This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3230362e3235312e35322e302f32322d3234203d3e203439333034.roa File: 3230362e3235312e35322e302f32322d3234203d3e203439333034.roa (raw, json) Hash identifier: EVy9CWEs34kEUh8TkA4Rmz3njW+txDVeXC4tnInrqdQ= Subject key identifier: 85:EE:9E:4C:A0:2C:4F:56:38:92:B1:9E:15:C5:F9:03:69:6B:EA:72 Certificate issuer: /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8 Certificate serial: 3EC17C1C8CB8ED3B9CC3FF677B14A80CE521C607 Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3230362e3235312e35322e302f32322d3234203d3e203439333034.roa Signing time: Sat 17 Jan 2026 20:59:39 +0000 ROA not before: Sat 17 Jan 2026 20:54:39 +0000 ROA not after: Sat 16 Jan 2027 20:59:39 +0000 asID: 49304 IP address blocks: 206.251.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 11:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c1:7c:1c:8c:b8:ed:3b:9c:c3:ff:67:7b:14:a8:0c:e5:21:c6:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8 Validity Not Before: Jan 17 20:54:39 2026 GMT Not After : Jan 16 20:59:39 2027 GMT Subject: CN=85EE9E4CA02C4F563892B19E15C5F903696BEA72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:2b:ee:87:68:f6:1c:9f:87:9a:ce:a3:b8: 8c:38:62:32:0f:67:5f:42:30:dc:e2:d4:ac:70:06: 66:4e:66:44:bd:e6:00:de:21:41:97:8d:03:16:1b: 94:ae:87:41:ee:78:b9:42:40:75:7a:6c:3f:ff:2b: 8a:79:4d:63:90:73:fb:63:85:26:5a:43:af:de:17: 0c:07:e5:33:a0:2c:1b:d5:02:03:7b:f4:89:07:b6: 93:dc:3e:7f:4b:85:d0:81:c6:f8:84:41:a4:2c:4e: 7a:b0:f5:98:60:4b:11:8b:40:e9:ff:f0:4f:6a:5f: 67:5f:90:f9:a6:c0:c4:17:0f:d9:d9:ce:a3:d5:38: d4:87:1b:db:3a:93:be:97:cd:e6:77:27:76:73:99: 91:5d:e1:b2:f2:b0:1e:b5:62:26:7b:5a:03:78:ab: 5d:ae:1f:35:f0:fd:77:64:30:b6:a2:6d:5f:e4:98: 52:0c:9c:f3:4b:d0:b4:00:ca:94:8c:61:0f:44:9a: 67:87:f0:ac:19:43:b9:b5:59:c1:2a:1d:9d:93:16: 78:de:84:c6:3b:b3:83:0b:4d:db:b2:49:55:d3:ca: 4e:eb:bd:56:e2:aa:59:7f:e9:85:51:ea:36:2a:3f: a2:01:b0:a7:a9:f5:af:2b:11:75:6d:bb:ac:7b:d6: 71:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EE:9E:4C:A0:2C:4F:56:38:92:B1:9E:15:C5:F9:03:69:6B:EA:72 X509v3 Authority Key Identifier: keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/3230362e3235312e35322e302f32322d3234203d3e203439333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.251.52.0/22 Signature Algorithm: sha256WithRSAEncryption 85:d0:cf:71:11:c2:60:23:2e:99:2c:96:f7:c3:0a:52:c8:08: e6:3d:a9:7a:d6:fe:95:9a:a2:b0:ec:4b:b9:22:0a:a2:33:43: 37:75:a5:81:a3:f0:75:a3:a4:15:51:19:e9:cc:3c:0e:60:7c: 