This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a34383a3a2f34362d3438203d3e20323032333538.roa File: 326130623a346530373a34383a3a2f34362d3438203d3e20323032333538.roa (raw, json) Hash identifier: x4pTW9pzQQMWW0hy2wBY8mrW+bi4yr6PCVJdyocD4HU= Subject key identifier: C8:F3:88:5E:21:ED:5C:9D:6D:11:8E:C2:6B:73:8B:B5:E3:11:37:CD Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 3F23CE71A3B114E39A02AECA8E689A5248C6DE1A Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a34383a3a2f34362d3438203d3e20323032333538.roa Signing time: Mon 12 Jan 2026 14:47:02 +0000 ROA not before: Mon 12 Jan 2026 14:42:02 +0000 ROA not after: Mon 11 Jan 2027 14:47:02 +0000 asID: 202358 IP address blocks: 2a0b:4e07:48::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:23:ce:71:a3:b1:14:e3:9a:02:ae:ca:8e:68:9a:52:48:c6:de:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jan 12 14:42:02 2026 GMT Not After : Jan 11 14:47:02 2027 GMT Subject: CN=C8F3885E21ED5C9D6D118EC26B738BB5E31137CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fd:33:78:fd:16:67:fd:98:b0:77:37:00:31: 49:16:32:87:c7:71:d8:cb:15:bc:ba:8b:96:31:37: 23:3d:64:e2:60:97:60:a3:2d:cb:05:e3:ff:f0:00: 22:ea:e0:e4:ea:bf:45:bd:e9:10:3f:4e:45:a2:1d: 73:21:76:29:1a:d9:1c:3e:a4:b4:00:d0:51:a7:63: fa:08:3a:22:96:fc:9d:86:93:47:0e:d3:68:93:19: 8e:15:14:05:64:59:78:16:d0:d6:f9:3d:67:47:74: 61:af:67:0c:78:8d:ce:c0:a8:5b:d0:b2:12:ee:0d: f2:c9:cc:18:cd:6e:09:ed:d3:c0:a8:31:42:89:17: dc:f8:70:e8:79:68:fe:2a:c5:5b:be:0f:ed:95:d1: db:8e:c7:ea:1a:4b:e1:66:65:86:91:89:a7:5d:38: 4e:3f:71:3b:48:23:35:1c:f3:73:50:44:c1:01:c4: a5:76:d9:c9:e9:05:93:cc:94:6c:bb:b8:4c:dd:45: 6a:8b:1f:c3:ba:22:01:07:1a:cb:06:f8:54:76:e9: 6d:a2:a7:c2:7b:8d:3b:fc:9e:55:a8:6a:99:89:6c: b9:27:70:44:1b:a2:71:f2:fd:bd:59:23:ff:16:5c: e9:2f:c5:aa:94:1e:89:97:28:fe:d8:21:ee:d3:b5: c8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F3:88:5E:21:ED:5C:9D:6D:11:8E:C2:6B:73:8B:B5:E3:11:37:CD X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a34383a3a2f34362d3438203d3e20323032333538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:48::/46 Signature Algorithm: sha256WithRSAEncryption 3e:25:ce:0c:6c:5b:34:a2:93:60:66:fa:39:64:9e:e1:d6:0e: 44:21:f0:f4:f0:27:df:79:18:8c:17:d9:63:ad:86:f9:d4:b3: b7:7f:3a:6c:72:3c:64:4a:06:88:fa:bb:a0:33:cd:35:dd:56: 4f:31:67:fa:1b:16:e9:06:55:c5:74:b8:74:c1:6e:5f:b5:50: d0:b7:64:3e:a0:27:76:58:79:5c:f6:7d:07:a3:c3:52:1d:2d: a3:5a:f8:07:58:01:7b:cd:8f:7a:14:1f:bf:47:ed:ce:47:3d: 1a:9b:39:6f:05:66:d4:73:82:3c:49:ea:ad:5e:8b:58:86:dc: 17:e9:57:41:ef:e7:f7:99:18:2c:58:ea:f9:8b:3e:1c:7c:ae: b3:59:4a:52:30:1f:b3:3e:34:ba:89:34:86:15:c1:35:d4:8b: 9a:22:5e:66:7e:1b:68:66:32:0d:c2:ed:1b:f2:fb:fd:db:52: 62:ad:16:0d:81:00:90:cd:bc:77:e8:54:cd:b2:74:08:a4:d1: 37:1a:7f:fd:7e:66:4f:13:8e:b9:98:10:bb:4a:d9:fb:05:81: 0f:67:5d:11:b3:48:4b:0e:ab:e4:0e:d5:0f:53:67:c6:8c:36: 82:e8:da:8f:a1:52:30:44:dc:26:aa:b3:05:2d:fb:a1:d1:cd: 3b:69:e3:b6 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUPyPOcaOxFOOaAq7KjmiaUkjG3howDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAxMTIxNDQyMDJaFw0yNzAxMTExNDQ3MDJaMDMxMTAvBgNV BAMTKEM4RjM4ODVFMjFFRDVDOUQ2RDExOEVDMjZCNzM4QkI1RTMxMTM3Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/TN4/RZn/ZiwdzcAMUkWMofH cdjLFby6i5YxNyM9ZOJgl2CjLcsF4//wACLq4OTqv0W96RA/TkWiHXMhdika2Rw+ pLQA0FGnY/oIOiKW/J2Gk0cO02iTGY4VFAVkWXgW0Nb5PWdHdGGvZwx4jc7AqFvQ shLuDfLJzBjNbgnt08CoMUKJF9z4cOh5aP4qxVu+D+2V0duOx+oaS+FmZYaRiadd OE4/cTtIIzUc83NQRMEBxKV22cnpBZPMlGy7uEzdRWqLH8O6IgEHGssG+FR26W2i p8J7jTv8nlWoapmJbLkncEQbonHy/b1ZI/8WXOkvxaqUHomXKP7YIe7TtcgJAgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUyPOIXiHtXJ1tEY7Ca3OLteMRN80wHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGoBggrBgEFBQcBCwSBmzCBmDCBlQYIKwYBBQUHMAuGgYhyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTM0MzgzYTNhMmYzNDM2 MmQzNDM4MjAzZDNlMjAzMjMwMzIzMzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIqC04HAEgwDQYJ KoZIhvcNAQELBQADggEBAD4lzgxsWzSik2Bm+jlknuHWDkQh8PTwJ995GIwX2WOt hvnUs7d/OmxyPGRKBoj6u6AzzTXdVk8xZ/obFukGVcV0uHTBbl+1UNC3ZD6gJ3ZY eVz2fQejw1IdLaNa+AdYAXvNj3oUH79H7c5HPRqbOW8FZtRzgjxJ6q1ei1iG3Bfp V0Hv5/eZGCxY6vmLPhx8rrNZSlIwH7M+NLqJNIYVwTXUi5oiXmZ+G2hmMg3C7Rvy +/3bUmKtFg2BAJDNvHfoVM2ydAik0Tcaf/1+Zk8TjrmYELtK2fsFgQ9nXRGzSEsO q+QO1Q9TZ8aMNoLo2o+hUjBE3CaqswUt+6HRzTtp47Y= -----END CERTIFICATE-----Generated at Wed Jan 21 04:59:46 2026 by rpki-client