This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62663a3a2f34382d3438203d3e20323031383233.roa
File: 326130623a346530373a62663a3a2f34382d3438203d3e20323031383233.roa (raw, json)
Hash identifier: xtrmqWu/mBnWlnRb42RyFBTYvzbo8WRtwINiVOfnSVs=
Subject key identifier: 86:BA:57:80:94:06:70:CE:7B:94:29:0E:83:7A:9C:20:D9:98:12:68
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 6EFB4FF04B8B04A4BC8E04B06FC49675DC8C4B2E
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62663a3a2f34382d3438203d3e20323031383233.roa
Signing time: Thu 29 Jan 2026 13:44:37 +0000
ROA not before: Thu 29 Jan 2026 13:39:37 +0000
ROA not after: Thu 28 Jan 2027 13:44:37 +0000
asID: 201823
IP address blocks: 2a0b:4e07:bf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:fb:4f:f0:4b:8b:04:a4:bc:8e:04:b0:6f:c4:96:75:dc:8c:4b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Jan 29 13:39:37 2026 GMT
Not After : Jan 28 13:44:37 2027 GMT
Subject: CN=86BA5780940670CE7B94290E837A9C20D9981268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:6e:c2:d0:74:18:39:98:c8:7e:1c:3d:0d:
ff:4f:3e:04:3b:23:e7:4d:e0:ad:a5:e6:65:53:6f:
58:2e:5a:64:53:d8:26:a1:ab:80:d5:c8:08:4a:ae:
92:4f:78:e5:fa:48:75:60:ce:e4:2f:f3:ae:af:02:
76:63:27:e7:42:92:b0:3f:60:5c:69:80:91:47:da:
e3:7f:40:76:98:71:6c:64:df:d5:36:ce:49:fc:30:
cd:d1:ca:2c:dd:1d:0b:70:80:a5:21:74:20:cc:42:
10:7a:b9:38:85:9b:0b:a5:5f:cb:a8:19:85:d3:19:
31:7a:1d:82:e3:aa:65:d8:a9:7d:99:a6:04:8d:a9:
f7:ea:f9:4c:4e:fe:f1:31:85:70:65:21:70:e7:31:
f5:a2:7e:38:33:e1:73:8a:8b:43:84:67:1e:d9:06:
89:85:13:72:8a:61:5a:c7:6f:ae:9b:7a:f8:12:46:
eb:76:fc:27:15:4f:ab:02:08:a2:39:08:6f:cc:f8:
05:9b:47:65:93:a9:14:f1:e5:ea:2c:46:7e:61:8c:
41:1c:a2:ce:e3:96:ae:fd:19:05:7f:44:dd:4b:c3:
7a:6c:ea:12:9c:47:95:c3:62:b9:fe:c4:72:88:2b:
2f:a1:6e:98:02:4a:56:c6:80:d6:1e:44:72:79:d9:
7e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BA:57:80:94:06:70:CE:7B:94:29:0E:83:7A:9C:20:D9:98:12:68
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a62663a3a2f34382d3438203d3e20323031383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:bf::/48
Signature Algorithm: sha256WithRSAEncryption
1f:91:5e:3d:ca:b6:01:a3:4e:5f:97:cc:bb:f4:9e:d5:74:a6:
67:50:72:51:9a:69:3a:c6:14:12:88:9d:5e:30:cf:db:a4:bb:
24:2c:93:f2:97:2c:74:34:ac:e4:ed:9c:c0:d5:aa:cf:24:41:
9e:48:b2:ae:94:22:f2:f1:92:29:4b:12:e0:52:79:72:6f:de:
19:9e:50:ef:66:d6:e8:ae:55:82:59:e5:eb:f7:ff:f1:a3:e1:
db:14:18:6d:a5:2f:9e:6c:1b:db:3d:60:5e:7f:d7:f0:fb:69:
83:15:ce:1a:a5:53:9f:61:82:6d:30:dc:3a:ce:9f:b1:aa:64:
38:cf:7a:09:53:51:28:9c:38:b2:9e:93:ac:34:12:8c:cd:3d:
b5:62:ef:1e:c1:ab:6c:ab:d4:a5:1b:3e:21:7c:2c:4f:6e:fe:
bb:41:ea:ff:96:4e:c2:a8:f5:67:83:99:f0:b4:30:31:41:34:
83:9b:d6:ca:82:0b:c7:70:55:d1:0c:5f:ff:1e:1f:50:16:a8:
64:5f:64:2c:18:ea:b3:1c:db:78:ad:5c:f9:92:d6:dd:6e:b7:
2e:b1:ed:b7:81:0d:05:a6:35:c7:b2:09:1f:30:2d:5f:e1:39:
9b:cf:eb:02:57:69:f0:b6:23:60:05:8e:74:b7:36:38:5c:9b:
4d:f0:ad:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 13:15:20 2026 by rpki-client