This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33383a3a2f34382d3438203d3e20323036363034.roa
File: 326130623a346530373a33383a3a2f34382d3438203d3e20323036363034.roa (raw, json)
Hash identifier: FPDZnd+rt34/UhAsK/U3hP1Hmq8EN+EBlsB5JUFc23Y=
Subject key identifier: 0A:1A:0E:7C:65:BC:47:BF:C4:E9:0C:E6:40:9B:A8:C0:4B:A3:03:F0
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 29BF6C15CA22D9587A10F1C5A10478B9F7B499DF
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33383a3a2f34382d3438203d3e20323036363034.roa
Signing time: Mon 10 Nov 2025 13:58:51 +0000
ROA not before: Mon 10 Nov 2025 13:53:51 +0000
ROA not after: Mon 09 Nov 2026 13:58:51 +0000
asID: 206604
IP address blocks: 2a0b:4e07:38::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Dec 2025 17:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:bf:6c:15:ca:22:d9:58:7a:10:f1:c5:a1:04:78:b9:f7:b4:99:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Nov 10 13:53:51 2025 GMT
Not After : Nov 9 13:58:51 2026 GMT
Subject: CN=0A1A0E7C65BC47BFC4E90CE6409BA8C04BA303F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:df:09:b3:4b:46:af:59:a0:b4:07:6e:5e:
66:15:ba:30:0f:0e:0e:ac:1f:70:2c:ae:0e:ec:b5:
df:0f:81:57:d3:f9:c2:ca:1e:10:ea:35:b1:16:56:
1c:40:13:9d:b4:91:68:51:a6:b2:f8:f7:26:66:81:
ef:9f:c0:26:f6:e5:f7:e9:65:e5:25:6d:21:f2:9d:
3c:0e:8e:3e:81:1c:ae:f7:10:dd:a6:a8:dc:e7:de:
ec:23:64:70:6f:6e:98:2e:59:d3:6e:19:83:c2:9e:
ec:74:82:92:ae:95:28:03:2a:43:05:63:bc:bd:24:
2a:13:1c:b9:21:97:12:65:35:df:ec:2f:61:0d:b3:
9e:2d:2b:c3:74:02:4a:40:2e:5b:3f:71:27:a8:b7:
e5:18:54:82:c3:81:00:a4:66:74:77:db:5d:17:48:
62:e7:01:a9:7a:2a:8f:8b:b3:9b:5d:05:79:bf:b6:
92:a1:ef:6d:ac:dd:58:23:99:28:04:4a:6b:be:28:
5b:86:2a:75:90:ac:64:3e:a0:00:4c:cd:1f:09:70:
40:b9:4d:74:2f:1e:84:fa:1e:fa:55:00:59:df:aa:
57:02:64:46:0f:35:79:1d:96:32:1b:c3:c1:38:a6:
f0:9c:69:59:6c:e9:ba:4a:dd:e0:7a:6a:85:52:0e:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1A:0E:7C:65:BC:47:BF:C4:E9:0C:E6:40:9B:A8:C0:4B:A3:03:F0
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a33383a3a2f34382d3438203d3e20323036363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:38::/48
Signature Algorithm: sha256WithRSAEncryption
66:14:df:a1:31:82:7d:b1:9a:ea:ae:76:2f:a9:91:a4:e4:05:
a3:51:92:26:8b:b1:84:7c:47:75:41:77:36:74:dc:f4:99:36:
3d:3b:88:28:9d:70:f8:c4:93:cd:f5:1b:54:79:b8:1f:80:a0:
da:39:3c:b0:a3:90:62:01:79:8a:a9:09:5c:95:05:63:c1:5f:
49:59:07:43:71:57:b2:5a:8b:53:3d:a0:be:53:29:c3:45:7c:
9a:7b:a4:ae:aa:21:c5:76:2d:4e:57:fc:0d:a2:2d:36:19:df:
74:03:25:ba:60:64:32:12:b2:dc:ab:db:fd:50:07:a0:76:a1:
93:61:a0:4b:fa:35:8c:69:af:2c:24:9d:8c:12:5f:2d:cf:f9:
23:45:65:96:19:f3:53:19:af:17:6b:aa:43:1f:a9:1e:db:45:
01:0f:08:98:c8:6a:e7:82:2d:52:90:1d:5c:27:2d:23:05:f2:
09:dd:68:49:4f:6f:cf:85:f3:d5:a0:99:5a:4d:ad:a8:1e:64:
40:25:71:bd:21:88:ab:09:65:3d:61:62:b6:50:d0:d5:2f:92:
28:ca:3d:c1:f5:c3:72:f3:40:77:7c:48:08:58:c4:ff:e1:aa:
8e:63:51:ba:61:e4:7c:fa:d7:46:a5:4c:8d:77:37:bc:df:c9:
8d:01:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 10:30:24 2025 by rpki-client