This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209242.roa File: AS209242.roa (raw, json) Hash identifier: 8UIYiR4sXqZD0Lh51M4oRl78at1KGhr9Z2DG+QsZw60= Subject key identifier: FF:58:10:69:6E:FF:D6:4B:A2:8C:65:1E:D5:38:AB:92:E3:7B:D8:3A Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 497E0776D691155E22743669D75F769AD51BA571 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209242.roa Signing time: Sat 24 Jan 2026 07:50:47 +0000 ROA not before: Sat 24 Jan 2026 07:45:47 +0000 ROA not after: Sat 23 Jan 2027 07:50:47 +0000 asID: 209242 IP address blocks: 104.234.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 02:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:7e:07:76:d6:91:15:5e:22:74:36:69:d7:5f:76:9a:d5:1b:a5:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 24 07:45:47 2026 GMT Not After : Jan 23 07:50:47 2027 GMT Subject: CN=FF5810696EFFD64BA28C651ED538AB92E37BD83A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:1e:a3:bf:8c:15:3c:a1:c1:29:31:35:63: 47:6e:47:32:a5:b2:80:51:a0:85:4d:c0:d2:c1:a3: f2:d8:ac:20:9a:f6:4b:18:23:7f:87:08:a0:59:8f: 51:df:79:ad:99:f4:b3:c0:c1:22:d6:e0:70:e2:cc: c3:b0:4a:e5:8c:94:b4:b2:9b:45:e3:86:1f:c1:c1: b9:16:fb:1a:61:e6:35:19:e8:da:66:f5:32:d4:a6: 62:fb:cf:d9:da:77:7b:5c:f3:95:4b:ca:f6:5e:64: 4b:e1:63:e6:6a:44:99:38:c3:3a:43:5e:66:1a:0c: 34:ab:26:8c:69:98:6e:26:cd:d4:c9:cd:7a:30:e2: 43:d0:78:86:3e:c0:bc:21:68:8f:de:72:53:03:c2: 1f:d2:54:dc:22:8e:87:60:1d:3d:c4:73:dc:50:1b: 29:f1:97:3b:4c:3f:d3:27:79:b4:f7:96:10:ec:bc: 69:8f:a9:cc:88:96:a4:fa:a9:b8:0c:98:b7:62:cb: 48:4a:bf:20:cb:23:97:7c:6a:74:3d:32:df:0f:c7: db:ba:0d:67:83:18:4c:4e:b4:0c:3c:f7:04:7c:11: 1d:92:e1:a7:54:de:e0:3d:32:be:ab:79:2f:c8:84: 6b:09:0e:a9:78:da:88:64:b6:4c:e7:a6:29:b8:bc: 7a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:58:10:69:6E:FF:D6:4B:A2:8C:65:1E:D5:38:AB:92:E3:7B:D8:3A X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS209242.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.239.0/24 Signature Algorithm: sha256WithRSAEncryption a0:cf:a7:db:24:38:2d:7e:d6:e0:49:0e:50:79:34:0a:e9:d2: 41:63:ee:38:a2:83:c6:00:8d:eb:2a:2a:aa:a8:73:6e:ae:0b: ef:c8:b9:d9:5e:0c:31:8a:cf:f2:0c:4f:e4:7b:b3:75:68:ab: 95:9b:74:42:85:11:11:41:26:35:03:bf:51:1d:f1:68:15:78: e5:d9:a7:d4:a9:4a:76:84:66:be:47:ce:c3:28:98:6d:ef:c1: b2:ea:4e:4b:01:c8:82:b2:b5:a9:46:37:ee:3a:0c:e6:a0:c2: a4:af:96:6b:5b:9d:6b:7e:70:8f:b7:67:82:3c:fe:96:51:0e: 92:6d:f2:1b:e5:db:88:14:1f:8c:c4:68:c2:7c:e4:29:cc:2f: db:b4:06:ff:32:d5:cc:09:93:ea:30:6a:5c:77:92:ff:f3:f8: 03:b9:55:3f:1c:79:68:b9:81:ce:ca:f5:5c:18:05:94:6f:41: de:e5:65:36:64:3f:13:b7:a1:e9:38:21:35:b8:e1:12:4b:7c: 77:1c:50:c0:76:48:1a:4b:a2:2c:12:1e:14:6e:38:cd:bd:2f: d2:f1:41:90:36:bb:a6:77:43:18:c7:72:25:cf:20:f2:84:d8: cb:dd:bd:01:55:9d:51:c6:1c:d5:96:14:19:ac:e0:69:90:fb: ef:d8:76:11 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUSX4HdtaRFV4idDZp1192mtUbpXEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwMTI0MDc0NTQ3WhcNMjcwMTIzMDc1MDQ3 WjAzMTEwLwYDVQQDEyhGRjU4MTA2OTZFRkZENjRCQTI4QzY1MUVENTM4QUI5MkUz N0JEODNBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLceo7+MFTyh wSkxNWNHbkcypbKAUaCFTcDSwaPy2KwgmvZLGCN/hwigWY9R33mtmfSzwMEi1uBw 4szDsErljJS0sptF44YfwcG5FvsaYeY1GejaZvUy1KZi+8/Z2nd7XPOVS8r2XmRL 4WPmakSZOMM6Q15mGgw0qyaMaZhuJs3Uyc16MOJD0HiGPsC8IWiP3nJTA8If0lTc Io6HYB09xHPcUBsp8Zc7TD/TJ3m095YQ7Lxpj6nMiJak+qm4DJi3YstISr8gyyOX fGp0PTLfD8fbug1ngxhMTrQMPPcEfBEdkuGnVN7gPTK+q3kvyIRrCQ6peNqIZLZM 56YpuLx6EwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFP9YEGlu/9ZLooxlHtU4q5Lj e9g6MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwOTI0Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq7zANBgkqhkiG9w0BAQsFAAOC AQEAoM+n2yQ4LX7W4EkOUHk0CunSQWPuOKKDxgCN6yoqqqhzbq4L78i52V4MMYrP 8gxP5HuzdWirlZt0QoUREUEmNQO/UR3xaBV45dmn1KlKdoRmvkfOwyiYbe/BsupO SwHIgrK1qUY37joM5qDCpK+Wa1uda35wj7dngjz+llEOkm3yG+XbiBQfjMRownzk Kcwv27QG/zLVzAmT6jBqXHeS//P4A7lVPxx5aLmBzsr1XBgFlG9B3uVlNmQ/E7eh 6TghNbjhEkt8dxxQwHZIGkuiLBIeFG44zb0v0vFBkDa7pndDGMdyJc8g8oTYy929 AVWdUcYc1ZYUGazgaZD779h2EQ== -----END CERTIFICATE-----Generated at Sun Jan 25 07:09:37 2026 by rpki-client