This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58212.roa
File: AS58212.roa (raw, json)
Hash identifier: mHOxICqs5GveH0XBDXLjJGgegnTOs8GKITSD4m+M2jA=
Subject key identifier: F3:CE:E2:5F:4A:F5:F6:7E:A4:88:F7:E1:C5:CE:21:3E:BF:A1:B9:02
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 0D3ECB963897BE3C2062CFB4964AA66892FE4CAA
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58212.roa
Signing time: Mon 24 Nov 2025 20:52:48 +0000
ROA not before: Mon 24 Nov 2025 20:47:48 +0000
ROA not after: Mon 23 Nov 2026 20:52:48 +0000
asID: 58212
IP address blocks: 2a05:dfc7::/32 maxlen: 48
2a06:a000::/32 maxlen: 48
2a0a:6046::/32 maxlen: 48
2a0d:d907::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:3e:cb:96:38:97:be:3c:20:62:cf:b4:96:4a:a6:68:92:fe:4c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Nov 24 20:47:48 2025 GMT
Not After : Nov 23 20:52:48 2026 GMT
Subject: CN=F3CEE25F4AF5F67EA488F7E1C5CE213EBFA1B902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:7d:07:47:ad:72:50:83:32:50:f3:12:4c:
be:7a:2a:67:4a:94:bd:fd:4f:e9:60:b5:01:8b:62:
e2:b0:ae:18:ab:b3:a7:33:a6:7d:b2:7a:00:26:2d:
1a:6c:e4:24:c4:89:e4:c1:c3:1c:23:6d:d1:7a:66:
82:38:58:42:30:68:81:22:18:66:3d:bd:7d:44:c8:
0f:1d:f4:5c:25:6a:9b:ed:89:98:c7:ad:15:47:2c:
e0:a2:28:48:df:e6:61:b6:ca:55:df:60:1b:87:df:
35:c8:ef:e1:ab:dd:e0:e2:73:4b:c3:1c:bd:fd:90:
53:7f:87:0b:fa:61:d9:fb:1d:70:80:b3:50:b3:4f:
3a:61:92:4e:39:23:ba:c3:5d:b1:e1:39:28:77:e4:
3c:e7:1a:1c:96:9f:1f:c8:4f:cb:d8:b0:64:c2:ff:
7e:8d:ee:f2:10:18:1a:af:6b:40:27:bf:24:2b:b3:
75:53:9b:f2:15:58:00:2d:81:e9:4d:b5:e5:74:f7:
73:ce:a0:ec:22:bc:0e:59:80:74:82:fa:03:b4:61:
cc:fb:f5:53:16:c5:bd:b0:0a:67:ef:b5:6f:9c:9d:
a5:9c:0f:c8:8a:55:34:fe:b1:75:96:f1:06:c3:84:
4e:f9:64:9e:d9:27:ba:ed:5f:b5:ab:11:c0:74:55:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CE:E2:5F:4A:F5:F6:7E:A4:88:F7:E1:C5:CE:21:3E:BF:A1:B9:02
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS58212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc7::/32
2a06:a000::/32
2a0a:6046::/32
2a0d:d907::/32
Signature Algorithm: sha256WithRSAEncryption
9c:4c:61:d2:d9:ba:17:4a:d1:8a:18:a0:c5:10:e6:52:d4:f0:
a6:4a:3a:e5:68:67:50:57:d5:b8:78:1d:96:b6:71:d9:e0:e2:
68:cc:21:1d:c5:bd:cb:2d:59:51:53:a7:9a:8b:7c:3e:7d:86:
02:8c:cc:7e:22:34:eb:ac:86:e7:8e:64:33:11:04:4e:04:d2:
2d:09:19:91:e4:92:f1:3b:d2:ba:18:da:ff:b8:90:75:57:b0:
78:f2:dd:6e:cc:0a:9c:4b:cb:c2:7f:18:a0:7b:c7:6a:a8:83:
33:53:c7:5e:4c:32:3c:10:a2:6c:7b:44:b3:ed:0f:df:63:4c:
8f:f6:ec:ce:84:ac:22:c8:26:a5:04:05:2f:0a:92:a5:1d:21:
6e:1e:76:e8:64:09:03:25:d2:a0:86:a2:5e:29:4a:4c:f3:23:
54:50:50:08:3a:6f:57:a0:b9:fa:ba:ba:93:b3:2b:77:a1:2d:
01:cb:84:0e:01:eb:bd:d0:bb:6f:3c:b4:e2:9f:a5:76:d4:47:
83:07:7e:f3:de:5d:fc:62:87:17:20:7f:75:50:8d:ac:81:5f:
11:ae:f5:6e:cc:ad:ee:a1:97:24:f8:58:74:fd:24:ae:40:38:
61:34:0f:97:66:52:23:70:ff:44:52:83:00:ac:4a:63:2c:de:
ba:de:80:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:58:51 2025 by rpki-client