This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215287.roa
File: AS215287.roa (raw, json)
Hash identifier: xILSErTueZbGSjfxwe7TSWt+abV9x9XBZefYzAvjkZ4=
Subject key identifier: 13:C7:52:D9:9F:98:76:FE:2D:1D:9D:52:E4:44:09:E1:01:8D:3D:40
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 31E6F687AA690617501B8E9EFAD9E12D67AEF288
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215287.roa
Signing time: Tue 16 Dec 2025 13:29:01 +0000
ROA not before: Tue 16 Dec 2025 13:24:01 +0000
ROA not after: Tue 15 Dec 2026 13:29:01 +0000
asID: 215287
IP address blocks: 199.103.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 02:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e6:f6:87:aa:69:06:17:50:1b:8e:9e:fa:d9:e1:2d:67:ae:f2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Dec 16 13:24:01 2025 GMT
Not After : Dec 15 13:29:01 2026 GMT
Subject: CN=13C752D99F9876FE2D1D9D52E44409E1018D3D40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:ad:95:dd:8c:1f:55:a9:df:af:e4:de:f9:
a4:71:72:3e:a4:17:e1:2c:e2:83:78:5a:7e:f4:20:
9f:be:8a:21:31:47:2d:25:eb:19:6f:d8:e0:8a:d3:
48:e7:9e:17:4c:4f:c9:d9:cd:6d:c7:af:da:00:22:
3f:7f:6e:28:87:4f:00:99:81:10:a4:ee:dc:92:15:
ce:c1:b0:1f:4e:5e:17:2f:65:2b:2e:17:a4:27:bf:
52:e9:41:85:ad:d4:05:dd:44:14:e3:1e:00:44:be:
6a:46:5d:33:78:41:cd:bb:dc:ce:2e:b8:a1:da:2d:
ca:69:7b:c8:b6:bd:39:d3:db:86:7b:70:e5:aa:02:
9d:e7:1d:14:f7:3e:6c:66:5a:88:2b:4f:99:74:1b:
99:4a:8a:c1:6a:e7:69:c1:73:d7:11:e1:33:ae:ad:
c6:09:a2:5c:cb:25:c5:a5:35:03:cc:6c:2b:48:f3:
8e:f1:ed:57:87:cb:85:df:8c:b8:ba:5e:b2:f0:59:
a7:9b:81:ed:52:f8:f7:2e:9a:6b:6e:32:0b:7f:a3:
af:30:5a:e3:91:bc:05:a7:50:2d:52:66:6d:60:b3:
2f:c9:10:24:3b:f0:9f:41:ff:5d:8a:20:f3:c4:96:
c1:26:40:25:04:0b:68:bb:e0:26:62:66:0e:68:bc:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C7:52:D9:9F:98:76:FE:2D:1D:9D:52:E4:44:09:E1:01:8D:3D:40
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS215287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.103.95.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7f:da:ed:9b:4c:89:58:96:43:b9:ce:02:0f:60:60:04:b5:
59:39:00:7c:24:14:32:39:0e:64:4f:a3:03:2f:46:0f:d5:3e:
f4:c7:13:a1:66:f4:c7:b5:8a:4b:6e:a4:83:f7:98:81:ff:b2:
7a:38:af:6c:31:5e:b4:18:74:5e:21:41:a7:79:a8:9c:a2:29:
f0:79:2e:ed:8b:20:07:61:e5:d5:fb:f7:f0:12:e7:7e:b7:b7:
c0:aa:48:81:f5:07:01:39:8a:36:05:55:af:46:59:b8:78:56:
90:b4:8b:9d:99:47:d6:57:54:96:34:42:88:4f:11:7f:55:0d:
17:d5:5e:e3:1a:4b:c2:0b:65:8c:fd:68:f5:e2:1c:2b:d6:70:
1b:b6:39:95:10:41:3f:05:a1:62:49:9d:c9:0d:18:2c:da:b1:
57:95:15:75:cc:ec:9f:ee:ef:11:11:37:e7:15:ad:28:aa:7b:
45:86:e9:55:dd:6f:09:b9:c4:db:0e:f9:44:c7:59:d4:5c:d9:
9b:db:e1:18:27:5c:bd:1c:d1:57:54:a4:0c:2c:5a:b7:6d:50:
4c:ca:f6:1a:62:75:c3:fb:2a:fc:25:a4:fb:02:d8:ab:e7:96:
f5:af:4c:41:9d:52:e4:de:6b:6d:8b:5e:93:7a:2f:86:83:ac:
6a:31:5a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 06:06:05 2025 by rpki-client