This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151487.roa File: AS151487.roa (raw, json) Hash identifier: K7yjLgLJD2oIRKbpE8DW7eMp2MqimflT2iZy6ZIOjKk= Subject key identifier: 0D:4F:4F:D7:A4:80:02:19:EC:3F:03:EA:21:51:61:51:50:BF:EE:C6 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 6A7493B815069E76DA34066E1CAB4C8B37F24F30 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151487.roa Signing time: Thu 01 Jan 2026 00:06:52 +0000 ROA not before: Thu 01 Jan 2026 00:01:52 +0000 ROA not after: Thu 31 Dec 2026 00:06:52 +0000 asID: 151487 IP address blocks: 104.234.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 02:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:74:93:b8:15:06:9e:76:da:34:06:6e:1c:ab:4c:8b:37:f2:4f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 1 00:01:52 2026 GMT Not After : Dec 31 00:06:52 2026 GMT Subject: CN=0D4F4FD7A4800219EC3F03EA2151615150BFEEC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:37:9e:19:05:2e:e8:58:4d:e4:7c:34:b2:43: 05:07:db:cb:6a:fb:71:49:d2:fe:b6:1d:48:05:58: 1b:63:3f:39:6d:68:2c:e4:56:35:bf:4a:58:f7:d2: c1:4c:d0:3d:e3:ea:46:42:f8:e2:ee:74:41:a6:6d: a5:44:fe:d2:1b:ad:45:20:4c:21:a6:c4:28:69:24: ec:63:83:bb:eb:a2:9e:2c:53:80:a9:bf:84:87:1b: 5c:06:b0:60:9e:db:12:c8:ee:0b:bd:e7:d8:73:23: 7f:de:6b:78:77:bc:0f:c0:d3:23:8d:84:90:cf:7c: 03:21:ca:7b:64:dc:cd:94:c5:ab:12:3c:0c:db:b9: 27:a2:e9:a5:e4:d5:2f:dd:ce:ea:ce:8c:61:fe:cd: da:e8:0c:96:16:2d:c9:7c:dc:fb:62:25:58:d6:38: a2:36:ef:bb:7b:c5:b3:5c:47:81:ff:c4:ad:71:5c: a9:db:6a:56:c9:d2:86:77:4d:29:a3:43:56:3d:20: 44:83:23:2e:4b:96:55:24:db:a6:a1:e5:75:d8:f5: 5e:0b:b5:15:cb:1a:a6:ad:9f:a8:a7:e9:a0:8a:c9: a7:2d:2d:24:cb:db:c9:93:71:2f:af:4f:6c:78:1d: 7a:a1:9b:3d:af:ce:5c:a0:49:2f:c4:3e:6f:99:b7: 92:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4F:4F:D7:A4:80:02:19:EC:3F:03:EA:21:51:61:51:50:BF:EE:C6 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151487.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.155.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:0f:82:78:27:63:54:8b:ab:e6:12:76:b4:a0:fe:fa:0e:1c: 21:0e:cc:e6:95:4c:dd:02:23:fe:b4:f6:3b:bc:59:69:de:2b: 4a:73:64:cd:4f:70:3c:0d:b1:bf:60:14:49:21:79:74:4f:82: bf:8c:7d:4e:dd:1d:02:04:25:4c:2c:e5:b3:8f:32:a3:a5:b5: e2:b3:f6:e7:42:4f:16:dd:73:02:bc:85:a2:d6:31:f6:4a:76: 02:5e:50:4e:ee:4b:a9:b7:ee:d7:61:b6:38:08:65:9e:45:ad: 87:da:e4:90:93:54:0c:3d:89:aa:13:fb:db:fa:6b:26:e5:6b: bf:3d:18:26:32:7a:f4:99:29:88:cc:15:65:c3:51:78:c8:39: 7d:31:29:3a:3c:f1:89:2d:25:73:67:da:ab:73:c8:16:72:1c: 34:c4:82:44:c9:50:80:20:5a:ba:ce:a4:95:31:52:f6:2a:d4: 49:6c:37:b8:95:47:39:d6:68:b8:cd:c4:5a:b6:d0:f0:4f:04: 04:0f:85:00:5f:a7:76:5f:12:ac:44:e6:d8:9a:d1:7d:99:10: fe:b2:0e:c0:af:bc:fc:bd:20:29:0a:54:11:1e:2c:84:be:79: 26:54:6d:9b:a9:5a:5e:9a:1b:73:4e:cb:18:f5:2e:63:1d:89: 92:73:91:38 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUanSTuBUGnnbaNAZuHKtMizfyTzAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwMTAxMDAwMTUyWhcNMjYxMjMxMDAwNjUy WjAzMTEwLwYDVQQDEygwRDRGNEZEN0E0ODAwMjE5RUMzRjAzRUEyMTUxNjE1MTUw QkZFRUM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjeeGQUu6FhN 5Hw0skMFB9vLavtxSdL+th1IBVgbYz85bWgs5FY1v0pY99LBTNA94+pGQvji7nRB pm2lRP7SG61FIEwhpsQoaSTsY4O766KeLFOAqb+EhxtcBrBgntsSyO4LvefYcyN/ 3mt4d7wPwNMjjYSQz3wDIcp7ZNzNlMWrEjwM27knouml5NUv3c7qzoxh/s3a6AyW Fi3JfNz7YiVY1jiiNu+7e8WzXEeB/8StcVyp22pWydKGd00po0NWPSBEgyMuS5ZV JNumoeV12PVeC7UVyxqmrZ+op+mgismnLS0ky9vJk3Evr09seB16oZs9r85coEkv xD5vmbeSYQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFA1PT9ekgAIZ7D8D6iFRYVFQ v+7GMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE1MTQ4Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqmzANBgkqhkiG9w0BAQsFAAOC AQEAfg+CeCdjVIur5hJ2tKD++g4cIQ7M5pVM3QIj/rT2O7xZad4rSnNkzU9wPA2x v2AUSSF5dE+Cv4x9Tt0dAgQlTCzls48yo6W14rP250JPFt1zAryFotYx9kp2Al5Q Tu5Lqbfu12G2OAhlnkWth9rkkJNUDD2JqhP72/prJuVrvz0YJjJ69JkpiMwVZcNR eMg5fTEpOjzxiS0lc2faq3PIFnIcNMSCRMlQgCBaus6klTFS9irUSWw3uJVHOdZo uM3EWrbQ8E8EBA+FAF+ndl8SrETm2JrRfZkQ/rIOwK+8/L0gKQpUER4shL55JlRt m6laXpobc07LGPUuYx2JknOROA== -----END CERTIFICATE-----Generated at Sun Jan 25 07:09:46 2026 by rpki-client