This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3230362e3235312e35322e302f32322d3234203d3e203332333436.roa
File: 3230362e3235312e35322e302f32322d3234203d3e203332333436.roa (raw, json)
Hash identifier: 2HgLzd+gynGabzidkPluIBMAmXgeRg5AWmNASYFvWAg=
Subject key identifier: 65:5E:2B:20:94:39:9E:57:C2:A1:67:DA:18:62:72:EE:66:DB:D7:4E
Certificate issuer: /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial: 1E0FAAB7637E93563706DCFD5F74247061E4B28C
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3230362e3235312e35322e302f32322d3234203d3e203332333436.roa
Signing time: Sat 17 Jan 2026 20:59:51 +0000
ROA not before: Sat 17 Jan 2026 20:54:51 +0000
ROA not after: Sat 16 Jan 2027 20:59:51 +0000
asID: 32346
IP address blocks: 206.251.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 19 Jan 2026 11:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:0f:aa:b7:63:7e:93:56:37:06:dc:fd:5f:74:24:70:61:e4:b2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Validity
Not Before: Jan 17 20:54:51 2026 GMT
Not After : Jan 16 20:59:51 2027 GMT
Subject: CN=655E2B2094399E57C2A167DA186272EE66DBD74E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:91:76:57:d2:71:84:1a:64:96:5a:37:7e:
22:90:16:7b:1f:80:c1:fe:7d:06:cb:92:fd:1b:33:
c6:e1:0c:6b:90:1a:df:af:fe:93:54:00:8e:16:e9:
47:5f:c5:39:2f:68:f3:c8:8d:eb:83:77:68:ec:27:
c3:f8:9f:70:98:a3:f0:09:89:40:2b:fc:88:82:2a:
59:a6:b0:4e:88:d2:c6:2c:1b:cb:86:43:9c:96:87:
3f:b5:1d:17:64:4e:15:1e:66:3a:0a:43:74:f8:4f:
7e:e2:97:cf:83:61:43:01:d8:45:b1:12:29:eb:cc:
00:74:43:93:0d:b4:c0:61:c7:d3:2b:97:83:30:e4:
b0:c1:21:4d:63:63:52:08:50:27:4e:aa:a2:80:c8:
68:91:4c:7d:0c:6f:1d:64:fc:d7:38:d1:14:1c:f0:
4e:a6:ab:b2:41:69:46:0f:f7:6c:84:36:45:8e:db:
4a:c8:7d:f9:9a:f0:7b:ef:47:24:64:76:c5:40:05:
c3:b6:3e:40:28:a6:2a:9d:a6:ae:90:36:af:4c:4e:
44:70:47:3c:f8:ee:a8:19:8d:52:e2:da:87:e6:90:
f6:4f:9f:07:d0:82:6b:12:a8:b2:cc:7e:19:17:61:
02:43:fb:4a:29:09:b8:6f:72:8b:2c:c8:fd:df:ac:
8a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5E:2B:20:94:39:9E:57:C2:A1:67:DA:18:62:72:EE:66:DB:D7:4E
X509v3 Authority Key Identifier:
keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3230362e3235312e35322e302f32322d3234203d3e203332333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.251.52.0/22
Signature Algorithm: sha256WithRSAEncryption
46:0d:30:e3:e6:1d:a6:c5:e0:ec:c6:33:ec:35:d4:fe:83:08:
29:7a:79:62:d1:55:42:34:f6:f0:f2:0a:6b:46:06:3e:f5:6b:
36:68:d1:6e:27:1b:37:9f:e8:be:4a:e6:ab:e6:14:a0:05:c3:
a0:40:44:2e:61:be:61:1c:5a:2c:98:2d:9d:b9:9b:bb:bd:2f:
a3:a0:b7:af:fc:9b:c7:06:fb:1e:bf:d5:8c:5e:43:ba:ad:a9:
66:71:17:d9:6a:4d:ea:2e:15:c7:bc:a6:8a:c5:a6:2d:1b:da:
60:5b:0f:16:1c:b3:e4:51:66:92:6c:9a:6a:f9:19:51:9a:82:
5b:7d:d8:03:a7:0b:cb:b2:8f:ce:6a:0c:d4:2f:66:b4:ee:64:
7d:12:89:4d:12:0d:17:ef:4e:11:d4:45:3f:d6:6c:04:06:ca:
be:b0:e1:f6:1d:28:12:98:eb:6f:69:f0:e2:78:7f:e0:ef:32:
fc:eb:a9:77:a1:4d:33:e3:43:ce:21:6a:63:b6:08:31:32:b0:
ac:c5:98:8e:24:f9:e4:98:62:d1:98:3e:45:5d:79:28:0e:f7:
2b:13:c8:e5:cd:37:57:2d:26:19:87:d5:86:5a:72:ea:22:9f:
fc:24:3f:5d:e7:32:58:10:b2:58:33:c2:af:24:f6:0b:26:f9:
ac:e1:8e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 17:54:25 2026 by rpki-client