This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: bV4gIIdy44XtiCFdRmE/cKOztS3XXRA24wQx9DqlZSY= Subject key identifier: FF:67:47:F5:08:61:10:09:77:63:20:FF:14:A5:40:0E:0B:58:F7:DA Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 52AE7005A6F867403C7AC7B2548D3423E4ECF248 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS29802.roa Signing time: Mon 24 Nov 2025 20:57:06 +0000 ROA not before: Mon 24 Nov 2025 20:52:06 +0000 ROA not after: Mon 23 Nov 2026 20:57:06 +0000 asID: 29802 IP address blocks: 85.155.225.0/24 maxlen: 24 185.99.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ae:70:05:a6:f8:67:40:3c:7a:c7:b2:54:8d:34:23:e4:ec:f2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Nov 24 20:52:06 2025 GMT Not After : Nov 23 20:57:06 2026 GMT Subject: CN=FF6747F508611009776320FF14A5400E0B58F7DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d7:c0:de:c2:94:43:b8:24:2e:4c:b2:c2:24: 5d:25:42:7b:6b:d2:ae:99:e3:c8:82:a1:f4:62:0a: 0e:73:26:b6:0f:79:02:ad:e4:00:07:b3:80:fb:e2: bf:e1:d3:2a:f3:15:da:4a:c5:54:fd:2c:28:e2:b9: a8:e0:69:5e:b4:fd:89:af:6d:fc:0a:c5:83:89:bf: 93:6e:11:e2:bd:d9:a3:fd:da:45:2a:88:d0:86:76: 9d:72:08:7e:15:ec:d8:02:f6:13:5b:79:ad:be:b4: 1f:e1:de:77:76:fb:62:ba:f3:ac:f0:e0:00:9c:d1: 85:35:9d:d1:a5:df:13:eb:99:9c:e3:ca:b3:bd:e1: 45:97:5a:e3:7d:28:2e:45:05:78:ac:a4:1f:80:6f: a1:01:39:b7:26:33:7f:9f:04:12:43:e6:e4:bb:c0: b2:f6:ea:92:a0:6b:ea:38:39:dc:3c:40:06:5f:2c: db:d4:02:b6:8f:9e:2e:6b:32:9b:40:59:dd:45:7f: 55:2d:92:7c:f5:c0:04:88:a5:42:c9:93:3c:9f:de: 97:ce:77:75:dc:c1:e9:42:2c:0f:22:3a:e1:8c:b6: a1:a3:c5:c9:ba:4e:90:c5:88:0b:1c:24:a9:56:da: 67:e3:f9:07:71:cb:bf:26:77:2c:3d:a3:14:65:2b: 0e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:67:47:F5:08:61:10:09:77:63:20:FF:14:A5:40:0E:0B:58:F7:DA X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.155.225.0/24 185.99.134.0/24 Signature Algorithm: sha256WithRSAEncryption 29:06:2c:5f:d8:5e:df:30:d6:7f:48:4c:0c:7f:7b:51:eb:93: f9:d0:e5:d6:5c:2b:f1:e5:54:31:5c:6b:c8:c8:d6:91:fe:9c: 50:a9:1e:4d:b2:df:93:1a:b4:77:35:9d:e2:11:ec:5d:6e:21: cb:f3:03:3a:aa:85:6e:07:e0:83:28:8e:f1:5b:39:4a:50:d7: 34:51:41:3b:7c:75:00:ff:1a:72:8a:b2:6e:67:50:ed:09:32: a7:9d:23:17:4c:2b:20:d9:d1:94:b2:9d:e6:47:11:8a:54:9d: de:6d:37:ff:79:d4:1f:77:07:6c:bd:7b:ca:96:30:32:72:3e: 18:ef:11:05:9d:9e:7e:5d:b3:e2:5d:a2:bd:85:d0:5e:29:f5: cb:55:74:44:cf:6d:08:bd:ab:64:5d:29:14:c3:a0:23:1d:fa: d2:7e:b0:ec:f1:11:89:d0:84:11:68:c5:67:51:70:f1:57:ab: 07:8a:06:75:84:df:75:9c:25:73:96:12:4e:90:b3:91:17:23: e1:88:97:64:28:73:65:28:f7:20:f1:17:2a:55:93:8e:7b:75: ec:7a:4c:be:7c:15:12:36:98:8a:4e:8d:7e:bc:0e:4a:9c:62: 87:44:07:7e:06:ba:9b:0b:e6:d6:40:d0:d1:68:b9:bf:7f:6e: 3c:f3:92:93 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUUq5wBab4Z0A8eseyVI00I+Ts8kgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTExMjQyMDUyMDZaFw0yNjExMjMyMDU3MDZaMDMxMTAvBgNV BAMTKEZGNjc0N0Y1MDg2MTEwMDk3NzYzMjBGRjE0QTU0MDBFMEI1OEY3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH18DewpRDuCQuTLLCJF0lQntr 0q6Z48iCofRiCg5zJrYPeQKt5AAHs4D74r/h0yrzFdpKxVT9LCjiuajgaV60/Ymv bfwKxYOJv5NuEeK92aP92kUqiNCGdp1yCH4V7NgC9hNbea2+tB/h3nd2+2K686zw 4ACc0YU1ndGl3xPrmZzjyrO94UWXWuN9KC5FBXispB+Ab6EBObcmM3+fBBJD5uS7 wLL26pKga+o4Odw8QAZfLNvUAraPni5rMptAWd1Ff1Utknz1wASIpULJkzyf3pfO d3XcwelCLA8iOuGMtqGjxcm6TpDFiAscJKlW2mfj+Qdxy78mdyw9oxRlKw7NAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU/2dH9QhhEAl3YyD/FKVADgtY99owHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT Mjk4MDIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcB Af8EFjAUMBIEAgABMAwDBABVm+EDBAC5Y4YwDQYJKoZIhvcNAQELBQADggEBACkG LF/YXt8w1n9ITAx/e1Hrk/nQ5dZcK/HlVDFca8jI1pH+nFCpHk2y35MatHc1neIR 7F1uIcvzAzqqhW4H4IMojvFbOUpQ1zRRQTt8dQD/GnKKsm5nUO0JMqedIxdMKyDZ 0ZSyneZHEYpUnd5tN/951B93B2y9e8qWMDJyPhjvEQWdnn5ds+Jdor2F0F4p9ctV dETPbQi9q2RdKRTDoCMd+tJ+sOzxEYnQhBFoxWdRcPFXqweKBnWE33WcJXOWEk6Q s5EXI+GIl2Qoc2Uo9yDxFypVk457dex6TL58FRI2mIpOjX68DkqcYodEB34GupsL 5tZA0NFoub9/bjzzkpM= -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:15 2025 by rpki-client