This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS48266.roa
File: AS48266.roa (raw, json)
Hash identifier: 1wRJvqcIVEzoRC6yjDPdZaP/nhk5wdMDFyHShC3Vsbs=
Subject key identifier: EC:0E:2E:DD:FC:31:AB:6B:8F:FE:6E:69:F6:94:B9:0B:4C:90:C7:80
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 212B9C6FAFF1ADB7E6F8BE06F6E60FAFB539A017
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS48266.roa
Signing time: Wed 03 Dec 2025 20:12:44 +0000
ROA not before: Wed 03 Dec 2025 20:07:44 +0000
ROA not after: Wed 02 Dec 2026 20:12:44 +0000
asID: 48266
IP address blocks: 144.48.80.0/24 maxlen: 24
2a06:a005:90::/44 maxlen: 48
2a06:a005:a0::/44 maxlen: 48
2a06:a005:350::/44 maxlen: 48
2a06:a005:870::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:2b:9c:6f:af:f1:ad:b7:e6:f8:be:06:f6:e6:0f:af:b5:39:a0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Dec 3 20:07:44 2025 GMT
Not After : Dec 2 20:12:44 2026 GMT
Subject: CN=EC0E2EDDFC31AB6B8FFE6E69F694B90B4C90C780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:fa:ed:2c:ff:a8:1d:a8:70:5b:d8:16:eb:
9f:b0:ab:32:9a:b0:cd:34:9d:6c:b3:16:4a:bd:4b:
84:cc:37:49:d5:9d:2b:79:39:16:3d:79:52:70:95:
1b:91:0f:e7:4b:50:13:4a:7b:9f:fa:d4:3d:28:5c:
ba:e3:ab:f2:3f:1f:35:36:ee:c3:72:1c:9a:63:46:
9c:37:7a:8d:99:44:f4:21:8d:fd:d9:45:fd:7b:71:
e1:e3:73:15:54:e6:7c:16:58:79:2a:9f:87:13:61:
a3:35:1b:90:31:81:18:7e:34:8b:8f:7d:ae:9d:06:
4a:27:0f:08:44:83:3d:d9:98:ab:01:85:2f:2d:d5:
fc:89:08:dd:0a:dc:23:da:2e:66:2c:25:1f:17:0c:
8d:0e:9b:6d:b7:4d:f7:ab:1c:e2:81:be:27:2d:8a:
26:33:03:8f:fa:42:e9:a8:a8:30:30:ef:0b:3f:f2:
4f:cc:05:0c:d5:79:54:f9:67:cc:d0:39:d6:81:6e:
ff:1e:af:55:50:49:75:9f:b9:28:89:48:84:c8:61:
b8:35:d6:11:02:d3:db:3b:98:ba:2a:a3:7f:a8:b6:
0f:fc:0d:3a:60:c8:1c:e6:b8:67:05:4c:ee:da:16:
c9:18:4b:f8:d3:18:7d:6c:01:fb:64:cc:be:91:8a:
6e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0E:2E:DD:FC:31:AB:6B:8F:FE:6E:69:F6:94:B9:0B:4C:90:C7:80
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS48266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.80.0/24
IPv6:
2a06:a005:90::-2a06:a005:af:ffff:ffff:ffff:ffff:ffff
2a06:a005:350::/44
2a06:a005:870::/44
Signature Algorithm: sha256WithRSAEncryption
20:2d:37:29:4f:d5:9c:8c:42:aa:94:8a:c9:86:2c:e0:3f:51:
e4:f2:6a:05:30:d2:a9:2d:ca:e2:9d:e1:90:39:34:e5:6c:55:
d7:44:c3:b3:b1:e5:8b:14:3d:cf:64:2c:11:8b:f2:41:b1:68:
3e:28:90:ef:4e:85:1d:d8:05:8f:0b:a4:77:03:47:9c:92:39:
39:19:2a:bd:c0:73:0c:80:30:d7:3c:eb:b1:22:66:c4:22:0f:
a5:05:a6:18:66:6e:14:e4:73:ab:f7:0e:a1:df:b1:f8:19:34:
87:79:f6:76:e5:58:38:bb:0d:3f:0d:ef:83:77:9b:cf:98:e5:
59:1e:2c:63:87:fd:74:e3:99:df:b7:3a:df:cb:a7:0c:e1:ce:
97:11:ca:6c:ea:fc:3b:70:9a:9d:52:b9:34:3a:31:10:17:59:
18:63:06:8e:2d:2d:49:d7:19:32:60:33:b5:bc:47:1c:7a:38:
d5:72:f6:b9:34:92:d2:29:9b:6f:1e:4a:ca:89:d2:cc:c3:c3:
69:c3:0c:03:52:72:ae:e9:45:cc:22:bf:6f:78:2d:34:5a:fb:
9e:91:b5:d9:6c:58:e0:b6:ca:17:91:f1:7d:4a:b4:37:e5:06:
05:7b:9b:97:ef:99:f0:b0:fe:6c:8a:2f:1e:35:25:da:b3:5a:
78:d4:fc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:04:54 2025 by rpki-client