This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS216409.roa File: AS216409.roa (raw, json) Hash identifier: JJXLsmWZREYyqZzOzp096bdRJmzN+4pWiPsoJOfAntU= Subject key identifier: CA:5C:20:94:56:3F:70:28:81:A6:C6:0B:1E:EE:1D:07:37:85:D4:E6 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 6F2359F6FFC3091F8B6E4660EE3706C10AA46935 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS216409.roa Signing time: Sat 24 Jan 2026 02:08:10 +0000 ROA not before: Sat 24 Jan 2026 02:03:10 +0000 ROA not after: Sat 23 Jan 2027 02:08:10 +0000 asID: 216409 IP address blocks: 94.24.109.0/24 maxlen: 24 206.53.2.0/24 maxlen: 24 206.53.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:23:59:f6:ff:c3:09:1f:8b:6e:46:60:ee:37:06:c1:0a:a4:69:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Jan 24 02:03:10 2026 GMT Not After : Jan 23 02:08:10 2027 GMT Subject: CN=CA5C2094563F702881A6C60B1EEE1D073785D4E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8d:00:8f:64:a0:fb:05:25:3f:79:51:74:bf: 72:bb:ee:cf:04:7c:bb:14:64:91:b4:42:37:b4:87: 85:a8:8b:de:0f:1a:49:69:cf:6e:b5:73:b5:5a:1e: 25:7c:d0:16:f6:b6:50:61:6b:c8:a4:fb:e8:48:9f: 30:de:fa:8b:b4:ce:ad:6a:9c:8e:46:d8:d5:c0:7e: 64:91:b5:a4:3a:6d:be:ca:87:e8:63:ae:ce:9c:4b: be:88:13:81:5f:6d:f5:47:8a:ba:4c:3e:a8:28:50: 83:27:d8:0e:5c:d7:21:5a:e2:b1:5a:e0:ad:4c:f3: 8b:bf:6c:34:ec:70:bc:4e:a4:1d:b0:fd:ee:40:a0: 61:47:fc:02:19:ef:4a:e2:a2:d3:3e:9b:93:9d:bd: e6:f2:ad:47:28:15:ee:54:34:f6:60:b5:bf:ae:f3: 6a:96:1e:6f:1f:52:8e:50:fb:0e:bb:72:e1:f8:05: c2:47:a8:0c:91:6b:c2:dd:40:f7:02:78:a2:76:f4: be:46:a4:44:ee:4d:56:5f:a1:1a:23:44:34:35:55: e8:fe:6a:70:8a:07:20:4f:ee:c5:aa:c7:85:77:9a: 96:f5:06:9d:33:07:8e:77:e4:71:2e:1d:e2:11:e4: 6a:88:01:c4:bb:94:50:dc:7f:86:39:e5:2c:f0:ba: 8a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5C:20:94:56:3F:70:28:81:A6:C6:0B:1E:EE:1D:07:37:85:D4:E6 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS216409.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.24.109.0/24 206.53.2.0/23 Signature Algorithm: sha256WithRSAEncryption af:e3:20:72:2e:65:ba:bc:dd:14:59:5e:58:6d:6b:7d:d7:4a: 17:cb:d5:f6:43:59:39:7f:e1:30:72:d2:c1:37:b5:af:30:90: 5e:6a:21:9e:e8:dc:b0:9e:d4:c6:39:ab:52:92:3d:12:58:86: 81:0c:85:ba:7f:50:44:01:df:10:73:af:25:3f:23:f2:f6:6f: bd:aa:1c:fe:86:c9:8d:52:94:64:65:27:07:80:78:28:cb:5a: 77:51:06:0d:04:bc:99:50:47:36:31:0a:ce:5e:60:f9:e7:f4: 39:ca:24:b1:50:f1:5e:df:75:25:40:4f:7a:8f:11:96:a4:2f: 5b:0f:f9:3d:b4:60:37:b0:d6:66:03:1d:04:51:aa:0f:ca:75: 87:4b:c9:05:71:48:7a:88:2d:e5:4a:5d:9d:cb:7e:19:2d:4c: a3:23:3e:52:13:84:6e:7c:68:9b:f5:af:dd:93:eb:db:24:87: 98:dd:ae:72:41:1b:34:22:32:24:ed:63:79:ad:91:64:95:b0: 9d:55:1d:d7:b2:6d:6c:59:3a:e6:68:00:35:ba:88:3f:f3:ca: 62:64:d0:30:3a:eb:83:e1:a7:aa:f5:fb:d5:50:e8:b8:3c:7c: 35:b2:65:b6:18:7d:6d:c1:77:db:bf:82:60:ce:ba:50:fe:44: 10:f7:99:5d -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUbyNZ9v/DCR+LbkZg7jcGwQqkaTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNjAxMjQwMjAzMTBaFw0yNzAxMjMwMjA4MTBaMDMxMTAvBgNV BAMTKENBNUMyMDk0NTYzRjcwMjg4MUE2QzYwQjFFRUUxRDA3Mzc4NUQ0RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqjQCPZKD7BSU/eVF0v3K77s8E fLsUZJG0Qje0h4Woi94PGklpz261c7VaHiV80Bb2tlBha8ik++hInzDe+ou0zq1q nI5G2NXAfmSRtaQ6bb7Kh+hjrs6cS76IE4FfbfVHirpMPqgoUIMn2A5c1yFa4rFa 4K1M84u/bDTscLxOpB2w/e5AoGFH/AIZ70riotM+m5OdvebyrUcoFe5UNPZgtb+u 82qWHm8fUo5Q+w67cuH4BcJHqAyRa8LdQPcCeKJ29L5GpETuTVZfoRojRDQ1Vej+ anCKByBP7sWqx4V3mpb1Bp0zB4535HEuHeIR5GqIAcS7lFDcf4Y55SzwuorHAgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUylwglFY/cCiBpsYLHu4dBzeF1OYwHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT MjE2NDA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEH AQH/BBYwFDASBAIAATAMAwQAXhhtAwQBzjUCMA0GCSqGSIb3DQEBCwUAA4IBAQCv 4yByLmW6vN0UWV5YbWt910oXy9X2Q1k5f+EwctLBN7WvMJBeaiGe6NywntTGOatS kj0SWIaBDIW6f1BEAd8Qc68lPyPy9m+9qhz+hsmNUpRkZScHgHgoy1p3UQYNBLyZ UEc2MQrOXmD55/Q5yiSxUPFe33UlQE96jxGWpC9bD/k9tGA3sNZmAx0EUaoPynWH S8kFcUh6iC3lSl2dy34ZLUyjIz5SE4RufGib9a/dk+vbJIeY3a5yQRs0IjIk7WN5 rZFklbCdVR3Xsm1sWTrmaAA1uog/88piZNAwOuuD4aeq9fvVUOi4PHw1smW2GH1t wXfbv4JgzrpQ/kQQ95ld -----END CERTIFICATE-----Generated at Sun Jan 25 08:52:44 2026 by rpki-client