This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: 1/KGTWFkVLW4SvQEdVdmEHhFWTG1rZ0s2FUHkjPqOFk= Subject key identifier: 52:BE:0F:C2:F7:18:45:8D:F7:DD:BD:C4:C2:F6:AE:63:24:22:7F:D4 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 0DC0042CE40525661A9F21F1D5FAAF202C4FC855 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25198.roa Signing time: Sat 17 Jan 2026 06:12:28 +0000 ROA not before: Sat 17 Jan 2026 06:07:28 +0000 ROA not after: Sat 16 Jan 2027 06:12:28 +0000 asID: 25198 IP address blocks: 104.234.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Jan 2026 13:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c0:04:2c:e4:05:25:66:1a:9f:21:f1:d5:fa:af:20:2c:4f:c8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 17 06:07:28 2026 GMT Not After : Jan 16 06:12:28 2027 GMT Subject: CN=52BE0FC2F718458DF7DDBDC4C2F6AE6324227FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:cc:10:ea:97:cf:f5:7b:91:6b:93:7c:27: 98:18:2a:8e:1a:55:76:93:f3:42:0c:d1:9e:cf:df: 56:27:ed:3c:2d:fb:b1:03:8c:13:d8:b2:78:2a:7b: 91:9b:e8:8f:c3:d2:d4:2b:41:7a:ea:85:61:33:12: b1:4b:37:4c:42:cb:35:01:e1:8c:09:b8:46:d5:f5: 46:0f:97:25:50:f9:69:3a:85:0c:4c:7b:a2:75:62: f5:7d:88:af:1f:e0:01:e5:4f:61:e0:2d:11:42:b9: 1a:d2:22:56:e2:ca:ff:c7:15:27:46:76:0a:78:2e: b9:8d:3d:12:9a:1c:f0:ca:5a:de:09:38:7c:5f:4a: 96:d9:19:99:3d:55:82:36:07:9a:6a:2b:85:66:11: fe:f8:be:18:ff:ff:2d:bd:da:f3:c3:13:8b:b3:15: 23:a4:fb:e2:99:1d:a1:ac:89:34:9f:e6:c6:29:a1: 47:98:ba:a8:ef:a4:36:e2:5d:83:c4:fa:60:13:31: 96:95:59:b5:b5:15:c2:4e:28:e6:f9:30:2f:60:d7: a2:1d:2f:e3:9f:4b:e0:d7:a8:c6:76:aa:4b:43:56: 6e:1d:9a:46:c3:3a:f3:47:39:80:bc:10:9c:0d:15: 51:75:26:e2:fd:84:18:03:eb:c4:8d:4c:38:f9:bb: bd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BE:0F:C2:F7:18:45:8D:F7:DD:BD:C4:C2:F6:AE:63:24:22:7F:D4 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.112.0/24 Signature Algorithm: sha256WithRSAEncryption 58:02:79:12:e4:a3:d5:6a:fe:de:7a:49:19:66:e3:53:8d:4b: aa:fb:ec:d8:d9:0b:3e:a6:7a:57:7a:de:f4:78:96:eb:54:4c: 94:18:b6:e6:6a:00:e7:ab:81:b1:ac:c8:00:04:ef:a7:2e:9d: a8:db:5d:8d:c1:2d:b4:03:52:3b:0d:28:b5:f0:69:b3:1d:f6: 2c:6b:cb:3d:85:b1:db:c1:5b:16:2f:69:de:dc:00:6d:c9:6c: 63:3b:e7:db:a8:5f:e8:98:5d:d7:f1:f7:58:f0:02:72:8c:14: 90:1b:d3:b5:ef:0d:02:2d:ff:d0:02:28:ff:bf:ff:11:5b:4e: b1:dc:e2:ba:64:37:07:63:cb:e9:67:6f:b6:79:ac:82:e7:dc: 04:2d:df:4d:7d:79:9f:ef:a6:37:a9:74:1a:fd:60:2f:b1:01: 6e:03:d4:02:25:e7:e1:88:98:a2:d5:ac:15:41:3c:5b:6d:9a: b5:b8:74:e8:b6:eb:69:d4:6e:60:10:eb:ce:75:61:8b:36:24: ad:d2:34:21:47:21:d0:69:64:3d:ad:11:9f:9b:ba:98:cd:92: 9b:01:82:8a:cf:e5:f8:5f:61:3d:ef:1d:3d:b2:a0:ff:05:cd: de:e5:e5:31:a7:73:af:bd:1e:27:5f:10:3e:b3:ec:5d:34:ef: 55:b4:04:3e -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUDcAELOQFJWYanyHx1fqvICxPyFUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwMTE3MDYwNzI4WhcNMjcwMTE2MDYxMjI4 WjAzMTEwLwYDVQQDEyg1MkJFMEZDMkY3MTg0NThERjdEREJEQzRDMkY2QUU2MzI0 MjI3RkQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSLMEOqXz/V7 kWuTfCeYGCqOGlV2k/NCDNGez99WJ+08LfuxA4wT2LJ4KnuRm+iPw9LUK0F66oVh MxKxSzdMQss1AeGMCbhG1fVGD5clUPlpOoUMTHuidWL1fYivH+AB5U9h4C0RQrka 0iJW4sr/xxUnRnYKeC65jT0SmhzwylreCTh8X0qW2RmZPVWCNgeaaiuFZhH++L4Y //8tvdrzwxOLsxUjpPvimR2hrIk0n+bGKaFHmLqo76Q24l2DxPpgEzGWlVm1tRXC Tijm+TAvYNeiHS/jn0vg16jGdqpLQ1ZuHZpGwzrzRzmAvBCcDRVRdSbi/YQYA+vE jUw4+bu9gQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFFK+D8L3GEWN9929xML2rmMk In/UMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOpwMA0GCSqGSIb3DQEBCwUAA4IB AQBYAnkS5KPVav7eekkZZuNTjUuq++zY2Qs+pnpXet70eJbrVEyUGLbmagDnq4Gx rMgABO+nLp2o212NwS20A1I7DSi18GmzHfYsa8s9hbHbwVsWL2ne3ABtyWxjO+fb qF/omF3X8fdY8AJyjBSQG9O17w0CLf/QAij/v/8RW06x3OK6ZDcHY8vpZ2+2eayC 59wELd9NfXmf76Y3qXQa/WAvsQFuA9QCJefhiJii1awVQTxbbZq1uHTotutp1G5g EOvOdWGLNiSt0jQhRyHQaWQ9rRGfm7qYzZKbAYKKz+X4X2E97x09sqD/Bc3e5eUx p3OvvR4nXxA+s+xdNO9VtAQ+ -----END CERTIFICATE-----Generated at Mon Jan 19 16:55:59 2026 by rpki-client