This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3a2f34302d3430203d3e20313533303837.roa File: 323430343a393763303a3a2f34302d3430203d3e20313533303837.roa (raw, json) Hash identifier: wtGa4g73t3mkeuxwfJNw0nrWS6hzNcTp0PysGI1hEyo= Subject key identifier: 22:CA:BB:DE:BE:8B:69:DC:07:AD:5D:65:C7:B8:E6:BC:91:36:75:65 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 1458F6D8C3E2A069E818CCE89942F4302C56F61B Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3a2f34302d3430203d3e20313533303837.roa Signing time: Thu 27 Nov 2025 09:00:02 +0000 ROA not before: Thu 27 Nov 2025 08:55:02 +0000 ROA not after: Thu 26 Nov 2026 09:00:02 +0000 asID: 153087 IP address blocks: 2404:97c0::/40 maxlen: 40 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:58:f6:d8:c3:e2:a0:69:e8:18:cc:e8:99:42:f4:30:2c:56:f6:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Nov 27 08:55:02 2025 GMT Not After : Nov 26 09:00:02 2026 GMT Subject: CN=22CABBDEBE8B69DC07AD5D65C7B8E6BC91367565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:28:34:90:b8:0e:05:eb:a9:79:e5:05:25:9f: 26:f0:c3:7f:0f:66:78:4d:44:f3:86:1e:4f:60:b5: 62:e9:f7:07:02:d6:bb:af:e2:31:07:d2:b0:b2:fd: 79:51:e2:ba:0c:d0:92:d8:03:23:02:09:fb:56:98: 45:63:b3:e1:90:3d:ba:a9:4a:d0:6c:aa:5f:7c:b0: c8:78:46:c7:4d:ed:5d:26:f4:45:dc:45:0c:a1:53: 10:c7:03:e3:87:41:cf:47:21:17:a6:e0:2b:ce:53: 10:d4:86:32:a6:4a:29:3e:f4:f4:5b:f4:8a:92:58: 94:ca:58:69:f9:c3:20:67:1c:c6:42:d6:d5:81:fb: 08:ed:d3:c2:fb:eb:6e:e5:d2:af:e7:ff:3d:91:c7: 15:84:56:44:ee:a3:a9:20:0b:a2:c5:ed:90:a2:dd: 3d:75:a5:50:81:31:25:88:d6:2e:80:7c:2b:79:49: ce:1d:00:07:65:43:cc:74:35:78:f4:af:b5:9e:c3: 47:22:9c:62:5b:2b:40:76:0e:12:12:dd:b9:8d:f2: 0b:0b:00:45:47:13:b6:2e:0d:eb:e5:3d:99:c6:93: fb:8b:59:ee:bf:dc:bb:42:bb:3b:57:9d:0a:a6:a6: 1e:7a:d2:f6:2c:c0:1f:90:42:45:a9:f1:20:1f:64: d2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CA:BB:DE:BE:8B:69:DC:07:AD:5D:65:C7:B8:E6:BC:91:36:75:65 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a3a2f34302d3430203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0::/40 Signature Algorithm: sha256WithRSAEncryption b3:01:80:dc:35:e4:41:f7:c8:34:a8:ce:a6:c8:e3:89:e6:99: 12:98:dd:78:be:5a:0d:e0:de:64:4f:1a:d6:ef:b6:04:cf:16: 35:8a:4b:b1:51:7c:f6:01:b8:a1:93:c2:85:a3:75:1e:b2:b0: a3:0a:04:c7:7b:93:d4:f2:e1:c1:52:de:7c:df:29:d6:3d:f7: 43:a1:6d:29:66:97:f6:91:8f:b6:9c:29:90:82:23:0e:27:fc: 36:72:d6:af:25:b4:68:f8:d5:2a:5e:5f:88:65:03:33:b6:6f: c4:80:ca:5c:18:5f:05:d7:ab:86:02:12:81:a3:6e:81:a7:0d: 34:7d:a7:a7:9b:e7:18:0f:f1:38:8d:1a:eb:f0:33:f6:4c:55: 0b:f9:9a:96:a3:26:e0:16:74:fe:cf:40:8b:7e:b5:79:f5:eb: 66:bf:53:2a:b4:f2:04:a8:6c:b3:16:22:5f:47:7b:5a:a3:33: 32:71:82:65:bc:8a:8a:42:e9:4f:bf:1e:db:a1:5a:1e:e3:7a: f5:a6:ac:12:aa:cb:ce:1b:56:00:5e:a9:6c:73:be:bd:6f:c3: 5a:62:95:da:71:99:42:ae:31:6a:27:5f:b3:db:49:c1:15:9f: c0:40:bb:48:f6:49:7a:f8:14:53:84:27:72:b1:82:05:6d:69: 30:0f:e9:02 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFFj22MPioGnoGMzomUL0MCxW9hswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNTExMjcwODU1MDJaFw0yNjExMjYwOTAwMDJaMDMxMTAvBgNV BAMTKDIyQ0FCQkRFQkU4QjY5REMwN0FENUQ2NUM3QjhFNkJDOTEzNjc1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkKDSQuA4F66l55QUlnybww38P ZnhNRPOGHk9gtWLp9wcC1ruv4jEH0rCy/XlR4roM0JLYAyMCCftWmEVjs+GQPbqp StBsql98sMh4RsdN7V0m9EXcRQyhUxDHA+OHQc9HIRem4CvOUxDUhjKmSik+9PRb 9IqSWJTKWGn5wyBnHMZC1tWB+wjt08L7627l0q/n/z2RxxWEVkTuo6kgC6LF7ZCi 3T11pVCBMSWI1i6AfCt5Sc4dAAdlQ8x0NXj0r7Wew0cinGJbK0B2DhIS3bmN8gsL AEVHE7YuDevlPZnGk/uLWe6/3LtCuztXnQqmph560vYswB+QQkWp8SAfZNJVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUIsq73r6LadwHrV1lx7jmvJE2dWUwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhM2EyZjM0MzAy ZDM0MzAyMDNkM2UyMDMxMzUzMzMwMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACQEl8AAMA0GCSqG SIb3DQEBCwUAA4IBAQCzAYDcNeRB98g0qM6myOOJ5pkSmN14vloN4N5kTxrW77YE zxY1ikuxUXz2Abihk8KFo3UesrCjCgTHe5PU8uHBUt583ynWPfdDoW0pZpf2kY+2 nCmQgiMOJ/w2ctavJbRo+NUqXl+IZQMztm/EgMpcGF8F16uGAhKBo26Bpw00faen m+cYD/E4jRrr8DP2TFUL+ZqWoybgFnT+z0CLfrV59etmv1MqtPIEqGyzFiJfR3ta ozMycYJlvIqKQulPvx7boVoe43r1pqwSqsvOG1YAXqlsc769b8NaYpXacZlCrjFq J1+z20nBFZ/AQLtI9kl6+BRThCdysYIFbWkwD+kC -----END CERTIFICATE-----Generated at Wed Dec 3 17:38:53 2025 by rpki-client