This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa File: 323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa (raw, json) Hash identifier: m4Qjt6x6f7mHe4i/Iubt+ryvfk1k2wGsuQa/3iUQfPg= Subject key identifier: 75:C9:42:11:78:54:6C:E3:3F:C7:21:80:3B:D1:7B:E2:0A:AB:54:51 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 3483EEBC61EFF17FC3FB288B4EE7D3D9F56D8B7C Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa Signing time: Thu 27 Nov 2025 09:00:02 +0000 ROA not before: Thu 27 Nov 2025 08:55:02 +0000 ROA not after: Thu 26 Nov 2026 09:00:02 +0000 asID: 153087 IP address blocks: 2404:97c0:200::/40 maxlen: 40 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:83:ee:bc:61:ef:f1:7f:c3:fb:28:8b:4e:e7:d3:d9:f5:6d:8b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Nov 27 08:55:02 2025 GMT Not After : Nov 26 09:00:02 2026 GMT Subject: CN=75C9421178546CE33FC721803BD17BE20AAB5451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:28:14:50:1e:ad:a1:e9:17:e2:2e:9d:14:eb: 99:ee:17:9f:be:45:f9:f1:80:dc:39:3e:b3:6d:0a: cf:ef:a8:6a:83:35:77:a2:cc:52:85:da:51:49:f5: a4:e7:a6:7d:de:b5:27:ba:a0:6b:64:3c:5a:f4:e0: b8:ee:03:e0:ee:bb:c7:0a:9d:aa:33:b2:ee:f4:bf: f7:5c:24:c4:23:0f:20:cd:57:1f:07:2a:ea:da:61: d3:5f:ea:5f:d5:4a:b9:b3:be:82:63:29:40:9e:7e: a8:d9:35:9b:06:1a:06:38:04:b0:fe:88:45:c2:5b: 2b:12:f6:7e:b3:d5:19:99:e5:e1:5c:8b:04:6b:be: 3e:01:52:01:2d:69:44:00:2e:d2:fe:ab:c8:fe:f3: 92:32:d3:da:d6:49:98:43:58:91:e5:1c:dc:62:5f: 5a:e3:7d:58:25:ad:14:60:c8:b9:2d:0e:f2:8f:52: a5:95:8c:6b:20:f1:5a:a8:2a:e7:81:a2:c0:3e:cc: b4:76:d5:ed:3f:63:87:21:29:d9:7a:79:06:e7:f1: 26:3a:d2:f7:de:b3:83:73:50:24:f4:72:15:f3:0c: 69:e1:bb:93:f6:fd:64:f9:31:a5:6a:95:65:75:d2: 3a:46:52:cf:b2:1a:2f:d3:be:d2:ea:a4:be:76:e6: c8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C9:42:11:78:54:6C:E3:3F:C7:21:80:3B:D1:7B:E2:0A:AB:54:51 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3230303a3a2f34302d3430203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:200::/40 Signature Algorithm: sha256WithRSAEncryption 0c:28:dc:1b:40:57:be:2d:aa:4e:f2:22:d4:95:78:1c:c9:91: 7f:12:c2:eb:67:6d:7d:4e:cb:58:30:9e:34:18:8b:0b:fe:c0: a1:d7:e8:33:a4:10:16:7e:03:44:de:a4:d6:4a:21:99:8b:0a: 57:99:57:fd:4a:19:81:7f:61:68:68:38:63:41:6a:0a:08:ec: dc:ef:af:11:36:fc:c7:2f:d4:a2:ce:16:b8:c4:1b:30:32:0f: 70:7b:13:ef:ba:9c:7b:ed:83:2c:ca:fb:f6:68:36:ee:13:a9: 82:f1:cf:6b:cf:0c:b3:a9:42:84:14:5b:d1:b7:a4:c9:7d:58: 87:62:3c:80:8c:1b:a4:47:b2:b7:a8:9b:b9:27:9c:31:80:37: f2:78:c5:75:20:81:b9:8b:ff:f8:dd:44:97:53:1e:59:b4:28: 2b:91:33:4a:11:01:4d:44:b8:a1:c6:fa:69:28:6f:e3:b5:a6: 30:c1:43:31:47:c8:b7:72:f8:df:c3:1a:b1:ee:f2:6f:4f:2a: 9c:90:bc:52:f4:3e:0e:d8:e4:ef:de:52:26:10:84:76:e8:5d: 6d:24:7d:a9:d0:71:67:d2:0e:d8:a5:5b:a9:ab:55:60:fa:5c: 77:91:b0:ad:b4:87:f2:bf:68:86:dc:bf:86:3c:83:ce:6e:3f: de:d2:26:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIPuvGHv8X/D+yiLTufT2fVti3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNTExMjcwODU1MDJaFw0yNjExMjYwOTAwMDJaMDMxMTAvBgNV BAMTKDc1Qzk0MjExNzg1NDZDRTMzRkM3MjE4MDNCRDE3QkUyMEFBQjU0NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNKBRQHq2h6RfiLp0U65nuF5++ RfnxgNw5PrNtCs/vqGqDNXeizFKF2lFJ9aTnpn3etSe6oGtkPFr04LjuA+Duu8cK naozsu70v/dcJMQjDyDNVx8HKuraYdNf6l/VSrmzvoJjKUCefqjZNZsGGgY4BLD+ iEXCWysS9n6z1RmZ5eFciwRrvj4BUgEtaUQALtL+q8j+85Iy09rWSZhDWJHlHNxi X1rjfVglrRRgyLktDvKPUqWVjGsg8VqoKueBosA+zLR21e0/Y4chKdl6eQbn8SY6 0vfes4NzUCT0chXzDGnhu5P2/WT5MaVqlWV10jpGUs+yGi/TvtLqpL525sijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdclCEXhUbOM/xyGAO9F74gqrVFEwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMDMwM2Ez YTJmMzQzMDJkMzQzMDIwM2QzZTIwMzEzNTMzMzAzODM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJASX wAIwDQYJKoZIhvcNAQELBQADggEBAAwo3BtAV74tqk7yItSVeBzJkX8SwutnbX1O y1gwnjQYiwv+wKHX6DOkEBZ+A0TepNZKIZmLCleZV/1KGYF/YWhoOGNBagoI7Nzv rxE2/Mcv1KLOFrjEGzAyD3B7E++6nHvtgyzK+/ZoNu4TqYLxz2vPDLOpQoQUW9G3 pMl9WIdiPICMG6RHsreom7knnDGAN/J4xXUggbmL//jdRJdTHlm0KCuRM0oRAU1E uKHG+mkob+O1pjDBQzFHyLdy+N/DGrHu8m9PKpyQvFL0Pg7Y5O/eUiYQhHboXW0k fanQcWfSDtilW6mrVWD6XHeRsK20h/K/aIbcv4Y8g85uP97SJiM= -----END CERTIFICATE-----Generated at Wed Dec 3 17:39:08 2025 by rpki-client