This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132383a3a2f36342d3634203d3e20333939313730.roa File: 323430333a323530303a393030303a3132383a3a2f36342d3634203d3e20333939313730.roa (raw, json) Hash identifier: haflyxQr5TuCXtFYVVS42ipNBr7cFzhbq7P9pgp25w8= Subject key identifier: DC:AD:AB:3B:D5:AC:9E:16:40:8C:5D:BC:5F:1B:B8:C8:14:95:6F:51 Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Certificate serial: 7A06A87E5D533A312CC0C17DA26E136100B9F0B1 Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132383a3a2f36342d3634203d3e20333939313730.roa Signing time: Sat 08 Nov 2025 13:14:34 +0000 ROA not before: Sat 08 Nov 2025 13:09:34 +0000 ROA not after: Sat 07 Nov 2026 13:14:34 +0000 asID: 399170 IP address blocks: 2403:2500:9000:128::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:06:a8:7e:5d:53:3a:31:2c:c0:c1:7d:a2:6e:13:61:00:b9:f0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Validity Not Before: Nov 8 13:09:34 2025 GMT Not After : Nov 7 13:14:34 2026 GMT Subject: CN=DCADAB3BD5AC9E16408C5DBC5F1BB8C814956F51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6b:34:7f:59:78:51:08:74:56:5a:f2:b9:a6: 0d:48:b2:d9:7d:c3:8a:bb:b8:48:a1:df:7d:2a:cd: 7d:ba:ca:26:a5:5e:1f:9f:08:ad:8d:bc:b0:c5:90: 00:27:5f:25:e9:04:6a:a2:2b:e4:33:ec:16:d3:e0: ae:38:1a:18:95:c1:e5:d1:7a:20:89:5f:ca:29:34: 13:aa:99:c9:d7:87:d2:a1:1c:53:98:50:50:8e:a2: c4:06:24:72:8e:9c:a1:e2:af:65:04:ae:9c:2e:0e: 6c:2c:ca:28:b1:54:64:8b:1a:f3:e2:65:70:1c:8a: 07:26:37:76:d4:24:1a:0c:e8:68:75:2d:66:5f:42: 3a:46:07:2c:b1:34:5d:45:69:76:ee:ee:e8:2f:a4: 43:a1:d8:81:1c:46:4e:29:8c:53:87:02:44:da:4e: 2a:b9:02:25:4b:36:35:1f:55:d5:87:11:09:68:64: d1:67:8b:46:e9:cc:d4:6b:25:7f:77:51:a5:a3:6b: 5b:55:e2:f6:69:f4:6d:85:4e:47:90:9c:95:27:52: 7f:c7:8f:8f:4f:f6:5b:54:bc:5c:f2:2b:76:9b:8e: 60:ef:8c:f4:ed:16:4c:19:eb:22:c3:80:0a:8c:1a: 10:f0:d6:7f:41:17:62:24:25:af:2d:72:2b:c7:07: 57:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AD:AB:3B:D5:AC:9E:16:40:8C:5D:BC:5F:1B:B8:C8:14:95:6F:51 X509v3 Authority Key Identifier: keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132383a3a2f36342d3634203d3e20333939313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2500:9000:128::/64 Signature Algorithm: sha256WithRSAEncryption c0:2b:c6:75:45:30:68:5e:2a:3f:42:07:3c:06:39:ef:3a:8c: 90:1f:ec:8d:6c:63:61:c0:46:4b:ec:55:84:c5:01:6b:59:f0: 