82:0c:71:6a:2a:93:45:a3:b5:17:fb:d8:05:8b:9b:09:f2:86: e1:47:c4:4c:ad:e6:5b:c2:0d:b9:d9:b4:9c:d3:29:54:b9:ae: 4a:4a:d1:70:61:d6:f8:37:74:fc:68:bd:ab:9a:d1:2f:07:f2: e7:f6:80:a2:04:d2:54:ec:59:1c:92:bc:1f:83:ea:c5:de:28: 82:3d:f3:93:79:6b:93:4d:7e:c2:f6:f1:2d:61:6b:c1:f6:1c: e8:24:f5:65:a6:e3:99:66:00:83:26:2b:dd:4f:3d:4a:90:22: 7f:ea:2a:52:8c:02:9c:ff:9d:69:e9:93:6e:98:71:f9:9e:46: f5:1a:16:2f:8e:4d:06:87:df:f9:39:4e:68:04:51:dc:41:31: 67:c7:a1:8d:9e:00:fc:a7:4c:2f:0e:ea:a9:0d:28:0d:df:7e: 74:38:26:8d:ba:bc:dd:ca:ad:df:fe:64:17:ec:65:cb:ad:90: a8:f5:3a:76:35:82:1d:fb:2a:bf:e9:66:44:0e:5e:a0:a8:d2: c6:db:74:1a -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgIUPsF8HIy47Tucw/9nexSoDOUhxgcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYTIyYWE4MmJkNjA5YjdiNjgwOGUyMTM0YTRmOGJiNmNl ZWYyODUxNDQxZWQ3YzBmZTgwHhcNMjYwMTE3MjA1NDM5WhcNMjcwMTE2MjA1OTM5 WjAzMTEwLwYDVQQDEyg4NUVFOUU0Q0EwMkM0RjU2Mzg5MkIxOUUxNUM1RjkwMzY5 NkJFQTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBYr7odo9hyf h5rOo7iMOGIyD2dfQjDc4tSscAZmTmZEveYA3iFBl40DFhuUrodB7ni5QkB1emw/ /yuKeU1jkHP7Y4UmWkOv3hcMB+UzoCwb1QIDe/SJB7aT3D5/S4XQgcb4hEGkLE56 sPWYYEsRi0Dp//BPal9nX5D5psDEFw/Z2c6j1TjUhxvbOpO+l83mdyd2c5mRXeGy 8rAetWIme1oDeKtdrh818P13ZDC2om1f5JhSDJzzS9C0AMqUjGEPRJpnh/CsGUO5 tVnBKh2dkxZ43oTGO7ODC03bsklV08pO671W4qpZf+mFUeo2Kj+iAbCnqfWvKxF1 bbuse9ZxuwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFIXunkygLE9WOJKxnhXF+QNp a+pyMB8GA1UdIwQYMBaAFGUsAZnmVi+2EZ4lkjAWmCYpwhCNMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8xLzY1MkMwMTk5RTY1NjJGQjYxMTlFMjU5MjMwMTY5ODI2 MjlDMjEwOEQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmIt NDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83ZjMzY2Y1OS1hZTM1LTQxZDQtODI1Mi1k OWJkYmFiYTQyMTAvYTIyYWE4MmJkNjA5YjdiNjgwOGUyMTM0YTRmOGJiNmNlZWYy ODUxNDQxZWQ3YzBmZTguY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5LTAwNzdiODBiNGYwZS8xLzMyMzAzNjJl MzIzNTMxMmUzNTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzOTMzMzAzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAs77NDANBgkqhkiG9w0BAQsFAAOCAQEAhdDPcRHCYCMumSyW98MK UsgI5j2petb+lZqisOxLuSIKojNDN3WlgaPwdaOkFVEZ6cw8DmB8ggxxaiqTRaO1 F/vYBYubCfKG4UfETK3mW8INudm0nNMpVLmuSkrRcGHW+Dd0/Gi9q5rRLwfy5/aA ogTSVOxZHJK8H4Pqxd4ogj3zk3lrk01+wvbxLWFrwfYc6CT1ZabjmWYAgyYr3U89 SpAif+oqUowCnP+daemTbphx+Z5G9RoWL45NBoff+TlOaARR3EExZ8ehjZ4A/KdM Lw7qqQ0oDd9+dDgmjbq83cqt3/5kF+xly62QqPU6djWCHfsqv+lmRA5eoKjSxtt0 Gg== -----END CERTIFICATE-----Generated at Sun Jan 18 17:54:26 2026 by rpki-client