This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS151817.roa
File: AS151817.roa (raw, json)
Hash identifier: eT1RVKgd2heYlwJgBX8/WbAhx8sbD8hNmxDrbk3RZAw=
Subject key identifier: AC:FC:E7:B8:4A:57:50:87:EC:A5:FC:B7:5B:29:48:38:84:77:DA:69
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1CD82149D8402812D7C106EC83C836076A49074B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS151817.roa
Signing time: Wed 26 Nov 2025 10:40:52 +0000
ROA not before: Wed 26 Nov 2025 10:35:52 +0000
ROA not after: Wed 25 Nov 2026 10:40:52 +0000
asID: 151817
IP address blocks: 103.68.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d8:21:49:d8:40:28:12:d7:c1:06:ec:83:c8:36:07:6a:49:07:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Nov 26 10:35:52 2025 GMT
Not After : Nov 25 10:40:52 2026 GMT
Subject: CN=ACFCE7B84A575087ECA5FCB75B2948388477DA69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:5a:d8:00:02:07:57:99:ef:bd:d8:af:de:
13:03:62:d2:20:1a:76:24:87:8a:ad:99:b0:a6:a5:
5a:07:ea:77:b3:e7:23:48:8f:6c:7c:29:61:29:00:
c4:f5:19:b3:bf:39:6f:67:90:99:ac:55:84:e4:ee:
9c:43:59:e1:23:4a:dc:11:fa:b0:61:b3:39:d2:17:
fa:25:ce:40:37:f8:c5:25:1c:ef:bb:27:3b:fc:34:
47:e0:80:b3:5e:93:f2:a3:69:e7:06:de:8c:c1:dc:
39:73:cb:8b:3a:21:bc:6c:7b:78:5b:14:3e:13:db:
2f:08:46:c9:e4:dd:4a:2a:10:35:98:9c:1d:7f:1d:
71:18:58:0a:2e:ed:75:3c:e7:3e:1c:65:9b:ab:96:
d5:8b:d2:ff:e3:0a:18:38:ef:96:7b:2d:c1:1b:46:
8e:9d:a8:ad:f6:b1:91:21:cf:41:9d:c1:6f:76:5f:
f7:9f:97:26:27:fb:5f:7b:82:5e:95:60:6f:65:ba:
17:67:6d:aa:8d:5e:b2:9b:13:98:f8:5a:c1:b6:7a:
cb:5b:2f:9c:8c:b7:34:ab:80:28:5e:b6:1d:a2:81:
08:92:4c:e8:c2:05:e9:b7:63:60:e2:3d:3b:bc:3c:
2d:7b:db:94:4c:be:96:b3:5e:54:b6:c2:5a:aa:e2:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FC:E7:B8:4A:57:50:87:EC:A5:FC:B7:5B:29:48:38:84:77:DA:69
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS151817.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.68.108.0/22
Signature Algorithm: sha256WithRSAEncryption
08:de:59:eb:0e:79:f1:3a:11:c1:40:0c:64:ed:6a:67:99:98:
22:eb:4b:f8:67:26:bb:2a:3b:bd:cf:62:05:22:4a:b8:6d:57:
f8:0b:28:5e:1e:3e:c7:36:bb:8e:2c:51:15:d2:3a:33:54:97:
47:13:a2:f8:6a:b8:6a:f3:36:8c:8e:1c:a8:fe:8d:c0:c9:3f:
ce:77:bc:22:3a:e8:94:56:e6:3a:86:80:54:d6:4a:84:aa:22:
bd:67:66:d6:e9:81:62:21:77:55:9f:aa:39:7c:27:81:0e:21:
69:94:d2:1e:0d:5f:f8:d5:0e:94:39:5c:69:ad:0d:d8:28:b4:
aa:db:29:0a:9f:32:e2:0b:ef:ea:ac:0a:fe:96:5e:d4:48:f3:
1a:46:bf:cf:a2:5e:6d:77:9f:f7:7d:da:a7:c4:f4:c0:70:7e:
41:21:9a:6c:aa:c8:f2:22:a8:62:dd:4d:7d:0e:01:c1:4b:77:
ae:a0:b6:0f:c9:3d:49:63:f5:21:ae:db:2f:92:55:7e:ed:25:
0b:1c:e7:a7:d0:d5:d4:70:f1:28:bd:8f:2f:80:c3:5f:46:f2:
45:bd:4b:6e:d7:b4:c7:5f:cf:53:f1:ab:7d:cd:fa:38:0e:8b:
50:77:18:a3:c5:90:59:f2:0c:9f:82:5c:e9:5e:80:10:1b:1f:
44:00:56:e5
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUHNghSdhAKBLXwQbsg8g2B2pJB0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTExMjYxMDM1NTJaFw0yNjExMjUxMDQwNTJaMDMxMTAvBgNV
BAMTKEFDRkNFN0I4NEE1NzUwODdFQ0E1RkNCNzVCMjk0ODM4ODQ3N0RBNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsBlrYAAIHV5nvvdiv3hMDYtIg
GnYkh4qtmbCmpVoH6nez5yNIj2x8KWEpAMT1GbO/OW9nkJmsVYTk7pxDWeEjStwR
+rBhsznSF/olzkA3+MUlHO+7Jzv8NEfggLNek/KjaecG3ozB3Dlzy4s6Ibxse3hb
FD4T2y8IRsnk3UoqEDWYnB1/HXEYWAou7XU85z4cZZurltWL0v/jChg475Z7LcEb
Ro6dqK32sZEhz0GdwW92X/eflyYn+197gl6VYG9luhdnbaqNXrKbE5j4WsG2estb
L5yMtzSrgCheth2igQiSTOjCBem3Y2DiPTu8PC1725RMvpazXlS2wlqq4gtXAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUrPznuEpXUIfspfy3WylIOIR32mkwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MTUxODE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCZ0RsMA0GCSqGSIb3DQEBCwUAA4IBAQAI3lnrDnnx
OhHBQAxk7WpnmZgi60v4Zya7Kju9z2IFIkq4bVf4CyheHj7HNruOLFEV0jozVJdH
E6L4arhq8zaMjhyo/o3AyT/Od7wiOuiUVuY6hoBU1kqEqiK9Z2bW6YFiIXdVn6o5
fCeBDiFplNIeDV/41Q6UOVxprQ3YKLSq2ykKnzLiC+/qrAr+ll7USPMaRr/Pol5t
d5/3fdqnxPTAcH5BIZpsqsjyIqhi3U19DgHBS3euoLYPyT1JY/UhrtsvklV+7SUL
HOen0NXUcPEovY8vgMNfRvJFvUtu17THX89T8at9zfo4DotQdxijxZBZ8gyfglzp
XoAQGx9EAFbl
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:39:06 2025 by rpki-client