This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa File: 323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa (raw, json) Hash identifier: x6IB55et7Umm41gvuMH6aPtv2IqrtCDIYQnCW4yZ0Jc= Subject key identifier: B4:FD:C9:5E:64:B5:FD:FC:D1:7A:77:20:86:48:61:5B:CA:36:16:80 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 03AB42A6D34CA663C106E176DC39CCEF4DF14F7D Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa Signing time: Tue 11 Nov 2025 07:00:02 +0000 ROA not before: Tue 11 Nov 2025 06:55:02 +0000 ROA not after: Tue 10 Nov 2026 07:00:02 +0000 asID: 153087 IP address blocks: 2404:97c0:2230::/44 maxlen: 44 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ab:42:a6:d3:4c:a6:63:c1:06:e1:76:dc:39:cc:ef:4d:f1:4f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Nov 11 06:55:02 2025 GMT Not After : Nov 10 07:00:02 2026 GMT Subject: CN=B4FDC95E64B5FDFCD17A77208648615BCA361680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:10:6c:b4:da:b6:e2:5c:79:f7:5a:74:e7:2a: c0:b7:9f:ab:54:00:fb:3f:59:83:f2:94:96:a4:ef: e1:70:0f:7f:52:e9:ce:96:f0:43:b3:ef:d1:6f:10: 08:a5:2e:67:02:aa:f5:10:d8:46:0d:30:ad:63:2a: 30:3b:c0:7e:2e:c8:11:df:f6:91:70:46:44:ee:48: 75:c0:0a:70:87:9e:9e:f7:8c:05:62:1c:43:4f:24: 9d:cf:0e:ad:b8:16:20:a7:64:c6:42:6b:b6:17:9b: e3:fa:2b:85:1e:e8:59:35:c8:dd:ff:48:68:94:26: 2d:f0:c3:f9:2e:9d:a2:5e:56:42:65:fc:21:ec:9e: aa:c6:43:3b:97:06:89:79:e9:a0:62:30:0b:b7:6b: c6:cf:dd:7f:d7:95:b8:5c:06:f1:64:28:28:d3:7f: 5c:17:bb:16:72:a6:05:1f:d0:75:37:48:7a:de:f7: b4:a3:1e:22:c3:f7:af:14:ec:da:1a:de:aa:af:d3: 9c:7d:39:10:71:1d:0d:f9:02:49:86:4d:28:d2:da: 93:ba:a1:7d:d7:1a:ca:92:fb:be:ff:57:4f:55:01: 3a:a8:68:39:65:81:58:4a:6c:aa:5d:b2:0e:c9:cf: ac:09:f3:0d:b2:2d:35:73:be:a5:95:52:b8:46:f6: 1a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FD:C9:5E:64:B5:FD:FC:D1:7A:77:20:86:48:61:5B:CA:36:16:80 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a323233303a3a2f34342d3434203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:2230::/44 Signature Algorithm: sha256WithRSAEncryption c2:2c:d3:61:46:14:6f:df:33:93:9a:2d:64:e8:15:88:92:b7: 28:d0:d1:23:00:61:4d:6a:c0:99:6c:b7:e1:f0:b4:69:78:82: 25:71:f6:d3:fb:9c:c7:e5:ce:40:fd:aa:74:dc:f1:aa:ea:a5: 0a:8e:2f:4e:36:01:37:b8:ad:9b:e3:56:4d:2e:d9:6a:db:3e: 82:7b:96:f6:ca:32:4a:08:f8:22:e3:80:69:d4:a3:6d:fb:c1: 7e:53:a1:cd:10:92:15:91:9e:44:a2:b8:75:07:c5:2f:43:c1: be:72:0a:21:6d:b4:a0:8b:a7:6f:68:35:0a:de:9d:f5:9b:25: c2:6f:a3:66:18:e6:93:10:20:9c:54:2b:a3:94:b3:26:c1:d2: 63:57:f9:1d:ff:bd:8f:b9:ee:e9:81:4e:58:a3:a6:09:de:52: 9c:e0:8e:00:36:43:29:bb:a3:f4:43:ca:9e:89:b8:80:a6:51: 37:58:2f:e5:33:0c:c8:bc:2b:59:5f:7d:f0:80:b7:b2:7b:f6: 7e:b3:44:98:19:01:83:c9:77:20:82:6d:ea:e5:96:9b:cf:87: 9f:3a:fd:40:23:57:d5:1e:60:ff:fa:7f:20:f6:43:8f:d9:90: 1c:39:87:a6:18:37:29:20:9c:13:c1:c7:1c:81:e2:25:2e:64: 80:3c:06:82 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUA6tCptNMpmPBBuF23DnM703xT30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNTExMTEwNjU1MDJaFw0yNjExMTAwNzAwMDJaMDMxMTAvBgNV BAMTKEI0RkRDOTVFNjRCNUZERkNEMTdBNzcyMDg2NDg2MTVCQ0EzNjE2ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChEGy02rbiXHn3WnTnKsC3n6tU APs/WYPylJak7+FwD39S6c6W8EOz79FvEAilLmcCqvUQ2EYNMK1jKjA7wH4uyBHf 9pFwRkTuSHXACnCHnp73jAViHENPJJ3PDq24FiCnZMZCa7YXm+P6K4Ue6Fk1yN3/ SGiUJi3ww/kunaJeVkJl/CHsnqrGQzuXBol56aBiMAu3a8bP3X/XlbhcBvFkKCjT f1wXuxZypgUf0HU3SHre97SjHiLD968U7Noa3qqv05x9ORBxHQ35AkmGTSjS2pO6 oX3XGsqS+77/V09VATqoaDllgVhKbKpdsg7Jz6wJ8w2yLTVzvqWVUrhG9hpDAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUtP3JXmS1/fzRencghkhhW8o2FoAwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMjMzMzAz YTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQk BJfAIjAwDQYJKoZIhvcNAQELBQADggEBAMIs02FGFG/fM5OaLWToFYiStyjQ0SMA YU1qwJlst+HwtGl4giVx9tP7nMflzkD9qnTc8arqpQqOL042ATe4rZvjVk0u2Wrb PoJ7lvbKMkoI+CLjgGnUo237wX5Toc0QkhWRnkSiuHUHxS9Dwb5yCiFttKCLp29o NQrenfWbJcJvo2YY5pMQIJxUK6OUsybB0mNX+R3/vY+57umBTlijpgneUpzgjgA2 Qym7o/RDyp6JuICmUTdYL+UzDMi8K1lfffCAt7J79n6zRJgZAYPJdyCCberllpvP h586/UAjV9UeYP/6fyD2Q4/ZkBw5h6YYNykgnBPBxxyB4iUuZIA8BoI= -----END CERTIFICATE-----Generated at Wed Dec 3 17:39:08 2025 by rpki-client