This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: csQkRC4SSAq3QYC9JDFB20a5hmrcLvhistyWPc2YOhs= Subject key identifier: B5:B0:E2:57:31:94:5A:7E:E0:4C:14:3F:5C:F4:D4:6E:57:A6:24:93 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 5D77FE882F40F918398A20CA18DEE321268C2E08 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa Signing time: Sat 06 Dec 2025 04:12:11 +0000 ROA not before: Sat 06 Dec 2025 04:07:11 +0000 ROA not after: Sat 05 Dec 2026 04:12:11 +0000 asID: 40676 IP address blocks: 40.27.80.0/22 maxlen: 24 40.27.84.0/22 maxlen: 24 40.27.89.0/24 maxlen: 24 40.27.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 05:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:77:fe:88:2f:40:f9:18:39:8a:20:ca:18:de:e3:21:26:8c:2e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Dec 6 04:07:11 2025 GMT Not After : Dec 5 04:12:11 2026 GMT Subject: CN=B5B0E25731945A7EE04C143F5CF4D46E57A62493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f5:e7:18:49:dd:58:83:70:dd:ae:de:32:b5: 8a:c2:2b:cb:87:1f:ad:2b:4d:3b:a5:90:a5:27:2c: 02:d5:5e:34:cc:5e:8e:33:0d:20:04:89:95:3a:b1: 0a:bc:a8:a4:30:75:f1:2e:54:a2:d8:41:d6:bf:15: e5:ba:5f:b6:34:d4:90:45:85:29:a2:1c:31:69:3d: 58:f6:71:4d:75:a8:81:43:18:f7:e3:91:01:1b:74: 4c:95:16:bb:c5:03:be:33:71:27:a6:10:d7:54:90: 7d:ed:ab:ba:4e:e7:82:b0:21:3e:47:08:9b:73:0d: b1:52:c9:a7:db:c9:0d:be:89:9b:d6:d4:f5:41:58: 68:cd:92:d4:38:3d:84:0b:54:ab:6f:57:a5:18:bb: d0:fd:d8:94:d1:cc:9c:a8:a2:60:be:0b:aa:f4:fb: a7:b7:c1:44:c6:d8:fa:0f:64:5d:97:86:11:e8:5d: 4d:d5:81:c5:5d:1e:b1:cc:11:3c:d9:17:10:39:28: 39:ce:35:f9:00:79:bf:8b:60:e8:7a:79:d4:85:35: 48:91:29:14:ba:b7:93:7a:31:5d:30:67:4b:cc:fb: 5c:31:69:37:12:0e:be:35:89:56:a7:61:d5:95:92: e3:8e:30:a2:06:95:be:44:49:b6:37:20:31:b9:e2: 8d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B0:E2:57:31:94:5A:7E:E0:4C:14:3F:5C:F4:D4:6E:57:A6:24:93 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.80.0/21 40.27.89.0/24 40.27.164.0/22 Signature Algorithm: sha256WithRSAEncryption 66:39:d8:17:bc:4e:3b:cc:af:b5:61:6c:78:41:d8:2a:0a:bd: ad:aa:9e:b2:99:4c:d5:cd:e3:41:66:ff:b0:66:f9:2e:db:d9: 64:d8:43:b2:84:87:3c:f4:8d:61:8c:21:7f:66:66:ce:ad:93: 10:28:ea:c3:2c:ce:5d:89:c9:5f:31:a1:01:4c:a3:68:ab:11: 77:77:86:da:0b:f3:29:1e:77:5d:f1:0f:38:0e:50:87:75:aa: f5:a2:96:f9:8b:84:a2:f5:2c:19:4a:09:46:d9:1d:c0:82:a8: 4e:5f:83:73:6a:85:2d:fb:04:d2:96:b1:21:18:4d:b3:cc:97: 3c:8b:ea:76:80:f9:07:6c:a7:6f:01:00:67:ea:b4:0f:21:5d: af:03:36:ec:8c:54:14:e9:11:22:7f:f8:05:1a:55:df:d8:9c: c6:ab:3c:7c:30:24:3a:8e:bf:6d:7c:9d:01:79:c6:70:62:a4: 55:5f:e5:2b:c8:aa:49:20:a8:6c:42:3b:42:61:18:a4:f1:32: db:28:fe:df:af:eb:45:41:64:ef:21:9b:63:29:5f:74:bc:ca: 8c:aa:91:09:03:3d:85:56:78:82:b9:2a:d6:50:a5:b9:96:d1: b4:a6:f3:8e:50:30:ab:d9:8a:4c:d1:d3:c4:8c:92:1f:73:6c: f6:5c:65:1e -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUXXf+iC9A+Rg5iiDKGN7jISaMLggwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMjA2MDQwNzExWhcNMjYxMjA1MDQxMjEx WjAzMTEwLwYDVQQDEyhCNUIwRTI1NzMxOTQ1QTdFRTA0QzE0M0Y1Q0Y0RDQ2RTU3 QTYyNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPXnGEndWINw 3a7eMrWKwivLhx+tK007pZClJywC1V40zF6OMw0gBImVOrEKvKikMHXxLlSi2EHW vxXlul+2NNSQRYUpohwxaT1Y9nFNdaiBQxj345EBG3RMlRa7xQO+M3EnphDXVJB9 7au6TueCsCE+Rwibcw2xUsmn28kNvomb1tT1QVhozZLUOD2EC1Srb1elGLvQ/diU 0cycqKJgvguq9Punt8FExtj6D2Rdl4YR6F1N1YHFXR6xzBE82RcQOSg5zjX5AHm/ i2DoennUhTVIkSkUureTejFdMGdLzPtcMWk3Eg6+NYlWp2HVlZLjjjCiBpW+REm2 NyAxueKNOwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFLWw4lcxlFp+4EwUP1z01G5X piSTMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDKBtQAwQAKBtZAwQCKBukMA0GCSqG SIb3DQEBCwUAA4IBAQBmOdgXvE47zK+1YWx4QdgqCr2tqp6ymUzVzeNBZv+wZvku 29lk2EOyhIc89I1hjCF/ZmbOrZMQKOrDLM5diclfMaEBTKNoqxF3d4baC/MpHndd 8Q84DlCHdar1opb5i4Si9SwZSglG2R3AgqhOX4NzaoUt+wTSlrEhGE2zzJc8i+p2 gPkHbKdvAQBn6rQPIV2vAzbsjFQU6REif/gFGlXf2JzGqzx8MCQ6jr9tfJ0BecZw YqRVX+UryKpJIKhsQjtCYRik8TLbKP7fr+tFQWTvIZtjKV90vMqMqpEJAz2FVniC uSrWUKW5ltG0pvOOUDCr2YpM0dPEjJIfc2z2XGUe -----END CERTIFICATE-----Generated at Sat Dec 6 12:01:57 2025 by rpki-client