This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS1239.roa File: AS1239.roa (raw, json) Hash identifier: qFc2Pyl1D9fVnPRUo/r7XagTqFDxRmzb8Ve97/vm/z0= Subject key identifier: 7C:39:78:9E:2F:6E:D8:0E:B9:1F:4F:EF:52:B3:6F:74:B4:37:DA:96 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 20ED9CAAE131FD7CC25CAAD6C4A05C7E869B2FE3 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS1239.roa Signing time: Mon 12 Jan 2026 20:50:46 +0000 ROA not before: Mon 12 Jan 2026 20:45:46 +0000 ROA not after: Mon 11 Jan 2027 20:50:46 +0000 asID: 1239 IP address blocks: 104.234.12.0/24 maxlen: 24 206.53.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 06:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ed:9c:aa:e1:31:fd:7c:c2:5c:aa:d6:c4:a0:5c:7e:86:9b:2f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 12 20:45:46 2026 GMT Not After : Jan 11 20:50:46 2027 GMT Subject: CN=7C39789E2F6ED80EB91F4FEF52B36F74B437DA96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:74:20:71:5c:be:d3:27:46:a7:c6:3c:49:9b: e4:84:1f:e3:b7:39:b4:74:00:1c:f3:ba:df:98:fa: a9:6c:7b:2d:df:c6:b3:1f:3f:16:e1:18:80:d8:d7: 1c:c8:7d:18:9a:f2:2d:7b:36:0d:37:6c:36:67:60: 08:09:7e:f8:6f:12:fe:36:a3:54:a7:f0:d5:d2:e6: 13:a9:05:c1:c7:e6:26:e8:50:1d:03:4b:43:90:2f: 6e:f8:03:ec:cf:7e:8e:ab:9a:b3:c2:41:f4:39:08: 7d:78:ad:ba:f9:39:8c:05:dc:7a:d6:d1:a4:d2:cb: 45:b7:18:f2:f1:7d:c5:89:19:86:71:7d:76:54:c5: fd:66:3c:5a:54:75:52:b6:a2:d9:dc:9b:fd:d9:3c: e3:20:1d:a8:8c:fe:33:92:05:d4:20:e9:e8:35:06: a5:0c:ab:ff:bd:79:ae:4d:01:db:4d:5e:27:70:12: 50:dc:a8:2b:1a:94:ba:04:92:62:7d:44:95:2f:11: df:f7:cb:10:29:d5:15:8d:b9:9b:d3:b1:ec:00:51: 52:bf:e2:08:03:27:3f:f1:5e:66:31:e9:f6:66:2e: 40:49:fc:14:a2:67:a5:49:97:1b:eb:4c:df:b4:62: 82:7b:3d:2e:e9:08:66:ec:a5:c1:d0:42:b0:52:1a: 67:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:39:78:9E:2F:6E:D8:0E:B9:1F:4F:EF:52:B3:6F:74:B4:37:DA:96 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS1239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.12.0/24 206.53.58.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:60:21:0f:fe:7d:57:c1:20:20:b4:98:5a:5b:68:28:ab:72: b2:50:50:aa:38:9f:64:bd:4a:0f:6f:43:48:81:b0:9d:32:9c: 36:a5:0b:be:28:eb:3c:3a:54:53:d4:fb:5e:c7:b1:6a:1a:34: 55:d8:5f:c0:19:cd:c8:02:c2:23:92:d2:73:a0:73:96:b6:3d: 33:b7:32:c3:25:0e:b5:d1:f0:5d:ed:82:82:6f:50:f6:1a:a7: b8:eb:63:c6:9c:0a:40:c7:e7:48:bb:6c:17:94:33:98:c0:56: 7c:19:c0:16:cd:b3:6a:fc:c6:4e:4f:ae:15:9d:11:47:99:0b: 05:b7:81:9b:ef:b4:f2:5c:fa:e2:5f:90:5a:d8:9d:df:e2:f0: c1:b9:a0:b0:48:8e:d5:e5:33:f8:ef:a5:aa:33:b5:6b:bb:e3: c1:14:f4:16:39:08:83:48:a5:f0:fe:45:f9:5e:2b:b3:77:7f: 49:bf:4c:9d:21:47:80:f7:2c:95:e3:1f:ad:54:55:3a:61:50: cb:16:f3:a4:b5:f0:57:89:4a:04:3e:65:49:ad:f6:22:5c:76: 54:f7:28:3d:e2:1a:1c:37:18:13:1a:e5:f2:6d:89:32:d0:a6: 64:0a:0f:05:5c:e8:f6:80:4d:d2:e8:1c:2c:8a:d7:3a:72:0e: f1:da:bc:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIUIO2cquEx/XzCXKrWxKBcfoabL+MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwMTEyMjA0NTQ2WhcNMjcwMTExMjA1MDQ2 WjAzMTEwLwYDVQQDEyg3QzM5Nzg5RTJGNkVEODBFQjkxRjRGRUY1MkIzNkY3NEI0 MzdEQTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHQgcVy+0ydG p8Y8SZvkhB/jtzm0dAAc87rfmPqpbHst38azHz8W4RiA2NccyH0YmvItezYNN2w2 Z2AICX74bxL+NqNUp/DV0uYTqQXBx+Ym6FAdA0tDkC9u+APsz36Oq5qzwkH0OQh9 eK26+TmMBdx61tGk0stFtxjy8X3FiRmGcX12VMX9ZjxaVHVStqLZ3Jv92TzjIB2o jP4zkgXUIOnoNQalDKv/vXmuTQHbTV4ncBJQ3KgrGpS6BJJifUSVLxHf98sQKdUV jbmb07HsAFFSv+IIAyc/8V5mMen2Zi5ASfwUomelSZcb60zftGKCez0u6Qhm7KXB 0EKwUhpneQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFHw5eJ4vbtgOuR9P71Kzb3S0 N9qWMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzEyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYI KwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABo6gwDBADONTowDQYJKoZIhvcNAQEL BQADggEBAFxgIQ/+fVfBICC0mFpbaCircrJQUKo4n2S9Sg9vQ0iBsJ0ynDalC74o 6zw6VFPU+17HsWoaNFXYX8AZzcgCwiOS0nOgc5a2PTO3MsMlDrXR8F3tgoJvUPYa p7jrY8acCkDH50i7bBeUM5jAVnwZwBbNs2r8xk5PrhWdEUeZCwW3gZvvtPJc+uJf kFrYnd/i8MG5oLBIjtXlM/jvpaoztWu748EU9BY5CINIpfD+RfleK7N3f0m/TJ0h R4D3LJXjH61UVTphUMsW86S18FeJSgQ+ZUmt9iJcdlT3KD3iGhw3GBMa5fJtiTLQ pmQKDwVc6PaATdLoHCyK1zpyDvHavMw= -----END CERTIFICATE-----Generated at Tue Jan 20 22:20:37 2026 by rpki-client