This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212995.roa File: AS212995.roa (raw, json) Hash identifier: 5jThcN0GzXLSojeWRdvVE01JXQGqrivjWG+0t/99KJo= Subject key identifier: 67:7B:8F:29:91:16:9A:EF:08:3F:C3:37:4C:11:AE:54:82:29:85:48 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 5F7CD1202800720B97C3826C7C72DB14BB85430D Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212995.roa Signing time: Wed 17 Dec 2025 00:48:42 +0000 ROA not before: Wed 17 Dec 2025 00:43:42 +0000 ROA not after: Wed 16 Dec 2026 00:48:42 +0000 asID: 212995 IP address blocks: 2a06:a005:4a0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7c:d1:20:28:00:72:0b:97:c3:82:6c:7c:72:db:14:bb:85:43:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Dec 17 00:43:42 2025 GMT Not After : Dec 16 00:48:42 2026 GMT Subject: CN=677B8F2991169AEF083FC3374C11AE5482298548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ff:63:85:ad:3f:40:24:28:eb:62:a7:22:55: 9f:c0:8f:25:f7:7b:ed:d2:a7:78:07:fe:24:f0:f8: e7:34:4e:76:05:d4:19:c5:bf:e8:90:fc:7f:09:e9: 5e:a5:b2:da:a5:41:a1:7b:eb:5c:2e:34:f5:3c:04: fb:91:ca:2c:65:a2:f3:93:c9:b0:7e:03:46:07:80: 0b:d2:bc:48:82:41:a7:4d:2f:84:c1:80:71:48:01: 9e:fa:0c:bc:4b:d0:0f:cf:cf:a8:6c:bc:58:85:f3: 53:c1:af:03:b5:c5:67:a2:64:63:62:9f:c6:4e:1e: ea:4c:d1:5a:8b:43:65:d9:a0:64:45:14:41:47:69: fe:3b:ba:68:39:31:06:4e:1e:99:57:99:04:61:fc: d3:1c:fe:16:0d:13:e9:86:78:ea:0d:3b:3f:2c:c4: 4e:fe:5a:7c:45:2b:6c:79:55:b4:4a:6d:ea:f9:0e: 26:1c:1f:5f:a9:ba:f9:d9:1f:98:c8:50:7b:b2:94: 90:aa:ed:24:f2:6a:a4:a9:a4:b5:2c:69:06:2e:62: 94:52:d4:69:c2:ad:2a:a3:f3:45:cf:d9:ba:59:16: 55:0e:0f:10:db:7c:50:7c:5e:e5:2c:bf:c0:ce:c6: 07:2f:6e:bb:08:f7:9c:31:78:3e:05:11:d1:98:c4: c6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7B:8F:29:91:16:9A:EF:08:3F:C3:37:4C:11:AE:54:82:29:85:48 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212995.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a005:4a0::/44 Signature Algorithm: sha256WithRSAEncryption bc:c7:55:05:2b:b7:25:ad:f6:32:cf:0f:8b:6a:ad:5b:f3:5d: 4b:60:a0:f1:87:73:c7:02:e9:ee:6b:91:80:83:c3:9f:77:73: cb:2e:29:ec:94:4f:3d:44:fc:e8:e2:4b:66:30:2c:78:e1:3c: 1b:d6:ae:c1:81:af:64:ee:69:90:d6:89:c6:e0:8c:f4:08:1e: b5:af:cb:9b:3f:a8:1f:91:fd:e6:b3:54:d3:1c:9f:f2:91:47: e5:4b:92:9d:d5:b6:c0:6e:24:04:93:08:ef:03:68:74:07:f0: 47:05:40:33:62:22:56:97:75:53:15:06:a9:5a:aa:f6:7a:ce: ac:9d:67:b2:9e:7a:1b:07:0a:e5:19:07:64:19:30:27:ed:8a: 9d:42:4d:51:8e:c1:e0:03:72:31:a8:2b:73:87:ae:38:83:ae: 08:10:50:b6:f4:d7:3a:e9:3b:7a:42:96:6c:22:a4:bf:38:22: a4:b3:15:f1:50:3e:aa:4d:da:9e:64:06:86:af:21:e2:95:09: f2:7d:21:1d:25:56:44:ae:c6:ba:a5:f7:a4:61:3c:78:9b:cd: 08:95:e6:14:59:42:5d:fa:6d:cc:a4:89:ec:29:a1:bd:9a:bc: a9:e8:9d:cf:f1:c4:70:dc:70:0e:57:c0:7b:8a:9a:45:39:1c: 28:d6:06:c7 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUX3zRICgAcguXw4JsfHLbFLuFQw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTEyMTcwMDQzNDJaFw0yNjEyMTYwMDQ4NDJaMDMxMTAvBgNV BAMTKDY3N0I4RjI5OTExNjlBRUYwODNGQzMzNzRDMTFBRTU0ODIyOTg1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW/2OFrT9AJCjrYqciVZ/AjyX3 e+3Sp3gH/iTw+Oc0TnYF1BnFv+iQ/H8J6V6lstqlQaF761wuNPU8BPuRyixlovOT ybB+A0YHgAvSvEiCQadNL4TBgHFIAZ76DLxL0A/Pz6hsvFiF81PBrwO1xWeiZGNi n8ZOHupM0VqLQ2XZoGRFFEFHaf47umg5MQZOHplXmQRh/NMc/hYNE+mGeOoNOz8s xE7+WnxFK2x5VbRKber5DiYcH1+puvnZH5jIUHuylJCq7STyaqSppLUsaQYuYpRS 1GnCrSqj80XP2bpZFlUODxDbfFB8XuUsv8DOxgcvbrsI95wxeD4FEdGYxMaXAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUZ3uPKZEWmu8IP8M3TBGuVIIphUgwHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT MjEyOTk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH AQH/BBMwETAPBAIAAjAJAwcEKgagBQSgMA0GCSqGSIb3DQEBCwUAA4IBAQC8x1UF K7clrfYyzw+Laq1b811LYKDxh3PHAunua5GAg8Ofd3PLLinslE89RPzo4ktmMCx4 4Twb1q7Bga9k7mmQ1onG4Iz0CB61r8ubP6gfkf3ms1TTHJ/ykUflS5Kd1bbAbiQE kwjvA2h0B/BHBUAzYiJWl3VTFQapWqr2es6snWeynnobBwrlGQdkGTAn7YqdQk1R jsHgA3IxqCtzh644g64IEFC29Nc66Tt6QpZsIqS/OCKksxXxUD6qTdqeZAaGryHi lQnyfSEdJVZErsa6pfekYTx4m80IleYUWUJd+m3MpInsKaG9mryp6J3P8cRw3HAO V8B7ippFORwo1gbH -----END CERTIFICATE-----Generated at Sun Dec 21 01:16:01 2025 by rpki-client