This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32181.roa File: AS32181.roa (raw, json) Hash identifier: IZnLOkVsrIPgXvNgrXpqrbZYsBEI7JY5trh4kAGb8P4= Subject key identifier: F0:0F:1D:B2:12:F4:1E:51:E5:C1:C5:69:46:C1:98:CD:73:6A:E8:71 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 4067D0961C177FC208D0D79E9A3E4E8D33C5F12D Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32181.roa Signing time: Thu 11 Dec 2025 13:30:49 +0000 ROA not before: Thu 11 Dec 2025 13:25:49 +0000 ROA not after: Thu 10 Dec 2026 13:30:49 +0000 asID: 32181 IP address blocks: 104.234.23.0/24 maxlen: 24 104.234.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 10:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:67:d0:96:1c:17:7f:c2:08:d0:d7:9e:9a:3e:4e:8d:33:c5:f1:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 11 13:25:49 2025 GMT Not After : Dec 10 13:30:49 2026 GMT Subject: CN=F00F1DB212F41E51E5C1C56946C198CD736AE871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5b:f6:95:36:5e:c1:81:1b:2c:f1:42:9f:e0: 42:12:56:d3:76:10:cd:86:72:2a:2b:4e:5e:3d:30: 60:97:05:fb:4c:0c:aa:10:33:70:39:56:58:71:90: de:29:06:08:da:fb:ec:b1:79:9e:90:25:c7:66:d4: 16:0c:3e:7e:95:4e:29:d6:cf:03:ce:b8:f8:c3:a6: 81:93:11:2e:38:74:69:ae:9e:c3:0a:49:78:a5:b0: 2a:3f:61:6f:23:e7:1a:98:f6:47:6f:8e:91:31:c9: 6b:71:e5:41:e3:dd:b1:3d:d1:04:c5:9f:64:9d:49: aa:e8:8a:f0:a9:bd:85:be:64:ef:29:9c:7c:e2:6a: ef:46:d8:02:b1:b6:db:e5:f8:6f:d0:74:8a:63:bb: 32:73:9b:d6:f7:09:7e:85:a3:e9:29:b6:73:c4:a5: b2:eb:cb:28:a7:f6:40:6c:b5:e8:34:ac:1e:1b:25: 2d:27:e8:2a:a9:aa:15:75:1c:06:33:38:8b:12:81: a7:16:b6:95:db:3b:1d:86:bd:26:c6:29:51:33:d5: f0:24:fb:b7:0a:fa:33:b2:2c:b9:7a:14:81:87:a7: 5b:54:43:bd:cb:33:5a:a9:0a:4a:2e:d4:45:8c:ac: b1:a1:db:0c:08:a4:82:0e:d2:3a:ba:73:25:7e:99: 1d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0F:1D:B2:12:F4:1E:51:E5:C1:C5:69:46:C1:98:CD:73:6A:E8:71 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32181.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.23.0/24 104.234.146.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:ed:95:84:c0:71:86:ca:f2:18:1c:c3:b6:1b:93:48:1d:8b: 5a:ac:02:77:1c:fc:90:c6:a8:2a:58:60:ce:b2:b3:23:64:1f: c3:29:8d:67:c3:be:5b:cb:fa:09:e5:5d:33:46:a3:27:d6:94: e6:7f:0f:14:a2:f3:40:eb:49:cb:2a:f5:90:a6:05:a6:be:ac: f7:02:34:6f:e4:33:57:b8:b9:25:50:9d:da:cf:6f:dc:95:df: a0:e0:22:23:30:f9:6c:e7:82:fe:84:eb:69:11:bf:40:b3:1f: 3c:4b:77:dd:c6:bb:fd:6e:00:97:c6:cc:f2:bf:00:48:9f:84: ac:b5:24:ec:3c:2f:1e:b6:ac:e6:17:5e:79:8d:b4:ad:ba:c2: 1a:61:80:b7:57:7d:0f:5e:d4:82:f6:e5:6d:5d:f3:5f:0f:80: 8e:4d:a9:b2:13:6b:c9:01:db:3f:d4:0a:39:d7:51:c5:bb:cc: 8d:58:93:b9:7b:e1:08:cf:86:57:40:63:4c:3f:1d:ad:93:5e: 2a:82:76:30:fb:14:5d:20:70:7c:4f:78:33:cb:4d:cf:19:8f: 67:98:01:91:0c:73:05:72:77:60:75:e1:9c:bc:3c:66:59:cd: 86:97:f9:33:81:13:43:96:93:27:0e:a7:ae:19:ec:36:fc:38: 68:89:af:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUQGfQlhwXf8II0Neemj5OjTPF8S0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMjExMTMyNTQ5WhcNMjYxMjEwMTMzMDQ5 WjAzMTEwLwYDVQQDEyhGMDBGMURCMjEyRjQxRTUxRTVDMUM1Njk0NkMxOThDRDcz NkFFODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVv2lTZewYEb LPFCn+BCElbTdhDNhnIqK05ePTBglwX7TAyqEDNwOVZYcZDeKQYI2vvssXmekCXH ZtQWDD5+lU4p1s8Dzrj4w6aBkxEuOHRprp7DCkl4pbAqP2FvI+camPZHb46RMclr ceVB492xPdEExZ9knUmq6Irwqb2FvmTvKZx84mrvRtgCsbbb5fhv0HSKY7syc5vW 9wl+haPpKbZzxKWy68sop/ZAbLXoNKweGyUtJ+gqqaoVdRwGMziLEoGnFraV2zsd hr0mxilRM9XwJPu3Cvozsiy5ehSBh6dbVEO9yzNaqQpKLtRFjKyxodsMCKSCDtI6 unMlfpkdEQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFPAPHbIS9B5R5cHFaUbBmM1z auhxMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzMyMTgxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaOoXAwQAaOqSMA0GCSqGSIb3DQEB CwUAA4IBAQBd7ZWEwHGGyvIYHMO2G5NIHYtarAJ3HPyQxqgqWGDOsrMjZB/DKY1n w75by/oJ5V0zRqMn1pTmfw8UovNA60nLKvWQpgWmvqz3AjRv5DNXuLklUJ3az2/c ld+g4CIjMPls54L+hOtpEb9Asx88S3fdxrv9bgCXxszyvwBIn4SstSTsPC8etqzm F155jbStusIaYYC3V30PXtSC9uVtXfNfD4COTamyE2vJAds/1Ao511HFu8yNWJO5 e+EIz4ZXQGNMPx2tk14qgnYw+xRdIHB8T3gzy03PGY9nmAGRDHMFcndgdeGcvDxm Wc2Gl/kzgRNDlpMnDqeuGew2/Dhoia/a -----END CERTIFICATE-----Generated at Fri Dec 19 17:22:23 2025 by rpki-client