This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS209512.roa File: AS209512.roa (raw, json) Hash identifier: p5ELUybinsyzK9TvG1VmnzJTnlb6EHEa7P/p2TvBsZw= Subject key identifier: EA:3B:5E:08:8F:51:C0:B7:E1:7A:D2:6B:41:2C:34:1B:D2:15:12:68 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 3B4B88E402E92491AE9376E779C173E19CEF223D Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS209512.roa Signing time: Sun 30 Nov 2025 10:30:44 +0000 ROA not before: Sun 30 Nov 2025 10:25:44 +0000 ROA not after: Sun 29 Nov 2026 10:30:44 +0000 asID: 209512 IP address blocks: 2a06:a005:80::/44 maxlen: 48 2a0a:6042::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4b:88:e4:02:e9:24:91:ae:93:76:e7:79:c1:73:e1:9c:ef:22:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Nov 30 10:25:44 2025 GMT Not After : Nov 29 10:30:44 2026 GMT Subject: CN=EA3B5E088F51C0B7E17AD26B412C341BD2151268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f1:02:86:f1:42:ab:de:a5:3d:9c:92:79:5b: af:c6:19:56:5d:f1:60:b8:65:3f:61:5c:c4:74:99: 9d:c1:75:68:b8:b3:99:2b:36:52:6b:00:a5:73:09: 54:20:46:cd:60:fe:b7:3f:21:92:ff:da:7d:e6:75: 92:71:a3:b3:0b:96:f0:cf:d4:08:87:01:07:b3:1f: 8b:26:7f:b6:a9:b7:24:94:60:27:17:75:a6:f0:ea: b6:50:57:4c:a7:1a:6d:7e:03:e9:b1:b2:01:ee:88: 5f:37:50:c7:7a:bb:91:8b:e9:7f:a7:61:71:5b:04: ac:73:2c:5f:ca:a4:77:30:74:1d:bd:87:07:2f:e7: 07:22:45:18:67:54:e7:98:60:9e:9b:9a:86:d1:6a: e0:e6:55:a3:75:0a:a0:a4:89:76:b8:50:58:46:b2: 0f:e7:72:7a:8c:54:2d:70:3c:f7:08:e7:2c:2a:9a: bc:da:d5:0e:68:d2:e5:3e:24:6b:46:64:37:dd:b7: 96:ed:c9:fe:49:8b:5b:fb:55:7e:43:41:7c:1b:ce: a8:0e:28:da:1f:44:c0:2e:22:d6:6c:13:4a:34:79: ff:56:fc:db:a9:72:f3:bf:bc:45:9b:11:4c:fc:3e: c4:af:71:ef:9a:4f:bb:4f:bd:16:b1:95:c5:5c:83: f8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3B:5E:08:8F:51:C0:B7:E1:7A:D2:6B:41:2C:34:1B:D2:15:12:68 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS209512.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a005:80::/44 2a0a:6042::/32 Signature Algorithm: sha256WithRSAEncryption bb:cd:32:b9:99:78:07:d4:0c:45:ba:2d:21:ad:cf:85:c3:22: 53:13:27:d6:a3:bb:8f:2d:28:64:ea:f6:7e:f3:0a:84:3f:d2: df:12:46:ee:0b:5c:23:0d:98:93:3e:8a:39:99:16:ad:f8:f4: 0c:bc:cf:55:77:d1:37:8a:0f:96:a3:df:97:9c:33:de:b2:c5: 01:f7:be:7e:1e:4f:b3:88:85:22:9b:a0:0d:eb:a9:c4:f7:69: 4a:61:07:7b:e8:e9:39:fe:cd:2f:9c:8e:8c:d1:fd:c1:99:e6: c0:55:40:ae:d0:db:cf:fe:28:39:9f:1e:8b:09:e3:64:a6:76: 1e:83:6e:20:7f:5f:c6:5d:cd:b7:2f:79:71:5f:8b:ad:f7:bf: 73:67:f1:f4:2c:6e:57:2b:fa:03:9b:a7:c3:27:15:bf:9e:3e: f8:18:f5:09:72:ac:08:5c:1e:fb:b4:a9:c6:21:15:51:68:17: 4d:e0:17:1a:60:54:7d:5b:29:ea:81:d5:07:50:ca:a9:e7:4a: ee:85:c7:fa:63:c0:5c:68:f8:8f:8e:29:6b:fe:d6:e8:02:b5: 34:30:c6:21:f4:0e:36:4e:c5:79:59:ab:24:62:f9:0f:5d:36: 5d:6c:a5:9a:77:42:b0:d8:58:14:84:f9:a0:9e:70:11:90:b0: ab:af:22:38 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgIUO0uI5ALpJJGuk3bnecFz4ZzvIj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTExMzAxMDI1NDRaFw0yNjExMjkxMDMwNDRaMDMxMTAvBgNV BAMTKEVBM0I1RTA4OEY1MUMwQjdFMTdBRDI2QjQxMkMzNDFCRDIxNTEyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCB8QKG8UKr3qU9nJJ5W6/GGVZd 8WC4ZT9hXMR0mZ3BdWi4s5krNlJrAKVzCVQgRs1g/rc/IZL/2n3mdZJxo7MLlvDP 1AiHAQezH4smf7aptySUYCcXdabw6rZQV0ynGm1+A+mxsgHuiF83UMd6u5GL6X+n YXFbBKxzLF/KpHcwdB29hwcv5wciRRhnVOeYYJ6bmobRauDmVaN1CqCkiXa4UFhG sg/ncnqMVC1wPPcI5ywqmrza1Q5o0uU+JGtGZDfdt5btyf5Ji1v7VX5DQXwbzqgO KNofRMAuItZsE0o0ef9W/NupcvO/vEWbEUz8PsSvce+aT7tPvRaxlcVcg/jDAgMB AAGjggH5MIIB9TAdBgNVHQ4EFgQU6jteCI9RwLfhetJrQSw0G9IVEmgwHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT MjA5NTEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEH AQH/BBowGDAWBAIAAjAQAwcEKgagBQCAAwUAKgpgQjANBgkqhkiG9w0BAQsFAAOC AQEAu80yuZl4B9QMRbotIa3PhcMiUxMn1qO7jy0oZOr2fvMKhD/S3xJG7gtcIw2Y kz6KOZkWrfj0DLzPVXfRN4oPlqPfl5wz3rLFAfe+fh5Ps4iFIpugDeupxPdpSmEH e+jpOf7NL5yOjNH9wZnmwFVArtDbz/4oOZ8eiwnjZKZ2HoNuIH9fxl3Nty95cV+L rfe/c2fx9CxuVyv6A5unwycVv54++Bj1CXKsCFwe+7SpxiEVUWgXTeAXGmBUfVsp 6oHVB1DKqedK7oXH+mPAXGj4j44pa/7W6AK1NDDGIfQONk7FeVmrJGL5D102XWyl mndCsNhYFIT5oJ5wEZCwq68iOA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:18 2025 by rpki-client