This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132373a3a2f36342d3634203d3e20333939313730.roa File: 323430333a323530303a393030303a3132373a3a2f36342d3634203d3e20333939313730.roa (raw, json) Hash identifier: u4HyooplPR0op+UQR1XHJmCGh0i8dsIw1wBiiI9bwGo= Subject key identifier: 96:9B:04:BF:A2:46:1E:05:3A:39:E8:6C:87:83:75:EB:19:65:88:2B Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Certificate serial: 5D0BF633DCDD6FF96DD8C3DBCFA49971833C59B8 Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132373a3a2f36342d3634203d3e20333939313730.roa Signing time: Sat 08 Nov 2025 13:14:34 +0000 ROA not before: Sat 08 Nov 2025 13:09:34 +0000 ROA not after: Sat 07 Nov 2026 13:14:34 +0000 asID: 399170 IP address blocks: 2403:2500:9000:127::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:0b:f6:33:dc:dd:6f:f9:6d:d8:c3:db:cf:a4:99:71:83:3c:59:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Validity Not Before: Nov 8 13:09:34 2025 GMT Not After : Nov 7 13:14:34 2026 GMT Subject: CN=969B04BFA2461E053A39E86C878375EB1965882B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:09:98:04:68:db:38:f6:96:a1:67:80:f0: bc:bd:8d:8e:60:c2:bd:08:a0:55:d3:56:f2:3c:0d: 84:05:32:6c:01:89:cf:52:74:69:55:d9:be:58:55: 68:a3:4f:21:91:bb:e7:1e:36:f2:28:f9:51:28:d4: ba:64:d3:2a:f1:a6:66:09:44:e3:ee:c6:e5:75:e4: ff:95:78:c6:9f:47:e2:02:3e:b5:d4:5e:6a:bb:0e: e2:40:a9:e7:2c:d0:5e:71:9c:14:e6:fc:78:b2:b3: 50:31:c9:c4:14:ba:ab:06:43:47:0c:d0:d4:ef:91: 4e:c8:36:cb:29:4e:00:0d:51:4d:14:84:0e:8a:62: 7a:6b:8e:58:42:83:2e:54:7c:42:aa:b0:00:95:ac: 07:e2:82:33:f6:b7:86:a9:5d:7b:18:f7:94:ce:16: 7b:78:b6:57:87:f3:1c:68:f8:9a:0e:78:3b:8a:7f: 3e:1c:c5:2f:a6:5b:5b:e8:a8:3a:94:8e:78:d6:4f: 2a:a5:42:cc:02:16:8c:5f:05:9f:7f:d2:2c:12:cf: 65:24:b6:77:61:f5:da:0c:36:fb:5f:6b:ab:7a:e3: 96:25:9f:da:ba:85:4d:55:91:fa:66:7c:05:24:67: 6e:14:c4:db:f6:4c:2b:b6:b9:58:c3:66:98:77:ca: ce:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9B:04:BF:A2:46:1E:05:3A:39:E8:6C:87:83:75:EB:19:65:88:2B X509v3 Authority Key Identifier: keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132373a3a2f36342d3634203d3e20333939313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2500:9000:127::/64 Signature Algorithm: sha256WithRSAEncryption 06:c4:c8:46:3d:db:c6:dc:d6:24:ed:4f:72:d7:e3:6f:da:0b: 35:d2:b5:70:3c:1c:80:0b:53:2d:0b:9e:1e:e6:84:a4:e5:a9: eb:41:70:8d:0f:47:17:56:9b:1f:5f:4b:96:ad:d4:27:b4:97: ba:a5:59:80:db:3c:28:72:9c:f0:d7:6d:67:89:4e:a8:a1:c7: 54:f5:ec:9e:98:58:e2:62:2e:44:60:4a:af:ce:c9:f5:c9:60: 9d:71:4b:69:48:0a:0b:96:b7:01:51:c7:7a:c1:d0:fa:ba:58: ec:ae:96:88:e3:09:bb:18:2c:30:8b:61:0c:01:fa:27:58:ed: 70:99:b6:95:40:d2:4b:92:d3:a6:17:50:32:29:0b:b8:3f:0b: f0:5c:a9:f5:ac:e9:f4:0f:97:6a:b0:a0:1e:56:c1:5c:1d:fa: aa:d6:c7:ba:38:c9:82:ff:c4:59:bf:6e:8e:6e:7c:31:a1:44: 48:76:f9:1c:ab:c6:56:bd:ed:7b:0d:f4:38:a0:09:4d:c6:b2: a8:5b:b6:03:24:95:8b:79:5f:ad:a5:7f:a1:1d:5e:73:d6:8b: 0e:c5:63:6a:7b:3e:a3:52:db:ca:42:25:9c:6a:0d:9e:18:b8: 05:0a:30:ac:c4:f0:51:0c:7a:36:f1:d0:d7:49:22:a8:aa:4f: 69:16:38:18 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUXQv2M9zdb/lt2MPbz6SZcYM8WbgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0 QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI1MTEwODEzMDkzNFoX DTI2MTEwNzEzMTQzNFowMzExMC8GA1UEAxMoOTY5QjA0QkZBMjQ2MUUwNTNBMzlF ODZDODc4Mzc1RUIxOTY1ODgyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJdCZgEaNs49pahZ4DwvL2NjmDCvQigVdNW8jwNhAUybAGJz1J0aVXZvlhV aKNPIZG75x428ij5USjUumTTKvGmZglE4+7G5XXk/5V4xp9H4gI+tdRearsO4kCp 5yzQXnGcFOb8eLKzUDHJxBS6qwZDRwzQ1O+RTsg2yylOAA1RTRSEDopiemuOWEKD LlR8QqqwAJWsB+KCM/a3hqldexj3lM4We3i2V4fzHGj4mg54O4p/PhzFL6ZbW+io OpSOeNZPKqVCzAIWjF8Fn3/SLBLPZSS2d2H12gw2+19rq3rjliWf2rqFTVWR+mZ8 BSRnbhTE2/ZMK7a5WMNmmHfKzlkCAwEAAaOCAlMwggJPMB0GA1UdDgQWBBSWmwS/ okYeBTo56GyHg3XrGWWIKzAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2 ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgbQGCCsG AQUFBwELBIGnMIGkMIGhBggrBgEFBQcwC4aBlHJzeW5jOi8vcnBraS1ycHMuYXJp bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4 Ni8zLzMyMzQzMDMzM2EzMjM1MzAzMDNhMzkzMDMwMzAzYTMxMzIzNzNhM2EyZjM2 MzQyZDM2MzQyMDNkM2UyMDMzMzkzOTMxMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQVMBMwEQQCAAIwCwMJACQDJQCQAAEn MA0GCSqGSIb3DQEBCwUAA4IBAQAGxMhGPdvG3NYk7U9y1+Nv2gs10rVwPByAC1Mt C54e5oSk5anrQXCND0cXVpsfX0uWrdQntJe6pVmA2zwocpzw121niU6oocdU9eye mFjiYi5EYEqvzsn1yWCdcUtpSAoLlrcBUcd6wdD6uljsrpaI4wm7GCwwi2EMAfon WO1wmbaVQNJLktOmF1AyKQu4PwvwXKn1rOn0D5dqsKAeVsFcHfqq1se6OMmC/8RZ v26ObnwxoURIdvkcq8ZWve17DfQ4oAlNxrKoW7YDJJWLeV+tpX+hHV5z1osOxWNq ez6jUtvKQiWcag2eGLgFCjCsxPBRDHo28dDXSSKoqk9pFjgY -----END CERTIFICATE-----Generated at Sat Dec 6 23:42:34 2025 by rpki-client