This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS216138.roa File: AS216138.roa (raw, json) Hash identifier: aHf8v3mhQBTWBveLBpXYvTnbQLeAC8u4FGF1t531L4s= Subject key identifier: 0B:D3:0F:2E:CA:1A:C3:1B:45:F8:80:CE:D2:34:76:8E:FF:C4:E3:1B Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 650FFBD51FA310578A9892FF47B49DBFDC7B880C Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS216138.roa Signing time: Thu 18 Dec 2025 22:02:42 +0000 ROA not before: Thu 18 Dec 2025 21:57:42 +0000 ROA not after: Thu 17 Dec 2026 22:02:42 +0000 asID: 216138 IP address blocks: 2a06:a007::/32 maxlen: 48 2a09:54c0::/32 maxlen: 48 2a0a:6041::/32 maxlen: 48 2a0d:d901::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0f:fb:d5:1f:a3:10:57:8a:98:92:ff:47:b4:9d:bf:dc:7b:88:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Dec 18 21:57:42 2025 GMT Not After : Dec 17 22:02:42 2026 GMT Subject: CN=0BD30F2ECA1AC31B45F880CED234768EFFC4E31B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:f0:fe:6b:08:ea:dc:bb:0c:ef:7b:9c:43: fb:54:30:36:41:78:e4:bc:9e:4c:be:5e:5c:1b:33: d7:59:08:08:aa:0d:18:27:94:9f:38:73:60:6e:0f: 24:dd:82:02:0d:ff:2b:b5:4d:57:5d:9e:9d:18:c0: a9:d2:60:6a:a0:fc:c6:fc:f5:54:15:86:d5:88:b4: 9f:88:c6:6b:86:d9:77:77:7e:1f:58:86:0d:0d:f9: ff:b6:12:25:ce:83:a1:f8:75:d1:0e:be:b8:ec:a5: ce:e5:c6:22:e4:e4:e0:78:66:ae:e0:b8:0d:42:3e: eb:31:d6:28:dc:9e:10:a6:e3:61:d7:bf:2f:50:d6: a8:99:26:0c:b2:d9:13:ae:99:b2:a0:4e:07:19:87: e6:2a:d3:5d:3a:fd:7a:81:f1:49:08:02:ab:c3:bf: 28:27:c1:bd:a9:97:b6:c8:bc:56:a4:41:0a:3e:d1: a3:f1:a3:63:c7:ce:ff:ed:09:25:3a:c5:fc:a9:51: ce:17:65:d2:d2:36:04:10:ae:0e:e2:7a:31:69:9f: 90:24:e2:e1:eb:70:ee:8e:73:86:84:25:87:ff:01: 98:2a:9e:9c:25:a0:cc:95:db:db:85:36:e2:72:27: de:eb:32:8a:b2:27:5b:98:40:0b:6a:2d:07:70:6f: 43:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D3:0F:2E:CA:1A:C3:1B:45:F8:80:CE:D2:34:76:8E:FF:C4:E3:1B X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS216138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a007::/32 2a09:54c0::/32 2a0a:6041::/32 2a0d:d901::/32 Signature Algorithm: sha256WithRSAEncryption 4d:46:71:a0:a3:3c:ae:4c:85:ca:cf:d3:ea:bd:e9:53:35:5e: d6:0b:71:50:b1:e0:5b:07:0c:b7:1a:37:8c:b6:4d:91:98:6d: 74:d0:e3:5a:1c:c8:f1:9a:24:5a:cb:c9:cc:7f:a5:a5:fe:a5: 72:e6:ab:59:91:5b:c4:50:98:b4:23:07:ff:28:55:c7:ac:47: fc:e8:66:43:74:2e:dc:f8:8f:18:c4:cb:88:d7:de:c6:ec:90: 63:51:e1:e7:dc:42:11:c2:84:00:11:6e:c6:57:27:24:37:97: c7:10:9b:07:3e:6d:f8:2d:1b:42:05:b9:d0:f1:25:fd:14:e9: d8:65:b5:54:65:a4:6d:ea:82:03:01:fb:7d:55:a5:c7:ea:b7: a9:8b:91:75:be:19:da:50:2d:ca:81:5e:26:c3:d3:74:f4:6c: 83:1b:be:4d:f0:f6:3f:be:87:6b:3a:2d:75:df:e8:9e:12:d1: 8e:e9:c6:30:81:dc:04:26:2f:87:75:49:d9:71:fd:d2:3e:cb: ec:62:2f:8c:04:41:48:13:b1:d5:fb:41:00:41:1a:9c:e0:4d: 07:87:8a:25:db:79:c1:9b:f7:1a:20:b2:70:0d:ef:42:5c:e0: 1f:95:82:ec:71:71:ca:9b:2f:e6:23:bf:ca:9f:c5:74:6f:05: 79:3e:3b:91 -----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgIUZQ/71R+jEFeKmJL/R7Sdv9x7iAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTEyMTgyMTU3NDJaFw0yNjEyMTcyMjAyNDJaMDMxMTAvBgNV BAMTKDBCRDMwRjJFQ0ExQUMzMUI0NUY4ODBDRUQyMzQ3NjhFRkZDNEUzMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyfD+awjq3LsM73ucQ/tUMDZB eOS8nky+XlwbM9dZCAiqDRgnlJ84c2BuDyTdggIN/yu1TVddnp0YwKnSYGqg/Mb8 9VQVhtWItJ+IxmuG2Xd3fh9Yhg0N+f+2EiXOg6H4ddEOvrjspc7lxiLk5OB4Zq7g uA1CPusx1ijcnhCm42HXvy9Q1qiZJgyy2ROumbKgTgcZh+Yq0106/XqB8UkIAqvD vygnwb2pl7bIvFakQQo+0aPxo2PHzv/tCSU6xfypUc4XZdLSNgQQrg7iejFpn5Ak 4uHrcO6Oc4aEJYf/AZgqnpwloMyV29uFNuJyJ97rMoqyJ1uYQAtqLQdwb0OVAgMB AAGjggIFMIICATAdBgNVHQ4EFgQUC9MPLsoawxtF+IDO0jR2jv/E4xswHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT MjE2MTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEH AQH/BCYwJDAiBAIAAjAcAwUAKgagBwMFACoJVMADBQAqCmBBAwUAKg3ZATANBgkq hkiG9w0BAQsFAAOCAQEATUZxoKM8rkyFys/T6r3pUzVe1gtxULHgWwcMtxo3jLZN kZhtdNDjWhzI8ZokWsvJzH+lpf6lcuarWZFbxFCYtCMH/yhVx6xH/OhmQ3Qu3PiP GMTLiNfexuyQY1Hh59xCEcKEABFuxlcnJDeXxxCbBz5t+C0bQgW50PEl/RTp2GW1 VGWkbeqCAwH7fVWlx+q3qYuRdb4Z2lAtyoFeJsPTdPRsgxu+TfD2P76Hazotdd/o nhLRjunGMIHcBCYvh3VJ2XH90j7L7GIvjARBSBOx1ftBAEEanOBNB4eKJdt5wZv3 GiCycA3vQlzgH5WC7HFxypsv5iO/yp/FdG8FeT47kQ== -----END CERTIFICATE-----Generated at Fri Dec 19 19:42:26 2025 by rpki-client