This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: by23+dfwo9rdvTcG6LbUJdNy62zGFlaRtnYksgRN/Hw= Subject key identifier: CF:A1:CB:20:32:E7:09:ED:A6:4D:C6:69:9B:A0:90:90:3F:2A:80:22 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 50D89BD42C8169FAABD75DF8D8C3835679C13435 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa Signing time: Sat 13 Dec 2025 03:33:07 +0000 ROA not before: Sat 13 Dec 2025 03:28:07 +0000 ROA not after: Sat 12 Dec 2026 03:33:07 +0000 asID: 40676 IP address blocks: 40.27.2.0/24 maxlen: 24 40.27.3.0/24 maxlen: 24 40.27.6.0/23 maxlen: 24 40.27.68.0/22 maxlen: 24 40.27.80.0/22 maxlen: 24 40.27.84.0/22 maxlen: 24 40.27.89.0/24 maxlen: 24 40.27.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 20:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d8:9b:d4:2c:81:69:fa:ab:d7:5d:f8:d8:c3:83:56:79:c1:34:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Dec 13 03:28:07 2025 GMT Not After : Dec 12 03:33:07 2026 GMT Subject: CN=CFA1CB2032E709EDA64DC6699BA090903F2A8022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:42:0e:0c:0e:ae:f0:12:a1:fa:e7:3c:5d:73: 09:5d:69:ee:5b:93:0d:be:1b:4a:90:67:ff:b1:2d: f3:6e:da:c1:0f:9b:a3:0b:07:a7:9b:48:1d:ec:fc: fd:ba:f0:2a:5c:a7:f7:f8:71:d1:92:c4:a6:ba:1e: 6e:17:04:c9:f0:5a:66:12:22:16:ea:07:9b:09:e1: c1:e0:0a:2c:20:5a:11:81:64:80:df:a6:8d:30:f9: 9f:b6:16:3e:b1:2f:39:15:62:d0:23:5a:d9:2c:87: 53:97:41:7b:50:07:74:7d:a5:7c:ad:d1:28:f8:33: 8a:8e:d0:41:40:eb:ea:ec:02:48:7e:96:2d:c4:53: d0:55:75:5a:81:c5:13:d7:5a:b3:e3:6b:2e:43:8f: c3:6b:a0:04:eb:45:24:83:f2:e5:89:ee:2e:ec:b4: 60:6b:51:2c:0f:fe:8b:fb:58:a2:d8:1e:2e:96:d5: ee:06:78:21:b8:c8:1a:3e:ab:bc:29:85:18:5a:08: 77:ef:85:02:26:de:ef:07:88:3d:9c:f7:f1:da:14: 57:64:50:95:f6:c2:12:c3:ab:10:a8:6e:6a:0f:e7: 62:49:2f:29:f7:78:d1:b9:7d:0e:41:b1:22:4a:7b: b8:77:58:6e:db:53:04:4d:a9:2a:f0:8e:b1:f6:e3: 7a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A1:CB:20:32:E7:09:ED:A6:4D:C6:69:9B:A0:90:90:3F:2A:80:22 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.2.0/23 40.27.6.0/23 40.27.68.0/22 40.27.80.0/21 40.27.89.0/24 40.27.164.0/22 Signature Algorithm: sha256WithRSAEncryption 75:e3:5e:c9:79:e4:1d:15:9d:6b:d7:17:04:2f:6b:26:dd:0e: d5:e0:d1:53:04:f0:bc:64:0b:fa:55:f5:69:83:f5:cf:b9:4b: 82:3c:4c:2d:52:62:2a:9c:8d:dc:b8:dc:d3:0c:3e:ff:ae:48: 03:dd:1b:0c:ef:b3:31:60:2f:28:7c:de:a4:57:b6:05:00:e3: 6a:69:b2:8b:ef:22:0e:07:25:2a:a3:f4:cf:99:7a:44:6d:33: e4:cc:c8:c4:87:90:d0:c9:dd:1e:33:cf:3a:c4:ee:94:c0:86: f9:53:b2:4b:2f:11:01:3e:5a:bb:21:f3:71:ac:21:bd:42:cf: 0f:3d:4b:78:87:aa:c9:52:64:30:3b:43:50:4d:65:cb:bc:66: 9d:8f:36:86:bd:66:04:db:b9:87:a7:2d:8f:75:4b:d9:86:b1: 69:5c:e9:71:c1:50:42:32:53:35:4f:75:f9:e1:05:9e:a4:b9: 00:74:e3:aa:cb:a6:8e:a7:ae:44:d3:45:4e:32:34:b4:23:f8: 66:a3:74:23:bd:52:d0:27:6e:d0:92:ae:c6:bf:11:c8:49:9b: ef:8c:98:94:a4:e2:54:df:78:76:cc:c6:3b:8d:98:4f:da:3f: 56:c4:fb:eb:2a:52:7f:01:97:a6:e4:be:fb:bc:44:14:a4:2a: c9:39:4f:39 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUUNib1CyBafqr11342MODVnnBNDUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMjEzMDMyODA3WhcNMjYxMjEyMDMzMzA3 WjAzMTEwLwYDVQQDEyhDRkExQ0IyMDMyRTcwOUVEQTY0REM2Njk5QkEwOTA5MDNG MkE4MDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUIODA6u8BKh +uc8XXMJXWnuW5MNvhtKkGf/sS3zbtrBD5ujCwenm0gd7Pz9uvAqXKf3+HHRksSm uh5uFwTJ8FpmEiIW6gebCeHB4AosIFoRgWSA36aNMPmfthY+sS85FWLQI1rZLIdT l0F7UAd0faV8rdEo+DOKjtBBQOvq7AJIfpYtxFPQVXVagcUT11qz42suQ4/Da6AE 60Ukg/Llie4u7LRga1EsD/6L+1ii2B4ultXuBnghuMgaPqu8KYUYWgh374UCJt7v B4g9nPfx2hRXZFCV9sISw6sQqG5qD+diSS8p93jRuX0OQbEiSnu4d1hu21METakq 8I6x9uN6yQIDAQABo4ICnDCCApgwHQYDVR0OBBYEFM+hyyAy5wntpk3GaZugkJA/ KoAiMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBKBsCAwQBKBsGAwQCKBtEAwQDKBtQ AwQAKBtZAwQCKBukMA0GCSqGSIb3DQEBCwUAA4IBAQB1417JeeQdFZ1r1xcEL2sm 3Q7V4NFTBPC8ZAv6VfVpg/XPuUuCPEwtUmIqnI3cuNzTDD7/rkgD3RsM77MxYC8o fN6kV7YFAONqabKL7yIOByUqo/TPmXpEbTPkzMjEh5DQyd0eM886xO6UwIb5U7JL LxEBPlq7IfNxrCG9Qs8PPUt4h6rJUmQwO0NQTWXLvGadjzaGvWYE27mHpy2PdUvZ hrFpXOlxwVBCMlM1T3X54QWepLkAdOOqy6aOp65E00VOMjS0I/hmo3QjvVLQJ27Q kq7GvxHISZvvjJiUpOJU33h2zMY7jZhP2j9WxPvrKlJ/AZem5L77vEQUpCrJOU85 -----END CERTIFICATE-----Generated at Mon Dec 15 19:56:09 2025 by rpki-client