This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS0.roa
File: AS0.roa (raw, json)
Hash identifier: nAL9lGSo9gDdUX190YsdIbMR99bH//cK0ZIucEBJDl8=
Subject key identifier: 9C:E1:BE:4B:E9:EC:4A:1D:9A:B7:BF:3A:60:F5:67:E7:62:AE:86:7F
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5F79E1997584BFC7C9C881688E595E7599FFD666
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS0.roa
Signing time: Wed 19 Nov 2025 21:46:32 +0000
ROA not before: Wed 19 Nov 2025 21:41:32 +0000
ROA not after: Wed 18 Nov 2026 21:46:32 +0000
asID: 0
IP address blocks: 2a06:a000:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Nov 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:79:e1:99:75:84:bf:c7:c9:c8:81:68:8e:59:5e:75:99:ff:d6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Nov 19 21:41:32 2025 GMT
Not After : Nov 18 21:46:32 2026 GMT
Subject: CN=9CE1BE4BE9EC4A1D9AB7BF3A60F567E762AE867F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:bd:8c:fd:c4:24:e4:c5:a9:49:ea:b8:68:
72:0b:2a:1b:37:bf:5c:91:e1:2f:e5:33:f6:be:89:
18:8c:73:e5:15:15:a7:e4:0d:dd:dc:36:aa:5f:b3:
bc:d5:61:ad:27:72:b6:91:8b:85:88:b5:a4:34:fa:
c1:7f:2a:90:81:bc:d8:da:61:33:8a:b9:50:a8:09:
a9:20:18:93:81:aa:61:3d:c7:e1:88:5c:27:92:fb:
c4:6b:df:d0:ec:00:c0:99:f9:58:76:8a:41:63:e0:
3c:ce:3c:c6:12:5f:01:af:c8:2f:89:c9:58:93:83:
fd:f3:83:e4:a9:f7:28:77:7a:40:ce:38:bf:3c:e6:
49:0c:b0:16:ba:56:07:1e:d7:74:bf:9e:92:26:8d:
fb:96:36:55:c7:dc:f2:e4:cc:24:21:40:e5:39:17:
b7:5b:c5:d2:83:9c:3a:8a:ac:7d:da:ff:7b:86:5f:
d8:4d:e8:2f:3c:af:e3:43:61:40:5e:c0:88:a2:c6:
b9:ff:9b:88:ee:a3:65:ef:13:f0:ff:1d:f6:bf:2f:
74:fe:31:59:60:e8:72:60:68:c5:a8:92:21:f5:c1:
da:60:3b:d2:5d:6e:f2:84:96:a3:64:69:c0:5b:c5:
46:94:ce:16:4c:9b:8a:d3:29:8a:06:6d:31:a8:84:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E1:BE:4B:E9:EC:4A:1D:9A:B7:BF:3A:60:F5:67:E7:62:AE:86:7F
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS0.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a000:100::/40
Signature Algorithm: sha256WithRSAEncryption
0e:a8:5d:65:81:b3:6d:a2:12:e4:ed:46:f8:45:13:0d:ac:ea:
1a:0e:f2:bc:1c:f3:7d:4b:e3:44:1e:1a:fe:da:2f:9c:3a:d0:
85:df:eb:0d:38:d3:40:15:ac:2d:33:dc:d4:ce:1b:fc:cb:6c:
1f:40:a3:77:de:e8:18:cf:85:17:2f:68:73:82:39:20:31:ee:
96:85:19:48:a6:37:c6:4d:65:b6:29:a5:63:d4:cc:cc:82:a3:
d6:11:18:53:e8:df:1f:3e:b6:a6:76:be:33:20:0f:5b:db:a0:
f3:9b:1b:eb:1b:5a:f7:c3:3d:79:f2:63:8f:77:9e:94:c7:09:
f7:a8:03:d9:1c:7c:3b:61:72:09:cd:a8:77:13:7b:4d:88:64:
4d:4b:7c:58:41:55:ee:a3:1a:ee:c0:17:0e:6d:42:d5:64:54:
5b:dc:c6:87:c1:94:f2:e5:6c:ad:d5:38:0f:0f:fb:2a:3a:90:
14:80:56:7b:c9:a5:c0:fc:1e:4a:17:90:a5:5e:6a:58:f2:d5:
69:98:0a:11:d5:50:31:36:6a:88:07:18:f2:cd:04:11:cd:d6:
5d:30:51:85:a6:53:fc:11:99:e2:c9:65:51:87:90:f5:10:8b:
0a:8f:ac:e8:69:b7:8b:03:e6:35:b8:c5:00:bf:5a:91:2f:34:
1f:ce:98:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:39:21 2025 by rpki-client