This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/AS21696.roa File: AS21696.roa (raw, json) Hash identifier: MHwHTLGxc3ECy3yAv1Sz0hUdm0rsMwkPaaLyJWeFmSQ= Subject key identifier: 6A:2C:13:E3:53:F6:2D:7E:1D:97:6D:A0:DC:79:D5:67:D9:CC:32:8A Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77 Certificate serial: 163CA07FA9D1E517D4B86E0462FA8F8C3E376824 Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/AS21696.roa Signing time: Thu 25 Dec 2025 06:03:19 +0000 ROA not before: Thu 25 Dec 2025 05:58:19 +0000 ROA not after: Thu 24 Dec 2026 06:03:19 +0000 asID: 21696 IP address blocks: 172.108.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 09:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:3c:a0:7f:a9:d1:e5:17:d4:b8:6e:04:62:fa:8f:8c:3e:37:68:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77 Validity Not Before: Dec 25 05:58:19 2025 GMT Not After : Dec 24 06:03:19 2026 GMT Subject: CN=6A2C13E353F62D7E1D976DA0DC79D567D9CC328A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3c:f6:b0:3b:b5:36:fb:73:df:48:98:25:6a: 2b:cf:70:99:18:4c:cb:94:81:59:0e:be:d2:53:38: 35:82:27:89:37:18:15:44:28:60:c1:78:f9:b8:1f: 03:6b:1e:bc:22:d9:8b:99:10:1c:52:52:7e:75:92: 52:87:97:24:d4:4a:77:d0:94:4f:54:cf:7d:89:72: 30:87:b4:0a:83:c0:cd:89:f3:c3:a4:9a:d7:22:ec: 10:e3:5c:54:b3:b1:c3:78:a7:2f:fc:3a:c7:07:e5: ff:12:8d:e1:1d:c1:6a:b1:e3:48:44:74:41:db:87: be:02:93:ae:12:bc:e2:2c:e7:f8:25:0a:ad:07:ac: 30:14:9d:5f:33:85:a1:08:f9:de:98:65:5c:32:31: 0c:ab:ff:db:a1:84:9c:68:c6:f4:66:fc:1a:77:7d: 97:48:9f:c2:38:ce:6f:94:8c:3f:a7:11:df:09:c3: d7:31:b8:1e:27:c7:70:1c:e8:da:14:94:2e:af:e5: 10:4a:5a:77:38:ce:44:07:19:92:07:cf:ba:7c:73: 52:10:17:f3:6b:38:76:c0:21:23:30:57:df:ad:5e: a6:f1:06:aa:c5:f1:0b:bb:57:5e:9b:e5:12:0d:5c: 84:43:d4:34:c3:f1:cc:46:fb:9b:e5:ed:39:09:27: dc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2C:13:E3:53:F6:2D:7E:1D:97:6D:A0:DC:79:D5:67:D9:CC:32:8A X509v3 Authority Key Identifier: keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/AS21696.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.108.139.0/24 Signature Algorithm: sha256WithRSAEncryption 43:a1:c5:86:2a:fb:1a:8e:b0:40:37:8b:db:1a:c4:ce:b3:bd: 2e:54:6c:07:39:44:a3:f5:cc:ba:0e:38:b7:f9:0a:cf:04:f3: bd:f3:68:1a:da:c9:75:60:f0:2b:90:1e:8f:4c:50:cc:15:1f: 65:fa:2f:44:17:18:88:55:bb:9b:f7:b5:d4:1e:e8:ab:69:72: 0b:cd:70:66:f6:fc:e2:0e:93:e9:75:db:27:48:11:65:56:f6: c4:a9:e0:c8:a9:e9:96:26:eb:3b:a6:22:80:11:90:c1:83:9f: 14:3c:30:67:bc:8b:d8:30:94:92:f5:6f:fd:2e:ed:0c:c5:2b: b3:b1:8c:9a:48:6b:e9:86:79:48:2b:50:05:1d:9e:33:3e:60: f6:c4:9e:e8:98:1f:df:c4:cb:5f:8f:37:7b:69:97:7c:58:2a: 27:e1:21:52:84:0a:ff:ea:60:6b:ee:aa:c0:c6:4d:88:ba:38: ca:71:60:f8:c1:78:1e:86:79:08:59:9d:c9:d1:e0:4f:dc:a6: 2a:39:41:12:ea:1c:08:61:eb:c3:ec:3e:6f:b3:4e:5c:59:b2: 11:a7:89:62:81:d3:b1:14:82:e7:3b:c6:08:c0:cb:b3:b4:a0: d7:78:0b:06:fc:f3:d6:01:95:31:c0:11:d1:f1:d8:26:c1:ef: 76:f8:ad:05 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUFjygf6nR5RfUuG4EYvqPjD43aCQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjUxMjI1MDU1ODE5WhcNMjYxMjI0MDYwMzE5 WjAzMTEwLwYDVQQDEyg2QTJDMTNFMzUzRjYyRDdFMUQ5NzZEQTBEQzc5RDU2N0Q5 Q0MzMjhBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Dz2sDu1Nvtz 30iYJWorz3CZGEzLlIFZDr7SUzg1gieJNxgVRChgwXj5uB8Dax68ItmLmRAcUlJ+ dZJSh5ck1Ep30JRPVM99iXIwh7QKg8DNifPDpJrXIuwQ41xUs7HDeKcv/DrHB+X/ Eo3hHcFqseNIRHRB24e+ApOuErziLOf4JQqtB6wwFJ1fM4WhCPnemGVcMjEMq//b oYScaMb0Zvwad32XSJ/COM5vlIw/pxHfCcPXMbgeJ8dwHOjaFJQur+UQSlp3OM5E BxmSB8+6fHNSEBfzazh2wCEjMFffrV6m8QaqxfELu1dem+USDVyEQ9Q0w/HMRvub 5e05CSfcCwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFGosE+NT9i1+HZdtoNx51WfZ zDKKMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy ZjA5N2YvMi9BUzIxNjk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGyLMA0GCSqGSIb3DQEBCwUAA4IB AQBDocWGKvsajrBAN4vbGsTOs70uVGwHOUSj9cy6Dji3+QrPBPO982ga2sl1YPAr kB6PTFDMFR9l+i9EFxiIVbub97XUHuiraXILzXBm9vziDpPpddsnSBFlVvbEqeDI qemWJus7piKAEZDBg58UPDBnvIvYMJSS9W/9Lu0MxSuzsYyaSGvphnlIK1AFHZ4z PmD2xJ7omB/fxMtfjzd7aZd8WCon4SFShAr/6mBr7qrAxk2IujjKcWD4wXgehnkI WZ3J0eBP3KYqOUES6hwIYevD7D5vs05cWbIRp4ligdOxFILnO8YIwMuztKDXeAsG /PPWAZUxwBHR8dgmwe92+K0F -----END CERTIFICATE-----Generated at Sun Jan 18 13:14:05 2026 by rpki-client