This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207491.roa File: AS207491.roa (raw, json) Hash identifier: Xo9wZoAsorDWQp776Np0Rpw29pj2k0hHZ79AqrybVCg= Subject key identifier: 97:CF:F7:1D:71:6B:72:50:B2:0F:47:B6:1A:43:CF:B9:23:81:BE:FE Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 7352231DDFDA339AE0DB6C52AD89E9970183EC09 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207491.roa Signing time: Wed 12 Nov 2025 09:41:13 +0000 ROA not before: Wed 12 Nov 2025 09:36:13 +0000 ROA not after: Wed 11 Nov 2026 09:41:13 +0000 asID: 207491 IP address blocks: 185.121.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:52:23:1d:df:da:33:9a:e0:db:6c:52:ad:89:e9:97:01:83:ec:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Nov 12 09:36:13 2025 GMT Not After : Nov 11 09:41:13 2026 GMT Subject: CN=97CFF71D716B7250B20F47B61A43CFB92381BEFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:77:ce:39:a8:54:62:7a:17:93:cb:ba:b7:0d: 19:da:06:14:2a:a5:dd:fe:48:dc:56:0a:32:53:a0: 32:82:a2:69:17:ef:77:d6:27:7e:1e:fa:2f:83:2c: fd:8c:66:d3:df:cf:92:3d:61:2e:ff:0c:d8:4d:3d: 8a:ed:f1:db:68:29:b6:62:7e:20:2a:0a:e1:7b:9a: 4e:70:36:93:3f:5a:62:bb:84:35:23:90:33:06:b4: 6c:74:92:9c:6f:15:5b:fb:33:df:55:c6:da:66:44: 13:9d:e3:6e:ed:bb:21:35:f5:1e:ed:f0:82:d9:88: a1:f7:01:01:96:bd:2c:bb:9e:b6:a8:66:6c:01:dd: e7:32:9e:9c:1c:b1:f8:74:d2:be:68:54:a0:d7:9d: a1:cb:5b:0a:f6:44:b2:7b:9c:9c:75:7d:73:aa:e8: 45:07:0c:1c:3a:98:33:0f:dc:5e:d8:73:0d:6b:61: 56:85:a9:f2:75:7f:60:c7:cb:8b:93:bc:ff:1c:71: c2:56:95:5f:83:58:8e:95:8c:bc:92:c8:ac:1f:21: c5:30:0d:92:45:7d:9e:37:52:4f:dd:9d:8e:ac:0d: e6:f9:d0:49:94:82:f9:87:c5:cd:13:ff:84:3e:bd: b7:49:65:4d:13:75:21:b8:cd:2a:e8:8b:87:c7:a7: b2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CF:F7:1D:71:6B:72:50:B2:0F:47:B6:1A:43:CF:B9:23:81:BE:FE X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207491.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.163.0/24 Signature Algorithm: sha256WithRSAEncryption 27:39:58:fe:0f:eb:01:e8:84:bd:57:af:8d:98:a0:c4:3f:5d: 41:1e:3e:5c:ee:2d:c5:32:ab:81:fe:73:2b:7b:17:3e:55:8e: 49:4d:bc:b5:b6:a0:26:2e:50:1b:df:23:26:78:11:aa:2f:ef: b8:d1:16:28:a6:a9:e6:ca:31:11:cc:ad:f0:77:bb:35:aa:30: 93:7f:85:ac:cf:2d:40:58:fd:e0:20:2c:4b:64:98:49:eb:86: 71:06:86:c8:e3:5f:c0:db:82:60:0b:18:d2:8e:a2:9b:a6:e1: 0b:58:10:ca:d6:a6:0a:db:6a:37:fb:47:f5:45:32:87:b4:2c: 15:85:4d:2e:64:0b:12:ff:56:23:64:ed:68:01:e8:6d:38:88: b0:a6:4f:5d:4f:1c:40:2e:ec:33:f5:a8:0e:dc:c0:b1:b9:c7: 8d:93:bc:da:83:ab:eb:8a:59:93:d6:5e:cb:61:0f:61:fa:0c: 9d:5c:66:4d:33:42:81:92:de:e5:e5:74:a0:bb:7a:4b:52:bf: 50:61:7e:93:07:b3:6b:36:17:0f:64:66:2a:c1:3d:65:a8:be: fb:88:e9:dc:2c:2e:3c:7d:97:32:92:65:6a:67:4f:7e:2b:23: b6:36:b1:da:4a:ef:85:8c:1d:6e:6b:33:12:9a:4c:57:36:f5: e3:c5:5d:e3 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUc1IjHd/aM5rg22xSrYnplwGD7AkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTExMTIwOTM2MTNaFw0yNjExMTEwOTQxMTNaMDMxMTAvBgNV BAMTKDk3Q0ZGNzFENzE2QjcyNTBCMjBGNDdCNjFBNDNDRkI5MjM4MUJFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCId845qFRieheTy7q3DRnaBhQq pd3+SNxWCjJToDKComkX73fWJ34e+i+DLP2MZtPfz5I9YS7/DNhNPYrt8dtoKbZi fiAqCuF7mk5wNpM/WmK7hDUjkDMGtGx0kpxvFVv7M99VxtpmRBOd427tuyE19R7t 8ILZiKH3AQGWvSy7nraoZmwB3ecynpwcsfh00r5oVKDXnaHLWwr2RLJ7nJx1fXOq 6EUHDBw6mDMP3F7Ycw1rYVaFqfJ1f2DHy4uTvP8cccJWlV+DWI6VjLySyKwfIcUw DZJFfZ43Uk/dnY6sDeb50EmUgvmHxc0T/4Q+vbdJZU0TdSG4zSroi4fHp7JxAgMB AAGjggHvMIIB6zAdBgNVHQ4EFgQUl8/3HXFrclCyD0e2GkPPuSOBvv4wHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT MjA3NDkxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAuXmjMA0GCSqGSIb3DQEBCwUAA4IBAQAnOVj+D+sB 6IS9V6+NmKDEP11BHj5c7i3FMquB/nMrexc+VY5JTby1tqAmLlAb3yMmeBGqL++4 0RYopqnmyjERzK3wd7s1qjCTf4Wszy1AWP3gICxLZJhJ64ZxBobI41/A24JgCxjS jqKbpuELWBDK1qYK22o3+0f1RTKHtCwVhU0uZAsS/1YjZO1oAehtOIiwpk9dTxxA Luwz9agO3MCxuceNk7zag6vrilmT1l7LYQ9h+gydXGZNM0KBkt7l5XSgu3pLUr9Q YX6TB7NrNhcPZGYqwT1lqL77iOncLC48fZcykmVqZ09+KyO2NrHaSu+FjB1uazMS mkxXNvXjxV3j -----END CERTIFICATE-----Generated at Sat Nov 22 21:48:13 2025 by rpki-client