This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213520.roa File: AS213520.roa (raw, json) Hash identifier: b4Jk4gRQNqNlTPU5nC7DTykyvy1M6srTIqOclzGnoOs= Subject key identifier: 48:00:46:82:3D:D2:C3:8D:54:EC:E0:2B:ED:45:76:03:8B:FB:3E:43 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 5FFB37E2370DF2AC45CBE1B77A8D12593B4038B7 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213520.roa Signing time: Thu 15 Jan 2026 21:18:10 +0000 ROA not before: Thu 15 Jan 2026 21:13:10 +0000 ROA not after: Thu 14 Jan 2027 21:18:10 +0000 asID: 213520 IP address blocks: 2a06:9f43::/32 maxlen: 48 2a0d:d902::/32 maxlen: 48 2a0d:d903::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:fb:37:e2:37:0d:f2:ac:45:cb:e1:b7:7a:8d:12:59:3b:40:38:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Jan 15 21:13:10 2026 GMT Not After : Jan 14 21:18:10 2027 GMT Subject: CN=480046823DD2C38D54ECE02BED4576038BFB3E43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:d9:94:bf:f6:e4:b1:18:72:a0:fc:8e:0e: 69:23:7d:34:af:7e:8c:ec:af:a0:0f:53:45:1b:24: d0:c8:3d:36:01:e8:bb:e0:7c:9d:39:a9:81:f0:3b: 81:32:2b:fc:d0:94:3f:c6:9e:68:8d:b9:2a:31:c2: 8a:10:22:c2:92:1c:01:b2:ab:e9:48:02:f8:f1:a9: 4a:67:ed:45:28:89:1c:24:1f:b2:9c:02:71:8c:26: fa:ff:8e:87:f2:98:e6:47:37:43:06:a0:da:fc:28: 1b:e5:ce:b9:75:8e:ba:2a:7f:f8:e2:df:3f:a9:ef: e2:d0:93:c0:b8:2e:0a:4c:a1:51:7d:49:17:a7:ab: e3:bb:75:ea:dd:a6:ed:2f:73:37:f4:83:79:c0:cc: 05:cf:bd:ef:ad:a4:41:30:95:0a:92:d0:3e:94:8f: 77:c5:fd:ed:0f:66:e5:72:4e:dd:06:0c:3d:29:df: 86:42:f0:e5:1d:71:d4:5d:7f:84:e8:6c:eb:af:70: 3d:dd:06:a1:34:0b:0d:d3:50:45:5e:30:76:2f:39: a2:d1:b5:4e:eb:57:af:80:4c:da:72:b1:55:20:2d: 58:16:b3:f5:11:c1:a9:e4:a3:ce:5a:94:39:78:78: 7d:ba:8c:6d:3a:03:75:98:c8:a4:bb:d6:9c:b4:d9: cb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:00:46:82:3D:D2:C3:8D:54:EC:E0:2B:ED:45:76:03:8B:FB:3E:43 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS213520.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:9f43::/32 2a0d:d902::/31 Signature Algorithm: sha256WithRSAEncryption 0d:e0:11:3a:d6:4a:b3:36:36:57:fd:b4:7c:ac:1d:b9:0b:27: 21:d5:04:fd:b0:cb:df:cb:eb:9a:47:3d:18:cc:54:f6:08:b7: 74:25:86:94:ec:f1:6a:8b:a1:57:e2:7c:d0:e6:c3:70:7d:c5: 59:a3:98:61:d3:1c:c9:e3:81:d6:e0:7c:0e:af:70:8e:f7:66: cc:5a:53:25:c3:fe:e2:51:a8:c8:05:e0:0c:f7:15:e8:bd:2f: fd:91:3f:a3:c3:6a:25:01:f9:8f:73:e4:a8:fd:e1:1b:64:0e: 0d:71:da:3a:24:dd:7a:27:72:76:7c:79:85:be:8c:66:62:1d: 08:b1:16:48:07:b6:3f:c7:c4:f0:fa:dc:a3:af:d9:af:37:58: 90:5c:75:d0:f7:37:01:f3:2e:b1:aa:3b:d5:9b:9b:ee:0e:c2: 8b:c9:e2:dd:0f:7c:58:79:b1:1f:6d:e7:c1:22:24:e0:1e:1b: d0:a0:cd:2e:75:10:ab:b6:74:13:3e:88:7b:7e:74:6d:bc:a1: 94:cf:cc:be:bb:a2:15:7b:3f:32:90:f8:36:f2:8c:8e:41:21: 6b:83:83:f8:a6:43:6c:1b:ad:bc:db:5c:fb:c1:8b:85:c7:2f: 55:1b:ec:7f:c2:63:48:ea:43:65:7c:de:a5:21:b7:67:08:1c: 84:be:b0:1a -----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIUX/s34jcN8qxFy+G3eo0SWTtAOLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNjAxMTUyMTEzMTBaFw0yNzAxMTQyMTE4MTBaMDMxMTAvBgNV BAMTKDQ4MDA0NjgyM0REMkMzOEQ1NEVDRTAyQkVENDU3NjAzOEJGQjNFNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+NmUv/bksRhyoPyODmkjfTSv fozsr6APU0UbJNDIPTYB6LvgfJ05qYHwO4EyK/zQlD/GnmiNuSoxwooQIsKSHAGy q+lIAvjxqUpn7UUoiRwkH7KcAnGMJvr/jofymOZHN0MGoNr8KBvlzrl1jroqf/ji 3z+p7+LQk8C4LgpMoVF9SRenq+O7derdpu0vczf0g3nAzAXPve+tpEEwlQqS0D6U j3fF/e0PZuVyTt0GDD0p34ZC8OUdcdRdf4TobOuvcD3dBqE0Cw3TUEVeMHYvOaLR tU7rV6+ATNpysVUgLVgWs/URwanko85alDl4eH26jG06A3WYyKS71py02ctvAgMB AAGjggH3MIIB8zAdBgNVHQ4EFgQUSABGgj3Sw41U7OAr7UV2A4v7PkMwHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT MjEzNTIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEH AQH/BBgwFjAUBAIAAjAOAwUAKgafQwMFASoN2QIwDQYJKoZIhvcNAQELBQADggEB AA3gETrWSrM2Nlf9tHysHbkLJyHVBP2wy9/L65pHPRjMVPYIt3QlhpTs8WqLoVfi fNDmw3B9xVmjmGHTHMnjgdbgfA6vcI73ZsxaUyXD/uJRqMgF4Az3Fei9L/2RP6PD aiUB+Y9z5Kj94RtkDg1x2jok3XoncnZ8eYW+jGZiHQixFkgHtj/HxPD63KOv2a83 WJBcddD3NwHzLrGqO9Wbm+4OwovJ4t0PfFh5sR9t58EiJOAeG9CgzS51EKu2dBM+ iHt+dG28oZTPzL67ohV7PzKQ+DbyjI5BIWuDg/imQ2wbrbzbXPvBi4XHL1Ub7H/C Y0jqQ2V83qUht2cIHIS+sBo= -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:35 2026 by rpki-client