This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS40662.roa File: AS40662.roa (raw, json) Hash identifier: Nm8pQsGILnh9O29R1vwIlq1KnBShlLNdruJWJibq/Ao= Subject key identifier: D9:BD:82:3A:44:F5:CC:38:26:AD:E6:D9:DA:D8:47:4B:1A:7A:BC:B0 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 3F602E73E53357A3618443809BC7FF2F9FDF7950 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS40662.roa Signing time: Fri 23 Jan 2026 21:46:28 +0000 ROA not before: Fri 23 Jan 2026 21:41:28 +0000 ROA not after: Fri 22 Jan 2027 21:46:28 +0000 asID: 40662 IP address blocks: 2a05:dfc6::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:60:2e:73:e5:33:57:a3:61:84:43:80:9b:c7:ff:2f:9f:df:79:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Jan 23 21:41:28 2026 GMT Not After : Jan 22 21:46:28 2027 GMT Subject: CN=D9BD823A44F5CC3826ADE6D9DAD8474B1A7ABCB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d3:a8:f6:d2:24:57:5f:a1:1c:2f:0b:00:c3: 47:a4:db:aa:7e:f5:b6:76:6f:87:2e:da:f9:d2:2d: 84:a7:00:20:fe:26:d3:8d:68:1f:bd:c2:40:eb:34: 0f:3a:59:ca:24:62:26:11:ed:55:4a:7a:57:56:5f: ab:35:8c:cb:b3:fa:84:5f:25:b9:9c:04:bc:78:59: 2c:e7:f4:92:e7:a9:12:5b:8e:7b:cb:25:f2:10:a8: 8c:ba:14:26:14:b8:4f:15:5e:d1:12:46:a0:97:73: a2:a1:04:37:02:e7:f9:e1:f6:6c:40:4c:4f:4f:35: 07:3d:53:ce:b8:71:78:b5:e3:e5:fb:d5:7c:82:f1: 26:f3:61:ff:88:61:55:49:5f:4d:48:e8:5f:20:39: f4:5c:7e:af:b1:73:61:2f:f8:f3:63:0c:2a:4b:bb: ba:b4:6f:56:e6:e9:49:0f:3b:a4:dd:3d:74:9e:21: b6:80:0c:74:d9:c9:f1:e5:7c:2b:bb:b4:ed:37:ef: 2c:cc:75:74:73:14:e2:b7:a6:1b:87:55:bd:2e:99: 42:7d:42:68:34:02:65:df:da:44:ec:4b:04:27:a1: 69:b1:64:3e:26:68:30:c9:67:2f:e8:59:d3:73:38: e6:3f:8b:a1:ba:5d:e9:37:18:d3:df:55:58:0e:42: cf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BD:82:3A:44:F5:CC:38:26:AD:E6:D9:DA:D8:47:4B:1A:7A:BC:B0 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS40662.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc6::/32 Signature Algorithm: sha256WithRSAEncryption 7b:89:11:13:84:9a:62:3f:dc:97:78:30:8c:67:e2:28:37:38: 41:3c:f2:54:28:91:fb:7c:d0:1e:9c:30:e7:7f:26:2f:e3:b0: 38:be:83:76:19:73:ee:14:81:0a:c3:5f:3c:b6:bd:da:b6:1d: 89:64:41:cc:1a:b3:6b:7e:8c:5a:94:53:23:28:db:11:b2:c9: 66:37:83:bc:b6:41:9e:a8:76:8c:71:be:ca:37:c7:49:93:49: e5:63:0e:75:97:38:54:55:e0:a4:5c:bb:93:76:a1:42:66:c4: 8e:f0:d3:bc:05:3c:f2:5d:f6:94:07:00:f6:b0:15:df:bf:d7: 66:d4:7c:42:b3:32:c3:55:59:f0:6a:67:fa:9b:08:9c:9a:68: 60:d4:35:67:e9:33:7a:fb:58:33:0c:4f:6d:3c:3d:b8:3b:b4: e0:53:76:be:9c:df:be:a5:19:c8:f5:7b:56:8b:a1:2b:4a:c8: 1f:30:43:c9:c8:70:43:38:8a:54:a1:48:46:0b:42:36:2d:5e: 2f:da:9f:8b:79:77:5b:e3:fc:5f:77:42:31:eb:90:d2:c7:3d: 6f:dd:88:08:3f:04:69:2f:2d:94:c6:79:96:23:1a:3a:f2:34: 04:21:52:22:f0:57:5b:14:6b:71:15:65:08:31:ad:a5:a6:1e: 90:eb:b6:b1 -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUP2Auc+UzV6NhhEOAm8f/L5/feVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNjAxMjMyMTQxMjhaFw0yNzAxMjIyMTQ2MjhaMDMxMTAvBgNV BAMTKEQ5QkQ4MjNBNDRGNUNDMzgyNkFERTZEOURBRDg0NzRCMUE3QUJDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx06j20iRXX6EcLwsAw0ek26p+ 9bZ2b4cu2vnSLYSnACD+JtONaB+9wkDrNA86WcokYiYR7VVKeldWX6s1jMuz+oRf JbmcBLx4WSzn9JLnqRJbjnvLJfIQqIy6FCYUuE8VXtESRqCXc6KhBDcC5/nh9mxA TE9PNQc9U864cXi14+X71XyC8SbzYf+IYVVJX01I6F8gOfRcfq+xc2Ev+PNjDCpL u7q0b1bm6UkPO6TdPXSeIbaADHTZyfHlfCu7tO037yzMdXRzFOK3phuHVb0umUJ9 Qmg0AmXf2kTsSwQnoWmxZD4maDDJZy/oWdNzOOY/i6G6Xek3GNPfVVgOQs+ZAgMB AAGjggHvMIIB6zAdBgNVHQ4EFgQU2b2COkT1zDgmrebZ2thHSxp6vLAwHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT NDA2NjIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcB Af8EETAPMA0EAgACMAcDBQAqBd/GMA0GCSqGSIb3DQEBCwUAA4IBAQB7iREThJpi P9yXeDCMZ+IoNzhBPPJUKJH7fNAenDDnfyYv47A4voN2GXPuFIEKw188tr3ath2J ZEHMGrNrfoxalFMjKNsRsslmN4O8tkGeqHaMcb7KN8dJk0nlYw51lzhUVeCkXLuT dqFCZsSO8NO8BTzyXfaUBwD2sBXfv9dm1HxCszLDVVnwamf6mwicmmhg1DVn6TN6 +1gzDE9tPD24O7TgU3a+nN++pRnI9XtWi6ErSsgfMEPJyHBDOIpUoUhGC0I2LV4v 2p+LeXdb4/xfd0Ix65DSxz1v3YgIPwRpLy2UxnmWIxo68jQEIVIi8FdbFGtxFWUI Ma2lph6Q67ax -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:35 2026 by rpki-client