This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210667.roa File: AS210667.roa (raw, json) Hash identifier: hgl9zqERhc7qN52NuEnhqPYY7Atzq3JdKCu586Cs5Pk= Subject key identifier: B3:2A:C2:2C:A7:23:1B:E4:92:87:25:37:0C:B1:C0:B9:AD:1E:4C:BF Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 4F3D1BB88C3BC4AE58B564D755EAB61EA8B6E144 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210667.roa Signing time: Mon 01 Dec 2025 22:15:29 +0000 ROA not before: Mon 01 Dec 2025 22:10:29 +0000 ROA not after: Mon 30 Nov 2026 22:15:29 +0000 asID: 210667 IP address blocks: 89.39.211.0/24 maxlen: 24 168.222.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3d:1b:b8:8c:3b:c4:ae:58:b5:64:d7:55:ea:b6:1e:a8:b6:e1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Dec 1 22:10:29 2025 GMT Not After : Nov 30 22:15:29 2026 GMT Subject: CN=B32AC22CA7231BE4928725370CB1C0B9AD1E4CBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5d:5c:ae:cf:fa:43:0b:e2:2b:e4:47:0e:24: fa:c5:ab:1b:71:e7:12:b3:60:6b:bb:e6:6b:d0:d1: 85:00:df:fe:5d:09:27:c4:78:30:a6:a3:02:ee:02: e4:95:f4:99:3b:55:14:2e:cf:96:ea:1f:71:06:c9: 68:05:e0:a5:19:80:be:65:83:7a:84:b5:c0:a0:d2: 10:74:4f:cc:43:21:70:ca:88:06:5b:29:81:d0:28: ff:9f:fc:d6:40:4a:ee:64:ec:b1:f4:54:0c:06:33: c8:80:06:4a:0c:59:90:b4:1c:3c:bd:9d:a4:ff:d7: c9:9d:85:94:82:1b:77:ec:3b:01:23:36:fc:3b:fb: d4:21:9e:01:dc:37:91:73:a0:fa:70:2a:01:4c:b1: 60:28:69:ab:6c:62:4d:5c:f6:8c:2b:a6:8f:30:5b: 36:2d:4e:03:92:b8:5e:88:07:4b:76:0e:f9:82:7a: 7a:98:7c:96:0b:da:a3:68:2a:2f:ee:0d:d6:67:5c: b3:37:78:7e:4b:90:0a:d2:c9:a2:f8:97:90:a3:27: 3e:5e:60:03:94:21:51:98:15:29:40:b8:7a:b0:0a: 1d:7a:4e:1a:b8:b6:3e:1a:ae:5a:60:29:df:5b:13: 0b:01:7d:32:ff:a4:91:02:f5:4d:b0:fb:e6:fe:0c: 40:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2A:C2:2C:A7:23:1B:E4:92:87:25:37:0C:B1:C0:B9:AD:1E:4C:BF X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS210667.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.211.0/24 168.222.240.0/24 Signature Algorithm: sha256WithRSAEncryption 23:d2:da:b9:56:f1:b9:85:50:76:22:6a:4a:99:06:d2:db:a8: 9f:a1:a8:17:28:83:b2:6b:6c:6e:8d:6e:39:93:e6:e4:8f:2f: 07:62:65:7d:7f:93:fc:8a:af:24:58:3e:ce:92:3e:c6:fc:7c: 4c:ca:96:1a:5f:44:ce:4c:6d:c2:01:19:e3:29:29:b6:cc:d7: 73:9e:de:83:2c:7a:fc:31:74:27:98:38:a2:31:ec:d9:f7:28: 88:48:a1:aa:d6:e9:2d:52:b3:e2:c9:1b:ce:82:ae:54:1a:22: a1:c5:66:fd:ef:43:7a:65:1a:e4:10:31:68:de:79:db:87:fa: 69:03:e0:63:c3:2d:8e:94:bc:d2:53:3e:74:fc:4d:13:b8:51: 25:05:c1:ac:fd:8a:e1:17:67:9b:09:9a:5a:1e:48:51:39:c2: 34:e9:7b:91:5f:cc:a8:e0:71:63:d6:a5:cc:b7:2c:35:19:e5: 36:e8:3e:00:4b:8d:ee:d5:50:c9:17:90:8b:17:00:0d:f3:f0: 5d:b3:fe:37:7d:2a:10:49:b4:bf:a6:22:ce:8b:4a:09:1a:db: 6c:b8:9f:9f:17:c8:98:d7:77:2b:0e:b7:04:63:cc:78:f4:f4: 05:73:95:97:ea:dc:b3:45:c2:26:8f:cd:a8:2a:db:28:1b:26: 0b:2b:43:0e -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUTz0buIw7xK5YtWTXVeq2Hqi24UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTEyMDEyMjEwMjlaFw0yNjExMzAyMjE1MjlaMDMxMTAvBgNV BAMTKEIzMkFDMjJDQTcyMzFCRTQ5Mjg3MjUzNzBDQjFDMEI5QUQxRTRDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGXVyuz/pDC+Ir5EcOJPrFqxtx 5xKzYGu75mvQ0YUA3/5dCSfEeDCmowLuAuSV9Jk7VRQuz5bqH3EGyWgF4KUZgL5l g3qEtcCg0hB0T8xDIXDKiAZbKYHQKP+f/NZASu5k7LH0VAwGM8iABkoMWZC0HDy9 naT/18mdhZSCG3fsOwEjNvw7+9QhngHcN5FzoPpwKgFMsWAoaatsYk1c9owrpo8w WzYtTgOSuF6IB0t2DvmCenqYfJYL2qNoKi/uDdZnXLM3eH5LkArSyaL4l5CjJz5e YAOUIVGYFSlAuHqwCh16Thq4tj4arlpgKd9bEwsBfTL/pJEC9U2w++b+DEDvAgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUsyrCLKcjG+SShyU3DLHAua0eTL8wHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT MjEwNjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEH AQH/BBYwFDASBAIAATAMAwQAWSfTAwQAqN7wMA0GCSqGSIb3DQEBCwUAA4IBAQAj 0tq5VvG5hVB2ImpKmQbS26ifoagXKIOya2xujW45k+bkjy8HYmV9f5P8iq8kWD7O kj7G/HxMypYaX0TOTG3CARnjKSm2zNdznt6DLHr8MXQnmDiiMezZ9yiISKGq1ukt UrPiyRvOgq5UGiKhxWb970N6ZRrkEDFo3nnbh/ppA+Bjwy2OlLzSUz50/E0TuFEl BcGs/YrhF2ebCZpaHkhROcI06XuRX8yo4HFj1qXMtyw1GeU26D4AS43u1VDJF5CL FwAN8/Bds/43fSoQSbS/piLOi0oJGttsuJ+fF8iY13crDrcEY8x49PQFc5WX6tyz RcImj82oKtsoGyYLK0MO -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:22 2025 by rpki-client