This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS20473.roa File: AS20473.roa (raw, json) Hash identifier: dkchkOPGX580OUig1YLuxdfy8sZ+RLOcrY4Jhnx11BU= Subject key identifier: 86:B5:23:90:0D:FB:FF:48:4A:4E:CA:B0:AD:E6:46:D0:2B:FF:01:E5 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 6B9B91F0C3060F1586A2BF1ED25821B8765ED32D Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS20473.roa Signing time: Thu 18 Dec 2025 01:31:17 +0000 ROA not before: Thu 18 Dec 2025 01:26:17 +0000 ROA not after: Thu 17 Dec 2026 01:31:17 +0000 asID: 20473 IP address blocks: 103.214.69.0/24 maxlen: 24 2a06:1287::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9b:91:f0:c3:06:0f:15:86:a2:bf:1e:d2:58:21:b8:76:5e:d3:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Dec 18 01:26:17 2025 GMT Not After : Dec 17 01:31:17 2026 GMT Subject: CN=86B523900DFBFF484A4ECAB0ADE646D02BFF01E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:0f:c3:2e:22:24:dc:82:33:65:30:0f:c5: 4c:d3:67:62:2c:52:7b:75:86:81:01:26:8f:bf:aa: e9:fe:b9:24:4a:3e:0e:91:45:77:c1:1c:05:9e:ac: a7:d7:f1:cc:d2:29:16:c4:cf:38:e8:d3:fb:91:ce: d0:08:eb:c9:dd:c6:44:72:0a:b5:d4:d9:29:17:c7: d7:20:02:e4:dc:2d:0d:bb:c5:54:74:e7:ba:15:e1: 8c:e4:9b:db:eb:4e:7a:97:99:82:d7:5a:57:c0:ed: 38:54:9a:33:07:e8:33:69:b3:05:d6:ce:f9:5a:da: a9:c9:41:5c:4b:ab:94:53:f3:84:ef:fb:45:6a:2a: f9:13:26:25:62:3b:62:09:e4:4c:42:3c:bf:dc:29: 60:96:53:ce:7a:c7:f2:8d:43:28:4a:e7:5f:55:71: 69:f7:9e:1a:59:fc:21:16:d0:a7:fd:e4:74:d2:7e: 89:b5:47:88:42:9c:1c:58:6a:7a:ce:66:5c:7a:e8: 1d:4a:22:8b:b0:05:75:31:ad:5c:fd:ef:a7:73:c0: 72:c6:3d:89:62:f6:22:9e:f1:8f:f8:5c:4a:42:4f: e7:c9:e7:44:7c:3e:7e:d5:e7:65:a2:a1:3f:68:08: 0a:c2:0f:86:9b:5c:3e:98:5a:c9:82:6a:cc:3e:4f: c7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B5:23:90:0D:FB:FF:48:4A:4E:CA:B0:AD:E6:46:D0:2B:FF:01:E5 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS20473.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.214.69.0/24 IPv6: 2a06:1287::/32 Signature Algorithm: sha256WithRSAEncryption 4b:3a:bc:5c:d7:bb:07:64:42:c7:fc:25:c6:c8:50:8b:de:39: 3e:83:50:9e:d3:18:80:0b:d1:de:1b:ad:57:24:93:96:70:d9: 76:b2:92:7e:ef:a0:9d:7e:01:98:bb:29:da:a8:f6:47:27:3a: de:0e:3f:64:71:bd:b8:e1:aa:23:1b:aa:73:03:ef:8b:7b:79: cf:6f:7e:35:83:15:53:d2:36:12:16:e2:72:e0:8d:e8:a4:9b: 53:26:9a:2a:a8:b4:24:0a:ad:e9:63:ce:f0:7b:ca:67:23:04: 25:56:7a:11:92:bb:b0:5d:1d:bb:a2:b1:7e:d2:10:6b:6a:87: 22:55:b0:67:0f:26:86:76:4e:4c:8f:d2:86:28:ab:aa:94:10: 06:48:2b:6b:c5:d2:37:54:22:94:1a:2a:cd:fe:5d:6f:50:ab: 8b:0f:56:1f:b5:4d:40:84:4d:a1:3d:2a:33:bb:08:d9:91:3b: ed:36:4e:00:85:eb:d5:1c:ab:da:92:3e:8f:48:80:1f:56:78: a3:1e:2a:e7:47:bf:ee:54:4e:b7:7d:8f:6d:57:6b:84:61:d5: 77:f8:32:83:a5:13:83:a9:81:57:f6:24:ee:b9:e8:3e:cf:67: d4:b8:28:6f:04:8b:de:93:36:f6:85:10:c5:89:80:96:c5:31: b7:a4:ab:e2 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUa5uR8MMGDxWGor8e0lghuHZe0y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTEyMTgwMTI2MTdaFw0yNjEyMTcwMTMxMTdaMDMxMTAvBgNV BAMTKDg2QjUyMzkwMERGQkZGNDg0QTRFQ0FCMEFERTY0NkQwMkJGRjAxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCioA/DLiIk3IIzZTAPxUzTZ2Is Unt1hoEBJo+/qun+uSRKPg6RRXfBHAWerKfX8czSKRbEzzjo0/uRztAI68ndxkRy CrXU2SkXx9cgAuTcLQ27xVR057oV4Yzkm9vrTnqXmYLXWlfA7ThUmjMH6DNpswXW zvla2qnJQVxLq5RT84Tv+0VqKvkTJiViO2IJ5ExCPL/cKWCWU856x/KNQyhK519V cWn3nhpZ/CEW0Kf95HTSfom1R4hCnBxYanrOZlx66B1KIouwBXUxrVz976dzwHLG PYli9iKe8Y/4XEpCT+fJ50R8Pn7V52WioT9oCArCD4abXD6YWsmCasw+T8cfAgMB AAGjggH9MIIB+TAdBgNVHQ4EFgQUhrUjkA37/0hKTsqwreZG0Cv/AeUwHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT MjA0NzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBABn1kUwDQQCAAIwBwMFACoGEocwDQYJKoZIhvcNAQEL BQADggEBAEs6vFzXuwdkQsf8JcbIUIveOT6DUJ7TGIAL0d4brVckk5Zw2Xaykn7v oJ1+AZi7Kdqo9kcnOt4OP2RxvbjhqiMbqnMD74t7ec9vfjWDFVPSNhIW4nLgjeik m1MmmiqotCQKreljzvB7ymcjBCVWehGSu7BdHbuisX7SEGtqhyJVsGcPJoZ2TkyP 0oYoq6qUEAZIK2vF0jdUIpQaKs3+XW9Qq4sPVh+1TUCETaE9KjO7CNmRO+02TgCF 69Ucq9qSPo9IgB9WeKMeKudHv+5UTrd9j21Xa4Rh1Xf4MoOlE4OpgVf2JO656D7P Z9S4KG8Ei96TNvaFEMWJgJbFMbekq+I= -----END CERTIFICATE-----Generated at Sat Dec 20 10:32:07 2025 by rpki-client