This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa File: 323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa (raw, json) Hash identifier: 9sSxWhK1ekW9sX4kW8H5um/xDsKQzfqceGtwbeCUELE= Subject key identifier: 41:C1:E0:11:0E:99:70:69:D5:31:5A:A1:9E:3C:D6:B1:97:B4:EC:04 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 74B3D889CBFCF44FD27DA028F55680D9E272CA60 Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa Signing time: Tue 11 Nov 2025 06:01:53 +0000 ROA not before: Tue 11 Nov 2025 05:56:53 +0000 ROA not after: Tue 10 Nov 2026 06:01:53 +0000 asID: 153087 IP address blocks: 2404:97c0:6000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b3:d8:89:cb:fc:f4:4f:d2:7d:a0:28:f5:56:80:d9:e2:72:ca:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Nov 11 05:56:53 2025 GMT Not After : Nov 10 06:01:53 2026 GMT Subject: CN=41C1E0110E997069D5315AA19E3CD6B197B4EC04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c9:42:d2:8c:07:d5:01:ff:76:69:27:e4:92: 7c:fd:57:29:d2:0a:41:08:0c:a6:04:66:a3:c1:8a: c5:81:92:69:a8:2c:0c:34:92:16:8e:f1:7f:77:70: 6a:17:54:cf:14:83:2f:0f:90:30:cf:a4:90:90:c6: 8c:49:2c:82:2e:00:9d:8b:4d:3e:c7:83:5f:11:9b: 78:a1:e9:52:a9:bb:d8:0a:52:54:f9:a2:66:84:ce: 4e:5b:44:b5:92:d9:8b:39:7f:a2:8f:11:67:30:58: 60:91:5d:35:00:f3:36:8e:0b:e9:11:53:27:36:ec: f6:c1:1e:54:f5:d1:36:77:5f:88:21:8f:a7:58:69: 25:9f:18:69:08:0c:5f:59:bc:fc:4e:08:44:12:fa: de:e8:56:d8:eb:f5:2b:99:1f:a8:d3:b6:33:bd:bc: 33:b8:6e:55:d0:3d:6e:fb:27:43:38:12:11:b3:27: 59:6d:a1:20:51:a4:65:27:92:a5:75:f3:c6:30:7a: 9f:eb:93:61:62:44:e6:7b:33:70:1d:15:12:2a:66: b3:9f:a3:64:00:a9:60:bb:67:46:5b:b9:c9:fc:03: 3b:34:5c:ff:4e:ed:19:4a:d8:60:a5:2e:fb:26:86: 80:d2:1c:86:2e:8d:6b:3a:89:eb:33:8c:e8:55:03: 53:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C1:E0:11:0E:99:70:69:D5:31:5A:A1:9E:3C:D6:B1:97:B4:EC:04 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a363030303a3a2f33362d3336203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:6000::/36 Signature Algorithm: sha256WithRSAEncryption 80:3d:89:75:a4:82:4b:f5:76:56:8e:6e:a0:bd:db:5b:53:6f: ec:8a:ed:55:23:6d:b9:15:fb:2e:69:d0:0a:e6:18:12:10:40: 18:54:34:e2:44:7e:2f:0c:ce:a1:f0:56:ce:c8:30:9d:ca:54: 25:1a:e9:73:90:c0:18:6e:ec:a1:06:ae:fb:3a:b1:94:14:8d: 24:14:b8:6b:e4:39:3e:7e:79:da:7c:ce:06:6a:4a:c3:b8:e7: 4b:d6:3f:c1:12:e7:f2:be:82:52:aa:33:bb:12:50:65:95:f1: 06:1f:e5:c8:6c:23:b3:78:e5:05:1e:69:ac:fb:0e:59:4d:87: 89:45:7a:49:28:fa:c5:45:28:11:7d:2b:f0:20:53:54:58:05: 30:b1:fd:40:39:b9:31:71:06:36:58:16:cc:60:79:53:57:0f: 76:68:b9:66:0b:77:0a:4f:aa:fa:4a:0f:55:d6:01:f1:c5:4a: 04:eb:f5:87:2f:3c:b4:c2:81:cd:c3:0e:03:e7:7d:11:20:9f: 90:8c:af:71:6b:9a:db:d8:0c:54:2b:11:82:e6:0d:03:65:d5: 16:e1:ff:95:b5:17:17:3f:0e:3b:88:e3:40:8d:e2:18:cf:64: f5:a1:2f:4c:61:52:2c:73:1e:92:1d:9b:f0:cf:16:80:61:55: 64:34:8a:6a -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUdLPYicv89E/SfaAo9VaA2eJyymAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNTExMTEwNTU2NTNaFw0yNjExMTAwNjAxNTNaMDMxMTAvBgNV BAMTKDQxQzFFMDExMEU5OTcwNjlENTMxNUFBMTlFM0NENkIxOTdCNEVDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyULSjAfVAf92aSfkknz9VynS CkEIDKYEZqPBisWBkmmoLAw0khaO8X93cGoXVM8Ugy8PkDDPpJCQxoxJLIIuAJ2L TT7Hg18Rm3ih6VKpu9gKUlT5omaEzk5bRLWS2Ys5f6KPEWcwWGCRXTUA8zaOC+kR Uyc27PbBHlT10TZ3X4ghj6dYaSWfGGkIDF9ZvPxOCEQS+t7oVtjr9SuZH6jTtjO9 vDO4blXQPW77J0M4EhGzJ1ltoSBRpGUnkqV188Ywep/rk2FiROZ7M3AdFRIqZrOf o2QAqWC7Z0Zbucn8Azs0XP9O7RlK2GClLvsmhoDSHIYujWs6ieszjOhVA1P7AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUQcHgEQ6ZcGnVMVqhnjzWsZe07AQwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzYzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BJfAYDANBgkqhkiG9w0BAQsFAAOCAQEAgD2JdaSCS/V2Vo5uoL3bW1Nv7IrtVSNt uRX7LmnQCuYYEhBAGFQ04kR+LwzOofBWzsgwncpUJRrpc5DAGG7soQau+zqxlBSN JBS4a+Q5Pn552nzOBmpKw7jnS9Y/wRLn8r6CUqozuxJQZZXxBh/lyGwjs3jlBR5p rPsOWU2HiUV6SSj6xUUoEX0r8CBTVFgFMLH9QDm5MXEGNlgWzGB5U1cPdmi5Zgt3 Ck+q+koPVdYB8cVKBOv1hy88tMKBzcMOA+d9ESCfkIyvcWua29gMVCsRguYNA2XV FuH/lbUXFz8OO4jjQI3iGM9k9aEvTGFSLHMekh2b8M8WgGFVZDSKag== -----END CERTIFICATE-----Generated at Wed Dec 3 17:38:51 2025 by rpki-client