This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS43641.roa
File: AS43641.roa (raw, json)
Hash identifier: NiRv+4QQz4FumckrhDfJb81xUawoEEj62xDpL7gJ9yI=
Subject key identifier: 69:B0:18:F9:D3:7F:44:5B:32:DA:43:E1:2B:1B:3B:A6:14:A4:FE:6F
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 61B4D787DB04BD8AA7945BDD4F2A5EAC46B92B06
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS43641.roa
Signing time: Mon 10 Nov 2025 01:29:00 +0000
ROA not before: Mon 10 Nov 2025 01:24:00 +0000
ROA not after: Mon 09 Nov 2026 01:29:00 +0000
asID: 43641
IP address blocks: 2a06:9f47::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Nov 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b4:d7:87:db:04:bd:8a:a7:94:5b:dd:4f:2a:5e:ac:46:b9:2b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Nov 10 01:24:00 2025 GMT
Not After : Nov 9 01:29:00 2026 GMT
Subject: CN=69B018F9D37F445B32DA43E12B1B3BA614A4FE6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:51:1d:b7:2d:55:5c:4a:94:5b:e5:06:e1:cc:
aa:1b:86:4a:55:6a:48:a1:82:99:24:bf:fb:52:79:
39:df:73:90:86:0b:70:cd:b2:00:44:27:03:7d:17:
d0:9f:54:1b:96:75:7e:3d:c0:6a:99:43:7a:52:26:
63:a6:b0:9a:ad:7b:e1:95:da:c4:a7:2c:0c:f5:61:
7a:a6:8b:ea:d0:8d:f0:5e:a2:85:19:28:61:65:30:
d6:8f:71:92:dd:2d:55:c6:b1:15:10:d6:12:10:aa:
50:44:ce:a9:b5:c1:0a:db:32:03:cd:6c:27:d2:41:
45:1d:00:fd:da:ee:ca:02:6e:34:73:ab:4c:02:d0:
8c:e4:51:74:9f:5d:12:fd:a6:ff:80:b0:9f:33:68:
6e:85:c2:1f:41:c8:64:3a:ff:74:2f:e3:8d:c9:06:
63:94:6a:34:ad:ea:d9:c3:f7:9d:89:25:86:2b:c9:
dd:f3:da:32:b0:54:09:d9:f8:35:5f:c1:40:8c:50:
c9:71:56:5f:20:ba:14:fa:75:be:5f:63:60:52:31:
04:ea:f4:3d:39:ec:c7:b2:80:0b:bb:e5:72:c8:e6:
ab:10:4c:11:09:42:4b:69:02:fd:a2:02:1b:27:fc:
05:0c:2b:fd:8a:3c:2e:9e:97:3a:56:68:93:46:20:
e2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B0:18:F9:D3:7F:44:5B:32:DA:43:E1:2B:1B:3B:A6:14:A4:FE:6F
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS43641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f47::/32
Signature Algorithm: sha256WithRSAEncryption
23:41:82:db:bc:a2:65:86:ca:9c:c7:32:1b:7c:0f:74:5d:fa:
48:39:36:2e:2a:d5:67:95:11:33:ee:dc:e7:03:a2:06:05:27:
13:0a:8a:58:be:27:8a:1c:60:67:a9:9f:74:cc:3e:a1:d9:20:
2b:20:d2:bf:72:39:6b:ce:b9:07:57:1c:46:8f:c0:63:f9:e0:
02:1f:ca:35:99:87:cf:05:a2:5b:d4:f3:78:1c:13:7a:ac:c2:
ec:65:94:11:02:8e:46:24:2b:f0:4f:a9:b9:34:91:50:92:4e:
fa:8d:c1:de:7e:ae:99:9b:5e:72:15:fb:9a:78:85:69:75:fa:
b8:4e:fc:1d:cf:2c:4d:4c:4d:55:cc:50:78:ae:25:e3:af:85:
9f:43:a3:27:7e:83:90:6f:be:87:14:71:cb:70:53:0d:8a:77:
64:25:8a:57:fc:e5:b6:ee:ba:30:4a:37:fb:be:b2:9b:e1:1d:
9a:fd:4e:c8:05:ee:a5:7e:79:b7:af:7b:22:e0:f4:6a:12:ba:
9d:07:df:b1:3a:19:91:18:fd:80:39:3f:04:73:14:ad:fd:52:
e0:d9:81:37:fb:b2:17:d8:a2:c5:95:2b:bb:cd:15:6f:a7:79:
9a:ff:42:37:2d:c6:aa:ba:4d:02:ae:96:42:a4:40:0f:de:5b:
30:d5:d0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:48:12 2025 by rpki-client