This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437643a3a2f34382d3438203d3e20323130333532.roa
File: 323630323a663932613a613437643a3a2f34382d3438203d3e20323130333532.roa (raw, json)
Hash identifier: 77eb0TAjk47MkAe5OX0t+bmIiF/5o238LUqAq2w/M6s=
Subject key identifier: CF:EF:9E:03:20:DA:49:65:07:CD:62:E9:9C:B5:53:64:E3:56:AD:C0
Certificate issuer: /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial: 42FB35BB258CA3DD64E4228A9EFDD2214574ADD1
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437643a3a2f34382d3438203d3e20323130333532.roa
Signing time: Sat 17 Jan 2026 21:19:24 +0000
ROA not before: Sat 17 Jan 2026 21:14:24 +0000
ROA not after: Sat 16 Jan 2027 21:19:24 +0000
asID: 210352
IP address blocks: 2602:f92a:a47d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 19 Jan 2026 11:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:fb:35:bb:25:8c:a3:dd:64:e4:22:8a:9e:fd:d2:21:45:74:ad:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Validity
Not Before: Jan 17 21:14:24 2026 GMT
Not After : Jan 16 21:19:24 2027 GMT
Subject: CN=CFEF9E0320DA496507CD62E99CB55364E356ADC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:20:4f:c6:3c:ff:d2:b6:f5:22:4a:5c:9f:87:
38:e2:fb:e7:be:ac:6d:b6:85:4e:1b:ab:4f:01:3a:
4a:b1:67:5a:57:56:5a:46:f1:0f:1b:7f:da:47:fa:
ef:3f:56:74:ec:b4:a9:e8:cd:83:d5:8e:0b:f3:48:
ca:2c:29:81:21:9c:cc:9f:46:b3:3e:58:a9:21:bc:
74:25:19:dc:f5:8e:89:dd:e7:e3:fa:ef:58:33:b6:
38:cd:3d:7e:30:c7:f7:97:45:3f:16:b0:3f:c5:39:
b4:7e:9e:92:d8:b5:3f:98:db:e5:d4:2d:41:6a:9f:
02:26:e9:fa:3d:53:b0:33:47:22:75:98:d2:82:8a:
70:d0:df:8c:1f:d7:ae:e5:b7:38:7a:cd:df:59:6f:
16:82:0f:cd:b3:a9:83:fe:fb:72:e5:25:69:0f:3b:
35:8a:1f:b2:50:b1:d5:9a:ed:06:4f:bb:36:54:63:
6f:41:fa:32:f1:68:22:8b:8e:99:ab:41:49:b5:b3:
b8:25:bf:32:20:32:5f:1b:11:ef:7b:56:a5:fb:91:
e7:c5:d7:a3:57:29:85:0e:43:f3:c0:69:f3:69:19:
cb:cd:0d:be:fb:4a:2b:a6:9f:ca:88:fc:53:bc:3a:
8e:d7:83:da:a2:90:ea:1d:bc:6d:d3:c2:5b:b5:c5:
0c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EF:9E:03:20:DA:49:65:07:CD:62:E9:9C:B5:53:64:E3:56:AD:C0
X509v3 Authority Key Identifier:
keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a613437643a3a2f34382d3438203d3e20323130333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:a47d::/48
Signature Algorithm: sha256WithRSAEncryption
60:7f:0b:e4:0e:4d:49:78:05:5a:10:b3:b7:b3:59:43:91:95:
3b:0c:0d:19:95:b7:d7:b4:c9:8a:7d:e5:34:46:7f:92:fe:a6:
7e:90:62:f0:93:bd:3d:1d:fa:6d:57:1c:49:f6:3e:08:22:dc:
1a:5b:c7:e8:9a:14:be:75:71:76:e8:70:ed:c1:47:f7:26:82:
f5:04:8d:76:2d:93:e4:0f:a4:a9:f1:f3:5e:a1:f8:90:03:18:
85:c0:6b:0e:40:6f:11:63:f9:5d:b2:04:78:2d:6e:c5:76:0f:
9a:12:ca:81:8b:e0:65:12:13:f7:b7:00:44:8f:5f:60:5a:ce:
5e:d9:88:26:05:84:4b:69:86:c0:d5:25:8a:5b:89:59:f1:11:
97:e4:1b:e8:1a:83:eb:d7:92:d2:64:20:01:f4:ec:3e:7e:50:
2e:78:bf:16:63:c1:1d:75:0a:57:ae:d6:7f:f2:3b:41:4f:25:
90:91:6c:33:b9:6a:0c:c3:53:b4:bb:4b:16:5e:3a:9f:f5:e9:
d2:eb:e2:07:fb:2c:72:f0:e5:ef:db:3d:c9:58:93:89:32:31:
ac:a4:c5:62:0a:ca:89:35:f9:0e:82:1c:a6:1f:78:b1:c8:bb:
e9:1c:c6:8c:26:64:b9:49:ca:d8:d6:bc:8f:9d:b3:bc:6c:08:
3e:ce:88:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 17:55:51 2026 by rpki-client