This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437623a3a2f34382d3438203d3e20313531313934.roa
File: 323630323a663932613a613437623a3a2f34382d3438203d3e20313531313934.roa (raw, json)
Hash identifier: 33uUixA0uJZoNLjO6KgeYE3kw/aA7v5tf1atLI8laIQ=
Subject key identifier: 33:53:C3:7A:ED:99:A5:F5:63:C2:55:37:A9:1C:C6:82:3E:0A:23:B4
Certificate issuer: /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial: 2780E038993DD88FF8D6ACE92A987DDD3801571C
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437623a3a2f34382d3438203d3e20313531313934.roa
Signing time: Sat 17 Jan 2026 21:06:14 +0000
ROA not before: Sat 17 Jan 2026 21:01:14 +0000
ROA not after: Sat 16 Jan 2027 21:06:14 +0000
asID: 151194
IP address blocks: 2602:f92a:a47b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 19 Jan 2026 11:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:80:e0:38:99:3d:d8:8f:f8:d6:ac:e9:2a:98:7d:dd:38:01:57:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Validity
Not Before: Jan 17 21:01:14 2026 GMT
Not After : Jan 16 21:06:14 2027 GMT
Subject: CN=3353C37AED99A5F563C25537A91CC6823E0A23B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:68:cb:91:4b:2d:7d:b9:cd:3f:73:ed:4a:
78:1c:2e:56:9d:a3:64:e8:71:2f:8c:94:76:1b:c2:
83:e1:f5:fc:5c:ab:d0:1b:ef:b7:41:78:db:15:05:
ba:30:9a:80:5f:13:0d:b9:33:e1:1d:d7:f9:d2:0d:
82:3e:e7:2e:39:91:89:11:fc:d7:3c:ec:fd:fa:39:
b2:3a:50:60:b1:c8:f7:0c:14:c7:f1:6b:64:db:fe:
3b:34:0e:e1:2f:13:77:37:11:71:1f:dc:8d:e3:2f:
12:4a:2d:91:68:82:f0:cb:0d:63:da:f1:05:3d:a4:
60:e6:61:bb:14:c7:cd:e4:92:00:7a:e3:3a:97:b1:
08:49:1e:3c:29:32:c1:12:64:61:6f:c2:26:f1:70:
0c:b5:fd:e7:cd:50:1d:ef:3c:91:eb:1b:d7:c6:22:
85:a0:ab:18:08:51:6f:a7:79:4d:67:b4:d9:5e:fa:
14:0e:ef:00:83:30:6c:d7:a6:bf:d0:01:d4:00:41:
ad:80:92:0f:0c:e2:c3:bf:fc:4f:57:dc:62:dc:ee:
ae:3e:ad:cc:1b:27:4c:ff:49:b8:0f:f8:d6:a7:cf:
9d:ff:b8:d9:ad:46:e7:d6:b4:b1:9a:a1:a8:1a:15:
25:8a:6e:3e:7c:9b:9f:e2:2b:39:9a:b7:d1:69:98:
5d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:53:C3:7A:ED:99:A5:F5:63:C2:55:37:A9:1C:C6:82:3E:0A:23:B4
X509v3 Authority Key Identifier:
keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437623a3a2f34382d3438203d3e20313531313934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:a47b::/48
Signature Algorithm: sha256WithRSAEncryption
99:76:ff:64:e7:20:d2:8f:36:1b:a5:6d:d2:74:51:1e:f7:02:
c7:04:2a:18:89:04:8e:bd:6d:3d:39:91:64:cc:46:6e:ce:fc:
6c:64:11:5f:e0:41:85:57:63:08:90:78:b5:6e:3e:7c:20:59:
3e:eb:19:77:03:3d:97:9e:6a:c8:91:d3:5b:31:85:8a:ae:92:
a6:95:58:8f:0f:80:c6:32:ec:d2:5e:ab:11:d9:f9:6e:cb:70:
44:b0:ba:f4:e5:25:9c:8d:5f:f9:c4:5f:ec:44:33:eb:5c:c2:
b5:72:1c:6e:7a:03:68:13:45:26:f8:cb:4e:96:8b:45:7d:54:
bb:38:f0:ff:3b:25:ac:0e:ad:a8:f3:95:06:cb:49:e2:53:52:
b5:09:a2:2c:f9:b4:db:2e:3b:e3:81:7c:57:7f:b9:f5:d3:ba:
69:b6:ce:ec:52:ca:5d:ae:1d:a2:c1:27:11:31:87:13:95:c7:
9e:f9:70:86:35:9a:83:cd:61:45:96:7a:c4:c3:02:e9:67:8e:
5d:e4:74:13:83:cb:c6:64:25:97:77:ba:0e:eb:a7:79:96:1c:
71:fc:6f:8d:80:c6:27:42:53:71:9b:f4:e0:c0:2d:5e:e4:e0:
86:02:62:45:af:fa:77:13:90:37:7b:70:43:47:dc:d3:d4:e5:
5c:22:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 17:57:03 2026 by rpki-client