This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215672.roa File: AS215672.roa (raw, json) Hash identifier: NdIUQNOtuOTaAdRhaFaQkP2gpNxgXkI7An/NBgae7m4= Subject key identifier: 2D:66:40:D0:2A:CE:4F:7A:83:48:50:D6:15:40:29:C2:01:91:5A:CD Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 01A3A99181A0D812CC81912CE239034728E289BF Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215672.roa Signing time: Tue 30 Dec 2025 14:50:46 +0000 ROA not before: Tue 30 Dec 2025 14:45:46 +0000 ROA not after: Tue 29 Dec 2026 14:50:46 +0000 asID: 215672 IP address blocks: 104.234.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Jan 2026 13:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a3:a9:91:81:a0:d8:12:cc:81:91:2c:e2:39:03:47:28:e2:89:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 30 14:45:46 2025 GMT Not After : Dec 29 14:50:46 2026 GMT Subject: CN=2D6640D02ACE4F7A834850D6154029C201915ACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3d:47:b1:4a:dd:d5:36:87:93:69:d7:34:1f: c7:12:40:3e:4e:76:2e:4a:c1:bf:80:0e:9a:eb:be: 0f:25:6b:6a:37:41:3c:98:b6:44:7f:fb:b2:36:72: 47:20:0d:92:87:da:e8:67:20:d0:62:d4:0a:0b:21: 5d:a6:d0:38:2f:6b:dd:d5:b5:a6:a2:be:06:d6:ba: 63:b6:e6:3b:35:6e:c6:63:c9:96:16:d3:b2:b1:db: 8f:b6:9f:b0:9d:22:d0:52:33:d9:0d:7e:7b:14:a0: 06:8e:30:f6:a9:04:9c:21:2a:ec:d9:cf:21:72:31: 44:2d:e3:2a:45:ea:06:79:d9:30:ec:e0:3c:a0:d3: 87:2c:62:99:63:2b:12:66:d7:b0:ce:b0:d5:ee:f0: db:a2:c6:d6:8e:58:38:18:88:5c:c0:a3:a9:d6:66: c6:9c:81:6a:f5:65:87:cb:8f:73:d4:ab:55:df:d3: 24:1e:71:bb:42:78:de:e9:8a:ae:21:93:17:f6:7b: b7:96:fc:4f:25:a3:90:3a:97:c9:66:a4:5e:8d:be: c0:42:56:02:5d:35:42:27:df:6a:04:b3:94:ed:a5: 5a:f4:82:f7:e3:b0:f7:73:88:04:b3:ec:04:c2:75: b6:d0:a9:eb:0c:49:0c:f4:0c:13:9b:2f:9b:11:78: dc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:66:40:D0:2A:CE:4F:7A:83:48:50:D6:15:40:29:C2:01:91:5A:CD X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215672.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.151.0/24 Signature Algorithm: sha256WithRSAEncryption 97:24:b7:21:ee:05:4c:0d:53:1b:36:01:69:86:d7:43:f9:aa: 23:7d:a4:06:df:b3:c5:25:08:72:2a:ee:05:0e:b4:40:4b:2a: 51:18:c1:60:c4:c3:e1:04:ee:da:e6:5f:d5:bb:da:b5:c2:b1: 44:ba:86:d1:9c:d6:83:c4:1f:2d:4e:86:23:99:22:81:4b:b1: b9:d7:c6:06:32:64:eb:4b:e9:53:ae:b1:58:95:0c:42:e1:26: 8c:89:61:cd:66:0c:84:20:13:b0:60:de:de:c3:09:a7:6b:1f: 9b:a8:db:26:30:51:66:6e:14:1e:41:d1:92:13:d2:c1:ca:a9: e0:46:d6:b5:ff:05:a6:3f:c8:86:47:db:e6:32:3c:81:ec:43: 14:e9:83:8b:32:2a:82:82:8f:68:e8:7c:99:9d:e1:50:75:59: 9e:8b:60:3e:22:f4:10:4e:51:16:ea:34:1a:2e:b5:c1:5a:2f: eb:6d:2e:f2:46:05:9d:d1:b2:9c:d4:5d:7a:b2:c2:c2:f3:4d: 09:ab:51:a3:f0:a0:45:ff:81:41:3c:07:0f:4e:02:e8:f8:29: 50:c1:54:93:a3:10:3a:9a:6f:07:b5:36:56:be:41:9e:c4:88: 57:7a:f8:11:16:19:90:b7:6b:a5:02:2e:fa:7d:14:1a:4a:a8: 92:d8:a8:83 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUAaOpkYGg2BLMgZEs4jkDRyjiib8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMjMwMTQ0NTQ2WhcNMjYxMjI5MTQ1MDQ2 WjAzMTEwLwYDVQQDEygyRDY2NDBEMDJBQ0U0RjdBODM0ODUwRDYxNTQwMjlDMjAx OTE1QUNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T1HsUrd1TaH k2nXNB/HEkA+TnYuSsG/gA6a674PJWtqN0E8mLZEf/uyNnJHIA2Sh9roZyDQYtQK CyFdptA4L2vd1bWmor4G1rpjtuY7NW7GY8mWFtOysduPtp+wnSLQUjPZDX57FKAG jjD2qQScISrs2c8hcjFELeMqReoGedkw7OA8oNOHLGKZYysSZtewzrDV7vDbosbW jlg4GIhcwKOp1mbGnIFq9WWHy49z1KtV39MkHnG7Qnje6YquIZMX9nu3lvxPJaOQ OpfJZqRejb7AQlYCXTVCJ99qBLOU7aVa9IL347D3c4gEs+wEwnW20KnrDEkM9AwT my+bEXjctQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFC1mQNAqzk96g0hQ1hVAKcIB kVrNMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxNTY3Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqlzANBgkqhkiG9w0BAQsFAAOC AQEAlyS3Ie4FTA1TGzYBaYbXQ/mqI32kBt+zxSUIciruBQ60QEsqURjBYMTD4QTu 2uZf1bvatcKxRLqG0ZzWg8QfLU6GI5kigUuxudfGBjJk60vpU66xWJUMQuEmjIlh zWYMhCATsGDe3sMJp2sfm6jbJjBRZm4UHkHRkhPSwcqp4EbWtf8Fpj/Ihkfb5jI8 gexDFOmDizIqgoKPaOh8mZ3hUHVZnotgPiL0EE5RFuo0Gi61wVov620u8kYFndGy nNRderLCwvNNCatRo/CgRf+BQTwHD04C6PgpUMFUk6MQOppvB7U2Vr5BnsSIV3r4 ERYZkLdrpQIu+n0UGkqoktiogw== -----END CERTIFICATE-----Generated at Mon Jan 19 23:24:04 2026 by rpki-client