This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214150.roa File: AS214150.roa (raw, json) Hash identifier: LzKv+UzHOfLPn5vssxyKET933El4NFBfdWdFeP0UCg0= Subject key identifier: 24:61:CE:99:1F:1B:F3:9F:21:47:E9:3A:AC:DD:D1:A8:D6:E9:FF:DF Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 437C9E38B9810ABE4F0137916030159CF636387B Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214150.roa Signing time: Sun 18 Jan 2026 18:47:50 +0000 ROA not before: Sun 18 Jan 2026 18:42:50 +0000 ROA not after: Sun 17 Jan 2027 18:47:50 +0000 asID: 214150 IP address blocks: 85.155.102.0/24 maxlen: 24 103.204.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7c:9e:38:b9:81:0a:be:4f:01:37:91:60:30:15:9c:f6:36:38:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Jan 18 18:42:50 2026 GMT Not After : Jan 17 18:47:50 2027 GMT Subject: CN=2461CE991F1BF39F2147E93AACDDD1A8D6E9FFDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dd:fe:8c:e5:97:34:5d:e5:5a:dc:96:e7:be: 4f:7f:a7:6d:15:86:8d:fe:8f:6c:5a:30:16:84:a0: 43:66:ff:21:04:23:5c:6c:a6:9e:35:e4:0d:07:87: 40:7e:f6:85:f2:77:ec:c4:60:78:b6:c8:d3:87:42: f7:0a:32:80:be:84:11:f4:2f:7f:34:95:26:4e:1f: de:29:34:7a:ac:43:17:87:37:17:fb:39:f9:47:e5: a3:7d:51:a1:12:91:09:5b:a6:e5:bb:18:06:66:09: 29:49:67:ba:90:30:eb:19:39:48:a8:63:b6:be:03: f8:ba:3d:f6:8e:0e:0c:05:48:f6:4d:39:82:c2:e6: ca:34:2f:c7:b9:06:04:a3:bb:39:2c:5a:f7:e5:1b: a3:2d:58:82:5b:07:8a:bd:c9:db:fb:34:4e:bf:44: 89:b2:94:d2:19:69:e2:85:04:17:ad:2d:af:f1:a6: 02:11:e3:7f:be:ce:98:d6:0f:aa:5c:92:43:be:fd: e3:41:71:9f:07:a1:e7:2d:de:f2:1d:6b:e3:62:ac: c3:9c:3d:8e:2a:65:a1:32:06:67:8b:5f:05:f5:71: 3c:0d:8f:5a:38:ff:57:b9:22:31:ba:52:a1:b2:86: d6:89:a5:83:a6:ec:25:54:e7:23:d8:55:10:a9:b4: 86:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:61:CE:99:1F:1B:F3:9F:21:47:E9:3A:AC:DD:D1:A8:D6:E9:FF:DF X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214150.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.155.102.0/24 103.204.194.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:5f:04:91:51:5d:f9:86:22:c7:46:71:d9:8f:ff:43:b1:be: 2d:e7:41:b6:c7:fc:a1:9f:c0:0c:17:f3:ee:a8:d8:01:29:d0: f5:f7:1a:df:96:18:fe:db:b4:ed:d5:e2:a9:3b:50:73:45:d8: 92:54:14:34:8c:08:d2:c7:9d:6f:f2:f5:df:bd:2f:ce:db:b2: 9f:cd:fd:0c:08:c7:97:25:88:fa:23:48:94:54:39:98:f5:69: f0:45:27:92:d6:66:b2:7f:0a:51:4c:b8:e8:bb:b5:43:63:15: 1c:b1:6d:02:eb:a9:ce:51:fc:51:7e:43:7d:94:ed:f7:3e:56: 70:22:de:8f:1b:c4:9d:50:a8:0c:c4:90:91:ec:a3:64:62:f8: 44:53:3c:e3:1d:84:ec:59:77:b9:ab:21:36:52:85:8d:e4:2f: c6:ee:c5:8a:cf:fd:10:7a:32:ca:bc:91:83:b5:f6:d5:b4:f4: 6f:29:8d:27:1d:7f:c5:9f:22:16:f9:8a:8f:81:bd:5f:be:cd: 82:71:33:f6:8e:5c:72:6d:bd:b7:00:8f:af:72:17:30:08:35: b3:4d:b0:1b:88:70:33:ac:01:f9:fc:9f:b8:8a:8d:45:63:f4: f5:08:27:30:6e:63:76:d2:dc:f9:3b:e8:b6:d2:76:87:a9:ad: 66:b2:ee:28 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUQ3yeOLmBCr5PATeRYDAVnPY2OHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNjAxMTgxODQyNTBaFw0yNzAxMTcxODQ3NTBaMDMxMTAvBgNV BAMTKDI0NjFDRTk5MUYxQkYzOUYyMTQ3RTkzQUFDREREMUE4RDZFOUZGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ3f6M5Zc0XeVa3Jbnvk9/p20V ho3+j2xaMBaEoENm/yEEI1xspp415A0Hh0B+9oXyd+zEYHi2yNOHQvcKMoC+hBH0 L380lSZOH94pNHqsQxeHNxf7OflH5aN9UaESkQlbpuW7GAZmCSlJZ7qQMOsZOUio Y7a+A/i6PfaODgwFSPZNOYLC5so0L8e5BgSjuzksWvflG6MtWIJbB4q9ydv7NE6/ RImylNIZaeKFBBetLa/xpgIR43++zpjWD6pckkO+/eNBcZ8Hoect3vIda+NirMOc PY4qZaEyBmeLXwX1cTwNj1o4/1e5IjG6UqGyhtaJpYOm7CVU5yPYVRCptIbFAgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUJGHOmR8b858hR+k6rN3RqNbp/98wHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT MjE0MTUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEH AQH/BBYwFDASBAIAATAMAwQAVZtmAwQAZ8zCMA0GCSqGSIb3DQEBCwUAA4IBAQBa XwSRUV35hiLHRnHZj/9Dsb4t50G2x/yhn8AMF/PuqNgBKdD19xrflhj+27Tt1eKp O1BzRdiSVBQ0jAjSx51v8vXfvS/O27Kfzf0MCMeXJYj6I0iUVDmY9WnwRSeS1may fwpRTLjou7VDYxUcsW0C66nOUfxRfkN9lO33PlZwIt6PG8SdUKgMxJCR7KNkYvhE UzzjHYTsWXe5qyE2UoWN5C/G7sWKz/0QejLKvJGDtfbVtPRvKY0nHX/FnyIW+YqP gb1fvs2CcTP2jlxybb23AI+vchcwCDWzTbAbiHAzrAH5/J+4io1FY/T1CCcwbmN2 0tz5O+i20naHqa1msu4o -----END CERTIFICATE-----Generated at Sun Jan 25 08:52:47 2026 by rpki-client