This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210531.roa File: AS210531.roa (raw, json) Hash identifier: 2BMmx4C9OZTUOSzjzlNq1NweNR+0e0tHo6hsJUC8iQI= Subject key identifier: 34:52:0B:DF:FB:17:2D:96:DA:6C:9A:1B:53:80:8D:3B:73:EB:08:68 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 51409E9354666EADAA636266B05EE86D1BAAA8DA Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210531.roa Signing time: Tue 25 Nov 2025 08:30:41 +0000 ROA not before: Tue 25 Nov 2025 08:25:41 +0000 ROA not after: Tue 24 Nov 2026 08:30:41 +0000 asID: 210531 IP address blocks: 98.142.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:40:9e:93:54:66:6e:ad:aa:63:62:66:b0:5e:e8:6d:1b:aa:a8:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 25 08:25:41 2025 GMT Not After : Nov 24 08:30:41 2026 GMT Subject: CN=34520BDFFB172D96DA6C9A1B53808D3B73EB0868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:21:a3:d0:a2:1b:f8:06:15:0d:81:79:c4:bd: c4:24:3f:fb:4a:1c:dc:ec:73:3d:c8:49:68:0b:86: c7:d2:bf:a8:d8:2d:a0:2a:00:3e:67:74:1c:bd:bf: 49:6e:a1:0e:6e:9e:de:7c:d4:b2:02:7e:03:aa:0d: 35:0b:ef:ed:d5:b8:9c:5f:06:af:77:41:a2:e0:47: c3:f9:c9:b0:d6:a1:99:54:9d:4e:53:a0:22:35:16: 3d:57:b0:23:4a:cd:ab:65:aa:5d:df:ed:c1:36:4b: 33:c5:ea:46:8f:b2:20:aa:3a:2d:37:19:f9:4a:a7: 4e:9c:45:96:b1:de:8a:da:92:ad:b2:21:81:45:ea: 7c:23:aa:66:8a:87:eb:ab:98:11:58:e0:0a:c0:39: 3a:69:41:8d:08:bc:a5:60:87:d6:47:a0:7c:b2:82: 85:9e:03:56:61:61:f5:41:2e:c3:bc:9b:75:dc:57: bf:09:db:e4:bf:d3:2e:ec:72:04:13:19:e9:9d:a6: a7:ff:c4:c7:10:83:24:b8:6d:6a:c5:cd:e5:2d:bc: 4c:d7:ed:87:20:2a:26:5c:2a:e3:3e:33:0a:0f:39: d9:af:e8:67:21:3e:80:f6:6c:68:69:a8:fb:9b:56: 8b:ba:1d:34:73:f0:e9:07:fd:14:55:ad:79:d1:25: 9e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:52:0B:DF:FB:17:2D:96:DA:6C:9A:1B:53:80:8D:3B:73:EB:08:68 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS210531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.142.244.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:f1:ed:66:21:8c:b1:e0:81:94:1e:91:3a:83:b8:64:e1:ab: 71:57:8b:40:2d:8f:75:c6:2c:be:bf:37:47:8e:04:80:64:cd: 1f:48:0d:92:49:d1:20:c0:f7:64:d7:48:37:ad:ce:d5:1e:65: b1:41:0a:ca:b4:c6:78:50:2a:8c:21:25:62:af:8a:27:da:cd: 30:13:04:6f:6f:94:86:2c:be:ab:dd:ff:63:f2:7a:36:8c:bf: db:b8:6f:82:f1:a3:03:3d:72:9f:85:fd:37:19:b5:b5:f5:0c: b0:53:f5:23:a1:5e:62:b0:a7:72:57:80:5d:16:a8:4c:87:35: 6c:58:e4:63:9f:1d:0d:a5:85:11:39:6e:db:17:b5:a3:e1:49: 93:43:a9:d9:ec:01:62:f0:0d:29:03:d9:dd:c8:9f:75:a4:b0: ed:0a:dd:cd:0d:e8:4b:81:00:a1:aa:1e:c9:40:b8:50:07:e8: e7:63:74:28:08:9e:2b:0d:13:c7:cd:56:fc:8b:c5:01:98:32: 4c:c7:4c:76:3b:14:9a:24:91:1d:28:4e:83:5f:98:e7:ba:e9: 09:86:b1:1f:84:77:d8:62:22:68:91:a5:52:b3:6f:b8:8a:0b: d6:4b:22:4b:fe:8b:f3:6f:eb:e7:74:f4:69:88:c6:e9:09:ec: 00:ff:d2:10 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUUUCek1Rmbq2qY2JmsF7obRuqqNowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMTI1MDgyNTQxWhcNMjYxMTI0MDgzMDQx WjAzMTEwLwYDVQQDEygzNDUyMEJERkZCMTcyRDk2REE2QzlBMUI1MzgwOEQzQjcz RUIwODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iGj0KIb+AYV DYF5xL3EJD/7Shzc7HM9yEloC4bH0r+o2C2gKgA+Z3Qcvb9JbqEObp7efNSyAn4D qg01C+/t1bicXwavd0Gi4EfD+cmw1qGZVJ1OU6AiNRY9V7AjSs2rZapd3+3BNksz xepGj7IgqjotNxn5SqdOnEWWsd6K2pKtsiGBRep8I6pmiofrq5gRWOAKwDk6aUGN CLylYIfWR6B8soKFngNWYWH1QS7DvJt13Fe/Cdvkv9Mu7HIEExnpnaan/8THEIMk uG1qxc3lLbxM1+2HIComXCrjPjMKDznZr+hnIT6A9mxoaaj7m1aLuh00c/DpB/0U Va150SWeFQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFDRSC9/7Fy2W2myaG1OAjTtz 6whoMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxMDUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGKO9DANBgkqhkiG9w0BAQsFAAOC AQEAT/HtZiGMseCBlB6ROoO4ZOGrcVeLQC2PdcYsvr83R44EgGTNH0gNkknRIMD3 ZNdIN63O1R5lsUEKyrTGeFAqjCElYq+KJ9rNMBMEb2+Uhiy+q93/Y/J6Noy/27hv gvGjAz1yn4X9Nxm1tfUMsFP1I6FeYrCncleAXRaoTIc1bFjkY58dDaWFETlu2xe1 o+FJk0Op2ewBYvANKQPZ3cifdaSw7QrdzQ3oS4EAoaoeyUC4UAfo52N0KAieKw0T x81W/IvFAZgyTMdMdjsUmiSRHShOg1+Y57rpCYaxH4R32GIiaJGlUrNvuIoL1ksi S/6L82/r53T0aYjG6QnsAP/SEA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:34:52 2025 by rpki-client