This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214809.roa
File: AS214809.roa (raw, json)
Hash identifier: oou/mtJuctpEGd6pzFOXhCxYxYSgxET3VNN0vt3wWwU=
Subject key identifier: 05:64:DD:E5:6A:2A:1F:24:6E:61:37:F7:C5:91:4E:0E:F5:22:B6:17
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 1E8BF76109487655A65E7DAC9D6A0EBDAB4EFB02
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214809.roa
Signing time: Mon 15 Dec 2025 09:43:03 +0000
ROA not before: Mon 15 Dec 2025 09:38:03 +0000
ROA not after: Mon 14 Dec 2026 09:43:03 +0000
asID: 214809
IP address blocks: 103.139.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:8b:f7:61:09:48:76:55:a6:5e:7d:ac:9d:6a:0e:bd:ab:4e:fb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Dec 15 09:38:03 2025 GMT
Not After : Dec 14 09:43:03 2026 GMT
Subject: CN=0564DDE56A2A1F246E6137F7C5914E0EF522B617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:9e:42:c5:fa:3b:89:55:0b:f5:38:51:8a:
af:4b:7b:5d:ac:49:ab:7f:16:38:dd:57:69:91:48:
df:48:43:0b:67:c1:42:24:55:2c:e1:71:65:06:47:
94:97:2c:b2:6d:6c:b0:49:fc:f7:4c:93:64:36:31:
b5:60:d0:07:3c:65:72:8a:e1:0d:9b:0c:27:97:8c:
17:3c:30:32:01:6c:14:e9:c5:c5:cf:17:5d:d0:e6:
ee:4b:d1:b1:63:e4:0b:92:02:b8:08:08:c0:69:7f:
0f:04:c1:3a:de:bc:81:1c:40:52:3d:8d:87:45:82:
bf:6f:a8:13:63:03:8d:9c:55:61:f3:d6:52:7c:db:
d0:8a:50:cc:d5:7e:cf:92:27:96:fe:4e:aa:10:81:
b1:bd:7d:17:2f:0c:0b:e2:14:11:52:a2:3b:e3:40:
f6:f0:f5:32:77:d2:50:0b:62:ad:2f:02:2a:8c:29:
1c:c8:35:b2:e5:42:9e:0e:91:32:ea:36:33:cd:79:
bb:30:28:bc:49:26:e0:fd:86:92:dc:33:78:78:51:
25:f8:5d:d5:e8:c3:7b:f0:c2:98:2d:59:2e:80:51:
3a:d4:57:cf:5c:cc:46:0e:4e:64:b6:25:4b:11:a4:
b9:5c:1e:6c:c7:db:f8:23:68:fb:21:53:3a:51:32:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:64:DD:E5:6A:2A:1F:24:6E:61:37:F7:C5:91:4E:0E:F5:22:B6:17
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS214809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.139.88.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ca:ee:5e:67:03:8f:e0:ff:3a:ae:88:81:f3:9d:61:57:76:
3f:90:6a:f3:2b:16:45:9e:d8:ca:fb:fd:1b:79:d0:82:04:67:
4f:97:b1:2c:f0:ba:90:ce:4e:17:5c:e5:98:55:2d:94:d0:cb:
8a:b5:23:fb:fb:39:3f:3a:57:80:d6:95:b9:82:18:c1:8c:d8:
dd:1e:20:16:15:e6:dd:ad:95:57:dd:1e:a0:a0:77:43:d5:24:
14:8c:2c:bf:cf:2d:6e:67:af:67:7b:b5:5a:b3:fa:de:1b:e2:
52:4d:40:c3:85:b9:f8:41:00:f3:75:f3:00:f5:00:00:71:84:
3a:4f:48:a3:91:23:46:2d:06:21:20:4e:19:1c:b0:b4:a5:a9:
a7:8d:2b:8f:38:75:5f:04:dd:3e:1e:3e:79:9b:40:3e:31:b0:
bd:f1:d3:7f:ef:ca:c2:28:34:15:33:72:23:51:db:bb:d7:94:
71:d6:5a:46:f0:c0:77:80:3e:9d:00:ae:c9:33:f7:17:0c:56:
ed:8d:af:3e:a9:a9:89:3e:65:1f:7b:78:42:5a:11:b4:ae:36:
71:a0:72:e3:20:8c:3d:9d:42:9d:a0:15:c9:b0:a4:47:e4:2d:
d5:08:4a:14:53:72:e0:cc:af:68:b6:69:63:6b:aa:bd:3b:06:
5b:dc:27:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 17:11:17 2025 by rpki-client