This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21769.roa
File:                     AS21769.roa (raw, json)
Hash identifier:          7TpuQOtrAsk5P+hba3Sct0FHo/9tyCivgoEgYAxKU3M=
Subject key identifier:   CD:69:98:CD:90:AA:5E:34:66:95:70:76:D6:D5:68:A4:F3:A6:E7:E1
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       7518D52B7C19B89C94A5B0097B062A8F53162E21
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21769.roa
Signing time:             Sun 16 Nov 2025 13:40:42 +0000
ROA not before:           Sun 16 Nov 2025 13:35:42 +0000
ROA not after:            Sun 15 Nov 2026 13:40:42 +0000
asID:                     21769
IP address blocks:        40.223.184.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Tue 18 Nov 2025 03:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:18:d5:2b:7c:19:b8:9c:94:a5:b0:09:7b:06:2a:8f:53:16:2e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Nov 16 13:35:42 2025 GMT
            Not After : Nov 15 13:40:42 2026 GMT
        Subject: CN=CD6998CD90AA5E3466957076D6D568A4F3A6E7E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:20:67:91:77:43:86:3f:a8:fa:74:d9:33:
                    45:27:9e:35:57:7a:b2:9f:39:1f:9a:11:20:e0:47:
                    c6:9c:87:35:26:df:54:f8:08:a3:21:2b:94:68:2d:
                    a7:b2:1f:1b:7e:a3:14:0c:8d:39:22:ef:f2:64:e7:
                    e6:87:1f:98:f8:b8:a2:e2:8b:4a:3e:61:68:ba:16:
                    e4:d1:e2:4e:8c:9a:c1:85:8c:23:d6:98:9c:ca:ea:
                    c6:07:9e:92:4a:d9:d4:94:7c:9f:a4:08:59:0b:40:
                    07:0e:b7:38:25:47:5e:bf:81:eb:5e:6a:b5:da:a8:
                    45:3d:9f:f1:16:24:5c:6a:77:85:68:bf:d7:0a:f9:
                    1e:13:7c:b1:fe:18:a9:a6:1e:47:a6:15:45:77:93:
                    56:e8:0b:b7:e8:02:bc:f0:89:02:6b:32:d2:e6:30:
                    86:04:15:8f:d3:ba:c2:10:89:8c:7a:2c:0a:91:b9:
                    78:d2:71:83:9e:e2:c1:ce:1b:3a:d7:97:29:64:5b:
                    c9:f7:c1:a2:11:b8:9c:e4:db:94:8e:06:24:db:2b:
                    b1:7e:47:d9:76:0f:95:19:93:76:28:0e:76:94:b5:
                    c9:9a:cb:87:1f:87:47:a8:6e:b7:9d:49:04:ae:95:
                    ad:a4:ea:b4:1e:95:7f:a1:98:9d:fa:fb:f3:4b:1b:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:69:98:CD:90:AA:5E:34:66:95:70:76:D6:D5:68:A4:F3:A6:E7:E1
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21769.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:27:8c:58:cc:be:fb:15:85:73:9b:e8:29:52:88:04:5d:17:
         4a:f9:9b:02:7c:c6:ec:43:f3:30:a6:17:09:8b:d2:1a:0a:f5:
         21:1b:27:c3:50:eb:14:97:db:69:39:48:7d:e9:03:78:ec:23:
         fc:9a:e6:c7:26:ad:03:9b:31:d8:f8:45:87:94:e2:a4:d9:75:
         c5:5b:2a:18:98:a4:3f:9c:0f:ba:72:ad:3b:f1:cd:b9:1c:a8:
         45:d4:05:09:0e:a3:f6:e1:20:c8:d0:a3:a1:60:14:b4:60:ee:
         a4:db:81:34:79:db:c0:8e:90:f9:d1:85:f6:10:bb:51:20:aa:
         83:ea:28:7e:e8:0e:9b:35:94:2e:ff:10:88:68:96:fb:5b:79:
         9a:ef:08:05:0b:43:63:06:be:05:d3:f5:75:de:6c:de:4a:e6:
         1d:6e:6d:84:82:19:45:e9:a7:4f:67:1b:c0:f7:aa:3d:c1:1d:
         a8:74:6e:73:fc:46:2d:f0:c1:64:ff:c6:77:79:1a:19:b5:62:
         a0:e2:cc:69:ad:01:59:da:aa:1f:8f:2d:86:c9:3b:d6:e6:c2:
         c0:05:66:0e:02:13:bb:05:d1:b3:78:bf:1a:28:f0:7b:6e:c9:
         98:a2:09:62:86:32:a1:50:66:3e:cb:5a:44:9c:f6:49:22:c7:
         2d:a2:f0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----