This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa File: 323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa (raw, json) Hash identifier: gMiVXZLJ/9DguVi8cY3O9jgAHLxkekctq4KTVNjceI0= Subject key identifier: D2:2C:F3:FD:B0:10:02:73:CA:1A:6B:67:A0:43:EF:4C:9F:1A:42:95 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 31BD6A68041A3E3E7E189B179BFA5840CAF18854 Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa Signing time: Tue 11 Nov 2025 06:01:53 +0000 ROA not before: Tue 11 Nov 2025 05:56:53 +0000 ROA not after: Tue 10 Nov 2026 06:01:53 +0000 asID: 153087 IP address blocks: 2404:97c0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:bd:6a:68:04:1a:3e:3e:7e:18:9b:17:9b:fa:58:40:ca:f1:88:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Nov 11 05:56:53 2025 GMT Not After : Nov 10 06:01:53 2026 GMT Subject: CN=D22CF3FDB0100273CA1A6B67A043EF4C9F1A4295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:19:3f:f6:5e:cf:6e:c3:d7:d0:f5:52:9e: 93:34:fd:c6:3d:40:a3:a7:a0:f1:21:2e:95:5b:64: d4:cd:94:88:e8:a7:9c:a2:35:5a:6c:98:6b:c5:77: 0d:a0:ad:8a:e9:94:59:8c:48:9c:81:c7:7a:d3:9d: 37:fe:09:34:f1:97:ec:a4:9e:fb:3b:b0:c1:1b:6e: dc:11:5c:39:7f:03:15:a0:ab:67:c2:13:d9:b3:b3: 67:90:d0:b9:2f:f8:f9:5a:a3:69:23:97:53:bd:e1: 0f:b3:24:10:f3:03:b3:93:4b:34:3c:9f:2c:b0:21: 3f:92:a8:3f:c1:18:5e:23:35:3d:cf:79:3b:f6:56: 11:aa:60:3c:c1:5e:37:d6:1e:cf:b3:4e:c6:f3:df: 9e:90:bf:a9:9e:77:62:ee:b8:d1:5c:0e:d5:9c:a6: bc:ea:29:97:fb:26:91:a9:9c:79:da:2e:44:9c:cc: c6:38:4d:eb:bc:7f:bc:8b:44:5c:ca:df:15:1c:a0: 4f:b1:6e:c7:db:c1:c5:ae:34:56:5c:78:2b:62:6f: 51:b4:39:42:d8:ef:10:5a:49:fd:9e:76:0a:a2:49: 04:82:7e:2f:15:e0:64:8b:7b:0f:05:c7:d6:fb:58: f7:90:81:59:33:8d:34:65:2c:fe:29:8a:1f:a3:d3: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2C:F3:FD:B0:10:02:73:CA:1A:6B:67:A0:43:EF:4C:9F:1A:42:95 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a313030303a3a2f33362d3336203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:1000::/36 Signature Algorithm: sha256WithRSAEncryption 2a:98:b9:ec:97:b3:f0:32:84:1e:04:68:e0:22:9b:5a:8b:99: 2b:5d:22:43:37:76:11:df:33:7f:d0:fe:1b:f7:f8:df:c5:a5: cc:cc:19:34:bf:6d:b9:68:59:0f:85:f4:18:ff:09:50:00:47: 58:42:b6:71:d3:62:27:f6:dc:ed:32:24:e9:e4:88:42:0f:3b: 20:05:45:c7:bb:5c:af:09:ca:c2:a7:87:1d:8c:db:99:42:dc: 95:52:3c:cc:7e:ed:f5:1f:13:bf:9e:9b:3b:7d:e4:8c:bc:d5: 48:e7:fc:67:29:f7:f0:6d:3f:c3:cf:0e:bb:ee:ba:7a:d6:d7: f1:f0:ca:3b:79:30:5b:fb:36:46:45:3e:7c:27:9c:01:1f:da: ec:da:b7:45:e9:0f:ef:d9:25:43:5f:b0:5f:ef:58:0b:a2:2e: 71:7e:cb:79:4f:fe:c5:ee:bc:5c:9c:7e:b4:d0:9c:9d:b2:30: 5d:5f:df:54:ac:ae:60:eb:29:de:aa:d4:c1:09:3a:d4:9d:86: 04:de:64:36:61:96:71:99:04:63:a8:b3:57:61:c3:10:a7:76: 3e:7c:18:41:63:4d:05:14:70:77:34:b1:0d:64:37:1c:a6:02: 8d:dc:82:b7:41:5b:22:4f:a6:f4:87:b5:69:26:78:8e:f3:34: fa:eb:91:13 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUMb1qaAQaPj5+GJsXm/pYQMrxiFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNTExMTEwNTU2NTNaFw0yNjExMTAwNjAxNTNaMDMxMTAvBgNV BAMTKEQyMkNGM0ZEQjAxMDAyNzNDQTFBNkI2N0EwNDNFRjRDOUYxQTQyOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMhk/9l7PbsPX0PVSnpM0/cY9 QKOnoPEhLpVbZNTNlIjop5yiNVpsmGvFdw2grYrplFmMSJyBx3rTnTf+CTTxl+yk nvs7sMEbbtwRXDl/AxWgq2fCE9mzs2eQ0Lkv+Plao2kjl1O94Q+zJBDzA7OTSzQ8 nyywIT+SqD/BGF4jNT3PeTv2VhGqYDzBXjfWHs+zTsbz356Qv6med2LuuNFcDtWc przqKZf7JpGpnHnaLkSczMY4Teu8f7yLRFzK3xUcoE+xbsfbwcWuNFZceCtib1G0 OULY7xBaSf2edgqiSQSCfi8V4GSLew8Fx9b7WPeQgVkzjTRlLP4pih+j0yZ9AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU0izz/bAQAnPKGmtnoEPvTJ8aQpUwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzEzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BJfAEDANBgkqhkiG9w0BAQsFAAOCAQEAKpi57Jez8DKEHgRo4CKbWouZK10iQzd2 Ed8zf9D+G/f438WlzMwZNL9tuWhZD4X0GP8JUABHWEK2cdNiJ/bc7TIk6eSIQg87 IAVFx7tcrwnKwqeHHYzbmULclVI8zH7t9R8Tv56bO33kjLzVSOf8Zyn38G0/w88O u+66etbX8fDKO3kwW/s2RkU+fCecAR/a7Nq3RekP79klQ1+wX+9YC6IucX7LeU/+ xe68XJx+tNCcnbIwXV/fVKyuYOsp3qrUwQk61J2GBN5kNmGWcZkEY6izV2HDEKd2 PnwYQWNNBRRwdzSxDWQ3HKYCjdyCt0FbIk+m9Ie1aSZ4jvM0+uuREw== -----END CERTIFICATE-----Generated at Wed Dec 3 17:39:10 2025 by rpki-client