This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa File: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (raw, json) Hash identifier: ScM8Q2LMGZOkrNtPg/8PjLIyPY1b7rJ+ByzrKdDmKiU= Subject key identifier: 43:CD:EF:9B:05:0F:78:6B:5B:27:02:2E:00:58:65:A1:4C:20:35:09 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 0CEBE6AA0A4B2818884206FA3FA69F6952104BD6 Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa Signing time: Wed 05 Nov 2025 08:02:23 +0000 ROA not before: Wed 05 Nov 2025 07:57:23 +0000 ROA not after: Wed 04 Nov 2026 08:02:23 +0000 asID: 153149 IP address blocks: 2001:df4:9a40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:eb:e6:aa:0a:4b:28:18:88:42:06:fa:3f:a6:9f:69:52:10:4b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Nov 5 07:57:23 2025 GMT Not After : Nov 4 08:02:23 2026 GMT Subject: CN=43CDEF9B050F786B5B27022E005865A14C203509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:60:31:4e:61:93:17:32:f2:43:cd:4a:69:74: 80:8a:a6:63:7c:26:f2:90:b4:67:80:23:8e:4f:ed: 07:09:b2:ed:45:c9:0b:1f:ee:30:ec:7c:69:83:9c: 6f:21:2e:ed:a6:1f:9f:e7:c1:28:5d:4f:7d:ab:8b: 26:9a:b5:a2:95:45:7e:e3:2c:ea:ba:43:14:e8:d2: 74:93:98:b0:54:bc:89:69:14:ca:34:02:ce:ef:a1: 87:20:55:37:77:7a:9c:da:a5:c5:88:80:d7:15:4b: 44:88:72:c5:b1:9b:98:cf:76:26:a5:e1:58:d0:2f: df:4b:fe:48:58:61:5f:7e:9f:ce:b5:4e:9d:95:00: dd:1d:38:c6:23:c4:4e:28:7f:fb:ef:2f:98:e4:3b: cf:9c:24:ef:ed:54:54:b7:03:2d:b8:a6:3c:31:75: e3:0b:ec:e6:17:14:ea:bb:b2:b6:62:21:0f:d0:e3: 37:c5:36:ef:ea:b1:66:6a:15:c5:a2:2e:a6:da:e4: c5:1e:fe:13:4c:55:70:ae:24:71:09:ce:4c:75:8e: ac:8c:fd:19:5b:fb:e9:9e:50:27:ea:f2:1a:b7:a9: 70:1e:64:a3:25:d7:13:78:b2:d5:ef:7c:4f:fd:0f: 45:ee:6f:a5:8a:65:87:e8:c0:9f:fc:58:53:cc:0e: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CD:EF:9B:05:0F:78:6B:5B:27:02:2E:00:58:65:A1:4C:20:35:09 X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:9a40::/48 Signature Algorithm: sha256WithRSAEncryption c1:79:ab:52:31:a4:0e:45:19:b6:f7:57:d4:d4:66:e9:8c:ea: c4:1a:84:24:4c:87:37:d5:80:8c:aa:3c:40:64:0a:63:9b:7c: 37:e7:23:a6:30:5d:6b:ab:74:2a:27:91:28:6e:42:0c:fd:33: c3:bb:23:59:a3:79:35:68:32:ee:c4:51:92:2b:cb:15:b8:b1: 45:27:b7:67:25:b3:94:56:e1:3d:04:d9:20:dc:b6:2e:b1:69: db:77:ac:83:2a:dd:b8:ae:21:c8:3c:0d:2c:7a:fa:81:cf:e7: a0:22:56:33:55:64:52:42:9f:4d:a0:cc:5e:25:f2:47:74:62: a1:bb:a8:11:55:0c:d4:40:5d:56:db:4e:4e:41:33:d6:75:38: c2:a6:35:a4:bf:70:c5:24:20:8f:00:04:9c:3b:0c:a1:05:64: d2:26:0e:b8:f8:08:cb:5e:c4:04:fa:8a:32:d0:47:b7:0d:38: 8a:12:8e:62:8c:28:c9:aa:84:42:d8:32:55:d7:89:f3:80:36: 94:98:ec:e9:63:8e:9e:bf:51:11:84:92:3c:6e:8a:97:d6:4d: 3a:52:71:47:8f:ea:7f:56:3e:08:2c:cf:d8:6e:c7:aa:9a:f0: 89:b8:bb:43:ae:f4:68:20:5c:e5:06:68:02:15:25:f8:30:df: 62:cc:3b:45 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUDOvmqgpLKBiIQgb6P6afaVIQS9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNTExMDUwNzU3MjNaFw0yNjExMDQwODAyMjNaMDMxMTAvBgNV BAMTKDQzQ0RFRjlCMDUwRjc4NkI1QjI3MDIyRTAwNTg2NUExNEMyMDM1MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdYDFOYZMXMvJDzUppdICKpmN8 JvKQtGeAI45P7QcJsu1FyQsf7jDsfGmDnG8hLu2mH5/nwShdT32riyaataKVRX7j LOq6QxTo0nSTmLBUvIlpFMo0As7voYcgVTd3epzapcWIgNcVS0SIcsWxm5jPdial 4VjQL99L/khYYV9+n861Tp2VAN0dOMYjxE4of/vvL5jkO8+cJO/tVFS3Ay24pjwx deML7OYXFOq7srZiIQ/Q4zfFNu/qsWZqFcWiLqba5MUe/hNMVXCuJHEJzkx1jqyM /Rlb++meUCfq8hq3qXAeZKMl1xN4stXvfE/9D0Xub6WKZYfowJ/8WFPMDo8rAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUQ83vmwUPeGtbJwIuAFhloUwgNQkwHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzZGMwMzRmLTM4MjMtNDhhZi05 NTNkLWFhYTg3M2IwZmI2YS8xLzMyMzAzMDMxM2E2NDY2MzQzYTM5NjEzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMzMzEzNDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9JpAMA0GCSqGSIb3DQEBCwUAA4IBAQDBeatSMaQORRm291fU1GbpjOrEGoQkTIc3 1YCMqjxAZApjm3w35yOmMF1rq3QqJ5EobkIM/TPDuyNZo3k1aDLuxFGSK8sVuLFF J7dnJbOUVuE9BNkg3LYusWnbd6yDKt24riHIPA0sevqBz+egIlYzVWRSQp9NoMxe JfJHdGKhu6gRVQzUQF1W205OQTPWdTjCpjWkv3DFJCCPAAScOwyhBWTSJg64+AjL XsQE+ooy0Ee3DTiKEo5ijCjJqoRC2DJV14nzgDaUmOzpY46ev1ERhJI8boqX1k06 UnFHj+p/Vj4ILM/YbseqmvCJuLtDrvRoIFzlBmgCFSX4MN9izDtF -----END CERTIFICATE-----Generated at Wed Dec 3 16:51:10 2025 by rpki-client