This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa File: 323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa (raw, json) Hash identifier: XNCmFkc+Y1ezpd8HyKgYjMw793AZeggbaTFG/fmKwzU= Subject key identifier: 68:FE:66:D2:70:85:35:D8:E0:0B:32:81:2F:49:B9:DE:22:1C:24:54 Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Certificate serial: 54798121544A45596FF8553625648803D185D6CA Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa Signing time: Sat 08 Nov 2025 13:14:34 +0000 ROA not before: Sat 08 Nov 2025 13:09:34 +0000 ROA not after: Sat 07 Nov 2026 13:14:34 +0000 asID: 399170 IP address blocks: 2403:2500:9000:129::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:79:81:21:54:4a:45:59:6f:f8:55:36:25:64:88:03:d1:85:d6:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Validity Not Before: Nov 8 13:09:34 2025 GMT Not After : Nov 7 13:14:34 2026 GMT Subject: CN=68FE66D2708535D8E00B32812F49B9DE221C2454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:37:6f:8e:9f:8e:49:52:77:00:8b:4b:79:7c: cd:04:97:5e:54:c7:df:57:7b:e2:0c:15:07:16:aa: e2:6c:02:d1:f1:a0:f6:7e:2c:b7:ef:f1:7c:12:15: 71:5f:da:d2:31:b7:b8:de:7a:3f:0c:78:a0:49:71: c8:6f:af:ed:20:e3:bf:19:ac:9d:84:7a:4e:62:50: bb:9c:44:eb:c0:ca:b5:39:d5:ff:95:40:25:57:9b: 9e:79:41:85:14:8d:4f:f7:7a:18:b6:c3:47:5b:f4: 5e:a8:67:de:3a:db:df:98:85:6d:c7:22:55:bf:f8: 4c:10:57:fd:c6:42:9c:9d:48:22:ea:37:6a:42:c2: 27:4a:fa:80:ec:3a:5d:d6:e2:e1:ab:fe:ff:21:2b: 7b:55:62:04:39:20:13:ab:e7:78:d7:33:a0:b9:55: 37:2a:23:78:da:b1:06:ed:2c:36:77:86:cc:67:18: e2:23:18:0a:90:05:d2:79:5b:ad:14:03:dd:6d:e9: 37:9d:0c:c3:a3:4c:17:05:a9:47:52:f7:1b:24:74: c9:99:dd:64:2a:9c:86:4d:1c:b6:59:f8:f4:cb:9e: 10:a6:b7:8e:01:4a:06:a3:b3:cc:97:3f:a6:21:60: 78:60:0e:ca:27:ee:48:4f:77:b1:a3:61:34:80:c7: 24:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FE:66:D2:70:85:35:D8:E0:0B:32:81:2F:49:B9:DE:22:1C:24:54 X509v3 Authority Key Identifier: keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a393030303a3132393a3a2f36342d3634203d3e20333939313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2500:9000:129::/64 Signature Algorithm: sha256WithRSAEncryption 3b:3c:ee:e6:a0:74:0c:d5:8d:6d:55:00:32:5c:de:9e:73:c1: e4:70:19:46:16:73:7f:23:4f:07:d5:e1:c6:6e:ae:6c:85:7e: f4:19:6d:bd:1f:aa:6d:48:ea:a8:2a:21:3c:e4:62:40:1a:f6: 8c:24:76:cd:4a:2e:df:45:fa:e1:cc:07:86:46:87:18:f6:3f: dd:3a:92:d8:49:65:ea:71:3c:e9:cb:ea:4b:3e:d9:14:a9:7b: 7c:00:23:cf:04:e0:63:2a:02:6d:bc:9e:0c:fd:34:0e:d0:70: b9:f9:a3:b5:6f:5c:c8:83:d1:6d:bd:77:d7:fb:14:b5:74:f7: 3c:2e:e2:17:da:b6:1b:e1:5c:2e:34:7b:53:5a:dc:f0:cf:14: 7d:fb:e5:bb:71:69:3f:91:b4:8d:db:04:fa:77:c2:a1:9d:14: e7:83:da:22:0a:e3:09:7d:7b:2c:df:98:63:e3:d6:3e:e6:12: d2:11:fa:0a:9e:7e:11:33:41:01:6b:8e:04:d6:11:13:c7:a9: df:4e:22:09:e5:e7:1e:0a:81:de:f9:75:89:bc:8e:40:a3:4e: 04:15:b8:d4:ee:86:00:00:99:c9:20:35:1c:fc:a0:37:a9:15: 9c:b6:49:ac:e3:02:a0:f4:14:a6:f8:b3:f1:78:7b:1e:6c:c2: 50:e2:95:a5 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUVHmBIVRKRVlv+FU2JWSIA9GF1sowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0 QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI1MTEwODEzMDkzNFoX DTI2MTEwNzEzMTQzNFowMzExMC8GA1UEAxMoNjhGRTY2RDI3MDg1MzVEOEUwMEIz MjgxMkY0OUI5REUyMjFDMjQ1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANk3b46fjklSdwCLS3l8zQSXXlTH31d74gwVBxaq4mwC0fGg9n4st+/xfBIV cV/a0jG3uN56Pwx4oElxyG+v7SDjvxmsnYR6TmJQu5xE68DKtTnV/5VAJVebnnlB hRSNT/d6GLbDR1v0Xqhn3jrb35iFbcciVb/4TBBX/cZCnJ1IIuo3akLCJ0r6gOw6 Xdbi4av+/yEre1ViBDkgE6vneNczoLlVNyojeNqxBu0sNneGzGcY4iMYCpAF0nlb rRQD3W3pN50Mw6NMFwWpR1L3GyR0yZndZCqchk0ctln49MueEKa3jgFKBqOzzJc/ piFgeGAOyifuSE93saNhNIDHJKkCAwEAAaOCAlMwggJPMB0GA1UdDgQWBBRo/mbS cIU12OALMoEvSbneIhwkVDAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2 ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgbQGCCsG AQUFBwELBIGnMIGkMIGhBggrBgEFBQcwC4aBlHJzeW5jOi8vcnBraS1ycHMuYXJp bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4 Ni8zLzMyMzQzMDMzM2EzMjM1MzAzMDNhMzkzMDMwMzAzYTMxMzIzOTNhM2EyZjM2 MzQyZDM2MzQyMDNkM2UyMDMzMzkzOTMxMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAkBggrBgEFBQcBBwEB/wQVMBMwEQQCAAIwCwMJACQDJQCQAAEp MA0GCSqGSIb3DQEBCwUAA4IBAQA7PO7moHQM1Y1tVQAyXN6ec8HkcBlGFnN/I08H 1eHGbq5shX70GW29H6ptSOqoKiE85GJAGvaMJHbNSi7fRfrhzAeGRocY9j/dOpLY SWXqcTzpy+pLPtkUqXt8ACPPBOBjKgJtvJ4M/TQO0HC5+aO1b1zIg9FtvXfX+xS1 dPc8LuIX2rYb4VwuNHtTWtzwzxR9++W7cWk/kbSN2wT6d8KhnRTng9oiCuMJfXss 35hj49Y+5hLSEfoKnn4RM0EBa44E1hETx6nfTiIJ5eceCoHe+XWJvI5Ao04EFbjU 7oYAAJnJIDUc/KA3qRWctkms4wKg9BSm+LPxeHsebMJQ4pWl -----END CERTIFICATE-----Generated at Sat Dec 6 23:42:50 2025 by rpki-client