This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a31333a3a2f36342d3634203d3e20333939313635.roa File: 323430333a323530303a3430303a31333a3a2f36342d3634203d3e20333939313635.roa (raw, json) Hash identifier: aYFFgMGW3++FXchpukxWr0oI8txkYrUahMkQXkEZlAI= Subject key identifier: BD:3B:D4:E2:01:15:7E:6B:79:E4:37:05:D2:D8:4B:AC:3C:4C:DD:E1 Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Certificate serial: 47BCB8AA3A10A7841634F2CA92C6889B91BEBCED Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a31333a3a2f36342d3634203d3e20333939313635.roa Signing time: Sat 08 Nov 2025 12:14:33 +0000 ROA not before: Sat 08 Nov 2025 12:09:33 +0000 ROA not after: Sat 07 Nov 2026 12:14:33 +0000 asID: 399165 IP address blocks: 2403:2500:400:13::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:bc:b8:aa:3a:10:a7:84:16:34:f2:ca:92:c6:88:9b:91:be:bc:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Validity Not Before: Nov 8 12:09:33 2025 GMT Not After : Nov 7 12:14:33 2026 GMT Subject: CN=BD3BD4E201157E6B79E43705D2D84BAC3C4CDDE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:1c:3f:29:32:5e:88:5d:8c:bd:81:a2:5e: 81:a1:47:11:fe:a7:b4:1c:29:f6:cb:a4:15:da:b2: 79:af:b1:44:42:08:4d:11:4c:02:45:1d:eb:23:5d: 9c:66:b7:69:1a:b0:e4:32:0f:7d:a6:f6:0c:97:87: 8e:18:9f:8e:9b:9a:62:d9:43:5f:14:5b:2a:3e:21: 30:1e:a2:a4:7a:9f:73:0e:cf:2b:68:d8:33:e6:21: 30:18:35:c1:7f:34:e7:1c:0f:d2:2a:4b:6d:62:f2: 4b:d5:7b:26:2e:4c:c9:34:3a:73:58:87:88:78:0d: dc:9b:2e:eb:c0:19:6a:ad:73:08:2d:6a:8b:e5:f2: 08:b5:7b:3a:d3:af:49:6d:b4:24:25:6b:8d:66:b3: 16:31:a3:e8:cd:cd:65:2d:ea:c0:93:47:df:70:88: 03:da:bc:99:e9:05:f8:c3:4c:43:b3:dd:96:ed:82: 11:19:81:1f:14:14:47:43:27:f0:0f:5c:c0:ad:60: 59:b5:b1:39:c0:03:a1:f4:87:2b:a7:ee:4f:fd:bb: fd:f5:6b:67:96:6b:22:91:e2:eb:9c:ab:3a:e5:ed: a7:c5:bc:cc:3c:a8:bb:c4:fc:5b:35:2a:da:b9:7b: 26:6d:e5:6a:24:b4:33:0e:42:23:d3:3f:4e:88:ec: 4a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3B:D4:E2:01:15:7E:6B:79:E4:37:05:D2:D8:4B:AC:3C:4C:DD:E1 X509v3 Authority Key Identifier: keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a31333a3a2f36342d3634203d3e20333939313635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2500:400:13::/64 Signature Algorithm: sha256WithRSAEncryption 95:23:92:fe:ff:4d:7b:48:ad:46:5a:1e:ac:70:70:28:86:1d: dc:e7:70:0f:55:3e:18:b7:4a:d2:40:4d:b9:f2:72:9c:31:a9: fe:5f:85:d1:a0:93:d8:b8:a4:1d:80:09:30:e5:75:41:19:36: 8c:98:51:56:03:5a:51:2d:e4:e3:24:38:58:40:f2:8e:c4:32: f1:51:69:88:b3:24:02:de:fe:a5:47:2d:07:99:44:d0:f0:2a: 6e:4a:20:5e:0d:05:da:e0:ec:ed:e0:4a:bd:fc:dc:ae:86:54: 4d:fa:0f:43:bf:30:3b:27:15:82:54:21:f0:d2:06:f6:f7:7b: cf:e0:9c:7d:e5:d5:ce:3b:6a:d8:ad:58:81:45:56:a9:f4:e5: 28:8a:cc:92:91:77:31:ee:66:e0:a3:2d:a3:0f:13:4c:80:a9: ff:c9:24:55:9c:95:14:e0:43:f5:89:4c:45:2b:02:80:61:17: 76:9f:72:20:00:ca:0d:f1:29:85:98:f7:97:ae:3c:9e:cf:9c: f1:69:2c:a2:a2:8e:b9:7c:a0:0b:2d:58:4a:66:e2:91:ac:4f: 1e:6f:c4:09:9d:d3:90:fe:b4:1e:13:36:90:b1:80:f2:2f:22: 01:cd:7a:ad:30:ed:cf:85:35:58:1b:73:ac:6d:17:44:ba:1d: e8:db:d1:3a -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUR7y4qjoQp4QWNPLKksaIm5G+vO0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0 QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI1MTEwODEyMDkzM1oX DTI2MTEwNzEyMTQzM1owMzExMC8GA1UEAxMoQkQzQkQ0RTIwMTE1N0U2Qjc5RTQz NzA1RDJEODRCQUMzQzRDRERFMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtYHD8pMl6IXYy9gaJegaFHEf6ntBwp9sukFdqyea+xREIITRFMAkUd6yNd nGa3aRqw5DIPfab2DJeHjhifjpuaYtlDXxRbKj4hMB6ipHqfcw7PK2jYM+YhMBg1 wX805xwP0ipLbWLyS9V7Ji5MyTQ6c1iHiHgN3Jsu68AZaq1zCC1qi+XyCLV7OtOv SW20JCVrjWazFjGj6M3NZS3qwJNH33CIA9q8mekF+MNMQ7Pdlu2CERmBHxQUR0Mn 8A9cwK1gWbWxOcADofSHK6fuT/27/fVrZ5ZrIpHi65yrOuXtp8W8zDyou8T8WzUq 2rl7Jm3laiS0Mw5CI9M/TojsSi8CAwEAAaOCAk8wggJLMB0GA1UdDgQWBBS9O9Ti ARV+a3nkNwXS2EusPEzd4TAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2 ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgbAGCCsG AQUFBwELBIGjMIGgMIGdBggrBgEFBQcwC4aBkHJzeW5jOi8vcnBraS1ycHMuYXJp bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4 Ni8zLzMyMzQzMDMzM2EzMjM1MzAzMDNhMzQzMDMwM2EzMTMzM2EzYTJmMzYzNDJk MzYzNDIwM2QzZTIwMzMzOTM5MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJAMlAAQAABMwDQYJ KoZIhvcNAQELBQADggEBAJUjkv7/TXtIrUZaHqxwcCiGHdzncA9VPhi3StJATbny cpwxqf5fhdGgk9i4pB2ACTDldUEZNoyYUVYDWlEt5OMkOFhA8o7EMvFRaYizJALe /qVHLQeZRNDwKm5KIF4NBdrg7O3gSr383K6GVE36D0O/MDsnFYJUIfDSBvb3e8/g nH3l1c47atitWIFFVqn05SiKzJKRdzHuZuCjLaMPE0yAqf/JJFWclRTgQ/WJTEUr AoBhF3afciAAyg3xKYWY95euPJ7PnPFpLKKijrl8oAstWEpm4pGsTx5vxAmd05D+ tB4TNpCxgPIvIgHNeq0w7c+FNVgbc6xtF0S6Hejb0To= -----END CERTIFICATE-----Generated at Sun Dec 7 01:33:29 2025 by rpki-client