This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a373830303a3a2f33372d3438203d3e20323033303632.roa File: 326130623a346530373a373830303a3a2f33372d3438203d3e20323033303632.roa (raw, json) Hash identifier: Lau9yNcVLub4dcbfDSVXTPmHdO5BL985vBwMMZEmlVw= Subject key identifier: 60:82:1F:9C:79:20:0D:72:7E:BD:18:D5:6D:B1:80:73:02:61:10:64 Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Certificate serial: 443B21623810D996E6165A65039938749158C1DC Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a373830303a3a2f33372d3438203d3e20323033303632.roa Signing time: Tue 20 Jan 2026 21:20:05 +0000 ROA not before: Tue 20 Jan 2026 21:15:05 +0000 ROA not after: Tue 19 Jan 2027 21:20:05 +0000 asID: 203062 IP address blocks: 2a0b:4e07:7800::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:3b:21:62:38:10:d9:96:e6:16:5a:65:03:99:38:74:91:58:c1:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF Validity Not Before: Jan 20 21:15:05 2026 GMT Not After : Jan 19 21:20:05 2027 GMT Subject: CN=60821F9C79200D727EBD18D56DB1807302611064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:85:89:70:9b:68:14:af:e6:25:8b:c5:ed:75: b1:b2:ba:9a:ae:75:52:59:f1:ea:6e:06:1f:93:72: 60:bb:18:8e:ef:34:01:dd:d1:eb:1e:a3:e3:17:fb: f4:3e:46:1b:eb:24:09:c3:a7:c9:e6:55:91:85:8c: bc:02:5c:8d:d5:01:f7:66:ec:d4:4b:9b:50:22:59: 08:c1:07:09:b1:78:cf:11:78:79:4d:d6:71:28:9b: e7:f7:fb:b9:27:99:68:a6:d7:e6:05:73:0a:0d:83: ff:89:f4:5d:39:1f:77:e7:26:1f:99:1b:e7:79:47: 04:3a:f7:c4:e6:81:de:47:73:06:bb:cb:12:e1:06: e6:f7:4b:35:c5:a1:9e:e2:0b:42:7d:05:29:9a:c5: 72:a3:36:cb:1e:2f:5e:8f:19:3d:73:9c:90:c3:64: 02:2b:62:04:84:d8:3c:3d:45:99:86:e8:4e:d3:89: 38:b6:aa:3f:25:1b:41:26:50:ef:7c:f1:7d:51:31: cd:ed:70:93:c0:85:2c:a4:f0:e1:d5:ba:59:25:74: 84:61:4c:4d:0b:c6:44:c9:95:bf:6d:b2:0e:d4:00: 56:cd:18:51:8d:a6:47:14:e3:24:86:74:1c:8e:d4: 95:e2:ab:66:45:e8:33:8d:f6:11:44:d7:a2:ed:29: 8c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:82:1F:9C:79:20:0D:72:7E:BD:18:D5:6D:B1:80:73:02:61:10:64 X509v3 Authority Key Identifier: keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a373830303a3a2f33372d3438203d3e20323033303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:4e07:7800::/37 Signature Algorithm: sha256WithRSAEncryption 87:cb:43:71:2c:36:8e:b9:43:f0:f4:fb:78:77:3b:97:90:ae: 3d:21:b8:3b:5c:d8:cd:75:50:60:ff:85:a9:33:07:03:d0:ff: 60:63:2c:2a:3e:d0:26:62:e6:92:30:20:d3:00:d2:6f:83:51: