This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa
File: 323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa (raw, json)
Hash identifier: ycsPmIhX+8RJJvvnnAA0BSjR4kUtEE0MbQT8aQmoYAU=
Subject key identifier: A9:C5:57:99:EF:81:1E:B9:65:C5:DA:FC:28:39:6B:82:EE:DC:5E:35
Certificate issuer: /CN=A91650860000/serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Certificate serial: 1C156079CDA84E6929A8D44483F9272F165EDDE8
Authority key identifier: 6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa
Signing time: Mon 15 Dec 2025 06:03:48 +0000
ROA not before: Mon 15 Dec 2025 05:58:48 +0000
ROA not after: Mon 14 Dec 2026 06:03:48 +0000
asID: 149301
IP address blocks: 2001:df3:efc0::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 16:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:15:60:79:cd:a8:4e:69:29:a8:d4:44:83:f9:27:2f:16:5e:dd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91650860000, serialNumber=6FCBBD0425092663334FA1AA9A02292CB8416F51
Validity
Not Before: Dec 15 05:58:48 2025 GMT
Not After : Dec 14 06:03:48 2026 GMT
Subject: CN=A9C55799EF811EB965C5DAFC28396B82EEDC5E35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:ca:56:ee:1e:d0:e5:a0:b5:9e:db:1d:3d:
4f:3a:fc:ca:40:88:9a:bc:b4:30:89:81:d1:53:37:
64:b9:8a:ab:c3:db:78:37:47:1d:f4:3c:d0:4f:66:
bf:d8:8b:d4:50:d1:1e:34:68:14:33:a1:de:38:08:
59:3a:a1:b8:dd:48:e5:51:68:dc:0b:6f:63:65:1d:
09:57:93:a3:fd:aa:09:97:0e:a0:c6:81:63:c1:1c:
c1:32:79:ad:c9:55:bf:f8:82:6a:35:25:bb:3f:91:
6a:51:bd:91:5a:df:42:0e:54:b6:2b:ff:03:93:f5:
db:b0:5e:ef:60:ef:f1:bf:11:aa:51:34:5c:6c:62:
8e:80:a8:7e:96:f8:da:ee:81:a0:d3:5c:e3:85:86:
69:40:e3:71:06:96:6f:5a:a8:c8:c4:7a:cb:02:39:
3c:67:fd:c3:20:8a:13:1c:21:be:fb:7b:84:bc:e5:
c5:8a:27:23:4c:04:9b:40:67:f1:95:d2:97:be:92:
3a:2a:49:44:b8:1f:c0:11:17:4f:be:2b:65:e3:8f:
ae:12:e6:33:e7:db:55:42:10:a5:9e:b2:83:d1:d1:
e3:ba:8e:ee:3d:30:6e:ea:7e:9d:46:3d:a2:79:0b:
fb:b2:de:8f:e7:e9:90:20:9e:92:2b:ce:19:90:b4:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C5:57:99:EF:81:1E:B9:65:C5:DA:FC:28:39:6B:82:EE:DC:5E:35
X509v3 Authority Key Identifier:
keyid:6F:CB:BD:04:25:09:26:63:33:4F:A1:AA:9A:02:29:2C:B8:41:6F:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/6FCBBD0425092663334FA1AA9A02292CB8416F51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8u9BCUJJmMzT6GqmgIpLLhBb1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/6/323030313a6466333a656663303a3a2f34382d313238203d3e20313439333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:efc0::/48
Signature Algorithm: sha256WithRSAEncryption
32:f4:e0:a5:4c:02:0f:ef:f4:f5:d9:28:74:ce:50:2f:ef:24:
95:a3:b3:92:98:4f:1e:f8:16:12:b9:41:26:90:55:3b:fb:95:
f7:62:ca:48:a4:94:c9:de:e0:38:2f:68:2c:7b:b2:65:a0:55:
fd:23:21:0e:04:d3:2f:e1:75:dd:9c:e5:c2:15:43:14:e2:28:
80:29:8c:c5:fb:43:be:78:88:22:ff:e4:b3:73:68:4d:b1:c8:
e8:0e:99:aa:b6:61:82:24:6d:a8:91:0d:ba:67:a3:36:1b:dc:
43:8d:58:6b:0f:a3:63:2c:95:ed:05:e7:e6:63:c4:bc:73:3f:
b5:71:02:b1:9d:72:04:1b:2e:03:2c:40:83:ca:4d:a9:26:ae:
fe:bd:45:0a:d7:16:69:7e:c5:11:a7:57:bb:91:f5:9d:43:71:
fd:20:86:2d:68:8f:b9:a6:2a:68:52:6b:16:04:29:76:4a:47:
f7:d7:7e:9c:49:8e:8e:54:8b:3b:3a:63:8e:a1:84:04:82:0d:
fa:ff:f1:96:27:e7:b7:27:e7:d0:dd:eb:f4:9f:92:09:ea:e0:
ce:b0:75:c7:60:c1:72:1d:d6:d0:39:cc:ae:ea:bc:eb:4d:4f:
05:d5:06:8a:d0:ce:b8:23:c1:ce:55:90:02:78:62:70:5a:65:
c7:34:2b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:13:35 2025 by rpki-client