This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: Q8st30DTj9oGiToA+qiB0mHWOyfgS3Z/XoZ9c52yjdI= Subject key identifier: 8D:3C:42:8B:5B:1E:B5:56:FF:6D:5C:8C:69:9A:C4:8B:14:BF:6E:83 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 0164C7D6F80E0F7E962BD76FD20631A36F8BD330 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS20473.roa Signing time: Fri 28 Nov 2025 10:48:58 +0000 ROA not before: Fri 28 Nov 2025 10:43:58 +0000 ROA not after: Fri 27 Nov 2026 10:48:58 +0000 asID: 20473 IP address blocks: 103.214.69.0/24 maxlen: 24 2a06:1287::/32 maxlen: 48 2a06:a000:170::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:64:c7:d6:f8:0e:0f:7e:96:2b:d7:6f:d2:06:31:a3:6f:8b:d3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Nov 28 10:43:58 2025 GMT Not After : Nov 27 10:48:58 2026 GMT Subject: CN=8D3C428B5B1EB556FF6D5C8C699AC48B14BF6E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0c:d5:78:9c:c3:49:dd:f3:8d:e0:17:55:1c: 8c:48:89:dc:d2:3c:75:25:30:b6:6c:42:f5:44:c5: ba:bc:db:47:4e:a9:62:bf:41:0b:d1:77:e1:a4:5d: 3f:38:4a:a8:5c:e9:f3:41:7c:94:b5:bd:3c:c2:7f: 7e:0f:dd:b0:df:ab:bb:86:d7:ff:a3:e8:2b:bd:e4: ed:5c:5a:7b:fb:89:38:64:bb:8d:31:2d:8b:c7:a5: e5:2e:81:68:6f:49:bd:e3:57:10:08:f3:85:1e:1b: 3b:f5:5a:8e:5c:fd:ea:95:0c:59:76:8f:d5:25:fc: df:c7:d2:13:c6:f9:ba:f5:bf:a3:f9:34:68:bc:b4: 5b:3c:ca:91:d7:42:ff:4a:b9:fe:74:a4:68:af:e4: 85:72:61:4d:e0:d3:23:db:49:9c:1c:52:a2:03:b8: 37:06:e6:dc:12:4d:62:35:e1:ae:62:59:f5:42:3d: 9f:14:0b:7e:ab:c7:6b:b4:f3:72:62:36:17:23:9d: 7a:7d:3d:a1:fb:f9:83:a5:ba:7b:45:c9:f0:1b:8b: be:9f:b8:cb:3c:2d:86:d9:f3:06:b2:4a:dd:54:3d: 5e:40:2a:32:72:55:b2:aa:22:c2:af:7d:ab:2f:84: fd:96:a3:61:71:24:e8:d0:41:37:18:da:66:df:7a: 91:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3C:42:8B:5B:1E:B5:56:FF:6D:5C:8C:69:9A:C4:8B:14:BF:6E:83 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.214.69.0/24 IPv6: 2a06:1287::/32 2a06:a000:170::/48 Signature Algorithm: sha256WithRSAEncryption 7c:5a:3d:fb:5d:26:ca:dd:84:0c:fe:61:1a:f9:4e:bf:5f:a9: 6b:e0:01:3a:5d:b6:4b:37:e7:de:6c:af:d3:26:e5:34:cb:cb: 3e:73:50:65:a1:35:66:7a:99:c9:bc:77:12:49:71:f2:7f:c9: a3:5c:dc:11:3b:50:81:15:ed:f5:9e:9e:c5:90:d1:b1:9c:dd: 7f:0d:23:9f:97:c8:74:a6:02:a8:69:fc:60:ba:63:04:ee:82: 14:2a:15:c7:03:6f:88:0f:36:5b:60:4a:cf:64:17:b3:a6:e2: f4:83:46:b7:ed:79:01:80:dd:61:8b:05:4c:8c:0a:5e:6c:e6: 2e:4d:35:34:d8:67:a1:13:59:d2:31:52:62:0d:09:68:a0:6b: 12:ad:1e:d8:2a:fe:2b:66:c9:02:31:6d:f4:73:e3:7e:a7:e1: 44:7c:68:61:6d:61:62:e9:ab:d7:00:7c:62:3e:fd:da:e6:ad: 79:81:dd:09:0d:59:bb:42:a0:75:e6:f7:c3:ca:32:73:21:f5: 03:5b:71:2e:9d:ad:c0:3d:1c:f4:57:bd:3d:87:42:18:50:29: 90:ad:72:d2:5e:2a:8b:42:5a:c5:64:46:40:74:05:80:63:72: 06:3f:08:9f:e7:d8:ef:8f:90:49:73:87:9a:03:ee:56:ec:b4: 10:d4:7d:a2 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUAWTH1vgOD36WK9dv0gYxo2+L0zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTExMjgxMDQzNThaFw0yNjExMjcxMDQ4NThaMDMxMTAvBgNV BAMTKDhEM0M0MjhCNUIxRUI1NTZGRjZENUM4QzY5OUFDNDhCMTRCRjZFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRDNV4nMNJ3fON4BdVHIxIidzS PHUlMLZsQvVExbq820dOqWK/QQvRd+GkXT84Sqhc6fNBfJS1vTzCf34P3bDfq7uG 1/+j6Cu95O1cWnv7iThku40xLYvHpeUugWhvSb3jVxAI84UeGzv1Wo5c/eqVDFl2 j9Ul/N/H0hPG+br1v6P5NGi8tFs8ypHXQv9Kuf50pGiv5IVyYU3g0yPbSZwcUqID uDcG5twSTWI14a5iWfVCPZ8UC36rx2u083JiNhcjnXp9PaH7+YOluntFyfAbi76f uMs8LYbZ8waySt1UPV5AKjJyVbKqIsKvfasvhP2Wo2FxJOjQQTcY2mbfepGTAgMB AAGjggIGMIICAjAdBgNVHQ4EFgQUjTxCi1setVb/bVyMaZrEixS/boMwHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT MjA0NzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcB Af8EKDAmMAwEAgABMAYDBABn1kUwFgQCAAIwEAMFACoGEocDBwAqBqAAAXAwDQYJ KoZIhvcNAQELBQADggEBAHxaPftdJsrdhAz+YRr5Tr9fqWvgATpdtks3595sr9Mm 5TTLyz5zUGWhNWZ6mcm8dxJJcfJ/yaNc3BE7UIEV7fWensWQ0bGc3X8NI5+XyHSm Aqhp/GC6YwTughQqFccDb4gPNltgSs9kF7Om4vSDRrfteQGA3WGLBUyMCl5s5i5N NTTYZ6ETWdIxUmINCWigaxKtHtgq/itmyQIxbfRz436n4UR8aGFtYWLpq9cAfGI+ /drmrXmB3QkNWbtCoHXm98PKMnMh9QNbcS6drcA9HPRXvT2HQhhQKZCtctJeKotC WsVkRkB0BYBjcgY/CJ/n2O+PkElzh5oD7lbstBDUfaI= -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:20 2025 by rpki-client