0d:ab:ef:88:5c:07:10:0c:31:82:b8:22:19:72:b8:70:f1:5a: f3:88:f3:ad:38:91:8c:cf:7b:d6:2f:42:ef:5e:b5:57:51:9e: 2b:bc:9a:29:5a:bc:f9:f4:86:81:ed:25:06:e6:34:2c:63:b8: 34:d7:76:71:a1:1b:4f:99:43:e3:55:29:35:9e:0b:e2:57:fd: d1:ba:24:35:a7:ef:50:bc:f9:03:de:ee:d9:fe:3d:79:3d:78: b4:a8:1e:c3:b0:77:25:33:9d:f7:9a:31:02:ea:a8:9c:8d:15: a1:92:18:bb:1a:ea:67:99:75:4f:be:ff:51:eb:19:40:f4:0e: 47:ce:43:4e:c8:0c:9a:26:df:e0:39:75:82:c0:2b:e4:2f:e8: 06:fe:85:44:14:8d:b6:2e:d9:1f:c3:d1:7f:12:67:71:ff:8e: 4e:bf:0b:92:28:ab:bd:8f:08:c5:51:31:2c:b3:3e:32:e6:d6: d7:f5:d4:2a:29:76:03:65:1b:80:4a:5d:b6:99:01:e7:bd:25: 51:ad:c5:9b:0a:60:b8:f7:2b:22:84:f8:52:bd:8c:c8:d4:d9: be:eb:13:6a -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUegaofl1TOjEswMF9om4TYQC58LEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0 QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI1MTEwODEzMDkzNFoX DTI2MTEwNzEzMTQzNFowMzExMC8GA1UEAxMoRENBREFCM0JENUFDOUUxNjQwOEM1 REJDNUYxQkI4QzgxNDk1NkY1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM1rNH9ZeFEIdFZa8rmmDUiy2X3Diru4SKHffSrNfbrKJqVeH58IrY28sMWQ ACdfJekEaqIr5DPsFtPgrjgaGJXB5dF6IIlfyik0E6qZydeH0qEcU5hQUI6ixAYk co6coeKvZQSunC4ObCzKKLFUZIsa8+JlcByKByY3dtQkGgzoaHUtZl9COkYHLLE0 XUVpdu7u6C+kQ6HYgRxGTimMU4cCRNpOKrkCJUs2NR9V1YcRCWhk0WeLRunM1Gsl f3dRpaNrW1Xi9mn0bYVOR5CclSdSf8ePj0/2W1S8XPIrdpuOYO+M9O0WTBnrIsOA CowaEPDWf0EXYiQlry1yK8cHV+UCAwEAAaOCAlMwggJPMB0GA1UdDgQWBBTcras7 1ayeFkCMXbxfG7jIFJVvUTAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2 ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgbQGCCsG AQUFBwELBIGnMIGkMIGhBggrBgEFBQcwC4aBlHJzeW5jOi8vcnBraS1ycHMuYXJp bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4 Ni8zLzMyMzQzMDMzM2EzMjM1MzAzMDNhMzkzMDMwMzAzYTMxMzIzODNhM2EyZjM2 MzQyZDM2MzQyMDNkM2UyMDMzMzkzOTMxMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQVMBMwEQQCAAIwCwMJACQDJQCQAAEo MA0GCSqGSIb3DQEBCwUAA4IBAQDAK8Z1RTBoXio/Qgc8BjnvOoyQH+yNbGNhwEZL 7FWExQFrWfANq++IXAcQDDGCuCIZcrhw8VrziPOtOJGMz3vWL0LvXrVXUZ4rvJop Wrz59IaB7SUG5jQsY7g013ZxoRtPmUPjVSk1ngviV/3RuiQ1p+9QvPkD3u7Z/j15 PXi0qB7DsHclM533mjEC6qicjRWhkhi7GupnmXVPvv9R6xlA9A5HzkNOyAyaJt/g OXWCwCvkL+gG/oVEFI22Ltkfw9F/Emdx/45OvwuSKKu9jwjFUTEssz4y5tbX9dQq KXYDZRuASl22mQHnvSVRrcWbCmC49ysihPhSvYzI1Nm+6xNq -----END CERTIFICATE-----Generated at Sun Dec 7 00:38:20 2025 by rpki-client