This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: Ngg0c1MpPkEBXk00ec9ZU8iZwWb8POTLjXRnNZghaVY= Subject key identifier: 0A:7D:DF:EE:CE:51:96:C6:B2:02:5F:E1:57:8A:E7:A8:74:6A:1F:D5 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 20261F044E6B7FFEA528E4D04B5157108A132ECE Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS25198.roa Signing time: Fri 19 Dec 2025 06:57:40 +0000 ROA not before: Fri 19 Dec 2025 06:52:40 +0000 ROA not after: Fri 18 Dec 2026 06:57:40 +0000 asID: 25198 IP address blocks: 157.254.191.0/24 maxlen: 24 157.254.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 10:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:26:1f:04:4e:6b:7f:fe:a5:28:e4:d0:4b:51:57:10:8a:13:2e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Dec 19 06:52:40 2025 GMT Not After : Dec 18 06:57:40 2026 GMT Subject: CN=0A7DDFEECE5196C6B2025FE1578AE7A8746A1FD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:60:d7:f6:55:61:4f:2e:f9:ac:2d:53:22:44: 07:69:8d:d9:6f:5a:14:06:5c:59:df:ba:68:f4:aa: 4d:57:f9:2f:45:49:f3:4b:c2:f2:3b:0e:d6:23:e8: 8d:2e:12:7a:fd:e0:44:15:cd:bc:34:6b:c0:ca:12: 7f:8d:a9:df:0f:86:fc:99:a0:30:68:b4:76:72:68: 7a:56:84:c9:a4:33:17:11:a7:0a:1c:aa:fc:4a:3c: 0e:c5:91:31:1c:f7:f4:ca:33:ff:fc:6e:80:3d:da: e1:fa:ae:1d:c5:8b:7b:76:5f:ce:2a:22:ba:12:ce: 9e:31:88:2f:8b:f8:2b:ee:29:68:b6:43:1d:e0:c5: 4b:e5:7a:e0:ad:69:32:06:27:11:06:c2:68:e3:ab: b4:15:e4:25:49:02:81:2a:bc:7a:fe:c2:07:ee:ca: 98:4e:42:78:09:52:b9:3d:e5:ae:0c:81:4d:b9:a9: da:ee:3f:77:20:8d:24:89:26:27:db:d0:a3:9c:5e: 35:17:34:1f:b4:14:cd:14:d8:42:03:1e:af:53:32: 99:7b:30:4d:e3:fc:c9:dd:96:52:de:e8:6e:80:ef: 62:22:35:9e:94:4e:9c:64:00:e2:d1:94:14:60:2a: 75:d2:21:92:7b:4e:78:59:93:8b:b5:78:b3:8b:75: 8c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7D:DF:EE:CE:51:96:C6:B2:02:5F:E1:57:8A:E7:A8:74:6A:1F:D5 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.191.0/24 157.254.218.0/24 Signature Algorithm: sha256WithRSAEncryption 35:a7:f0:17:5f:77:0f:61:07:cb:f8:81:e5:b8:1f:30:93:1c: 13:a1:9a:25:27:53:1a:e3:f8:8c:4b:70:83:31:bb:71:10:72: c5:3b:99:94:43:6d:ac:5c:3a:17:ec:c8:a4:3e:a7:d7:75:31: 6b:ca:d1:57:2c:92:c7:1f:b1:76:c4:2f:2f:5c:f7:06:0d:c6: 8c:a8:c8:fe:8e:14:fd:1b:71:0f:88:f0:0c:c1:8e:9a:99:12: b5:11:13:19:ac:b8:63:21:69:f7:b7:8e:84:0f:03:ba:9a:05: 2c:14:91:88:53:1d:01:31:3d:be:b7:d1:8e:1f:b1:7c:e7:27: b3:23:07:9e:4a:1b:6c:7b:7c:21:c9:8a:e6:0e:4f:d9:ec:e2: fe:e1:3c:ee:88:44:44:a8:8b:a7:c2:1b:48:70:5b:e8:dc:01: ca:9b:5c:68:26:5c:9b:12:c7:09:32:7f:c1:23:ce:c7:7c:95: be:b9:34:a2:4c:47:b5:18:6a:15:b6:d4:ea:a0:11:4f:46:f6: aa:63:90:9e:80:62:a5:25:73:ab:64:45:15:b4:54:b9:46:5d: 76:df:1d:18:39:04:54:60:ad:59:27:ae:9a:5c:14:03:59:91: 2d:b4:67:e6:11:20:b4:6f:68:04:4d:69:79:86:6a:00:02:16: 75:7b:03:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUICYfBE5rf/6lKOTQS1FXEIoTLs4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUxMjE5MDY1MjQwWhcNMjYxMjE4MDY1NzQw WjAzMTEwLwYDVQQDEygwQTdEREZFRUNFNTE5NkM2QjIwMjVGRTE1NzhBRTdBODc0 NkExRkQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mDX9lVhTy75 rC1TIkQHaY3Zb1oUBlxZ37po9KpNV/kvRUnzS8LyOw7WI+iNLhJ6/eBEFc28NGvA yhJ/janfD4b8maAwaLR2cmh6VoTJpDMXEacKHKr8SjwOxZExHPf0yjP//G6APdrh +q4dxYt7dl/OKiK6Es6eMYgvi/gr7ilotkMd4MVL5XrgrWkyBicRBsJo46u0FeQl SQKBKrx6/sIH7sqYTkJ4CVK5PeWuDIFNuana7j93II0kiSYn29CjnF41FzQftBTN FNhCAx6vUzKZezBN4/zJ3ZZS3uhugO9iIjWelE6cZADi0ZQUYCp10iGSe054WZOL tXizi3WMiQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFAp93+7OUZbGsgJf4VeK56h0 ah/VMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnf6/AwQAnf7aMA0GCSqGSIb3DQEB CwUAA4IBAQA1p/AXX3cPYQfL+IHluB8wkxwToZolJ1Ma4/iMS3CDMbtxEHLFO5mU Q22sXDoX7MikPqfXdTFrytFXLJLHH7F2xC8vXPcGDcaMqMj+jhT9G3EPiPAMwY6a mRK1ERMZrLhjIWn3t46EDwO6mgUsFJGIUx0BMT2+t9GOH7F85yezIweeShtse3wh yYrmDk/Z7OL+4TzuiEREqIunwhtIcFvo3AHKm1xoJlybEscJMn/BI87HfJW+uTSi TEe1GGoVttTqoBFPRvaqY5CegGKlJXOrZEUVtFS5Rl123x0YOQRUYK1ZJ66aXBQD WZEttGfmESC0b2gETWl5hmoAAhZ1ewPl -----END CERTIFICATE-----Generated at Sat Dec 20 12:49:45 2025 by rpki-client