This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64303a3a2f34382d3438203d3e20323130383831.roa
File: 326130623a346530373a64303a3a2f34382d3438203d3e20323130383831.roa (raw, json)
Hash identifier: nKupsE8WPN3Rx8V5FbZRs26nNHVq/k8KlcmYhWCEUOk=
Subject key identifier: 75:F4:35:8D:A6:13:FD:C3:5F:6A:16:D9:33:10:7E:D9:DB:D1:2A:76
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 68DC3BD56C4F04698409EE2D866CF1763D33C511
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64303a3a2f34382d3438203d3e20323130383831.roa
Signing time: Thu 08 Jan 2026 14:44:32 +0000
ROA not before: Thu 08 Jan 2026 14:39:32 +0000
ROA not after: Thu 07 Jan 2027 14:44:32 +0000
asID: 210881
IP address blocks: 2a0b:4e07:d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Jan 2026 22:22:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:dc:3b:d5:6c:4f:04:69:84:09:ee:2d:86:6c:f1:76:3d:33:c5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Jan 8 14:39:32 2026 GMT
Not After : Jan 7 14:44:32 2027 GMT
Subject: CN=75F4358DA613FDC35F6A16D933107ED9DBD12A76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:63:a4:59:04:82:c8:1b:69:8f:b0:52:62:
4b:01:2b:e3:eb:5e:3a:9e:26:c9:51:4b:92:65:1e:
00:59:a7:47:d4:a9:39:aa:0a:9c:d4:0e:0d:13:dd:
e9:b1:77:b9:2e:20:e8:2b:03:18:12:3a:7d:f2:1d:
4f:54:5a:99:15:8b:ca:42:c9:f5:9b:ef:09:20:3a:
0a:0e:6d:2f:59:a4:ea:3d:c9:1a:fc:dd:b9:34:23:
70:16:4b:a6:eb:d3:ba:e8:fb:16:60:09:3f:11:7c:
44:89:0e:56:80:07:61:2d:05:4a:35:2b:ba:63:7c:
df:92:d4:9b:8a:ce:15:bd:e7:6e:5c:23:90:9e:50:
60:87:34:81:e2:4e:c2:69:40:b3:bd:84:9d:3e:3d:
bc:1f:28:75:f7:6f:d0:d9:fa:ae:dc:8d:cf:c9:0b:
dd:05:82:87:bc:23:4d:44:0a:60:1d:82:85:21:f1:
56:a3:2d:16:04:c6:b2:52:65:60:3b:28:ee:41:c9:
06:b9:f8:ee:2f:4e:6d:4d:3f:f9:98:93:79:90:ef:
8c:30:4e:a1:65:dc:ba:56:65:89:6d:03:80:ca:08:
3f:22:81:7b:43:d0:f2:14:bc:63:06:ec:1a:46:fc:
54:3f:cd:01:f1:ce:cf:f5:cd:02:e1:2c:09:a4:bc:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F4:35:8D:A6:13:FD:C3:5F:6A:16:D9:33:10:7E:D9:DB:D1:2A:76
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/326130623a346530373a64303a3a2f34382d3438203d3e20323130383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:d0::/48
Signature Algorithm: sha256WithRSAEncryption
9c:5d:56:0d:47:e6:d1:9c:78:31:73:9e:90:bf:8b:96:05:03:
07:3d:42:e4:e4:2e:bb:f0:b5:b7:a6:5b:9a:67:46:69:95:0b:
34:f1:21:98:1a:05:dd:47:1f:1c:74:7f:83:f9:4d:0b:90:41:
6f:f6:e9:03:06:2e:d6:53:f4:48:d3:a6:10:a7:d3:e4:62:f0:
7a:86:c6:c5:66:91:c2:61:4d:f5:2b:06:bd:25:30:e1:17:01:
c7:20:fa:34:52:05:31:63:96:e2:bf:08:86:88:5d:57:2a:c3:
db:f6:db:7b:00:ec:1b:0a:ab:89:06:f9:55:f6:f2:7e:12:53:
38:58:16:ac:19:58:81:13:9b:48:ad:3f:e2:4e:6a:65:17:ac:
c8:7f:29:31:5e:64:5b:62:7a:74:53:c8:5e:af:0b:b7:c9:50:
57:31:09:eb:b0:f5:25:fa:85:02:42:09:a4:82:ae:9b:4e:79:
80:4b:8a:b6:f3:f7:fb:fd:91:c7:3c:d6:9d:33:ab:02:47:af:
9e:ab:20:6c:bb:32:be:bd:77:77:8a:d0:e6:74:67:04:5e:68:
87:08:ba:35:b1:f6:20:48:f3:aa:4f:49:b9:25:b6:a0:1e:2e:
ed:15:39:82:cd:a3:0e:0a:8b:fd:a1:80:c3:5c:16:50:ea:74:
c3:d3:2b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 05:00:28 2026 by rpki-client