This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/323430343a336438303a3a2f33322d313238203d3e20313531383137.roa File: 323430343a336438303a3a2f33322d313238203d3e20313531383137.roa (raw, json) Hash identifier: kwIDS2WtcAr/pe8SaKAIl5o6r8SyTNbIzfou65qsj5w= Subject key identifier: B3:E3:85:C1:87:69:D5:96:CA:49:B2:AC:DE:82:8D:59:51:46:0D:02 Certificate issuer: /CN=A91115900000/serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4 Certificate serial: 2E08A44172B97623F205D31FFA98F16AE82A527F Authority key identifier: 9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/323430343a336438303a3a2f33322d313238203d3e20313531383137.roa Signing time: Mon 15 Dec 2025 03:07:09 +0000 ROA not before: Mon 15 Dec 2025 03:02:09 +0000 ROA not after: Mon 14 Dec 2026 03:07:09 +0000 asID: 151817 IP address blocks: 2404:3d80::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:08:a4:41:72:b9:76:23:f2:05:d3:1f:fa:98:f1:6a:e8:2a:52:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91115900000, serialNumber=9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4 Validity Not Before: Dec 15 03:02:09 2025 GMT Not After : Dec 14 03:07:09 2026 GMT Subject: CN=B3E385C18769D596CA49B2ACDE828D5951460D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:77:67:fb:c1:5c:3f:03:53:9e:a4:3c:42: 7d:9f:be:55:25:b3:59:66:d8:43:4d:fb:1d:98:76: 9c:f6:ea:58:32:f2:5a:6c:81:dc:af:27:ca:c4:94: 8c:39:c9:7a:fc:34:1c:51:8c:36:4a:a6:04:11:c3: f6:d1:8e:ee:4a:10:56:03:a1:46:26:22:32:6c:d9: ed:9e:94:02:f4:47:36:e3:4b:67:7d:d9:45:3c:58: 5f:2c:5b:a9:66:c6:3c:d3:1f:13:fb:e3:3e:53:8a: 0e:2f:15:82:9f:95:5d:a3:65:f6:29:7b:9f:87:bc: ba:1d:56:65:40:e6:28:01:8c:81:5d:0e:05:ba:67: e8:08:5d:bb:e8:c1:bb:ed:c3:58:46:83:c5:a2:11: f0:33:61:04:e0:e8:01:53:e9:6a:b7:87:ab:04:af: 15:6f:ee:00:40:fd:dd:4d:7e:c8:84:ef:28:40:66: a1:26:db:da:20:84:cd:d5:2a:a2:61:61:3b:c8:4d: b5:3b:a4:c4:46:94:b2:3b:bb:1a:1f:92:61:42:91: 3e:4b:aa:0e:fa:7c:3a:f2:5b:2e:1f:10:21:ea:01: 9c:f9:46:d7:00:80:8e:0f:08:44:f8:e3:70:7a:1e: b7:8d:8c:44:d3:9e:d4:c7:75:91:27:21:17:1f:9c: cb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E3:85:C1:87:69:D5:96:CA:49:B2:AC:DE:82:8D:59:51:46:0D:02 X509v3 Authority Key Identifier: keyid:9C:DA:71:11:6E:22:81:2A:DF:60:B7:50:0F:92:D7:E4:CB:B2:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/9CDA71116E22812ADF60B7500F92D7E4CBB2B9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nNpxEW4igSrfYLdQD5LX5MuyubQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/8/323430343a336438303a3a2f33322d313238203d3e20313531383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:3d80::/32 Signature Algorithm: