This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a62303a3a2f34342d3438203d3e20323134363330.roa
File: 323630323a663939323a62303a3a2f34342d3438203d3e20323134363330.roa (raw, json)
Hash identifier: PHjDJexK/Eklx6InBXxOBTRmjtOGLIjGAGFc7gbqZb8=
Subject key identifier: 58:80:34:0B:D4:30:4A:AC:18:F5:55:44:AA:F3:63:8D:D5:AB:10:3B
Certificate issuer: /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial: 2969E35CBC26FA2F0E058E50C88D89399B3AC295
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a62303a3a2f34342d3438203d3e20323134363330.roa
Signing time: Mon 05 Jan 2026 17:51:47 +0000
ROA not before: Mon 05 Jan 2026 17:46:47 +0000
ROA not after: Mon 04 Jan 2027 17:51:47 +0000
asID: 214630
IP address blocks: 2602:f992:b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Jan 2026 03:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:69:e3:5c:bc:26:fa:2f:0e:05:8e:50:c8:8d:89:39:9b:3a:c2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Validity
Not Before: Jan 5 17:46:47 2026 GMT
Not After : Jan 4 17:51:47 2027 GMT
Subject: CN=5880340BD4304AAC18F55544AAF3638DD5AB103B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:17:e9:cb:39:eb:4c:b5:01:79:1d:c9:12:
26:ca:43:62:1f:80:e8:cb:bf:5b:a5:f1:ef:fd:86:
45:2e:21:42:15:4f:7b:3c:7a:41:9a:5d:84:83:00:
89:7a:5a:50:39:b3:1c:b9:07:ee:48:d4:ec:40:2d:
d2:22:e6:6a:83:4e:81:85:3d:25:11:b9:d0:a9:87:
0a:d2:95:54:4c:90:f3:06:e5:cf:50:11:6f:1a:b8:
ce:c6:c6:c2:34:19:57:b4:e7:be:2b:47:77:bf:f9:
4f:7f:e4:be:f9:9b:aa:d5:2c:73:71:31:86:03:c2:
18:9c:67:e0:40:85:da:e2:52:41:58:35:e1:dd:c8:
54:12:47:80:36:d6:9a:0d:38:58:03:4d:51:c4:41:
1f:d6:4e:34:fc:b0:ae:ab:20:b4:51:56:72:23:38:
37:11:49:34:1e:d3:2d:aa:25:62:9f:66:ad:8c:32:
64:bb:b6:d4:bc:2d:80:a4:e9:ed:ea:9a:cb:f6:e8:
65:7c:ba:f9:aa:5e:96:e2:5c:5f:84:38:97:3c:5a:
b8:ee:6f:e6:31:f7:d6:1f:2b:4f:96:7a:96:aa:6b:
f1:8b:d9:03:d6:df:a2:50:66:04:ed:ab:09:55:b1:
43:c2:60:da:ea:91:71:08:41:4b:9e:66:a6:b6:3c:
32:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:80:34:0B:D4:30:4A:AC:18:F5:55:44:AA:F3:63:8D:D5:AB:10:3B
X509v3 Authority Key Identifier:
keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/323630323a663939323a62303a3a2f34342d3438203d3e20323134363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f992:b0::/44
Signature Algorithm: sha256WithRSAEncryption
85:5e:63:09:27:eb:4f:2e:8b:c8:d1:c6:68:72:95:bd:b5:14:
02:21:92:27:4f:00:b5:d9:11:7a:78:7a:cf:00:a7:44:1f:64:
33:d1:a5:16:5b:ff:f2:ba:22:0e:32:c0:35:93:45:3a:37:b1:
4a:8f:3b:12:90:bb:32:d3:13:29:25:0f:9f:c3:7c:32:43:fc:
f0:8f:4f:01:4f:04:6c:5b:b6:68:93:3a:b8:b7:4b:c1:97:3e:
7d:6b:f5:c1:1f:c7:06:d2:bd:27:48:54:88:4c:4d:4e:f2:16:
5e:36:14:dd:2c:a3:9f:45:5b:93:d1:2d:2f:5d:3f:ec:a5:92:
f2:9d:be:0e:16:0e:8d:64:5c:fa:08:d9:94:81:91:c5:8d:eb:
8e:48:60:d1:62:09:ae:44:17:10:f9:a4:01:35:65:57:b5:1c:
83:7d:59:99:69:7d:f7:13:fc:94:8a:bf:83:03:1b:53:c2:5e:
e5:62:3c:61:6a:8c:3b:06:eb:57:70:00:0e:e3:91:38:31:e8:
bc:73:cc:aa:0f:89:51:7d:69:59:94:71:6c:0b:85:45:e2:57:
e3:46:38:19:e2:30:68:2f:5b:a6:af:9b:37:82:18:ee:c9:f6:
53:b7:59:fd:d6:ff:e5:7a:f8:be:19:e3:5c:63:d4:c0:26:31:
69:e6:7b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 06:05:26 2026 by rpki-client