This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215225.roa File: AS215225.roa (raw, json) Hash identifier: S9ZbgTNHV7J0yikTF+A/fjfeKy7ILW8n0MM2Vj5+luQ= Subject key identifier: 64:34:2F:BB:FB:AB:7C:52:58:CB:B4:55:83:10:C9:E0:97:62:12:21 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 614EED766B79A9DCAA78AD31EB9CB26146776AD8 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215225.roa Signing time: Thu 13 Nov 2025 09:40:32 +0000 ROA not before: Thu 13 Nov 2025 09:35:32 +0000 ROA not after: Thu 12 Nov 2026 09:40:32 +0000 asID: 215225 IP address blocks: 5.253.85.0/24 maxlen: 24 168.222.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4e:ed:76:6b:79:a9:dc:aa:78:ad:31:eb:9c:b2:61:46:77:6a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Nov 13 09:35:32 2025 GMT Not After : Nov 12 09:40:32 2026 GMT Subject: CN=64342FBBFBAB7C5258CBB4558310C9E097621221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4d:db:8f:67:6f:d6:96:df:6f:fa:3e:70:67: fd:85:9c:58:1b:1d:f1:7d:8f:6d:4e:c0:89:f1:65: 8c:58:07:99:c2:b7:0b:25:19:6a:49:bf:bd:aa:fd: 3a:c0:82:d7:38:6e:45:7c:62:0b:d5:61:71:44:13: 3c:50:e5:ce:d6:81:88:8f:7f:0a:62:c9:31:78:f1: 60:c6:80:1b:0e:fd:45:93:0d:54:9f:60:22:dd:a1: 0c:23:8d:14:89:68:66:92:cc:5c:47:34:33:d5:c3: 3f:02:67:d6:c3:be:d8:0e:b3:22:66:a1:0f:b2:29: b3:0c:fb:92:9f:a0:08:2d:b6:ae:6e:5c:a1:75:ef: 19:08:2f:b5:15:d5:6e:c5:ae:2b:89:6f:03:4c:e2: 27:d0:2b:99:6b:bf:16:2d:2b:3c:53:0d:5f:56:f2: cd:de:2e:40:70:28:35:35:1c:98:4e:68:5f:de:fe: 91:4c:cd:8e:87:fc:a7:e0:9c:7e:d2:17:dc:ff:6a: a6:5a:d7:8f:42:75:b8:71:02:18:09:1d:f5:34:9e: 03:a3:49:e6:79:3b:4d:4e:94:8f:f9:4f:6b:9b:92: 90:09:8b:63:c8:49:69:89:e3:6e:2a:04:6c:6c:0f: 44:29:cc:5e:2c:a0:6e:a8:fa:12:44:c2:ab:63:b5: 3f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:34:2F:BB:FB:AB:7C:52:58:CB:B4:55:83:10:C9:E0:97:62:12:21 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS215225.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.85.0/24 168.222.242.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:e0:a1:f2:b4:ee:df:72:70:a7:b1:7c:dd:ac:95:36:6b:39: 69:6c:cb:c7:05:94:05:4f:62:4d:c7:98:d1:37:9f:43:75:97: 9a:21:60:68:dc:de:12:81:07:6b:b5:f7:4d:be:20:54:5f:71: c9:9b:60:74:6c:18:47:91:ee:7e:e6:ac:15:41:f3:b1:68:35: 38:3d:bf:14:64:c0:ff:d2:9c:05:88:1a:e6:e5:b4:98:ba:8f: d3:18:72:32:9d:76:20:2c:f7:08:09:67:d1:f0:d4:22:5b:b1: 16:44:6a:21:75:11:ec:a7:c6:26:87:e1:99:e1:7b:b7:c2:57: 67:27:3c:fc:8d:f3:e3:c5:6a:9c:90:44:e7:a5:8f:64:b9:68: 78:6d:31:bd:b4:a5:9b:9d:cf:3b:62:4d:16:95:a1:56:5c:d8: c9:05:d7:94:cb:f6:4e:f6:fc:cd:53:fb:64:0e:6b:fa:89:90: 78:6e:3a:eb:5b:cc:1f:e7:4f:00:91:82:5b:65:e0:8d:4e:6a: e2:03:9d:92:e2:9b:34:40:90:09:d2:77:e8:86:35:e1:94:dc: 6a:08:9d:be:c3:ce:fe:76:70:09:bc:9f:5b:35:ca:65:ab:b1: 15:59:6b:df:99:82:a4:53:f8:5b:81:a2:6d:8f:a9:c1:d1:1b: 1f:46:13:0d -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUYU7tdmt5qdyqeK0x65yyYUZ3atgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTExMTMwOTM1MzJaFw0yNjExMTIwOTQwMzJaMDMxMTAvBgNV BAMTKDY0MzQyRkJCRkJBQjdDNTI1OENCQjQ1NTgzMTBDOUUwOTc2MjEyMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTTduPZ2/Wlt9v+j5wZ/2FnFgb HfF9j21OwInxZYxYB5nCtwslGWpJv72q/TrAgtc4bkV8YgvVYXFEEzxQ5c7WgYiP fwpiyTF48WDGgBsO/UWTDVSfYCLdoQwjjRSJaGaSzFxHNDPVwz8CZ9bDvtgOsyJm oQ+yKbMM+5KfoAgttq5uXKF17xkIL7UV1W7FriuJbwNM4ifQK5lrvxYtKzxTDV9W 8s3eLkBwKDU1HJhOaF/e/pFMzY6H/KfgnH7SF9z/aqZa149CdbhxAhgJHfU0ngOj SeZ5O01OlI/5T2ubkpAJi2PISWmJ424qBGxsD0QpzF4soG6o+hJEwqtjtT8JAgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUZDQvu/urfFJYy7RVgxDJ4JdiEiEwHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT MjE1MjI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEH AQH/BBYwFDASBAIAATAMAwQABf1VAwQAqN7yMA0GCSqGSIb3DQEBCwUAA4IBAQCM 4KHytO7fcnCnsXzdrJU2azlpbMvHBZQFT2JNx5jRN59DdZeaIWBo3N4SgQdrtfdN viBUX3HJm2B0bBhHke5+5qwVQfOxaDU4Pb8UZMD/0pwFiBrm5bSYuo/TGHIynXYg LPcICWfR8NQiW7EWRGohdRHsp8Ymh+GZ4Xu3wldnJzz8jfPjxWqckETnpY9kuWh4 bTG9tKWbnc87Yk0WlaFWXNjJBdeUy/ZO9vzNU/tkDmv6iZB4bjrrW8wf508AkYJb ZeCNTmriA52S4ps0QJAJ0nfohjXhlNxqCJ2+w87+dnAJvJ9bNcplq7EVWWvfmYKk U/hbgaJtj6nB0RsfRhMN -----END CERTIFICATE-----Generated at Sat Nov 22 21:48:12 2025 by rpki-client