This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: 658yhdCbxL/aFvqp4DZBIigu5CbycJVVpyYnB6CEzKc= Subject key identifier: 02:A6:04:F8:51:94:34:01:8E:F7:EA:5F:B3:E5:20:C2:A8:68:19:A1 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 3EA34AFC01D3295E7E60A67BDE51E96BEDF11989 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa Signing time: Wed 31 Dec 2025 13:00:57 +0000 ROA not before: Wed 31 Dec 2025 12:55:57 +0000 ROA not after: Wed 30 Dec 2026 13:00:57 +0000 asID: 40676 IP address blocks: 157.254.8.0/24 maxlen: 24 157.254.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 02:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a3:4a:fc:01:d3:29:5e:7e:60:a6:7b:de:51:e9:6b:ed:f1:19:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Dec 31 12:55:57 2025 GMT Not After : Dec 30 13:00:57 2026 GMT Subject: CN=02A604F8519434018EF7EA5FB3E520C2A86819A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:94:c4:d9:a3:37:1a:d6:0d:2e:c0:dd:da:2f: 81:94:22:e8:78:7f:a2:43:1b:bc:8b:0b:49:49:6a: 89:53:d4:b8:90:fb:01:8a:64:34:17:8d:88:0f:93: b5:83:86:41:0e:e4:e8:a0:0b:44:8e:31:6a:70:d0: 0d:6f:93:3f:33:45:72:ee:8d:69:97:20:d8:43:4b: 53:9d:d8:43:f5:f5:c6:76:e7:70:8c:2e:d4:c8:53: e3:0c:6b:3d:46:7e:f5:a8:64:21:51:93:86:d4:59: 8c:bd:94:bb:d6:af:ea:89:59:c1:3a:62:a1:32:35: 92:42:66:0b:8b:0b:b7:b9:49:b8:17:fb:da:e2:e1: 85:84:2c:4a:65:32:df:68:c0:75:36:93:10:dc:3d: b5:98:aa:70:86:4b:3e:1b:da:c2:62:76:c2:73:6e: cc:05:e8:2f:3c:60:d4:5d:b9:2a:56:44:62:a4:b0: a1:e0:cb:5e:8d:67:a1:48:8d:89:6d:74:cd:df:49: dd:25:9c:db:31:d5:29:92:0e:7f:e2:5a:bd:34:46: 64:08:a1:bc:d6:34:8e:7c:16:24:c7:25:bb:29:0e: a3:dc:4d:6d:b2:fa:94:39:97:75:2c:0f:1a:0f:a9: 72:2f:14:0a:d7:72:fc:39:29:03:42:4e:26:ee:30: 95:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A6:04:F8:51:94:34:01:8E:F7:EA:5F:B3:E5:20:C2:A8:68:19:A1 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.8.0/24 157.254.250.0/24 Signature Algorithm: sha256WithRSAEncryption 48:f4:82:ae:7c:b8:f4:72:bd:50:f0:89:3e:97:e1:a1:15:34: e2:5d:87:b6:5a:e9:18:3a:52:07:7a:6d:72:63:aa:d7:7e:66: 1c:4e:1b:5e:f4:ed:58:5d:2f:6e:4a:0b:d8:9a:dd:b0:9d:83: b6:48:fd:f9:85:6f:34:1d:40:f1:3a:cc:6b:f3:54:89:e9:de: 14:83:09:56:c3:13:44:55:2d:58:de:6b:fd:0f:ff:f1:58:a6: cc:ad:8e:62:0a:3e:d0:14:9f:a7:b4:21:15:b9:9c:b5:08:87: 27:a3:aa:46:f5:a2:b4:2d:85:3a:9d:b4:37:38:23:e9:78:d5: fc:ec:43:e9:13:49:5d:09:bf:1c:ab:53:68:e9:04:af:41:44: 20:44:86:0f:d2:04:77:e4:e6:e3:41:a7:84:4d:2d:14:43:6c: f5:c1:8c:c3:b3:44:f0:91:d7:2d:12:07:62:fd:2b:0d:43:c3: 76:85:79:8b:cf:b5:0a:b6:1d:bc:96:7d:7d:6d:83:2b:4c:cf: 82:3f:7a:04:1c:c4:07:3f:c7:32:d0:e5:61:ba:bf:55:cb:71: 2f:41:f4:c3:91:db:30:3d:c5:35:03:33:1d:5b:44:ed:b2:51: 93:99:8a:cd:47:df:4d:ec:aa:e2:34:d7:5d:9b:6c:0f:da:45: 06:8a:2b:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUPqNK/AHTKV5+YKZ73lHpa+3xGYkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUxMjMxMTI1NTU3WhcNMjYxMjMwMTMwMDU3 WjAzMTEwLwYDVQQDEygwMkE2MDRGODUxOTQzNDAxOEVGN0VBNUZCM0U1MjBDMkE4 NjgxOUExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5TE2aM3GtYN LsDd2i+BlCLoeH+iQxu8iwtJSWqJU9S4kPsBimQ0F42ID5O1g4ZBDuTooAtEjjFq cNANb5M/M0Vy7o1plyDYQ0tTndhD9fXGdudwjC7UyFPjDGs9Rn71qGQhUZOG1FmM vZS71q/qiVnBOmKhMjWSQmYLiwu3uUm4F/va4uGFhCxKZTLfaMB1NpMQ3D21mKpw hks+G9rCYnbCc27MBegvPGDUXbkqVkRipLCh4MtejWehSI2JbXTN30ndJZzbMdUp kg5/4lq9NEZkCKG81jSOfBYkxyW7KQ6j3E1tsvqUOZd1LA8aD6lyLxQK13L8OSkD Qk4m7jCVnQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFAKmBPhRlDQBjvfqX7PlIMKo aBmhMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnf4IAwQAnf76MA0GCSqGSIb3DQEB CwUAA4IBAQBI9IKufLj0cr1Q8Ik+l+GhFTTiXYe2WukYOlIHem1yY6rXfmYcThte 9O1YXS9uSgvYmt2wnYO2SP35hW80HUDxOsxr81SJ6d4UgwlWwxNEVS1Y3mv9D//x WKbMrY5iCj7QFJ+ntCEVuZy1CIcno6pG9aK0LYU6nbQ3OCPpeNX87EPpE0ldCb8c q1No6QSvQUQgRIYP0gR35ObjQaeETS0UQ2z1wYzDs0TwkdctEgdi/SsNQ8N2hXmL z7UKth28ln19bYMrTM+CP3oEHMQHP8cy0OVhur9Vy3EvQfTDkdswPcU1AzMdW0Tt slGTmYrNR99N7KriNNddm2wP2kUGiitd -----END CERTIFICATE-----Generated at Sun Jan 25 04:00:02 2026 by rpki-client