This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/32332e3139312e34302e302f32342d3234203d3e203331383938.roa File: 32332e3139312e34302e302f32342d3234203d3e203331383938.roa (raw, json) Hash identifier: BIc+hyQ1qBCFYW6xfCJ2KWm2W3zeUtGnxmH5EdT5vpY= Subject key identifier: 76:01:AA:E4:03:C6:E3:2D:22:CA:A2:7C:C7:AA:2F:52:B8:05:D5:62 Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 1D2A52CFE8C93D66B552BEF18C953B540EE3F55D Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/32332e3139312e34302e302f32342d3234203d3e203331383938.roa Signing time: Mon 29 Dec 2025 09:23:39 +0000 ROA not before: Mon 29 Dec 2025 09:18:39 +0000 ROA not after: Mon 28 Dec 2026 09:23:39 +0000 asID: 31898 IP address blocks: 23.191.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 09:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2a:52:cf:e8:c9:3d:66:b5:52:be:f1:8c:95:3b:54:0e:e3:f5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Dec 29 09:18:39 2025 GMT Not After : Dec 28 09:23:39 2026 GMT Subject: CN=7601AAE403C6E32D22CAA27CC7AA2F52B805D562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:22:0d:bd:66:b8:b4:d8:8a:a7:d6:00:4a:c4: 5e:1e:41:a7:14:46:ec:58:92:3e:b0:da:bb:e5:84: 3e:38:b2:10:0f:94:84:12:de:3f:1b:a3:15:bf:13: 8b:e4:a4:40:01:e7:50:df:d5:79:3c:92:68:15:da: 3a:24:c4:73:4e:ea:04:2d:1a:83:f5:f3:64:0a:ac: 40:75:6a:18:9d:22:f2:4b:67:cc:7f:e9:15:7d:6a: 61:81:bd:cd:60:41:d8:c0:3a:30:bd:79:b9:ba:52: fe:a7:7b:19:78:1a:7f:2e:8d:3e:60:ba:cf:52:24: 0d:a4:7e:2c:42:94:af:90:91:17:4a:5a:e1:5c:40: 3e:9a:c1:be:39:9e:3d:d3:c2:00:53:1e:68:ed:d7: 3a:44:9e:1a:f2:6e:1c:bc:ce:54:90:0a:39:58:1c: 57:ad:0c:21:13:0f:ca:d7:7a:6c:a9:69:e3:f2:6b: 60:85:9a:18:42:ed:73:2f:28:bf:a9:59:76:ed:29: ba:2d:02:cd:2a:4a:84:7a:4d:fe:8e:03:63:e1:18: 49:6b:33:20:00:bd:59:ba:0d:ce:2d:8d:48:1d:95: e7:3c:b7:07:44:d0:56:de:0b:92:fd:67:de:c5:3e: bf:b1:c4:0a:c5:87:60:d4:13:23:a6:dc:8f:7f:92: 3a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:01:AA:E4:03:C6:E3:2D:22:CA:A2:7C:C7:AA:2F:52:B8:05:D5:62 X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/32332e3139312e34302e302f32342d3234203d3e203331383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.191.40.0/24 Signature Algorithm: sha256WithRSAEncryption 69:cc:93:ed:22:fe:56:03:7d:c7:6b:9e:d3:c8:fb:4f:76:8a: f5:83:87:8f:ea:0d:b6:dd:bd:92:bc:1a:6a:8c:43:99:3a:cd: 4e:b2:2d:e1:82:8d:d2:7a:ba:e4:ec:96:96:90:0f:4b:c1:6f: 4e:b0:df:15:99:94:69:56:10:11:98:3f:6e:52:78:96:b0:9e: 74:74:50:b1:16:f3:ed:31:f1:3c:74:32:c1:d7:58:2f:10:2b: 9a:03:33:f6:08:85:09:19:40:8c:a1:2d:c8:99:01:cb:a5:82: f5:ea:94:57:f9:0b:0a:ba:48:39:f9:75:d8:9d:13:ba:15:e1: fd:bd:ba:bc:44:28:40:fd:de:a2:3d:0b:e4:fe:b7:4d:c1:f5: 86:eb:eb:43:5a:4d:93:bd:55:64:cd:cf:35:b2:00:fd:be:87: 4c:3c:b0:3d:ce:ce:f5:76:38:44:7a:00:e3:a2:54:ed:e5:9a: dc:58:05:80:0c:55:68:59:3c:73:0f:30:41:49:a0:de:45:d2: 61:ad:f9:4c:e4:90:c8:c7:7e:f6:5d:75:66:c6:fe:51:30:b5: 19:91:a0:ca:4c:40:0e:56:b4:e3:07:25:9e:06:d7:cf:19:f9: 11:2c:aa:37:56:80:0b:1c:78:94:5d:c9:2d:da:88:0a:c2:ec: 77:8e:40:bb -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUHSpSz+jJPWa1Ur7xjJU7VA7j9V0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUxMjI5MDkxODM5WhcNMjYxMjI4MDkyMzM5 WjAzMTEwLwYDVQQDEyg3NjAxQUFFNDAzQzZFMzJEMjJDQUEyN0NDN0FBMkY1MkI4 MDVENTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSINvWa4tNiK p9YASsReHkGnFEbsWJI+sNq75YQ+OLIQD5SEEt4/G6MVvxOL5KRAAedQ39V5PJJo Fdo6JMRzTuoELRqD9fNkCqxAdWoYnSLyS2fMf+kVfWphgb3NYEHYwDowvXm5ulL+ p3sZeBp/Lo0+YLrPUiQNpH4sQpSvkJEXSlrhXEA+msG+OZ4908IAUx5o7dc6RJ4a 8m4cvM5UkAo5WBxXrQwhEw/K13psqWnj8mtghZoYQu1zLyi/qVl27Sm6LQLNKkqE ek3+jgNj4RhJazMgAL1Zug3OLY1IHZXnPLcHRNBW3guS/WfexT6/scQKxYdg1BMj ptyPf5I6swIDAQABo4ICyzCCAscwHQYDVR0OBBYEFHYBquQDxuMtIsqifMeqL1K4 BdViMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUH MAuGgYtyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5LTBhYjcwZTQ4MTViYi8xLzMyMzMyZTMx MzkzMTJlMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzEzODM5Mzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAAXvygwDQYJKoZIhvcNAQELBQADggEBAGnMk+0i/lYDfcdrntPI+092 ivWDh4/qDbbdvZK8GmqMQ5k6zU6yLeGCjdJ6uuTslpaQD0vBb06w3xWZlGlWEBGY P25SeJawnnR0ULEW8+0x8Tx0MsHXWC8QK5oDM/YIhQkZQIyhLciZAculgvXqlFf5 Cwq6SDn5ddidE7oV4f29urxEKED93qI9C+T+t03B9Ybr60NaTZO9VWTNzzWyAP2+ h0w8sD3OzvV2OER6AOOiVO3lmtxYBYAMVWhZPHMPMEFJoN5F0mGt+UzkkMjHfvZd dWbG/lEwtRmRoMpMQA5WtOMHJZ4G188Z+REsqjdWgAsceJRdyS3aiArC7HeOQLs= -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:47 2026 by rpki-client