This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa File: 323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa (raw, json) Hash identifier: odQ4TQODv/Nxx9TjvaaJpyigmRoWi0QI8IwNfXz5bHo= Subject key identifier: 06:8F:46:94:78:00:19:43:94:4E:70:ED:82:93:C6:30:53:86:48:C8 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 696E5691588397BC66CD74651BB0A72740C27767 Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa Signing time: Tue 11 Nov 2025 06:01:51 +0000 ROA not before: Tue 11 Nov 2025 05:56:51 +0000 ROA not after: Tue 10 Nov 2026 06:01:51 +0000 asID: 153087 IP address blocks: 2404:97c0:e000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:6e:56:91:58:83:97:bc:66:cd:74:65:1b:b0:a7:27:40:c2:77:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Nov 11 05:56:51 2025 GMT Not After : Nov 10 06:01:51 2026 GMT Subject: CN=068F469478001943944E70ED8293C630538648C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:89:32:7e:1a:69:d2:06:b0:7b:34:ce:bf:85: 9f:1d:16:fe:76:b4:e9:4c:d6:8f:0a:c9:f2:85:8f: d0:4d:a3:0b:dc:42:9e:e0:19:58:13:06:fd:d1:7e: 47:23:7e:9c:55:14:a9:dd:f4:f6:46:16:5a:e8:b6: 34:02:c0:8e:cf:c6:19:ef:13:3f:77:5a:8b:29:54: 36:9e:60:e2:28:8d:ad:d0:41:6b:2e:84:91:0b:f9: 06:30:12:59:c2:dc:42:5c:b3:9e:9a:07:e5:06:40: 30:5f:d6:9f:7e:39:c5:7b:4b:c6:da:fa:07:6b:1d: 8d:bb:b6:ac:88:95:22:f1:58:ce:4f:6c:b9:3d:c1: f7:fc:c6:68:21:e2:66:f0:df:56:d0:cd:d1:6b:88: ee:90:5f:5c:10:a9:96:e8:94:0a:60:71:79:4c:e0: ae:ab:ca:59:17:eb:8c:dc:5c:52:f1:34:e9:24:c1: 82:a4:e5:95:3a:1d:17:e2:d9:89:eb:2e:53:af:18: a2:ac:52:c7:d4:97:2a:3b:00:4f:17:b4:bb:2d:2b: 35:85:f0:72:53:04:b4:2a:39:10:5a:c0:ca:9d:40: ef:d8:50:00:5a:f4:96:69:74:62:4f:f8:15:84:82: 30:de:5d:d7:ba:08:2f:2e:8b:22:2b:52:f0:03:27: f0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8F:46:94:78:00:19:43:94:4E:70:ED:82:93:C6:30:53:86:48:C8 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a653030303a3a2f33362d3336203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:e000::/36 Signature Algorithm: sha256WithRSAEncryption c6:3e:54:a8:05:6e:fb:0e:f9:bc:9c:45:00:ca:d2:81:48:c2: a5:24:f7:c0:34:46:ee:84:e7:25:fb:62:e6:fb:74:a2:13:78: 53:be:8e:6e:1b:a1:ad:f8:69:49:66:ac:88:07:42:62:3d:dd: d6:95:04:b0:b3:7a:a5:1e:7f:00:54:43:9e:be:3c:10:91:f8: 30:5f:99:a7:d2:c8:41:aa:c6:45:29:2b:c7:d8:ff:7f:bc:de: 80:cb:21:23:0f:ed:4f:3f:1f:a5:6d:7e:51:83:46:43:2b:9f: 13:4a:72:84:65:73:7a:2e:5e:69:58:e4:bd:6c:63:cc:f2:78: 79:62:a5:80:0f:e4:d1:da:bf:0a:e4:de:38:64:2e:65:26:d9: 03:c7:f2:f7:7e:93:3b:fe:26:6c:49:19:b2:35:62:f2:07:bc: 16:6a:8a:4f:f4:ad:bd:56:97:fa:b2:98:20:ce:b5:45:9c:9c: 7f:e6:7a:77:47:ec:36:bd:b1:7e:78:94:40:11:18:22:8e:a4: de:30:f8:a7:af:36:45:86:49:39:35:4f:78:1e:9d:4d:68:f7: 81:9a:6b:52:a2:87:f9:31:67:6a:78:28:0d:ab:53:2c:96:7e: 6e:3a:0f:d7:05:e2:2d:d1:d6:99:27:40:48:e0:6b:a6:ba:48: 2b:5e:7d:67 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUaW5WkViDl7xmzXRlG7CnJ0DCd2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNTExMTEwNTU2NTFaFw0yNjExMTAwNjAxNTFaMDMxMTAvBgNV BAMTKDA2OEY0Njk0NzgwMDE5NDM5NDRFNzBFRDgyOTNDNjMwNTM4NjQ4QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqiTJ+GmnSBrB7NM6/hZ8dFv52 tOlM1o8KyfKFj9BNowvcQp7gGVgTBv3RfkcjfpxVFKnd9PZGFlrotjQCwI7Pxhnv Ez93WospVDaeYOIoja3QQWsuhJEL+QYwElnC3EJcs56aB+UGQDBf1p9+OcV7S8ba +gdrHY27tqyIlSLxWM5PbLk9wff8xmgh4mbw31bQzdFriO6QX1wQqZbolApgcXlM 4K6rylkX64zcXFLxNOkkwYKk5ZU6HRfi2YnrLlOvGKKsUsfUlyo7AE8XtLstKzWF 8HJTBLQqORBawMqdQO/YUABa9JZpdGJP+BWEgjDeXde6CC8uiyIrUvADJ/AfAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUBo9GlHgAGUOUTnDtgpPGMFOGSMgwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhNjUzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BJfA4DANBgkqhkiG9w0BAQsFAAOCAQEAxj5UqAVu+w75vJxFAMrSgUjCpST3wDRG 7oTnJfti5vt0ohN4U76ObhuhrfhpSWasiAdCYj3d1pUEsLN6pR5/AFRDnr48EJH4 MF+Zp9LIQarGRSkrx9j/f7zegMshIw/tTz8fpW1+UYNGQyufE0pyhGVzei5eaVjk vWxjzPJ4eWKlgA/k0dq/CuTeOGQuZSbZA8fy936TO/4mbEkZsjVi8ge8FmqKT/St vVaX+rKYIM61RZycf+Z6d0fsNr2xfniUQBEYIo6k3jD4p682RYZJOTVPeB6dTWj3 gZprUqKH+TFnangoDatTLJZ+bjoP1wXiLdHWmSdASOBrprpIK159Zw== -----END CERTIFICATE-----Generated at Wed Dec 3 17:39:09 2025 by rpki-client