This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: 3jik1+jyO3sQmlz90VSEgf1UCCpczhGo44/5jK5tNeQ= Subject key identifier: F6:BC:91:4C:BC:D0:32:FF:55:F5:63:8E:AF:EA:90:26:90:99:56:4C Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 142762ABD35BA137EB41286FE35A5BBEF45E0A9E Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25198.roa Signing time: Wed 17 Dec 2025 06:31:00 +0000 ROA not before: Wed 17 Dec 2025 06:26:00 +0000 ROA not after: Wed 16 Dec 2026 06:31:00 +0000 asID: 25198 IP address blocks: 104.234.40.0/24 maxlen: 24 104.234.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 06:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:27:62:ab:d3:5b:a1:37:eb:41:28:6f:e3:5a:5b:be:f4:5e:0a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 17 06:26:00 2025 GMT Not After : Dec 16 06:31:00 2026 GMT Subject: CN=F6BC914CBCD032FF55F5638EAFEA90269099564C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9b:89:90:da:b3:18:f7:80:d4:23:b6:80:4d: 8f:cb:3d:b7:f5:4f:a3:63:25:01:72:81:7e:86:16: 1e:5d:65:0f:cc:50:c7:ff:b7:87:85:54:8f:36:c4: cb:45:59:0c:2e:50:1d:17:ed:b7:9f:0b:7c:9c:d6: cd:64:a2:e8:62:fe:1e:1b:55:11:26:19:39:c0:a6: 5f:7b:a9:59:e3:09:bd:ae:13:dd:aa:a0:3f:87:93: 2f:3c:34:76:e2:e3:d6:c6:a5:ec:0c:bc:0e:bf:4b: fa:52:be:46:be:61:ea:73:d7:17:2d:12:e7:50:ef: 2e:e5:7c:a8:72:25:45:55:82:22:cd:f6:55:45:38: a0:56:1d:7d:62:93:b9:30:cd:33:7f:bb:46:8e:6d: 77:2f:9e:a8:1a:a5:2b:d8:ac:7a:47:f9:26:9e:88: e7:c1:e0:bc:c6:56:4b:0a:1d:62:3a:2e:07:f3:4b: 9c:5b:e3:cd:bc:35:c9:be:c4:54:f5:3e:e8:35:81: d8:fe:40:5d:64:23:0a:1a:95:30:e7:c1:c5:41:cf: c8:65:cd:76:f8:ad:03:f6:f1:c3:3b:09:b8:e4:e2: 07:91:44:58:86:c4:d0:67:80:6e:94:27:90:c5:b7: f7:5b:7b:1f:c0:59:5a:c2:f9:11:ac:43:e6:79:32: cb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BC:91:4C:BC:D0:32:FF:55:F5:63:8E:AF:EA:90:26:90:99:56:4C X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.40.0/24 104.234.135.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:12:da:8e:13:1a:87:c6:5b:89:05:c0:a9:ec:e9:27:d9:1a: b6:c8:d7:f5:61:52:57:19:48:e8:5c:e4:a3:2a:57:73:4e:9d: 15:6e:67:da:a5:f6:82:8e:a0:f6:76:fe:fc:be:dd:37:4c:72: 76:83:55:72:c5:8b:54:27:8b:a7:f0:27:83:a4:9a:1f:17:98: 7b:b8:b5:37:1f:ee:bf:0c:4d:14:4c:d5:bc:c2:82:23:b9:31: 1b:be:d3:0e:42:87:13:96:9c:5d:bb:14:ca:25:86:d8:ab:7a: e1:b7:22:46:c4:f8:02:27:96:3d:14:5a:59:cc:8e:80:fa:d6: e8:12:80:3b:47:d8:60:3c:84:02:97:fb:de:84:95:c3:69:10: 1f:72:24:ab:75:01:44:03:79:00:a4:f8:3b:0f:9a:e1:7f:e6: ea:da:95:56:dc:02:88:3e:fd:c0:e2:90:75:79:3a:f5:c4:e8: d0:39:b0:46:80:16:4c:0a:c8:6d:e6:a7:2b:63:5a:40:64:4d: bf:08:d7:d0:75:b0:55:bd:23:58:d7:8a:50:0d:a8:1a:8b:3e: f0:ed:2a:2a:48:50:82:a1:d2:37:a3:8b:e4:02:65:91:78:7f: 4b:6a:c3:ed:a1:ca:8e:57:d5:04:d2:c2:83:e7:55:6c:29:e3: c2:86:c2:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUFCdiq9NboTfrQShv41pbvvReCp4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMjE3MDYyNjAwWhcNMjYxMjE2MDYzMTAw WjAzMTEwLwYDVQQDEyhGNkJDOTE0Q0JDRDAzMkZGNTVGNTYzOEVBRkVBOTAyNjkw OTk1NjRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpuJkNqzGPeA 1CO2gE2Pyz239U+jYyUBcoF+hhYeXWUPzFDH/7eHhVSPNsTLRVkMLlAdF+23nwt8 nNbNZKLoYv4eG1URJhk5wKZfe6lZ4wm9rhPdqqA/h5MvPDR24uPWxqXsDLwOv0v6 Ur5GvmHqc9cXLRLnUO8u5XyociVFVYIizfZVRTigVh19YpO5MM0zf7tGjm13L56o GqUr2Kx6R/kmnojnweC8xlZLCh1iOi4H80ucW+PNvDXJvsRU9T7oNYHY/kBdZCMK GpUw58HFQc/IZc12+K0D9vHDOwm45OIHkURYhsTQZ4BulCeQxbf3W3sfwFlawvkR rEPmeTLLPQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFPa8kUy80DL/VfVjjq/qkCaQ mVZMMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaOooAwQAaOqHMA0GCSqGSIb3DQEB CwUAA4IBAQBvEtqOExqHxluJBcCp7Okn2Rq2yNf1YVJXGUjoXOSjKldzTp0Vbmfa pfaCjqD2dv78vt03THJ2g1VyxYtUJ4un8CeDpJofF5h7uLU3H+6/DE0UTNW8woIj uTEbvtMOQocTlpxduxTKJYbYq3rhtyJGxPgCJ5Y9FFpZzI6A+tboEoA7R9hgPIQC l/vehJXDaRAfciSrdQFEA3kApPg7D5rhf+bq2pVW3AKIPv3A4pB1eTr1xOjQObBG gBZMCsht5qcrY1pAZE2/CNfQdbBVvSNY14pQDagaiz7w7SoqSFCCodI3o4vkAmWR eH9LasPtocqOV9UE0sKD51VsKePChsJZ -----END CERTIFICATE-----Generated at Thu Dec 18 21:52:40 2025 by rpki-client