This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/34352e3234392e3232322e302f32342d3234203d3e203535363634.roa File: 34352e3234392e3232322e302f32342d3234203d3e203535363634.roa (raw, json) Hash identifier: IjL8U7j0DmBIXMsuGkW1RQCn11k2vE+wQV790Ok5z/U= Subject key identifier: 54:E5:DD:0C:1B:E7:D9:13:24:39:1B:34:C5:17:BD:B9:8B:13:BD:1E Certificate issuer: /CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5 Certificate serial: 6B2998E55FA0AAE6AA9AC5B1EB4F678FBB97426E Authority key identifier: 79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/34352e3234392e3232322e302f32342d3234203d3e203535363634.roa Signing time: Tue 09 Dec 2025 11:35:00 +0000 ROA not before: Tue 09 Dec 2025 11:30:00 +0000 ROA not after: Tue 08 Dec 2026 11:35:00 +0000 asID: 55664 IP address blocks: 45.249.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:29:98:e5:5f:a0:aa:e6:aa:9a:c5:b1:eb:4f:67:8f:bb:97:42:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5 Validity Not Before: Dec 9 11:30:00 2025 GMT Not After : Dec 8 11:35:00 2026 GMT Subject: CN=54E5DD0C1BE7D91324391B34C517BDB98B13BD1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:e0:fd:c2:50:a2:11:fe:67:de:60:b3:ca: a7:e0:f6:4c:15:d8:8d:04:27:12:da:58:50:95:a1: e1:8e:23:4d:f6:d4:22:1c:d8:21:fe:10:b0:22:ba: 2c:26:2c:0f:22:97:02:82:85:e4:32:5b:d5:e5:a4: e5:dd:92:ef:26:42:23:75:8f:d0:f4:48:0f:74:5b: 7b:b9:f4:f7:7e:e5:e6:f8:6a:d7:3e:a5:c0:f5:f8: a6:d7:28:f2:95:87:e8:53:29:c2:7e:7d:b9:95:57: 7e:e6:1b:84:5b:c9:00:4a:40:e6:90:8e:3f:72:f2: 6f:e2:ec:3e:07:33:2c:e7:cf:01:35:64:4a:9e:c4: 8b:5a:c9:ba:0b:3c:5a:9b:f7:d8:4e:37:dc:00:3e: 6d:e8:3c:2c:5c:49:1f:1c:fb:ef:cb:54:81:9c:d6: 4f:97:cd:ae:eb:db:7d:12:e3:ea:8f:49:e7:82:1a: ba:1c:2c:cf:11:6f:f0:47:a1:79:94:53:79:68:d2: ad:d9:0b:18:fe:04:be:f9:63:8b:8b:0f:f7:79:af: 45:3d:c2:01:a8:7e:fb:17:ce:9e:a7:00:a8:65:91: e3:9c:19:73:cc:88:8b:e1:8a:37:00:7f:e4:8a:83: 8a:f6:ea:3d:75:10:71:6d:7f:18:5e:f2:75:8b:5c: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E5:DD:0C:1B:E7:D9:13:24:39:1B:34:C5:17:BD:B9:8B:13:BD:1E X509v3 Authority Key Identifier: keyid:79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/34352e3234392e3232322e302f32342d3234203d3e203535363634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.249.222.0/24 Signature Algorithm: sha256WithRSAEncryption 55:8a:ac:ab:79:df:85:ae:9d:08:b7:75:d6:1b:25:a2:25:4e: f3:a9:2e:99:d8:01:7e:b3:12:62:52:ae:46:2b:c3:cf:c2:ad: ac:6a:41:23:8d:57:98:13:35:dc:3a:dd:51:aa:aa:2d:3a:e7: c6:f1:37:b3:e6:72:0d:46:a4:b4:cf:3c:03:04:3f:c6:80:92: a0:62:12:9f:3e:ac:73:9b:56:b6:82:fb:77:ff:df:49:56:a6: 49:9e:a0:41:f0:ce:4c:fd:6a:93:34:b5:69:df:2d:8a:5e:5c: 5d:a7:32:bd:e6:6e:fc:50:b7:6b:51:1c:8a:48:9b:da:6c:4b: 15:15:a7:21:f1:de:5e:a4:35:da:d4:ce:c9:e6:8d:7c:8d:b9: ef:44:4b:d8:e3:af:a5:d4:76:6a:18:99:03:87:40:61:0e:7f: 1f:eb:ca:c5:ee:d2:2e:41:48:b3:c6:ac:9d:f9:2c:f6:19:2d: 9f:ea:4c:43:da:cc:dd:ac:73:52:e1:b2:d6:a9:e1:64:5b:0d: bd:ce:06:9f:c4:2a:2d:ad:96:02:05:62:c8:6c:78:c1:1e:b9: 05:3e:51:2f:10:81:19:24:3a:27:79:9c:66:03:df:85:50:23: 5e:1a:94:6b:ff:2a:fd:cc:65:69:84:99:10:5c:41:25:50:ea: 27:b2:35:d5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUaymY5V+gquaqmsWx609nj7uXQm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1RTI1 QUQwNzRENTAeFw0yNTEyMDkxMTMwMDBaFw0yNjEyMDgxMTM1MDBaMDMxMTAvBgNV BAMTKDU0RTVERDBDMUJFN0Q5MTMyNDM5MUIzNEM1MTdCREI5OEIxM0JEMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMuuD9wlCiEf5n3mCzyqfg9kwV 2I0EJxLaWFCVoeGOI0321CIc2CH+ELAiuiwmLA8ilwKCheQyW9XlpOXdku8mQiN1 j9D0SA90W3u59Pd+5eb4atc+pcD1+KbXKPKVh+hTKcJ+fbmVV37mG4RbyQBKQOaQ jj9y8m/i7D4HMyznzwE1ZEqexItayboLPFqb99hON9wAPm3oPCxcSR8c++/LVIGc 1k+Xza7r230S4+qPSeeCGrocLM8Rb/BHoXmUU3lo0q3ZCxj+BL75Y4uLD/d5r0U9 wgGofvsXzp6nAKhlkeOcGXPMiIvhijcAf+SKg4r26j11EHFtfxhe8nWLXFzPAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUVOXdDBvn2RMkORs0xRe9uYsTvR4wHwYDVR0j BBgwFoAUeTLhyStFGi/XpehbVBE14lrQdNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGE3OTc1NS0yMzhhLTQ2ZDItYjA1Mi0zMDU4N2JmOWVmZjcvMC83OTMyRTFDOTJC NDUxQTJGRDdBNUU4NUI1NDExMzVFMjVBRDA3NEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1RTI1QUQw NzRENS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4YTc5NzU1LTIzOGEtNDZkMi1i MDUyLTMwNTg3YmY5ZWZmNy8wLzM0MzUyZTMyMzQzOTJlMzIzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC353jANBgkqhkiG 9w0BAQsFAAOCAQEAVYqsq3nfha6dCLd11hsloiVO86kumdgBfrMSYlKuRivDz8Kt rGpBI41XmBM13DrdUaqqLTrnxvE3s+ZyDUaktM88AwQ/xoCSoGISnz6sc5tWtoL7 d//fSVamSZ6gQfDOTP1qkzS1ad8til5cXacyveZu/FC3a1Ecikib2mxLFRWnIfHe XqQ12tTOyeaNfI2570RL2OOvpdR2ahiZA4dAYQ5/H+vKxe7SLkFIs8asnfks9hkt n+pMQ9rM3axzUuGy1qnhZFsNvc4Gn8QqLa2WAgViyGx4wR65BT5RLxCBGSQ6J3mc ZgPfhVAjXhqUa/8q/cxlaYSZEFxBJVDqJ7I11Q== -----END CERTIFICATE-----Generated at Fri Dec 19 09:39:52 2025 by rpki-client