sha256WithRSAEncryption 77:db:cd:ca:2b:5e:4b:46:99:c2:18:b6:cb:12:54:30:a5:44: 50:9c:31:36:32:bb:33:5e:86:6f:49:1f:f7:48:71:2b:47:8e: 22:cf:84:e0:c8:c8:6a:c8:42:fc:bb:5f:61:bd:54:67:61:85: a5:19:e3:8d:49:6d:26:5e:a4:9b:6b:d7:1a:c9:db:44:4a:dc: e3:12:90:02:40:40:7a:49:2a:17:76:f1:75:64:5e:3f:47:ec: 39:ef:5c:e0:f5:f2:89:55:61:b8:d2:e3:47:66:77:38:b2:70: 28:e4:2e:9d:90:b6:c9:f0:52:26:7a:84:33:01:14:7f:ae:53: 62:2d:65:00:bf:c1:dc:55:8b:ce:54:97:de:3e:a6:05:17:62: cd:6e:3f:38:30:87:f7:90:39:af:b2:0b:19:0c:4c:54:66:76: 13:b0:6b:97:86:4f:b2:e4:f6:4b:e0:b6:94:91:a3:df:c9:3a: a7:15:ec:dd:d9:77:c7:41:a1:27:06:0d:c5:84:a7:87:26:e7: 96:3a:38:2f:0c:04:da:86:de:23:a0:2f:42:27:92:2f:c9:dd: 08:7b:a6:5a:2d:1c:6f:c5:66:98:e9:56:39:50:82:75:3d:06: 22:43:7e:8e:bc:12:d2:a7:c3:cb:ba:2a:4f:a2:03:20:a9:6f: 52:19:ce:ce -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgIULgikQXK5diPyBdMf+pjxaugqUn8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg5Q0RBNzExMTZF MjI4MTJBREY2MEI3NTAwRjkyRDdFNENCQjJCOUI0MB4XDTI1MTIxNTAzMDIwOVoX DTI2MTIxNDAzMDcwOVowMzExMC8GA1UEAxMoQjNFMzg1QzE4NzY5RDU5NkNBNDlC MkFDREU4MjhENTk1MTQ2MEQwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlWd2f7wVw/A1OepDxCfZ++VSWzWWbYQ037HZh2nPbqWDLyWmyB3K8nysSU jDnJevw0HFGMNkqmBBHD9tGO7koQVgOhRiYiMmzZ7Z6UAvRHNuNLZ33ZRTxYXyxb qWbGPNMfE/vjPlOKDi8Vgp+VXaNl9il7n4e8uh1WZUDmKAGMgV0OBbpn6Ahdu+jB u+3DWEaDxaIR8DNhBODoAVPpareHqwSvFW/uAED93U1+yITvKEBmoSbb2iCEzdUq omFhO8hNtTukxEaUsju7Gh+SYUKRPkuqDvp8OvJbLh8QIeoBnPlG1wCAjg8IRPjj cHoet42MRNOe1Md1kSchFx+cy0cCAwEAAaOCAj8wggI7MB0GA1UdDgQWBBSz44XB h2nVlspJsqzego1ZUUYNAjAfBgNVHSMEGDAWgBSc2nERbiKBKt9gt1APktfky7K5 tDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1 NWM5MWJlM2Y5ZC84LzlDREE3MTExNkUyMjgxMkFERjYwQjc1MDBGOTJEN0U0Q0JC MkI5QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL25OcHhFVzRpZ1NyZllMZFFENUxYNU11eXViUS5jZXIwgaQGCCsG AQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBraS1ycHMuYXJp bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5 ZC84LzMyMzQzMDM0M2EzMzY0MzgzMDNhM2EyZjMzMzIyZDMxMzIzODIwM2QzZTIw MzEzNTMxMzgzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsG AQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAQ9gDANBgkqhkiG9w0BAQsFAAOCAQEA d9vNyiteS0aZwhi2yxJUMKVEUJwxNjK7M16Gb0kf90hxK0eOIs+E4MjIashC/Ltf Yb1UZ2GFpRnjjUltJl6km2vXGsnbRErc4xKQAkBAekkqF3bxdWReP0fsOe9c4PXy iVVhuNLjR2Z3OLJwKOQunZC2yfBSJnqEMwEUf65TYi1lAL/B3FWLzlSX3j6mBRdi zW4/ODCH95A5r7ILGQxMVGZ2E7Brl4ZPsuT2S+C2lJGj38k6pxXs3dl3x0GhJwYN xYSnhybnljo4LwwE2obeI6AvQieSL8ndCHumWi0cb8VmmOlWOVCCdT0GIkN+jrwS 0qfDy7oqT6IDIKlvUhnOzg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:26 2025 by rpki-client