This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: 3I0/wXciW9qVWKt/sw/XUjbVvIiHvDSVgA+wwiNtTaM= Subject key identifier: 5C:4A:9D:42:7C:34:33:A3:D7:77:68:B5:88:73:A1:D2:38:CE:42:DD Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 3FCBEB203317B68A4B5C32D29DDA8C94107F2FC8 Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa Signing time: Tue 02 Dec 2025 01:14:38 +0000 ROA not before: Tue 02 Dec 2025 01:09:38 +0000 ROA not after: Tue 01 Dec 2026 01:14:38 +0000 asID: 16509 IP address blocks: 157.53.253.0/24 maxlen: 24 157.53.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 11:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:cb:eb:20:33:17:b6:8a:4b:5c:32:d2:9d:da:8c:94:10:7f:2f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Dec 2 01:09:38 2025 GMT Not After : Dec 1 01:14:38 2026 GMT Subject: CN=5C4A9D427C3433A3D77768B58873A1D238CE42DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:be:2e:b4:02:94:a4:68:07:26:be:a3:d4: e4:89:de:75:ce:4f:c7:e6:77:32:b6:fd:ce:4b:d9: bb:40:08:ff:16:d2:6e:6c:ce:97:c0:07:0a:92:a1: 51:f7:0c:64:28:34:d9:ee:2c:4f:47:fd:4e:be:70: e6:ee:72:b9:f1:a2:b9:23:6d:3e:2a:cb:6e:0a:3e: eb:49:66:0e:df:5d:04:8b:a1:42:74:51:9c:28:1d: 1d:7b:e2:65:29:9c:42:06:87:d9:68:6c:74:4c:6d: 02:0e:9e:49:35:29:6b:0d:3b:88:8b:20:2e:4e:e4: d6:d9:e4:48:4c:cc:45:d3:e9:74:1b:88:59:27:5e: 85:75:4d:ae:60:1f:74:22:ec:2b:49:11:2e:ce:a7: c7:21:cd:59:99:e0:07:9a:9e:76:eb:f1:97:69:11: b9:bc:00:91:c1:ab:d1:ba:15:74:97:0c:06:35:23: 7d:db:51:cb:c4:f9:e6:d8:09:49:0d:e8:52:d2:b0: 4c:7e:8a:b3:a3:b1:3d:b6:e4:eb:d3:51:66:29:7a: d7:36:e2:62:76:04:f0:f0:14:b9:a9:ac:c2:6c:c9: 9c:a7:95:80:86:ef:ab:64:d0:12:6b:87:ea:72:b9: a3:d8:59:61:63:cf:72:aa:c4:fb:27:9e:69:2c:7e: 93:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4A:9D:42:7C:34:33:A3:D7:77:68:B5:88:73:A1:D2:38:CE:42:DD X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.53.253.0-157.53.255.255 Signature Algorithm: sha256WithRSAEncryption 6a:86:3a:72:11:c8:28:4e:39:63:77:87:af:73:62:88:c0:23: 00:b0:1c:da:24:f6:89:b7:51:15:f1:0e:12:9a:04:bb:c7:06: 85:d6:0d:ff:4f:43:30:60:41:dd:96:7e:6a:a9:b8:53:cf:76: 48:06:b7:41:5c:22:5c:77:8c:7b:a1:68:d0:72:55:9a:28:d7: 3b:bf:0f:f2:4a:63:7a:95:90:ba:0c:87:ed:b3:c3:49:bb:6a: b3:a2:e0:21:e5:43:6d:ab:70:92:3e:8c:f6:16:f2:08:df:12: df:fd:9e:d3:8e:94:2d:0a:b4:d1:01:4f:5e:3e:7a:bf:d3:2c: 95:40:0f:ee:21:4d:72:da:e0:45:19:8c:9d:f0:99:b5:4d:68: dd:b2:43:c4:93:49:4e:a5:bd:42:fe:a0:3c:ef:67:5d:24:ff: 2e:d1:fb:32:50:b7:1b:9d:e9:0f:69:c9:b6:32:67:ac:4a:cf: 3f:96:79:47:b5:94:37:e1:58:35:e0:3c:e7:75:a0:56:02:18: a2:28:35:b7:23:e1:c1:60:a0:7a:e7:2c:c0:96:9a:f9:eb:77: 31:de:39:6b:43:79:fe:c3:1e:c7:2f:b5:82:d5:3a:8e:f5:b5: e5:73:7c:f3:7d:73:ea:04:3e:01:f5:59:ad:ad:64:10:8a:78: 20:c0:25:30 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUP8vrIDMXtopLXDLSndqMlBB/L8gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjUxMjAyMDEwOTM4WhcNMjYxMjAxMDExNDM4 WjAzMTEwLwYDVQQDEyg1QzRBOUQ0MjdDMzQzM0EzRDc3NzY4QjU4ODczQTFEMjM4 Q0U0MkREMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rS+LrQClKRo Bya+o9Tkid51zk/H5ncytv3OS9m7QAj/FtJubM6XwAcKkqFR9wxkKDTZ7ixPR/1O vnDm7nK58aK5I20+KstuCj7rSWYO310Ei6FCdFGcKB0de+JlKZxCBofZaGx0TG0C Dp5JNSlrDTuIiyAuTuTW2eRITMxF0+l0G4hZJ16FdU2uYB90IuwrSREuzqfHIc1Z meAHmp526/GXaRG5vACRwavRuhV0lwwGNSN921HLxPnm2AlJDehS0rBMfoqzo7E9 tuTr01FmKXrXNuJidgTw8BS5qazCbMmcp5WAhu+rZNASa4fqcrmj2FlhY89yqsT7 J55pLH6TuQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFFxKnUJ8NDOj13dotYhzodI4 zkLdMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCYG CCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBACdNf0DAwGdNDANBgkqhkiG9w0B AQsFAAOCAQEAaoY6chHIKE45Y3eHr3NiiMAjALAc2iT2ibdRFfEOEpoEu8cGhdYN /09DMGBB3ZZ+aqm4U892SAa3QVwiXHeMe6Fo0HJVmijXO78P8kpjepWQugyH7bPD Sbtqs6LgIeVDbatwkj6M9hbyCN8S3/2e046ULQq00QFPXj56v9MslUAP7iFNctrg RRmMnfCZtU1o3bJDxJNJTqW9Qv6gPO9nXST/LtH7MlC3G53pD2nJtjJnrErPP5Z5 R7WUN+FYNeA853WgVgIYoig1tyPhwWCgeucswJaa+et3Md45a0N5/sMexy+1gtU6 jvW15XN8831z6gQ+AfVZra1kEIp4IMAlMA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:59 2025 by rpki-client