This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216138.roa File: AS216138.roa (raw, json) Hash identifier: QoAW0Wo4D9rbxqM1Wx5FuCIf40j0YIVZSSzTkgRRjPY= Subject key identifier: 2C:E7:FB:31:32:87:0D:86:26:36:C9:B2:E1:22:04:21:18:3F:0E:09 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 7EEA525C60DC3B769C0E6A7751BE944226E64E48 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216138.roa Signing time: Wed 10 Dec 2025 08:14:08 +0000 ROA not before: Wed 10 Dec 2025 08:09:08 +0000 ROA not after: Wed 09 Dec 2026 08:14:08 +0000 asID: 216138 IP address blocks: 104.234.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 10:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ea:52:5c:60:dc:3b:76:9c:0e:6a:77:51:be:94:42:26:e6:4e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 10 08:09:08 2025 GMT Not After : Dec 9 08:14:08 2026 GMT Subject: CN=2CE7FB3132870D862636C9B2E1220421183F0E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:2f:20:2e:68:96:0f:a8:88:d7:7c:9b:b8: dc:1a:c4:3b:79:4c:a5:70:55:66:f2:3e:2f:35:12: f1:60:e4:c6:2d:e8:b8:38:32:5e:f9:43:33:33:f2: c8:08:a7:7d:fe:c1:89:9e:c5:8e:cc:38:17:ae:ff: 66:9a:0a:64:db:11:84:9c:61:93:0a:dc:30:f1:e5: dd:42:ab:7a:0f:23:d5:23:cd:7f:62:b1:c8:c9:1b: 5e:89:f8:9b:a4:b8:1c:d5:b8:70:6a:d6:7f:d4:fe: 3c:04:65:45:c8:cf:10:44:ea:8e:46:b8:37:e8:c7: c7:64:96:1b:bf:6b:d6:46:66:b3:12:60:00:73:39: f1:b2:b9:a6:6c:7a:66:90:ca:0d:39:2f:ce:d4:38: 53:bf:3f:96:bf:e8:34:b0:33:25:37:9c:13:58:06: c9:6d:6a:c4:bb:88:98:04:d2:10:25:12:08:74:57: 3c:82:d7:b6:dc:87:14:09:f2:ae:86:70:f6:b0:52: c6:0d:82:eb:82:e0:65:2e:a3:55:a8:9b:7f:08:a4: 5f:1e:13:af:ec:4f:9b:75:0e:db:a0:40:78:d4:a0: e1:b4:ce:b0:6e:fa:0f:71:c6:ac:d0:d5:3c:03:b3: 60:02:5e:5b:b3:b5:0e:e9:ca:d1:7d:33:8a:ca:01: 28:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E7:FB:31:32:87:0D:86:26:36:C9:B2:E1:22:04:21:18:3F:0E:09 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS216138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.14.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:8f:99:44:93:0c:bc:7d:19:7c:50:fe:16:88:85:35:e7:b3: cc:9a:9d:4d:4d:82:64:06:3f:7c:cd:4a:6c:6b:94:7d:03:e1: cb:c9:ec:4b:e1:b5:89:38:b2:0e:67:ff:5a:fd:c6:e9:bf:d0: 94:99:77:17:97:55:e8:d7:8f:ea:d5:7e:09:23:0c:8a:a7:e1: 44:4d:5b:17:73:0f:24:17:c6:b9:bb:3d:30:31:84:93:b2:54: fe:65:68:29:25:f4:7c:ae:93:00:21:ee:5b:e7:42:b7:23:ba: 7d:9d:86:4c:0c:db:dc:da:cb:56:7b:23:0e:94:70:f7:81:e9: f1:f3:fe:1b:95:8b:a9:73:35:77:5e:d8:59:f7:52:1b:cf:05: 31:64:69:ec:44:18:c5:21:83:07:3f:70:ec:a8:12:31:bb:5e: 87:07:3f:7f:c8:2f:09:36:49:d2:0a:3e:b2:94:e2:9e:e9:66: c5:31:02:e0:7d:7e:04:6b:8d:39:be:6b:a6:9f:33:cd:f0:a2: ae:6c:91:a4:20:99:dd:31:9c:fd:e3:2c:ec:8c:64:2c:ea:9a: ec:c7:2f:a0:1d:a4:36:2e:47:9c:c3:19:c2:b5:4b:a7:73:88: 93:3c:47:70:f2:d3:07:6b:a1:96:bf:4c:08:c6:4d:d3:5a:52: 43:b8:3a:78 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUfupSXGDcO3acDmp3Ub6UQibmTkgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMjEwMDgwOTA4WhcNMjYxMjA5MDgxNDA4 WjAzMTEwLwYDVQQDEygyQ0U3RkIzMTMyODcwRDg2MjYzNkM5QjJFMTIyMDQyMTE4 M0YwRTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs98vIC5olg+o iNd8m7jcGsQ7eUylcFVm8j4vNRLxYOTGLei4ODJe+UMzM/LICKd9/sGJnsWOzDgX rv9mmgpk2xGEnGGTCtww8eXdQqt6DyPVI81/YrHIyRteifibpLgc1bhwatZ/1P48 BGVFyM8QROqORrg36MfHZJYbv2vWRmazEmAAcznxsrmmbHpmkMoNOS/O1DhTvz+W v+g0sDMlN5wTWAbJbWrEu4iYBNIQJRIIdFc8gte23IcUCfKuhnD2sFLGDYLrguBl LqNVqJt/CKRfHhOv7E+bdQ7boEB41KDhtM6wbvoPccas0NU8A7NgAl5bs7UO6crR fTOKygEoEwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFCzn+zEyhw2GJjbJsuEiBCEY Pw4JMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxNjEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqDjANBgkqhkiG9w0BAQsFAAOC AQEAbo+ZRJMMvH0ZfFD+FoiFNeezzJqdTU2CZAY/fM1KbGuUfQPhy8nsS+G1iTiy Dmf/Wv3G6b/QlJl3F5dV6NeP6tV+CSMMiqfhRE1bF3MPJBfGubs9MDGEk7JU/mVo KSX0fK6TACHuW+dCtyO6fZ2GTAzb3NrLVnsjDpRw94Hp8fP+G5WLqXM1d17YWfdS G88FMWRp7EQYxSGDBz9w7KgSMbtehwc/f8gvCTZJ0go+spTinulmxTEC4H1+BGuN Ob5rpp8zzfCirmyRpCCZ3TGc/eMs7IxkLOqa7McvoB2kNi5HnMMZwrVLp3OIkzxH cPLTB2uhlr9MCMZN01pSQ7g6eA== -----END CERTIFICATE-----Generated at Fri Dec 19 19:42:25 2025 by rpki-client