3e20323135363835.roa (raw, json) Hash identifier: hqmxv39//Ylzybq+GbjC5bA3BMC+9DXxCokftsbppRA= Subject key identifier: D1:13:86:88:DD:D9:53:5A:44:84:82:07:51:B2:0F:FD:95:53:08:86 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 5867C8B5C8C7C3FA47268700FC1D4E7FC1DC503C Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a353030303a3a2f33362d3438203d3e20323135363835.roa Signing time: Tue 09 Dec 2025 10:58:31 +0000 ROA not before: Tue 09 Dec 2025 10:53:31 +0000 ROA not after: Tue 08 Dec 2026 10:58:31 +0000 asID: 215685 IP address blocks: 2a0b:4e07:5000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:67:c8:b5:c8:c7:c3:fa:47:26:87:00:fc:1d:4e:7f:c1:dc:50:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Dec 9 10:53:31 2025 GMT Not After : Dec 8 10:58:31 2026 GMT Subject: CN=D1138688DDD9535A4484820751B20FFD95530886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:80:6f:9b:85:8f:68:1b:e1:d8:44:ee:41: 8d:04:d8:5a:f5:20:67:2e:48:3b:8c:3a:f2:fd:dc: f1:28:0c:33:c4:6e:9d:aa:98:cc:7e:ce:59:d4:da: 74:a5:67:18:76:22:6d:c4:41:de:c3:21:c6:6f:f9: 71:f9:a5:96:2d:d2:0a:8e:c7:d1:26:94:56:d3:d5: c7:a2:5d:b4:31:7a:92:b4:ef:22:e4:be:78:61:5a: f2:c7:2c:d7:f5:96:98:6e:8c:6c:1c:44:c7:a8:59: 9d:3d:1b:dd:32:18:9e:2e:85:db:54:84:fd:73:37: 6d:f4:c7:8c:bd:0f:c1:f7:a4:30:b5:5e:2a:7d:f9: 4f:32:9f:f9:d2:db:b6:80:20:de:32:24:cb:af:1f: f4:48:0b:4d:e0:97:36:2d:bb:62:e8:69:c3:e7:ac: 51:68:4e:4d:10:2a:9b:3b:8b:ca:bb:e4:e8:20:63: d7:74:4f:d1:b9:29:40:fc:2b:bc:ec:e0:39:db:d3: 8c:85:89:57:61:4d:2b:fe:5c:16:f4:53:66:98:3b: 39:b1:b9:62:1f:49:55:c3:2d:56:8c:62:e4:12:17: 2f:af:bc:14:2f:35:bc:8e:7d:b7:9c:e8:a6:be:38: 4c:23:ae:88:28:6d:ec:f4:5a:72:5b:31:e7:2c:1d: 8c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:13:86:88:DD:D9:53:5A:44:84:82:07:51:B2:0F:FD:95:53:08:86 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a353030303a3a2f33362d3438203d3e20323135363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:5000::/36 Signature Algorithm: sha256WithRSAEncryption 7e:20:38:91:a3:6a:3e:19:ce:49:3f:b5:71:4d:a2:6a:80:59: 18:f6:55:71:c4:b2:60:e0:53:f9:27:26:20:a3:d7:74:f7:f5: f3:8c:62:69:a8:b1:ec:ea:81:b0:4f:7c:dd:eb:11:57:de:80: a5:aa:7d:ca:38:dc:28:92:84:0e:fc:13:d3:b3:6e:c1:95:31: 34:26:e7:d0:93:86:b9:e1:a7:d6:9d:80:bc:e0:65:b5:59:c2: d6:9c:a9:1d:19:d0:55:30:8c:29:c7:99:34:ab:dd:5f:85:d9: 1a:99:50:0f:a6:6a:9b:1e:8a:ac:22:28:50:4b:24:49:55:5f: fa:9a:cf:14:b9:8a:ef:5b:b6:ff:51:c9:9a:87:d7:f5:33:e9: bc:2a:1a:0a:ff:7a:e8:66:f3:b8:2e:c0:99:9c:b5:10:c3:a9: d1:3f:01:3a:42:fd:6e:52:91:42:8b:fb:0e:99:3d:6b:1b:2b: 9e:70:77:4e:27:9d:e4:14:b2:63:7c:51:b1:fc:59:8f:78:d4: 0a:8e:33:24:9a:e4:95:1a:36:42:8c:72:3f:f8:42:e4:4e:8f: f3:6a:05:1a:33:7c:4a:3a:01:9a:e0:83:24:3c:37:bd:74:a4: 0b:0a:4d:37:a8:41:4d:de:72:94:18:98:07:29:2c:fa:8f:f1: 0f:fd:37:8a -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIUWGfItcjHw/pHJocA/B1Of8HcUDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNTEyMDkxMDUzMzFaFw0yNjEyMDgxMDU4MzFaMDMxMTAvBgNV BAMTKEQxMTM4Njg4REREOTUzNUE0NDg0ODIwNzUxQjIwRkZEOTU1MzA4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0JIBvm4WPaBvh2ETuQY0E2Fr1 IGcuSDuMOvL93PEoDDPEbp2qmMx+zlnU2nSlZxh2Im3EQd7DIcZv+XH5pZYt0gqO x9EmlFbT1ceiXbQxepK07yLkvnhhWvLHLNf1lphujGwcRMeoWZ09G90yGJ4uhdtU hP1zN230x4y9D8H3pDC1Xip9+U8yn/nS27aAIN4yJMuvH/RIC03glzYtu2LoacPn rFFoTk0QKps7i8q75OggY9d0T9G5KUD8K7zs4Dnb04yFiVdhTSv+XBb0U2aYOzmx uWIfSVXDLVaMYuQSFy+vvBQvNbyOfbec6Ka+OEwjrogobez0WnJbMecsHYz3AgMB AAGjggJpMIICZTAdBgNVHQ4EFgQU0ROGiN3ZU1pEhIIHUbIP/ZVTCIYwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTM1MzAzMDMwM2EzYTJm MzMzNjJkMzQzODIwM2QzZTIwMzIzMTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgtOB1Aw DQYJKoZIhvcNAQELBQADggEBAH4gOJGjaj4Zzkk/tXFNomqAWRj2VXHEsmDgU/kn JiCj13T39fOMYmmosezqgbBPfN3rEVfegKWqfco43CiShA78E9OzbsGVMTQm59CT hrnhp9adgLzgZbVZwtacqR0Z0FUwjCnHmTSr3V+F2RqZUA+mapseiqwiKFBLJElV X/qazxS5iu9btv9RyZqH1/Uz6bwqGgr/euhm87guwJmctRDDqdE/ATpC/W5SkUKL +w6ZPWsbK55wd04nneQUsmN8UbH8WY941AqOMySa5JUaNkKMcj/4QuROj/NqBRoz fEo6AZrggyQ8N710pAsKTTeoQU3ecpQYmAcpLPqP8Q/9N4o= -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:11 2025 by rpki-client