This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31333a3a2f36342d3634203d3e20333939313634.roa File: 323430333a323530303a383030303a31333a3a2f36342d3634203d3e20333939313634.roa (raw, json) Hash identifier: lr00ZAM7tS+mJ83wIxFLoT/x9TLynBnHCygITdRPq+k= Subject key identifier: 6B:D3:2C:FF:62:BB:29:AB:51:F1:EA:14:D8:EB:77:71:76:06:F9:DB Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Certificate serial: 04D9E88E67B19CF98CABAE95BAEA81376E194CE3 Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31333a3a2f36342d3634203d3e20333939313634.roa Signing time: Sat 08 Nov 2025 12:14:33 +0000 ROA not before: Sat 08 Nov 2025 12:09:33 +0000 ROA not after: Sat 07 Nov 2026 12:14:33 +0000 asID: 399164 IP address blocks: 2403:2500:8000:13::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d9:e8:8e:67:b1:9c:f9:8c:ab:ae:95:ba:ea:81:37:6e:19:4c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Validity Not Before: Nov 8 12:09:33 2025 GMT Not After : Nov 7 12:14:33 2026 GMT Subject: CN=6BD32CFF62BB29AB51F1EA14D8EB77717606F9DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:89:a8:cc:36:e6:93:f4:18:32:97:f2:2e: f8:1e:23:78:d3:45:84:c0:0b:fb:54:d9:47:42:b9: b6:84:43:a5:c8:03:35:6e:84:75:15:aa:0b:1d:63: 1f:12:b7:b5:d1:64:b5:23:ea:38:fa:08:3e:50:54: a8:32:57:a1:ce:de:76:a3:34:57:c6:c2:12:e7:31: 2f:43:b9:e3:4a:a2:b2:64:55:40:fd:23:1c:5e:83: e8:cb:af:0a:56:53:ac:44:10:e3:a8:be:41:35:62: 27:46:41:8e:8b:bd:b7:f4:67:3a:82:51:b9:f9:70: e5:7d:14:ad:10:f3:27:18:02:9c:e0:1f:30:12:d7: 5e:84:8e:54:6b:c1:2e:99:fe:c5:d0:6b:43:61:d4: b6:4d:f8:12:22:d7:6e:d7:9d:b4:cc:d2:dd:dc:91: 82:2e:89:ef:f0:fb:59:55:fd:f5:92:0f:81:6d:e9: 93:4e:f7:04:26:c7:76:a2:02:1a:be:1b:78:55:f0: f0:3e:a8:95:9e:d2:36:81:7f:f7:06:88:6d:81:cf: 13:fc:7a:de:6a:bc:e2:43:1d:cd:3c:c8:8c:d8:cc: d8:65:3d:d4:86:d8:c3:43:bc:b2:94:0b:aa:78:26: 7d:80:6a:f8:7b:11:d3:0b:ef:cc:fa:8f:45:db:c8: 11:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D3:2C:FF:62:BB:29:AB:51:F1:EA:14:D8:EB:77:71:76:06:F9:DB X509v3 Authority Key Identifier: keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a383030303a31333a3a2f36342d3634203d3e20333939313634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2500:8000:13::/64 Signature Algorithm: sha256WithRSAEncryption 72:b4:01:80:81:43:35:ec:4d:14:25:e2:c0:fd:45:51:74:ec: 9c:a8:d6:5e:e6:69:40:7c:5b:95:13:bd:c0:5e:4e:71:d2:60: 23:f2:7d:86:7b:d8:5a:e2:b2:a8:eb:06:76:51:a6:0f:4b:2f: b8:52:23:75:60:3d:b4:be:e5:13:74:15:6b:14:34:5d:46:f0: e8:42:16:dd:9e:11:14:c2:9f:a9:c5:32:a0:7d:9e:4f:ed:d1: 6b:af:8b:43:d4:b8:0b:26:05:13:1d:5f:83:33:ca:50:f8:29: 53:6d:73:17:06:38:a2:f3:8c:ca:97:53:ed:20:da:f0:ca:54: 78:1d:0e:f9:54:43:51:53:0c:39:97:1c:47:d3:5f:c4:29:5b: 62:28:c1:f5:38:19:31:46:f3:bf:23:59:b6:08:2a:af:c8:fb: 47:2f:b1:44:10:5d:f1:46:8f:8c:d7:47:db:46:a6:65:6d:90: 8c:b3:c1:00:6e:9a:11:6d:45:73:52:2f:28:e9:60:b0:9d:62: 47:d6:05:67:3a:11:b1:f8:c2:4f:8f:9b:26:d9:e3:61:17:57: 9f:8a:75:b5:3b:c2:dd:4d:f3:bb:19:53:6e:5a:c0:3d:ff:e7: 3d:ad:0c:57:bf:a5:57:7c:60:09:dd:a0:e5:8e:c3:67:24:da: 55:11:9c:41 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUBNnojmexnPmMq66VuuqBN24ZTOMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0 QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI1MTEwODEyMDkzM1oX DTI2MTEwNzEyMTQzM1owMzExMC8GA1UEAxMoNkJEMzJDRkY2MkJCMjlBQjUxRjFF QTE0RDhFQjc3NzE3NjA2RjlEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQhiajMNuaT9Bgyl/Iu+B4jeNNFhMAL+1TZR0K5toRDpcgDNW6EdRWqCx1j HxK3tdFktSPqOPoIPlBUqDJXoc7edqM0V8bCEucxL0O540qismRVQP0jHF6D6Muv ClZTrEQQ46i+QTViJ0ZBjou9t/RnOoJRuflw5X0UrRDzJxgCnOAfMBLXXoSOVGvB Lpn+xdBrQ2HUtk34EiLXbtedtMzS3dyRgi6J7/D7WVX99ZIPgW3pk073BCbHdqIC Gr4beFXw8D6olZ7SNoF/9waIbYHPE/x63mq84kMdzTzIjNjM2GU91IbYw0O8spQL qngmfYBq+HsR0wvvzPqPRdvIEX8CAwEAAaOCAlEwggJNMB0GA1UdDgQWBBRr0yz/ Yrspq1Hx6hTY63dxdgb52zAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2 ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgbIGCCsG AQUFBwELBIGlMIGiMIGfBggrBgEFBQcwC4aBknJzeW5jOi8vcnBraS1ycHMuYXJp bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4 Ni8zLzMyMzQzMDMzM2EzMjM1MzAzMDNhMzgzMDMwMzAzYTMxMzMzYTNhMmYzNjM0 MmQzNjM0MjAzZDNlMjAzMzM5MzkzMTM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwJAYIKwYBBQUHAQcBAf8EFTATMBEEAgACMAsDCQAkAyUAgAAAEzAN BgkqhkiG9w0BAQsFAAOCAQEAcrQBgIFDNexNFCXiwP1FUXTsnKjWXuZpQHxblRO9 wF5OcdJgI/J9hnvYWuKyqOsGdlGmD0svuFIjdWA9tL7lE3QVaxQ0XUbw6EIW3Z4R FMKfqcUyoH2eT+3Ra6+LQ9S4CyYFEx1fgzPKUPgpU21zFwY4ovOMypdT7SDa8MpU eB0O+VRDUVMMOZccR9NfxClbYijB9TgZMUbzvyNZtggqr8j7Ry+xRBBd8UaPjNdH 20amZW2QjLPBAG6aEW1Fc1IvKOlgsJ1iR9YFZzoRsfjCT4+bJtnjYRdXn4p1tTvC 3U3zuxlTblrAPf/nPa0MV7+lV3xgCd2g5Y7DZyTaVRGcQQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:40:09 2025 by rpki-client