This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207567.roa File: AS207567.roa (raw, json) Hash identifier: 3lU27JEl7XJOuEeJ/a5QagBTgZjHogL1Fu8vlhTuE+Y= Subject key identifier: 30:6E:0B:A0:13:20:A6:85:4A:3A:40:75:44:8E:5C:A8:99:F9:06:39 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 69AE7B9254F89EE76F44FB35518F9D9BEA97C567 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207567.roa Signing time: Tue 02 Dec 2025 07:19:25 +0000 ROA not before: Tue 02 Dec 2025 07:14:25 +0000 ROA not after: Tue 01 Dec 2026 07:19:25 +0000 asID: 207567 IP address blocks: 2a0d:d904::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ae:7b:92:54:f8:9e:e7:6f:44:fb:35:51:8f:9d:9b:ea:97:c5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Dec 2 07:14:25 2025 GMT Not After : Dec 1 07:19:25 2026 GMT Subject: CN=306E0BA01320A6854A3A4075448E5CA899F90639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7a:42:75:00:b1:e8:3f:72:82:f2:44:52:a4: 24:68:fc:31:dc:e8:c1:85:a1:3c:43:10:a6:9c:25: 2b:d4:f9:43:f9:b9:a9:0f:98:4b:bb:ca:e8:74:3d: 77:b4:2d:44:ca:10:e0:3c:8b:bf:4a:fd:fc:64:b0: 86:7f:12:57:d0:98:90:a1:71:7a:1f:c5:d3:80:3f: a8:80:0e:d8:fc:19:e8:2b:8f:ef:82:f8:35:46:b0: 96:5b:95:09:ff:3e:fd:5d:b3:ee:9d:df:3b:35:c6: 96:8d:c2:35:48:6d:9d:b5:80:20:5f:bc:06:43:9c: f7:8d:cd:f3:7a:0e:d3:b2:57:55:31:b1:2b:4b:52: a1:27:fe:c5:68:bc:9e:92:13:ef:22:27:54:ea:16: 24:86:ee:79:de:a0:5a:0d:41:c0:f3:ba:32:87:b2: d8:b2:aa:8f:f8:2f:e4:2e:78:21:f8:36:19:d8:06: c0:f3:d6:69:ae:62:6f:3b:7a:b2:39:05:aa:1b:7d: 10:d8:94:db:12:0f:1f:bb:cb:ed:b2:ba:28:da:6d: 5e:ea:fc:d9:d5:3c:45:c2:01:31:dc:df:73:9f:57: 91:aa:38:4d:69:fe:34:00:11:7b:06:3d:7c:d1:c3: 7d:82:91:ce:8b:2e:ca:e4:d2:b4:bd:fd:c1:40:f2: c9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6E:0B:A0:13:20:A6:85:4A:3A:40:75:44:8E:5C:A8:99:F9:06:39 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS207567.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:d904::/32 Signature Algorithm: sha256WithRSAEncryption 56:99:64:de:13:48:6d:65:fe:4f:87:3b:9f:3e:8c:54:82:cb: 13:3d:11:cd:3d:57:04:46:90:9a:e0:ff:b1:f1:23:ed:fe:2c: cd:9a:03:0b:22:6d:23:21:70:fa:e0:45:7e:71:ad:8f:33:07: b1:8f:77:df:5f:62:f5:60:7f:7e:a7:c8:a8:50:00:c6:31:7a: b2:6e:2e:c4:f6:00:22:b4:78:82:d8:8b:bd:1c:fc:8d:5c:42: 07:d4:2d:79:37:10:24:c1:2d:f1:cf:7d:a1:6f:bb:29:01:5d: 8d:8a:0e:ae:8f:42:83:7d:67:e1:b9:95:5b:db:04:af:df:fd: 6d:47:fe:a8:d9:37:18:bc:4a:8d:48:07:b6:72:35:aa:61:d2: d0:87:14:2d:b5:5c:a6:1e:e8:6c:fd:ad:11:27:84:25:79:86: 50:ce:dd:81:9b:e7:41:6e:ee:06:0b:4b:e6:80:b8:80:87:88: 01:bd:0a:27:ee:54:22:03:30:bd:94:9b:d3:90:f7:88:c1:47: 56:37:f6:55:c4:3a:42:91:70:85:88:69:07:dc:25:c8:ac:bb: 63:d7:d5:f8:87:dd:9e:b7:41:7e:54:45:d7:59:a8:47:03:43: 28:7f:2c:f3:7b:87:af:5f:44:43:32:dd:52:13:b7:40:98:3d: b2:91:67:fc -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUaa57klT4nudvRPs1UY+dm+qXxWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTEyMDIwNzE0MjVaFw0yNjEyMDEwNzE5MjVaMDMxMTAvBgNV BAMTKDMwNkUwQkEwMTMyMEE2ODU0QTNBNDA3NTQ0OEU1Q0E4OTlGOTA2MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpekJ1ALHoP3KC8kRSpCRo/DHc 6MGFoTxDEKacJSvU+UP5uakPmEu7yuh0PXe0LUTKEOA8i79K/fxksIZ/ElfQmJCh cXofxdOAP6iADtj8Gegrj++C+DVGsJZblQn/Pv1ds+6d3zs1xpaNwjVIbZ21gCBf vAZDnPeNzfN6DtOyV1UxsStLUqEn/sVovJ6SE+8iJ1TqFiSG7nneoFoNQcDzujKH stiyqo/4L+QueCH4NhnYBsDz1mmuYm87erI5BaobfRDYlNsSDx+7y+2yuijabV7q /NnVPEXCATHc33OfV5GqOE1p/jQAEXsGPXzRw32Ckc6LLsrk0rS9/cFA8skHAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUMG4LoBMgpoVKOkB1RI5cqJn5BjkwHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT MjA3NTY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKg3ZBDANBgkqhkiG9w0BAQsFAAOCAQEAVplk3hNI bWX+T4c7nz6MVILLEz0RzT1XBEaQmuD/sfEj7f4szZoDCyJtIyFw+uBFfnGtjzMH sY93319i9WB/fqfIqFAAxjF6sm4uxPYAIrR4gtiLvRz8jVxCB9QteTcQJMEt8c99 oW+7KQFdjYoOro9Cg31n4bmVW9sEr9/9bUf+qNk3GLxKjUgHtnI1qmHS0IcULbVc ph7obP2tESeEJXmGUM7dgZvnQW7uBgtL5oC4gIeIAb0KJ+5UIgMwvZSb05D3iMFH Vjf2VcQ6QpFwhYhpB9wlyKy7Y9fV+IfdnrdBflRF11moRwNDKH8s83uHr19EQzLd UhO3QJg9spFn/A== -----END CERTIFICATE-----Generated at Fri Dec 5 19:34:10 2025 by rpki-client