This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa
File: 323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa (raw, json)
Hash identifier: kAoBY+HPJ+v2B5y0tTwW0KdPdiz3ZVlVKWhx52C/bb0=
Subject key identifier: 8B:6C:DD:D5:37:5E:7A:17:6A:5A:85:56:3E:D7:08:B8:EE:1A:04:EF
Certificate issuer: /CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Certificate serial: 2565E7414D86935BB819A0B67BA21EF04FD17851
Authority key identifier: 65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa
Signing time: Sat 17 Jan 2026 21:03:16 +0000
ROA not before: Sat 17 Jan 2026 20:58:16 +0000
ROA not after: Sat 16 Jan 2027 21:03:16 +0000
asID: 139299
IP address blocks: 2602:f92a:d000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/7f33cf59-ae35-41d4-8252-d9bdbaba4210.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 19 Jan 2026 11:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:65:e7:41:4d:86:93:5b:b8:19:a0:b6:7b:a2:1e:f0:4f:d1:78:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8
Validity
Not Before: Jan 17 20:58:16 2026 GMT
Not After : Jan 16 21:03:16 2027 GMT
Subject: CN=8B6CDDD5375E7A176A5A85563ED708B8EE1A04EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bf:ec:93:14:f0:73:52:c7:21:ab:2d:0b:12:
01:d7:1c:3b:ae:48:e6:fe:eb:ff:08:17:fb:30:dc:
9d:80:78:8c:5a:42:3e:9d:cf:b3:a1:ab:bb:b9:4b:
43:c8:af:cf:a8:48:64:de:87:94:de:88:8e:47:d0:
a3:5c:58:eb:38:db:65:e6:0d:d2:32:7d:3e:57:92:
03:95:0a:6f:da:99:99:e4:f5:3a:06:0e:62:cb:8c:
b3:da:3d:1d:01:f7:3e:2d:b1:a1:ed:ee:83:b0:90:
4b:ba:97:02:fa:ef:53:38:72:f7:6c:f3:fc:25:b7:
a2:e7:3a:fd:a5:32:bf:69:b8:96:fa:37:e2:93:0a:
f8:ac:33:2d:d1:84:ba:e5:65:fc:9b:a8:60:ea:ee:
41:bb:c4:0b:fe:4a:53:32:27:e1:22:f8:78:f9:a2:
f7:e8:0f:a8:73:e3:e7:9b:8e:ac:0d:cc:26:a2:90:
87:6d:d6:e0:7b:6f:f6:b4:32:26:c5:00:90:76:74:
1b:39:9a:b0:95:b4:51:36:f2:23:64:6a:a7:c5:c3:
ec:2e:4c:3e:a5:f6:3e:3b:b8:c0:2a:69:05:b8:07:
20:32:58:d8:92:d1:13:fc:19:51:9d:db:b9:77:5b:
34:93:c8:f1:db:99:4f:cf:ba:bb:1b:9b:9d:7c:8f:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6C:DD:D5:37:5E:7A:17:6A:5A:85:56:3E:D7:08:B8:EE:1A:04:EF
X509v3 Authority Key Identifier:
keyid:65:2C:01:99:E6:56:2F:B6:11:9E:25:92:30:16:98:26:29:C2:10:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/652C0199E6562FB6119E25923016982629C2108D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd609b7b6808e2134a4f8bb6ceef2851441ed7c0fe8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/1/323630323a663932613a643030303a3a2f34302d3438203d3e20313339323939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2602:f92a:d000::/40
Signature Algorithm: sha256WithRSAEncryption
a4:b6:94:58:0d:13:d0:dc:cb:17:0d:f2:8c:14:46:c5:50:c4:
cd:b1:69:67:a7:fb:2f:57:22:5e:da:27:e6:7a:fb:3e:da:65:
91:25:60:f6:a9:09:37:5c:ef:be:12:21:ae:ab:f5:12:cb:14:
f0:93:ef:c5:c2:c2:0d:4a:be:5b:34:67:c5:ab:1f:8b:ab:4c:
10:ca:04:ce:8b:47:17:80:6f:16:38:a5:aa:db:f8:87:d7:0c:
3e:bf:ca:da:29:92:4e:63:91:a6:7c:59:6f:c7:8d:61:bb:ca:
be:7b:6c:e8:36:f6:45:d5:ae:39:de:97:e0:6d:16:ac:d1:93:
0c:08:89:cf:16:4f:07:3f:ff:85:f0:8f:f0:4f:fe:cc:46:39:
c2:1b:2c:16:f1:06:34:a1:7a:97:c7:e0:33:05:e9:b4:e0:19:
79:81:16:da:13:62:b7:99:3a:4a:fc:d5:ad:dd:e9:68:36:7a:
80:18:0f:b7:47:aa:95:e4:80:71:f5:c4:fd:3b:34:53:99:24:
03:d1:5c:5f:9a:45:b5:93:71:e4:6d:9e:61:c5:2c:6d:a3:aa:
d3:46:d7:34:c2:38:18:45:52:63:53:e6:26:90:cb:dc:27:95:
29:a1:2d:1c:4f:5a:04:67:ae:7b:e3:25:a1:c6:34:78:e1:63:
73:af:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 17:56:11 2026 by rpki-client