ce:c8:bf:17:5f:09:f0:8f:0e:2b:2d:b9:94:be:5b:70:8b:45: 3b:e4:cf:85:9b:d7:5d:ef:fe:f0:41:59:3d:03:94:3a:67:4a: 6c:3f:e6:73:46:e3:50:6a:9b:3f:62:12:13:9a:a5:ff:10:71: 17:b6:64:18:23:9e:19:21:3a:fa:d7:2e:1d:e3:38:fd:4c:e4: 29:9e:3f:36:a6:a4:54:51:db:46:f7:c2:c3:61:d0:d5:79:e0: 5c:1f:51:54:cc:05:3a:15:e4:ec:9c:73:20:7e:b9:56:65:73: 41:51:5b:16:71:b8:5b:05:ee:65:fd:fa:84:56:6c:65:e3:82: 67:cf:a5:e0:c0:fd:50:79:d6:17:ec:56:54:5b:cf:94:92:e5: 06:55:92:fe:0d:95:4d:e2:72:71:c6:a1:aa:01:88:5b:8b:36: b2:79:da:06:ca:24:94:d8:c6:31:ef:ea:2c:31:79:06:d5:fc: a9:0a:54:0b:bd:8a:f2:40:b5:68:64:f4:05:bc:6c:34:ef:82: 9f:53:fe:30 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIURDshYjgQ2ZbmFlplA5k4dJFYwdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEyNEMzMUZDRkE0RTgyQzREMEY2RTA5QTMwQTA0QTU1 Qzk3NzhCRjAeFw0yNjAxMjAyMTE1MDVaFw0yNzAxMTkyMTIwMDVaMDMxMTAvBgNV BAMTKDYwODIxRjlDNzkyMDBENzI3RUJEMThENTZEQjE4MDczMDI2MTEwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/hYlwm2gUr+Yli8XtdbGyupqu dVJZ8epuBh+TcmC7GI7vNAHd0eseo+MX+/Q+RhvrJAnDp8nmVZGFjLwCXI3VAfdm 7NRLm1AiWQjBBwmxeM8ReHlN1nEom+f3+7knmWim1+YFcwoNg/+J9F05H3fnJh+Z G+d5RwQ698Tmgd5Hcwa7yxLhBub3SzXFoZ7iC0J9BSmaxXKjNsseL16PGT1znJDD ZAIrYgSE2Dw9RZmG6E7TiTi2qj8lG0EmUO988X1RMc3tcJPAhSyk8OHVulkldIRh TE0LxkTJlb9tsg7UAFbNGFGNpkcU4ySGdByO1JXiq2ZF6DON9hFE16LtKYyFAgMB AAGjggJpMIICZTAdBgNVHQ4EFgQUYIIfnHkgDXJ+vRjVbbGAcwJhEGQwHwYDVR0j BBgwFoAUUSTDH8+k6CxND24JowoEpVyXeL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvODFhNDQ1NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS81MTI0QzMxRkNG QTRFODJDNEQwRjZFMDlBMzBBMDRBNTVDOTc3OEJGLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4 MTViYi8wLzUxMjRDMzFGQ0ZBNEU4MkM0RDBGNkUwOUEzMEEwNEE1NUM5Nzc4QkYu Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1NjY0NThlNDU3OGI2N2Vl ZDMwNTNmODIwZjUvMS8zMjYxMzA2MjNhMzQ2NTMwMzczYTM3MzgzMDMwM2EzYTJm MzMzNzJkMzQzODIwM2QzZTIwMzIzMDMzMzAzNjMyLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDKgtOB3gw DQYJKoZIhvcNAQELBQADggEBAIfLQ3EsNo65Q/D0+3h3O5eQrj0huDtc2M11UGD/ hakzBwPQ/2BjLCo+0CZi5pIwINMA0m+DUc7IvxdfCfCPDistuZS+W3CLRTvkz4Wb 113v/vBBWT0DlDpnSmw/5nNG41Bqmz9iEhOapf8QcRe2ZBgjnhkhOvrXLh3jOP1M 5CmePzampFRR20b3wsNh0NV54FwfUVTMBToV5OyccyB+uVZlc0FRWxZxuFsF7mX9 +oRWbGXjgmfPpeDA/VB51hfsVlRbz5SS5QZVkv4NlU3icnHGoaoBiFuLNrJ52gbK JJTYxjHv6iwxeQbV/KkKVAu9ivJAtWhk9AW8bDTvgp9T/jA= -----END CERTIFICATE-----Generated at Wed Jan 21 04:59:50 2026 by rpki-client