This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400304.roa File: AS400304.roa (raw, json) Hash identifier: ei2knjgyJ5WU84OBf4Of7+QH3JJdjYlo30MqoYUuJwM= Subject key identifier: 42:A5:FA:E2:DB:F1:38:7D:14:73:4E:8C:D6:F9:91:0B:20:1F:FC:0A Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 15913E5AD129E8D2593A184076416D244B231CDF Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400304.roa Signing time: Tue 11 Nov 2025 18:58:19 +0000 ROA not before: Tue 11 Nov 2025 18:53:19 +0000 ROA not after: Tue 10 Nov 2026 18:58:19 +0000 asID: 400304 IP address blocks: 103.68.110.0/24 maxlen: 24 104.167.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:91:3e:5a:d1:29:e8:d2:59:3a:18:40:76:41:6d:24:4b:23:1c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Nov 11 18:53:19 2025 GMT Not After : Nov 10 18:58:19 2026 GMT Subject: CN=42A5FAE2DBF1387D14734E8CD6F9910B201FFC0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:cb:c0:a4:d7:58:be:fb:41:f7:54:f0:bf: bb:17:df:84:95:fb:e2:21:3c:c4:f2:b8:5e:0e:db: 60:fd:38:0f:29:d0:e3:ae:ec:30:06:9b:5d:01:b4: 8d:b1:06:f6:17:70:5d:fd:45:0a:88:77:4e:4e:ac: c5:0d:fe:8a:78:49:7b:71:a8:3c:7c:01:75:36:5a: 90:99:a3:cf:6a:c5:0d:7d:83:7c:b4:fc:cf:c4:67: e4:0b:79:b5:dd:07:91:1c:e7:a3:c1:60:c4:8e:14: 4e:66:91:43:c2:63:fd:26:81:62:d0:52:7d:be:f0: ba:b5:7c:f3:40:3a:6d:f5:70:e4:6d:29:69:7c:ce: 09:f5:33:ea:59:3e:1c:27:34:24:59:83:f4:9f:72: ad:c3:b4:0c:7a:9d:1e:f8:1a:95:bb:ae:1d:97:ff: bb:cd:0f:db:bc:5f:2e:61:c0:25:0e:b6:1d:88:5a: 19:72:73:be:54:2a:78:51:99:48:85:95:06:69:e7: 97:91:b3:07:d6:81:64:db:ee:52:d2:99:dd:f2:75: aa:be:88:9b:e9:4b:0f:d4:48:53:21:6d:59:85:90: 61:bd:79:0d:cd:ab:04:82:a3:2b:44:64:3b:f3:f0: 3d:e8:06:a4:8e:26:b4:9b:6f:06:d7:89:b0:14:ff: dc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:FA:E2:DB:F1:38:7D:14:73:4E:8C:D6:F9:91:0B:20:1F:FC:0A X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS400304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.110.0/24 104.167.17.0/24 Signature Algorithm: sha256WithRSAEncryption 77:e0:bf:9c:3d:4e:b5:5c:18:e6:e1:2e:83:1a:0e:7a:ba:06: 51:7e:dc:85:9c:c9:43:82:6d:41:13:50:2c:20:dc:08:83:51: 5e:98:65:53:62:ec:7a:df:cc:e6:be:4e:54:7e:6c:6c:0a:9d: 9e:2b:31:d7:cd:f2:d3:02:b3:09:b1:1e:ea:35:ca:bd:cc:53: 9c:3c:5a:84:f5:2b:79:af:fd:a1:97:b4:4a:d2:a4:64:4a:3f: 07:5c:11:b6:60:e3:10:b4:4d:11:e1:5b:b4:b9:16:b1:3c:36: 37:12:fc:8c:f1:5e:16:11:68:a7:2e:5a:95:29:99:06:15:0d: 05:1c:be:cc:35:f9:db:33:b7:0e:74:19:15:d7:6e:a3:b2:67: 98:55:b8:f1:b0:be:df:db:44:49:a7:a9:aa:b1:ca:bb:c1:5f: 4d:50:c4:10:c5:d0:d5:71:1b:7e:70:96:36:76:ab:a7:77:9c: d5:b9:81:c4:10:7c:c4:a9:ae:71:81:ab:d6:63:06:a1:97:db: 1c:fb:6c:2f:58:2e:4c:2b:20:02:24:55:c9:62:f9:36:b8:30: 75:40:7d:45:c7:6e:ec:87:3c:4a:c7:2e:50:f6:51:f8:92:1e: 76:23:61:2f:82:54:35:c2:d8:92:96:a8:be:c8:57:4a:ee:95: 03:bb:df:4e -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUFZE+WtEp6NJZOhhAdkFtJEsjHN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTExMTExODUzMTlaFw0yNjExMTAxODU4MTlaMDMxMTAvBgNV BAMTKDQyQTVGQUUyREJGMTM4N0QxNDczNEU4Q0Q2Rjk5MTBCMjAxRkZDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1P8vApNdYvvtB91Twv7sX34SV ++IhPMTyuF4O22D9OA8p0OOu7DAGm10BtI2xBvYXcF39RQqId05OrMUN/op4SXtx qDx8AXU2WpCZo89qxQ19g3y0/M/EZ+QLebXdB5Ec56PBYMSOFE5mkUPCY/0mgWLQ Un2+8Lq1fPNAOm31cORtKWl8zgn1M+pZPhwnNCRZg/Sfcq3DtAx6nR74GpW7rh2X /7vND9u8Xy5hwCUOth2IWhlyc75UKnhRmUiFlQZp55eRswfWgWTb7lLSmd3ydaq+ iJvpSw/USFMhbVmFkGG9eQ3NqwSCoytEZDvz8D3oBqSOJrSbbwbXibAU/9zbAgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQUQqX64tvxOH0Uc06M1vmRCyAf/AowHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT NDAwMzA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEH AQH/BBYwFDASBAIAATAMAwQAZ0RuAwQAaKcRMA0GCSqGSIb3DQEBCwUAA4IBAQB3 4L+cPU61XBjm4S6DGg56ugZRftyFnMlDgm1BE1AsINwIg1FemGVTYux638zmvk5U fmxsCp2eKzHXzfLTArMJsR7qNcq9zFOcPFqE9St5r/2hl7RK0qRkSj8HXBG2YOMQ tE0R4Vu0uRaxPDY3EvyM8V4WEWinLlqVKZkGFQ0FHL7MNfnbM7cOdBkV126jsmeY VbjxsL7f20RJp6mqscq7wV9NUMQQxdDVcRt+cJY2dqund5zVuYHEEHzEqa5xgavW Ywahl9sc+2wvWC5MKyACJFXJYvk2uDB1QH1Fx27shzxKxy5Q9lH4kh52I2EvglQ1 wtiSlqi+yFdK7pUDu99O -----END CERTIFICATE-----Generated at Sat Nov 22 21:48:31 2025 by rpki-client