This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215152.roa File: AS215152.roa (raw, json) Hash identifier: dHHscbwescztlwK5MeIASyIi8AlIr8PEBRFU9zDTmto= Subject key identifier: 50:F6:08:11:DF:5A:AF:0D:F3:3A:BE:4F:88:1E:58:14:06:E4:7E:45 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 6800FA2CF5B1C103C7CE4544C1FC1AB51C877200 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215152.roa Signing time: Mon 01 Dec 2025 10:53:21 +0000 ROA not before: Mon 01 Dec 2025 10:48:21 +0000 ROA not after: Mon 30 Nov 2026 10:53:21 +0000 asID: 215152 IP address blocks: 104.234.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 00:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:00:fa:2c:f5:b1:c1:03:c7:ce:45:44:c1:fc:1a:b5:1c:87:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 1 10:48:21 2025 GMT Not After : Nov 30 10:53:21 2026 GMT Subject: CN=50F60811DF5AAF0DF33ABE4F881E581406E47E45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3c:e2:5a:8f:02:15:18:16:47:d3:de:a6:b9: 23:ae:cf:38:23:fa:d7:d5:fe:7d:45:45:86:f5:95: c4:24:3d:72:88:72:88:14:3c:99:8e:a5:68:2f:17: d1:17:f2:21:c7:3d:04:26:87:b7:16:88:8d:5d:d3: ac:28:e3:2f:ce:21:b7:88:3b:33:05:f3:df:2c:f1: 03:93:8f:f1:c6:4c:ee:53:d5:e5:4f:17:3d:6b:16: 4c:a2:e7:e1:34:4b:80:b1:49:cf:8b:63:6a:67:c0: 52:de:0a:17:42:a7:42:75:56:d6:ad:59:78:c2:64: 24:64:b5:1f:ae:52:f7:4b:96:0c:3e:93:38:85:99: 4b:3e:76:5d:07:79:c9:41:46:80:c1:6c:a5:8a:99: dc:93:b4:fc:0c:9f:ef:c9:93:57:b3:0c:9c:57:88: 6d:e5:9b:26:0a:23:1d:66:af:fc:b7:f4:ad:7f:3f: c9:48:a5:74:b9:ba:87:c8:85:f1:cf:24:4a:db:62: 22:92:5c:e5:b1:11:37:8f:d9:3b:c4:78:eb:a0:d3: 66:27:7b:ba:39:9a:cf:c1:b1:7d:ea:aa:af:47:d3: b1:84:d5:ac:23:64:82:5e:46:2c:20:6c:97:bc:4c: 1e:5b:29:c7:aa:a6:91:d3:9d:2a:e1:60:25:99:bb: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F6:08:11:DF:5A:AF:0D:F3:3A:BE:4F:88:1E:58:14:06:E4:7E:45 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215152.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.40.0/24 Signature Algorithm: sha256WithRSAEncryption 45:f0:14:d2:23:36:64:0a:5f:0a:e6:01:59:e2:51:90:50:b6: 10:64:57:9f:3e:46:4b:64:79:86:f5:5c:05:98:e3:b0:07:c8: 2b:40:ab:cc:32:97:16:72:da:f7:76:8d:1b:db:48:b4:d5:e5: 11:db:af:4f:a4:63:08:e2:54:b3:77:10:a6:f9:dc:8c:13:ff: eb:45:b1:0d:4d:ea:45:b9:0c:88:12:cf:ab:22:1c:4e:a8:c6: 4c:ba:7d:15:82:8a:1c:3d:0a:28:76:f8:ef:2e:f7:16:5a:05: 50:f3:fb:b1:11:dd:88:10:b0:a8:91:f7:6a:08:aa:73:f2:c7: af:fd:fc:16:64:92:95:40:52:ac:91:4d:ba:c7:3f:9b:3f:b5: 58:9a:4b:84:20:3e:0b:2b:42:e6:0a:8e:95:dd:0e:d9:c9:d0: 30:48:7c:68:14:53:8c:64:94:84:e1:63:3b:65:90:fa:fe:25: 9e:f3:cf:5c:c6:44:51:a9:da:73:43:5e:52:96:77:cb:0c:c8: 50:6a:45:d1:dc:a7:79:af:1f:c8:6e:d2:0b:96:7a:0e:2f:6f: 4f:19:92:59:bf:1e:ab:5e:17:c8:13:83:0b:37:a1:0c:f4:b9: a0:11:cc:50:d3:40:f6:d2:ab:3b:05:82:90:40:48:f7:db:56: 16:93:fa:1d -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUaAD6LPWxwQPHzkVEwfwatRyHcgAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMjAxMTA0ODIxWhcNMjYxMTMwMTA1MzIx WjAzMTEwLwYDVQQDEyg1MEY2MDgxMURGNUFBRjBERjMzQUJFNEY4ODFFNTgxNDA2 RTQ3RTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDziWo8CFRgW R9Peprkjrs84I/rX1f59RUWG9ZXEJD1yiHKIFDyZjqVoLxfRF/Ihxz0EJoe3FoiN XdOsKOMvziG3iDszBfPfLPEDk4/xxkzuU9XlTxc9axZMoufhNEuAsUnPi2NqZ8BS 3goXQqdCdVbWrVl4wmQkZLUfrlL3S5YMPpM4hZlLPnZdB3nJQUaAwWylipnck7T8 DJ/vyZNXswycV4ht5ZsmCiMdZq/8t/Stfz/JSKV0ubqHyIXxzyRK22IiklzlsRE3 j9k7xHjroNNmJ3u6OZrPwbF96qqvR9OxhNWsI2SCXkYsIGyXvEweWynHqqaR050q 4WAlmbsUPwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFD2CBHfWq8N8zq+T4geWBQG 5H5FMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxNTE1Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqKDANBgkqhkiG9w0BAQsFAAOC AQEARfAU0iM2ZApfCuYBWeJRkFC2EGRXnz5GS2R5hvVcBZjjsAfIK0CrzDKXFnLa 93aNG9tItNXlEduvT6RjCOJUs3cQpvncjBP/60WxDU3qRbkMiBLPqyIcTqjGTLp9 FYKKHD0KKHb47y73FloFUPP7sRHdiBCwqJH3agiqc/LHr/38FmSSlUBSrJFNusc/ mz+1WJpLhCA+CytC5gqOld0O2cnQMEh8aBRTjGSUhOFjO2WQ+v4lnvPPXMZEUana c0NeUpZ3ywzIUGpF0dynea8fyG7SC5Z6Di9vTxmSWb8eq14XyBODCzehDPS5oBHM UNNA9tKrOwWCkEBI99tWFpP6HQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:35 2025 by rpki-client