This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS268707.roa File: AS268707.roa (raw, json) Hash identifier: 0d5/b2jc60b+6zcYvgCpZ/yL+nj0DqnxE9hA64Hv0EI= Subject key identifier: 68:05:DC:98:65:B9:37:D5:D6:A7:59:85:AC:5C:DA:1A:F9:59:3E:C3 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 160CAC95AA5069F0CB7CD8AF202748ED0D1F7A7A Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS268707.roa Signing time: Sun 14 Dec 2025 02:30:49 +0000 ROA not before: Sun 14 Dec 2025 02:25:49 +0000 ROA not after: Sun 13 Dec 2026 02:30:49 +0000 asID: 268707 IP address blocks: 104.234.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0c:ac:95:aa:50:69:f0:cb:7c:d8:af:20:27:48:ed:0d:1f:7a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 14 02:25:49 2025 GMT Not After : Dec 13 02:30:49 2026 GMT Subject: CN=6805DC9865B937D5D6A75985AC5CDA1AF9593EC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:86:bf:d4:06:0e:7a:ce:d9:4a:8f:fa:c2:ff: 3b:f0:86:6a:b2:62:a4:7a:9a:fa:1b:2b:32:8d:a3: 28:59:d7:8a:3b:d7:b9:5d:de:e4:04:80:b0:b9:d6: 41:f4:1b:27:a4:76:23:22:9f:64:0e:60:56:ed:2f: 01:b1:86:b3:65:2e:56:f1:d7:f0:c1:a2:fa:fc:35: 1b:17:bd:17:fc:06:f6:d8:b7:d0:31:b3:6e:c3:3f: ff:37:b2:d6:a7:08:6c:66:f5:9c:a1:8f:16:9e:70: e0:68:a1:68:8e:4f:5b:97:a5:89:9d:04:f1:ae:b5: 97:2d:ee:72:19:4a:af:b2:c8:6c:99:f2:4e:9e:83: aa:67:a8:23:64:e0:ee:81:d8:f0:9f:5c:8a:8e:64: 6d:1b:ff:93:11:6a:36:25:93:4d:4b:cb:1f:2f:b5: 4d:3d:b6:54:2f:67:30:d1:f7:54:87:3f:34:23:74: a1:d7:b7:3d:14:c1:67:37:53:23:60:30:d3:38:52: b0:31:90:7f:63:91:4a:1a:59:a3:af:ec:e9:fd:88: 08:7a:82:9f:a0:c6:3a:9f:9a:d0:18:cd:aa:a6:3d: 34:47:51:6c:37:7c:ec:42:60:d4:d1:09:25:c8:0a: 09:a3:2e:ce:f5:f4:08:39:9d:44:ea:14:57:71:85: 65:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:05:DC:98:65:B9:37:D5:D6:A7:59:85:AC:5C:DA:1A:F9:59:3E:C3 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS268707.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.244.0/24 Signature Algorithm: sha256WithRSAEncryption 49:6f:cb:36:dd:50:95:e5:71:61:2d:14:67:93:87:36:03:58: 41:ac:7c:e9:dd:aa:96:40:16:66:7f:65:ff:af:8d:81:51:2d: 87:00:32:17:9a:5a:76:b2:b9:25:dd:62:48:12:30:0b:94:26: 74:2a:22:14:43:fd:cb:b4:b5:cf:cc:37:16:14:09:f1:f6:14: 21:ec:85:86:c8:22:94:12:12:84:bf:0d:70:66:92:95:a6:55: 6b:f9:2d:0d:77:73:4f:fd:f9:c3:22:22:ba:b3:0d:ed:a5:a4: 6c:a0:9a:60:50:ba:91:6a:cc:0e:2a:f7:79:5d:21:52:e3:ee: c2:03:9f:8b:83:5e:33:42:b6:e7:d4:44:08:f8:c8:b9:55:49: 52:20:91:6d:1e:4e:39:a8:ba:3f:11:38:ec:f4:85:70:67:00: d4:bb:11:c8:11:11:9a:28:8a:0b:cb:3d:c5:38:7b:90:34:40: 9e:1b:33:45:2b:21:17:16:bc:1b:4d:db:bd:3c:8a:57:ce:7a: 11:16:e1:b9:dc:a2:40:74:70:78:58:fe:ea:f5:ca:61:fa:36: 4d:25:21:e2:04:b8:3d:d0:6b:27:15:7d:f3:63:44:f7:83:d6: 96:e0:aa:90:a3:98:31:39:85:0c:78:16:a8:76:26:74:6b:7e: 31:93:5d:b7 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUFgyslapQafDLfNivICdI7Q0fenowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMjE0MDIyNTQ5WhcNMjYxMjEzMDIzMDQ5 WjAzMTEwLwYDVQQDEyg2ODA1REM5ODY1QjkzN0Q1RDZBNzU5ODVBQzVDREExQUY5 NTkzRUMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oa/1AYOes7Z So/6wv878IZqsmKkepr6GysyjaMoWdeKO9e5Xd7kBICwudZB9BsnpHYjIp9kDmBW 7S8BsYazZS5W8dfwwaL6/DUbF70X/Ab22LfQMbNuwz//N7LWpwhsZvWcoY8WnnDg aKFojk9bl6WJnQTxrrWXLe5yGUqvsshsmfJOnoOqZ6gjZODugdjwn1yKjmRtG/+T EWo2JZNNS8sfL7VNPbZUL2cw0fdUhz80I3Sh17c9FMFnN1MjYDDTOFKwMZB/Y5FK Glmjr+zp/YgIeoKfoMY6n5rQGM2qpj00R1FsN3zsQmDU0QklyAoJoy7O9fQIOZ1E 6hRXcYVlIQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFGgF3JhluTfV1qdZhaxc2hr5 WT7DMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzI2ODcwNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq9DANBgkqhkiG9w0BAQsFAAOC AQEASW/LNt1QleVxYS0UZ5OHNgNYQax86d2qlkAWZn9l/6+NgVEthwAyF5padrK5 Jd1iSBIwC5QmdCoiFEP9y7S1z8w3FhQJ8fYUIeyFhsgilBIShL8NcGaSlaZVa/kt DXdzT/35wyIiurMN7aWkbKCaYFC6kWrMDir3eV0hUuPuwgOfi4NeM0K259RECPjI uVVJUiCRbR5OOai6PxE47PSFcGcA1LsRyBERmiiKC8s9xTh7kDRAnhszRSshFxa8 G03bvTyKV856ERbhudyiQHRweFj+6vXKYfo2TSUh4gS4PdBrJxV982NE94PWluCq kKOYMTmFDHgWqHYmdGt+MZNdtw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:21:26 2025 by rpki-client