This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208328.roa File: AS208328.roa (raw, json) Hash identifier: unJCedUOUYbhn5tI5edgr8S/gPFsz5p6olbCtNHLFBg= Subject key identifier: CF:B9:84:00:25:56:84:80:47:06:90:FF:CE:8D:72:81:CB:08:04:31 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 2F41EAB65B439E5962434793241BE1553CD34398 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208328.roa Signing time: Sat 20 Dec 2025 15:19:18 +0000 ROA not before: Sat 20 Dec 2025 15:14:18 +0000 ROA not after: Sat 19 Dec 2026 15:19:18 +0000 asID: 208328 IP address blocks: 85.155.148.0/24 maxlen: 24 85.155.149.0/24 maxlen: 24 85.155.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:41:ea:b6:5b:43:9e:59:62:43:47:93:24:1b:e1:55:3c:d3:43:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Dec 20 15:14:18 2025 GMT Not After : Dec 19 15:19:18 2026 GMT Subject: CN=CFB9840025568480470690FFCE8D7281CB080431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:5c:c5:6b:27:fb:b8:a0:53:2c:17:0d:56: d5:6c:83:82:15:57:c7:42:f0:85:57:90:75:10:38: ca:93:15:26:2e:f4:5f:dd:e1:27:ad:d6:21:9d:a0: 44:73:18:b9:e0:96:e9:93:d5:80:b4:55:39:cd:86: 31:83:ad:c9:ea:cc:01:7e:bd:4a:b7:89:03:28:82: 96:15:67:78:f0:a7:9a:a3:74:8b:71:91:b5:08:78: c3:b9:49:ce:45:73:ab:9d:cf:a3:e1:86:62:97:3c: 16:fa:80:8d:a1:dc:de:26:47:3f:37:98:ef:c2:24: c9:93:12:e6:c3:fe:bf:1d:d4:71:ae:8b:0e:64:ad: 4e:3f:de:3c:dd:2f:bc:68:b9:88:57:58:07:df:3e: a0:3a:fc:fd:33:8c:bc:d8:e6:48:76:18:96:29:04: d7:17:4b:c3:26:38:de:cc:47:67:83:38:f1:2a:e8: 81:bb:c8:d0:e6:94:a1:56:ef:a4:ec:9c:a6:6d:10: 9e:dd:79:13:77:e3:53:87:53:68:43:17:0f:ec:3b: a7:bd:6b:e5:55:78:91:1e:62:c0:9e:2b:3e:49:79: f8:75:bd:3b:1a:8c:55:dc:42:31:b2:bc:1d:48:98: e2:b0:b6:d4:9a:79:ae:99:41:a6:6b:c5:bf:c7:de: 87:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B9:84:00:25:56:84:80:47:06:90:FF:CE:8D:72:81:CB:08:04:31 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS208328.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.155.148.0/23 85.155.151.0/24 Signature Algorithm: sha256WithRSAEncryption 59:72:76:1b:50:9e:14:45:22:c7:69:47:c6:0c:60:93:d3:e8: 76:5d:c5:6c:bb:80:d6:3a:b7:4a:d5:1a:77:8a:8b:28:bb:66: b3:47:b4:91:e2:ea:f6:3b:a2:b3:b2:1b:5d:69:a0:26:01:4d: ce:cf:63:8a:2b:b3:f4:37:40:f1:fe:bd:be:cb:f4:32:63:8a: 78:ea:7f:d0:53:4a:96:5d:cb:2c:b8:f6:bb:6e:78:f2:14:22: d8:c1:a4:4e:aa:16:43:88:80:bf:33:52:72:b2:e7:9c:06:b8: e1:e4:8e:44:a0:dd:69:a5:cb:3d:11:2c:3a:e0:6c:c6:61:16: 89:dd:e3:f4:ed:e1:82:fc:f9:35:06:0b:34:2c:f2:20:5e:55: 3b:63:36:50:3a:9b:4b:d1:e3:f5:43:94:73:fa:c6:43:f6:32: 8b:35:e7:ae:56:50:bb:01:30:88:07:e5:b6:a3:43:8f:ce:98: 91:6a:15:73:11:89:e9:e5:ca:0f:87:d9:de:e6:26:79:b0:ee: 3e:54:04:49:9d:2e:e7:dd:f0:e8:54:f0:b8:7c:ae:b3:bb:50: 17:7b:da:1e:42:50:31:54:6e:76:37:1b:a5:4c:9f:55:2b:11: 88:5d:8e:64:ff:37:86:67:15:14:8b:64:08:6e:28:6f:be:de: ee:68:ea:bf -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUL0HqtltDnlliQ0eTJBvhVTzTQ5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTEyMjAxNTE0MThaFw0yNjEyMTkxNTE5MThaMDMxMTAvBgNV BAMTKENGQjk4NDAwMjU1Njg0ODA0NzA2OTBGRkNFOEQ3MjgxQ0IwODA0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn71zFayf7uKBTLBcNVtVsg4IV V8dC8IVXkHUQOMqTFSYu9F/d4Set1iGdoERzGLnglumT1YC0VTnNhjGDrcnqzAF+ vUq3iQMogpYVZ3jwp5qjdItxkbUIeMO5Sc5Fc6udz6PhhmKXPBb6gI2h3N4mRz83 mO/CJMmTEubD/r8d1HGuiw5krU4/3jzdL7xouYhXWAffPqA6/P0zjLzY5kh2GJYp BNcXS8MmON7MR2eDOPEq6IG7yNDmlKFW76TsnKZtEJ7deRN341OHU2hDFw/sO6e9 a+VVeJEeYsCeKz5Jefh1vTsajFXcQjGyvB1ImOKwttSaea6ZQaZrxb/H3of9AgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUz7mEACVWhIBHBpD/zo1ygcsIBDEwHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT MjA4MzI4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEH AQH/BBYwFDASBAIAATAMAwQBVZuUAwQAVZuXMA0GCSqGSIb3DQEBCwUAA4IBAQBZ cnYbUJ4URSLHaUfGDGCT0+h2XcVsu4DWOrdK1Rp3iosou2azR7SR4ur2O6Kzshtd aaAmAU3Oz2OKK7P0N0Dx/r2+y/QyY4p46n/QU0qWXcssuPa7bnjyFCLYwaROqhZD iIC/M1JysuecBrjh5I5EoN1ppcs9ESw64GzGYRaJ3eP07eGC/Pk1Bgs0LPIgXlU7 YzZQOptL0eP1Q5Rz+sZD9jKLNeeuVlC7ATCIB+W2o0OPzpiRahVzEYnp5coPh9ne 5iZ5sO4+VARJnS7n3fDoVPC4fK6zu1AXe9oeQlAxVG52NxulTJ9VKxGIXY5k/zeG ZxUUi2QIbihvvt7uaOq/ -----END CERTIFICATE-----Generated at Sun Dec 21 03:20:44 2025 by rpki-client