This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214024.roa File: AS214024.roa (raw, json) Hash identifier: D0NFuMBm2xuuS3ZIM5HJcfN/y+bdJp+IZTodCu6p5jI= Subject key identifier: B2:FB:24:BD:65:E3:CB:A9:57:92:C4:39:DE:21:68:E2:6A:F6:4E:4B Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 48416DDF81136D39321A2AC82D74F825086E8635 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214024.roa Signing time: Tue 23 Dec 2025 07:37:47 +0000 ROA not before: Tue 23 Dec 2025 07:32:47 +0000 ROA not after: Tue 22 Dec 2026 07:37:47 +0000 asID: 214024 IP address blocks: 157.254.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Dec 2025 01:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:41:6d:df:81:13:6d:39:32:1a:2a:c8:2d:74:f8:25:08:6e:86:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Dec 23 07:32:47 2025 GMT Not After : Dec 22 07:37:47 2026 GMT Subject: CN=B2FB24BD65E3CBA95792C439DE2168E26AF64E4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f3:81:68:3c:65:35:74:b2:19:1b:3b:18:10: a4:33:2e:31:af:24:c9:74:1c:47:48:b7:42:32:8a: 5b:51:e7:9e:33:42:42:99:9a:b4:1c:07:11:97:08: 43:4e:54:08:ae:63:50:8e:44:c6:50:12:21:0d:fe: 8e:81:76:80:25:60:40:c3:84:39:be:7e:a6:32:76: 2b:11:f6:ef:57:88:be:89:c3:0f:7a:23:21:aa:bd: 7a:d8:ee:cb:c9:56:84:39:86:c2:b0:1a:7f:65:5a: 50:7f:f7:3c:20:70:a6:21:34:8f:15:86:41:c3:9a: 68:55:7b:a7:bf:ac:73:32:ff:72:1e:08:24:04:0b: df:d3:df:0b:f1:78:61:ba:90:92:46:32:fc:9c:03: 7d:84:dc:a7:fa:43:0a:43:09:b5:9e:e4:d6:41:49: f0:e4:17:41:2b:71:58:09:f2:02:08:d9:0d:01:34: 0a:93:a1:7d:14:dc:c1:91:30:21:ac:0a:fc:f2:c5: ea:34:dc:b3:7a:26:5e:f5:e0:79:af:9e:0a:ab:5c: 14:aa:c9:84:b5:cd:55:d7:e2:e5:8c:19:1a:7b:77: d0:36:94:59:b5:7c:2a:fa:f2:7f:c5:86:c7:65:f6: 0d:5e:17:f8:ee:e2:a8:2f:51:ef:22:19:77:26:53: 3c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FB:24:BD:65:E3:CB:A9:57:92:C4:39:DE:21:68:E2:6A:F6:4E:4B X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214024.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.25.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:d4:51:5e:e6:60:57:0a:9f:19:53:24:d5:c6:0e:a0:20:87: 72:81:47:c3:18:93:ae:ae:20:f7:a0:15:95:0a:0f:5e:ff:98: 0e:af:89:1b:2a:49:b7:ea:4c:aa:2b:42:71:a7:7a:f9:e6:32: 7d:bd:3f:d2:85:fc:93:66:19:0d:93:fe:80:b2:10:38:01:83: 56:15:c2:ce:c3:4b:e6:cf:0d:d2:14:c3:5a:08:fb:75:fe:6c: 5c:57:81:b9:51:c3:1d:2f:c7:7b:19:20:46:6c:5d:3c:89:3c: 51:6f:da:32:03:2c:9a:ac:26:8d:e9:96:5d:40:38:fc:b1:1e: 2e:cf:cb:8d:2d:ff:a2:55:8d:a4:0a:3c:8d:7f:d4:99:89:8f: 58:49:ce:03:b9:d5:9b:81:35:ea:ac:d4:1a:d8:ce:bc:47:6b: 7c:99:b2:1b:c6:b8:b5:0a:34:17:09:16:53:89:5c:51:42:b3: 98:20:3a:26:73:45:d2:08:a5:35:f8:35:90:11:82:aa:8b:85: 96:8d:f4:7b:79:0d:1e:fd:7b:38:8b:af:8e:0d:1a:b1:0a:4d: 5f:5c:32:40:f8:c6:a0:86:b5:8b:21:06:91:93:7f:fe:34:42: ac:55:8b:b5:8b:43:eb:b2:c3:c0:da:b8:b6:5a:5a:e9:55:46: f0:a2:8a:8c -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUSEFt34ETbTkyGirILXT4JQhuhjUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUxMjIzMDczMjQ3WhcNMjYxMjIyMDczNzQ3 WjAzMTEwLwYDVQQDEyhCMkZCMjRCRDY1RTNDQkE5NTc5MkM0MzlERTIxNjhFMjZB RjY0RTRCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/OBaDxlNXSy GRs7GBCkMy4xryTJdBxHSLdCMopbUeeeM0JCmZq0HAcRlwhDTlQIrmNQjkTGUBIh Df6OgXaAJWBAw4Q5vn6mMnYrEfbvV4i+icMPeiMhqr162O7LyVaEOYbCsBp/ZVpQ f/c8IHCmITSPFYZBw5poVXunv6xzMv9yHggkBAvf098L8XhhupCSRjL8nAN9hNyn +kMKQwm1nuTWQUnw5BdBK3FYCfICCNkNATQKk6F9FNzBkTAhrAr88sXqNNyzeiZe 9eB5r54Kq1wUqsmEtc1V1+LljBkae3fQNpRZtXwq+vJ/xYbHZfYNXhf47uKoL1Hv Ihl3JlM8XwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFLL7JL1l48upV5LEOd4haOJq 9k5LMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIxNDAyNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+GTANBgkqhkiG9w0BAQsFAAOC AQEAb9RRXuZgVwqfGVMk1cYOoCCHcoFHwxiTrq4g96AVlQoPXv+YDq+JGypJt+pM qitCcad6+eYyfb0/0oX8k2YZDZP+gLIQOAGDVhXCzsNL5s8N0hTDWgj7df5sXFeB uVHDHS/HexkgRmxdPIk8UW/aMgMsmqwmjemWXUA4/LEeLs/LjS3/olWNpAo8jX/U mYmPWEnOA7nVm4E16qzUGtjOvEdrfJmyG8a4tQo0FwkWU4lcUUKzmCA6JnNF0gil Nfg1kBGCqouFlo30e3kNHv17OIuvjg0asQpNX1wyQPjGoIa1iyEGkZN//jRCrFWL tYtD67LDwNq4tlpa6VVG8KKKjA== -----END CERTIFICATE-----Generated at Fri Dec 26 03:07:17 2025 by rpki-client