This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: pDomPfte8lanJzVnOKfBK7mUBHTXCg8XIKJVO/kdLKU= Subject key identifier: B2:AB:FC:07:E6:08:42:4D:D4:E1:71:E8:4A:75:17:4E:1B:45:2F:8F Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 512F935ADAECE5AED6503E5BBE54FCE9E27E4B06 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20473.roa Signing time: Tue 09 Dec 2025 10:39:44 +0000 ROA not before: Tue 09 Dec 2025 10:34:44 +0000 ROA not after: Tue 08 Dec 2026 10:39:44 +0000 asID: 20473 IP address blocks: 157.254.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Dec 2025 07:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2f:93:5a:da:ec:e5:ae:d6:50:3e:5b:be:54:fc:e9:e2:7e:4b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Dec 9 10:34:44 2025 GMT Not After : Dec 8 10:39:44 2026 GMT Subject: CN=B2ABFC07E608424DD4E171E84A75174E1B452F8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:96:5e:b1:54:e5:08:7a:ef:2b:ac:b8:6b: 80:e9:20:56:20:16:f8:eb:ec:92:ad:ff:08:40:ed: 2f:63:3a:0b:2e:96:f1:88:e8:68:b1:7e:b9:f5:dd: 19:f4:93:93:fb:6d:18:07:b4:bd:43:2c:8d:3f:05: 37:8b:d8:13:7b:a8:b0:8b:57:07:99:d5:81:74:f4: f3:65:05:3a:64:57:86:0e:17:30:5c:e9:ad:c5:a4: 1e:48:82:c9:c8:3a:8f:2f:d8:78:af:a9:c7:5c:25: 8d:b3:1e:99:b7:8e:39:91:93:20:7e:9d:ea:a1:14: bb:c0:49:92:42:97:74:17:5d:b6:d1:d2:a5:18:ea: dd:f3:78:98:c1:43:08:c5:c4:ba:ca:ff:f5:1e:2e: 44:5c:ea:56:8b:ae:45:8d:67:29:bf:ca:55:50:56: 04:89:c1:c3:3f:18:59:a6:8b:8a:ee:fa:d6:c1:13: 88:3c:30:dc:5c:da:36:69:ea:60:b4:5f:0c:e8:d6: b7:82:4a:70:cc:1e:d4:50:d3:a4:f9:a6:65:6b:51: cd:6b:c8:9e:d8:f5:74:72:33:1f:10:76:8a:b4:5d: c1:9c:1c:d3:81:be:a7:c5:f5:34:a4:21:db:7a:d5: e8:e0:76:67:f2:28:08:49:17:c0:f4:52:8b:a7:fa: 8a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AB:FC:07:E6:08:42:4D:D4:E1:71:E8:4A:75:17:4E:1B:45:2F:8F X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.16.0/24 Signature Algorithm: sha256WithRSAEncryption 85:8f:49:af:af:d5:f2:5a:d4:1e:54:33:0b:95:cb:b2:8b:d8: f2:a4:fa:5d:ce:9b:f6:72:28:b1:bf:b7:44:b5:65:56:39:43: e5:64:4b:0f:cd:42:81:8b:6e:1f:b8:43:a9:ca:5e:c7:da:dc: 48:58:40:0a:51:78:6e:d8:4c:f3:5a:36:77:9b:d3:81:38:e4: 04:4f:73:a3:99:04:b4:ed:f9:df:6e:b2:ea:43:78:a8:f2:2e: 3e:be:ac:c5:56:29:eb:17:2e:3e:a5:ca:9c:2a:74:bc:86:3a: 76:ad:de:2f:12:4d:3c:c0:0d:bd:33:6e:93:bc:09:66:76:5b: 1f:0a:5b:a7:c8:a5:2b:1b:74:95:0f:3c:4a:7f:57:26:4e:e7: 65:bb:df:cc:b8:b9:79:15:e0:2c:2e:d1:e4:7d:3b:6e:62:00: 46:33:f1:c8:ff:44:84:c3:ad:85:31:f1:31:99:7d:c1:3b:e7: 23:55:50:fc:c5:cd:c3:dd:43:92:78:e0:dd:e0:67:31:be:b9: ec:e4:ed:30:a9:a7:30:9f:de:48:8d:47:ba:bc:34:ae:03:85: 8a:14:e5:0b:88:33:71:f6:b0:f5:24:37:72:8d:ea:6a:85:d7: 85:23:6a:09:74:9e:6b:70:d4:7c:93:f6:75:63:d6:a4:37:fa: 82:10:55:cf -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUUS+TWtrs5a7WUD5bvlT86eJ+SwYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUxMjA5MTAzNDQ0WhcNMjYxMjA4MTAzOTQ0 WjAzMTEwLwYDVQQDEyhCMkFCRkMwN0U2MDg0MjRERDRFMTcxRTg0QTc1MTc0RTFC NDUyRjhGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuneWXrFU5Qh6 7yusuGuA6SBWIBb46+ySrf8IQO0vYzoLLpbxiOhosX659d0Z9JOT+20YB7S9QyyN PwU3i9gTe6iwi1cHmdWBdPTzZQU6ZFeGDhcwXOmtxaQeSILJyDqPL9h4r6nHXCWN sx6Zt445kZMgfp3qoRS7wEmSQpd0F1220dKlGOrd83iYwUMIxcS6yv/1Hi5EXOpW i65FjWcpv8pVUFYEicHDPxhZpouK7vrWwROIPDDcXNo2aepgtF8M6Na3gkpwzB7U UNOk+aZla1HNa8ie2PV0cjMfEHaKtF3BnBzTgb6nxfU0pCHbetXo4HZn8igISRfA 9FKLp/qKfwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFLKr/AfmCEJN1OFx6Ep1F04b RS+PMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf4QMA0GCSqGSIb3DQEBCwUAA4IB AQCFj0mvr9XyWtQeVDMLlcuyi9jypPpdzpv2ciixv7dEtWVWOUPlZEsPzUKBi24f uEOpyl7H2txIWEAKUXhu2EzzWjZ3m9OBOOQET3OjmQS07fnfbrLqQ3io8i4+vqzF VinrFy4+pcqcKnS8hjp2rd4vEk08wA29M26TvAlmdlsfClunyKUrG3SVDzxKf1cm Tudlu9/MuLl5FeAsLtHkfTtuYgBGM/HI/0SEw62FMfExmX3BO+cjVVD8xc3D3UOS eODd4Gcxvrns5O0wqacwn95IjUe6vDSuA4WKFOULiDNx9rD1JDdyjepqhdeFI2oJ dJ5rcNR8k/Z1Y9akN/qCEFXP -----END CERTIFICATE-----Generated at Thu Dec 11 08:02:32 2025 by rpki-client