This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22653.roa File: AS22653.roa (raw, json) Hash identifier: 6mzwVYRCexF//W3aQrgaIOkzKKXcbBxbcGKzOrFWDpM= Subject key identifier: 7F:FB:E1:B4:DF:AB:FA:3B:4B:A7:9C:04:89:1F:51:F7:68:19:E6:9D Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 43645150F73AEF1C71355F0ECC1B8AE8B274EC12 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22653.roa Signing time: Wed 03 Dec 2025 11:30:49 +0000 ROA not before: Wed 03 Dec 2025 11:25:49 +0000 ROA not after: Wed 02 Dec 2026 11:30:49 +0000 asID: 22653 IP address blocks: 104.234.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:64:51:50:f7:3a:ef:1c:71:35:5f:0e:cc:1b:8a:e8:b2:74:ec:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 3 11:25:49 2025 GMT Not After : Dec 2 11:30:49 2026 GMT Subject: CN=7FFBE1B4DFABFA3B4BA79C04891F51F76819E69D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6a:57:3c:98:7c:92:ae:2f:25:25:d2:ea:7d: 92:4c:97:18:55:64:ca:0d:16:3a:23:ca:47:59:68: bd:66:b4:57:da:b2:d1:c0:ab:df:fa:7f:7a:f5:c4: 96:62:71:1f:f6:70:6b:c2:85:58:48:20:7c:16:e2: f6:d3:c3:43:01:09:ff:ab:04:f4:b4:fc:5d:d3:a1: 5f:23:f9:d2:4f:bf:ac:08:29:28:89:9d:b7:38:4f: d7:a0:cb:7b:c5:a5:c3:9d:45:da:e2:49:ee:61:67: f0:f0:f9:0d:10:0c:b6:48:86:d3:49:71:9e:ec:c8: 02:3a:18:f1:61:5a:c8:e2:32:4f:f8:3e:58:15:d5: dc:73:0b:1c:31:8c:eb:be:77:df:e8:e7:ad:8f:73: 06:16:aa:32:14:7c:57:41:c8:e5:c8:fb:9d:de:a3: a8:29:77:4d:2f:77:49:ee:e1:0f:4d:c9:e2:d4:f3: 70:b1:fa:c6:93:df:2f:46:34:be:8c:4b:fc:b1:b5: e7:ae:74:47:27:20:19:fb:54:d4:e2:c0:5c:ec:0d: b5:ea:66:30:ca:55:32:46:ce:b8:82:8c:46:97:9d: c4:52:2d:10:23:db:d3:9b:ca:4d:2c:1a:5f:7f:da: b3:86:a8:99:d7:00:ce:40:05:a5:6b:f4:49:96:f0: 74:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FB:E1:B4:DF:AB:FA:3B:4B:A7:9C:04:89:1F:51:F7:68:19:E6:9D X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22653.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.75.0/24 Signature Algorithm: sha256WithRSAEncryption a3:7a:4e:7b:69:f4:43:b9:a0:c2:08:b2:81:85:4b:3a:ab:fa: 78:4b:e9:06:a3:21:42:6d:d2:19:79:48:60:bc:47:df:c3:a8: 50:f6:d6:cd:f0:07:02:16:d0:0e:f6:9d:23:bc:c9:d0:ab:2d: ab:2b:23:87:51:80:f0:1b:29:9b:dc:7e:c4:56:a5:3e:ed:e8: 68:0a:84:bf:72:67:26:db:24:36:7f:94:7b:93:37:e6:af:79: 2f:14:d5:13:52:50:bd:41:e0:f9:40:8f:bd:82:69:c9:53:26: 60:c9:8b:fb:80:5a:29:1e:16:91:39:b8:0b:6b:69:8b:28:61: a2:a7:a5:7c:84:d6:db:88:73:03:08:90:d3:13:c7:f5:64:ac: a3:ac:93:8b:f5:8b:6a:d5:5c:9b:d9:f0:4c:4d:0f:2d:09:03: e2:10:f6:aa:c3:41:20:93:26:58:b9:d2:11:06:64:ae:8d:21: 62:ad:4c:fd:1d:59:2a:c3:75:73:43:3e:4c:3b:d1:f2:31:97: 87:63:e3:a1:64:1a:b9:59:fe:ff:73:30:69:2e:86:1d:c9:5b: 14:c4:96:80:99:63:ca:b3:9c:7d:c2:30:81:8c:93:c8:c6:c5: 17:2f:98:42:ec:2e:a9:ee:d1:5a:7d:13:fe:29:a1:ae:0f:45: fa:72:98:b6 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUQ2RRUPc67xxxNV8OzBuK6LJ07BIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMjAzMTEyNTQ5WhcNMjYxMjAyMTEzMDQ5 WjAzMTEwLwYDVQQDEyg3RkZCRTFCNERGQUJGQTNCNEJBNzlDMDQ4OTFGNTFGNzY4 MTlFNjlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2pXPJh8kq4v JSXS6n2STJcYVWTKDRY6I8pHWWi9ZrRX2rLRwKvf+n969cSWYnEf9nBrwoVYSCB8 FuL208NDAQn/qwT0tPxd06FfI/nST7+sCCkoiZ23OE/XoMt7xaXDnUXa4knuYWfw 8PkNEAy2SIbTSXGe7MgCOhjxYVrI4jJP+D5YFdXccwscMYzrvnff6Oetj3MGFqoy FHxXQcjlyPud3qOoKXdNL3dJ7uEPTcni1PNwsfrGk98vRjS+jEv8sbXnrnRHJyAZ +1TU4sBc7A216mYwylUyRs64goxGl53EUi0QI9vTm8pNLBpff9qzhqiZ1wDOQAWl a/RJlvB0kwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFH/74bTfq/o7S6ecBIkfUfdo GeadMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIyNjUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOpLMA0GCSqGSIb3DQEBCwUAA4IB AQCjek57afRDuaDCCLKBhUs6q/p4S+kGoyFCbdIZeUhgvEffw6hQ9tbN8AcCFtAO 9p0jvMnQqy2rKyOHUYDwGymb3H7EVqU+7ehoCoS/cmcm2yQ2f5R7kzfmr3kvFNUT UlC9QeD5QI+9gmnJUyZgyYv7gFopHhaRObgLa2mLKGGip6V8hNbbiHMDCJDTE8f1 ZKyjrJOL9Ytq1Vyb2fBMTQ8tCQPiEPaqw0EgkyZYudIRBmSujSFirUz9HVkqw3Vz Qz5MO9HyMZeHY+OhZBq5Wf7/czBpLoYdyVsUxJaAmWPKs5x9wjCBjJPIxsUXL5hC 7C6p7tFafRP+KaGuD0X6cpi2 -----END CERTIFICATE-----Generated at Sat Dec 6 22:38:39 2025 by rpki-client