This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa File: 323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa (raw, json) Hash identifier: 6M8Pqc3cx4r9Johealtry1Gw+jVdKKETBKeugC/gwSo= Subject key identifier: E1:1B:1E:0F:70:F1:78:94:AA:FC:6D:7A:A7:CB:7E:8A:80:A2:38:22 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 0E3925EA05E20D9EE24357416853E7409BD3787E Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa Signing time: Tue 11 Nov 2025 06:01:52 +0000 ROA not before: Tue 11 Nov 2025 05:56:52 +0000 ROA not after: Tue 10 Nov 2026 06:01:52 +0000 asID: 153087 IP address blocks: 2404:97c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:39:25:ea:05:e2:0d:9e:e2:43:57:41:68:53:e7:40:9b:d3:78:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Nov 11 05:56:52 2025 GMT Not After : Nov 10 06:01:52 2026 GMT Subject: CN=E11B1E0F70F17894AAFC6D7AA7CB7E8A80A23822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:33:0b:42:f7:da:4f:6c:64:9a:5a:be:27:c5: 7e:97:d2:8d:47:e2:01:20:91:8c:49:03:98:2a:92: f7:5f:94:75:f0:e9:8c:46:7d:1c:06:2f:c2:fc:bb: fa:e6:07:ac:7e:a8:a9:5f:bc:42:ee:ac:44:fc:0e: 17:04:e5:20:2b:49:f2:8b:6a:95:31:a4:bc:81:2a: 5c:c7:42:2d:46:e3:42:73:d5:35:0d:cf:62:d8:1e: e8:c4:7a:d8:db:d3:45:34:32:7f:73:dd:61:58:f5: 9d:82:9b:20:d9:a8:e7:1e:c8:63:0e:a1:e3:0d:6a: 7f:1a:9b:50:47:ba:0f:b1:ec:cf:74:89:64:f5:b8: b5:70:9b:4f:b3:55:62:89:c5:60:93:15:bc:e8:8d: dd:69:ad:bc:f5:9a:0a:c3:94:df:f7:69:8c:b2:c6: 20:0c:34:e4:2d:e3:73:7a:e3:6b:0f:c8:7a:ce:98: 81:97:19:15:b3:09:de:78:57:43:66:a2:37:d2:fb: 1d:25:63:64:2c:ff:74:d7:fe:54:c4:8a:63:15:67: 08:84:83:80:05:95:07:30:c7:19:16:09:ca:58:a7: c2:14:17:dd:7b:a9:fc:d5:2a:a8:da:fe:2b:ed:d1: 41:f6:4a:b9:55:56:b9:af:1a:45:21:f9:6b:26:86: ae:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1B:1E:0F:70:F1:78:94:AA:FC:6D:7A:A7:CB:7E:8A:80:A2:38:22 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a663030303a3a2f33362d3336203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:f000::/36 Signature Algorithm: sha256WithRSAEncryption 66:01:da:a9:13:70:05:23:4a:19:ee:0e:ee:4a:2f:c4:ff:6f: d4:cb:6e:d6:61:5c:7e:f4:83:fc:07:c2:27:1f:fa:21:8e:b9: 65:df:6d:2f:21:16:9a:60:9d:de:b6:88:1b:f7:15:e9:58:66: 4d:58:bd:b4:07:e0:b4:3c:5f:0c:ec:2e:50:64:7c:58:36:74: fc:62:d9:10:8b:da:09:0a:51:c4:72:e3:81:e4:10:fb:af:ce: 4e:d4:39:fa:20:42:0c:19:b8:a0:5c:77:6c:52:3e:dd:81:8a: 42:40:04:20:18:b5:6a:02:30:4d:36:37:c8:ec:28:ad:f2:d0: c2:a1:ff:ca:84:2d:4e:cd:89:ff:58:b3:f6:ae:6a:db:95:22: 12:27:23:1a:19:90:07:df:8d:50:eb:af:12:e7:f3:61:08:b9: 17:95:13:db:1c:49:aa:c2:eb:56:ac:fa:d0:fb:58:67:79:92: c6:24:4a:9b:22:f0:4a:71:63:3e:2e:3d:6f:87:a6:d6:4c:7e: 5a:e0:36:6d:4b:21:7d:08:6b:a5:51:f3:2c:c5:e5:1c:44:e5: c5:a0:03:3d:23:62:fc:a2:a8:5e:98:e4:94:ed:fd:97:c5:fa: eb:7e:1d:a3:d3:9a:7e:28:13:ed:74:6e:8b:f4:8e:80:c0:5d: 46:05:12:54 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUDjkl6gXiDZ7iQ1dBaFPnQJvTeH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNTExMTEwNTU2NTJaFw0yNjExMTAwNjAxNTJaMDMxMTAvBgNV BAMTKEUxMUIxRTBGNzBGMTc4OTRBQUZDNkQ3QUE3Q0I3RThBODBBMjM4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkMwtC99pPbGSaWr4nxX6X0o1H 4gEgkYxJA5gqkvdflHXw6YxGfRwGL8L8u/rmB6x+qKlfvELurET8DhcE5SArSfKL apUxpLyBKlzHQi1G40Jz1TUNz2LYHujEetjb00U0Mn9z3WFY9Z2CmyDZqOceyGMO oeMNan8am1BHug+x7M90iWT1uLVwm0+zVWKJxWCTFbzojd1prbz1mgrDlN/3aYyy xiAMNOQt43N642sPyHrOmIGXGRWzCd54V0NmojfS+x0lY2Qs/3TX/lTEimMVZwiE g4AFlQcwxxkWCcpYp8IUF917qfzVKqja/ivt0UH2SrlVVrmvGkUh+Wsmhq7rAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU4RseD3DxeJSq/G16p8t+ioCiOCIwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhNjYzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BJfA8DANBgkqhkiG9w0BAQsFAAOCAQEAZgHaqRNwBSNKGe4O7kovxP9v1Mtu1mFc fvSD/AfCJx/6IY65Zd9tLyEWmmCd3raIG/cV6VhmTVi9tAfgtDxfDOwuUGR8WDZ0 /GLZEIvaCQpRxHLjgeQQ+6/OTtQ5+iBCDBm4oFx3bFI+3YGKQkAEIBi1agIwTTY3 yOworfLQwqH/yoQtTs2J/1iz9q5q25UiEicjGhmQB9+NUOuvEufzYQi5F5UT2xxJ qsLrVqz60PtYZ3mSxiRKmyLwSnFjPi49b4em1kx+WuA2bUshfQhrpVHzLMXlHETl xaADPSNi/KKoXpjklO39l8X6634do9OafigT7XRui/SOgMBdRgUSVA== -----END CERTIFICATE-----Generated at Wed Dec 3 17:38:52 2025 by rpki-client