This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20648.roa File: AS20648.roa (raw, json) Hash identifier: 0WaSs3SsgrJPFGxhXO1iba5+u6mgkRLvQPdhDwp197I= Subject key identifier: 08:0D:EA:86:93:F4:90:7A:02:45:95:93:8A:09:44:03:29:23:41:7E Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 1BDB0D1DE33FA462C71855B3B3192B987267D4BA Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20648.roa Signing time: Wed 10 Dec 2025 12:30:49 +0000 ROA not before: Wed 10 Dec 2025 12:25:49 +0000 ROA not after: Wed 09 Dec 2026 12:30:49 +0000 asID: 20648 IP address blocks: 104.234.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 04:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:db:0d:1d:e3:3f:a4:62:c7:18:55:b3:b3:19:2b:98:72:67:d4:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 10 12:25:49 2025 GMT Not After : Dec 9 12:30:49 2026 GMT Subject: CN=080DEA8693F4907A024595938A0944032923417E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:48:97:0e:ce:6b:04:4f:a7:92:97:95:88:3c: 40:1d:1e:5a:cb:2e:0e:ff:8a:44:ad:8d:b1:67:2f: b5:8c:f6:7b:40:1d:0f:02:e3:f3:6c:0b:75:b2:1e: c0:62:06:33:0d:a1:5d:c6:57:56:ad:15:8e:17:46: 44:2c:7b:99:bc:4e:20:e2:61:4d:37:a4:65:83:12: 9b:e4:6b:c5:69:20:de:77:f0:4a:bb:c6:75:6d:41: aa:62:8a:c6:9a:dc:42:bd:e8:7d:e0:48:f4:21:1c: 65:ba:d2:f7:39:1a:e7:b6:23:df:f9:07:18:75:ed: de:da:f2:63:f1:de:1b:39:cc:59:a2:2d:17:6d:f5: 29:af:49:22:73:4d:ad:c0:85:e1:8b:50:5d:bd:e6: a1:f3:de:82:a9:11:ec:ab:b3:6c:a6:0f:21:c6:57: 16:be:04:bd:d9:cf:d0:d4:18:8a:9d:f3:5e:e1:db: 14:ac:53:de:73:04:c1:79:64:17:04:11:10:5b:58: 4a:ce:85:ff:8e:88:40:36:40:fd:f6:4b:d1:70:08: 68:64:91:b7:48:d8:e8:8f:5c:c2:c0:d9:b2:40:e1: f8:91:9b:40:8d:36:8f:7a:da:07:03:60:cf:49:42: 7b:b8:c4:1a:b3:22:66:dd:8e:a3:0e:37:f1:24:2d: d2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0D:EA:86:93:F4:90:7A:02:45:95:93:8A:09:44:03:29:23:41:7E X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20648.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.106.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:ca:29:88:b8:99:22:ca:6e:00:d5:da:9d:09:6d:04:63:6e: b9:49:51:54:78:63:a6:7a:1c:1e:0f:1f:fc:1b:60:bd:76:d7: 0f:c8:aa:40:98:14:a4:39:2e:7f:16:1e:7e:bc:31:c7:c9:f8: ec:6a:25:98:68:2b:b3:49:e4:12:24:76:67:3c:95:a9:5c:df: c8:6f:aa:2d:e6:d7:f9:d1:d1:12:58:47:ed:c7:46:eb:e6:b6: a7:ec:3d:8f:64:f3:06:d8:71:a3:ff:8c:87:30:81:37:2e:d9: 33:d9:e4:41:a9:6c:1d:37:96:03:bf:16:c3:2a:c0:cb:ca:a3: 5f:38:33:79:5b:4a:0b:a5:28:12:20:c2:dc:74:25:45:1e:77: 47:3c:7a:13:42:a3:ad:3a:a5:36:a9:4a:ae:11:90:60:f4:39: db:ac:47:9a:57:45:08:c3:12:88:5b:85:09:24:ee:25:ed:53: ba:29:b1:9f:91:a5:81:a4:a4:6d:5f:de:03:28:04:2b:59:ab: e8:6b:17:bd:7f:bb:84:1a:89:89:69:ec:03:fc:27:2d:6b:84: bc:d9:14:2c:0c:3d:5d:5d:73:ef:74:1a:ee:df:c7:1f:3a:4e: e5:60:f3:e7:3b:4c:64:0b:6f:f7:93:1a:34:f2:da:b1:81:2a: de:f2:11:8b -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUG9sNHeM/pGLHGFWzsxkrmHJn1LowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMjEwMTIyNTQ5WhcNMjYxMjA5MTIzMDQ5 WjAzMTEwLwYDVQQDEygwODBERUE4NjkzRjQ5MDdBMDI0NTk1OTM4QTA5NDQwMzI5 MjM0MTdFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUiXDs5rBE+n kpeViDxAHR5ayy4O/4pErY2xZy+1jPZ7QB0PAuPzbAt1sh7AYgYzDaFdxldWrRWO F0ZELHuZvE4g4mFNN6RlgxKb5GvFaSDed/BKu8Z1bUGqYorGmtxCveh94Ej0IRxl utL3ORrntiPf+QcYde3e2vJj8d4bOcxZoi0XbfUpr0kic02twIXhi1Bdveah896C qRHsq7Nspg8hxlcWvgS92c/Q1BiKnfNe4dsUrFPecwTBeWQXBBEQW1hKzoX/johA NkD99kvRcAhoZJG3SNjoj1zCwNmyQOH4kZtAjTaPetoHA2DPSUJ7uMQasyJm3Y6j DjfxJC3SlwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFAgN6oaT9JB6AkWVk4oJRAMp I0F+MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwNjQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOpqMA0GCSqGSIb3DQEBCwUAA4IB AQAeyimIuJkiym4A1dqdCW0EY265SVFUeGOmehweDx/8G2C9dtcPyKpAmBSkOS5/ Fh5+vDHHyfjsaiWYaCuzSeQSJHZnPJWpXN/Ib6ot5tf50dESWEftx0br5ran7D2P ZPMG2HGj/4yHMIE3Ltkz2eRBqWwdN5YDvxbDKsDLyqNfODN5W0oLpSgSIMLcdCVF HndHPHoTQqOtOqU2qUquEZBg9DnbrEeaV0UIwxKIW4UJJO4l7VO6KbGfkaWBpKRt X94DKAQrWavoaxe9f7uEGomJaewD/Ccta4S82RQsDD1dXXPvdBru38cfOk7lYPPn O0xkC2/3kxo08tqxgSre8hGL -----END CERTIFICATE-----Generated at Sat Dec 20 16:00:17 2025 by rpki-client