This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa File: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (raw, json) Hash identifier: n2kJmjfaGbSRfn1pQASrz7hUspqtdNSxVZot/XzEk0w= Subject key identifier: 1A:47:B2:6D:45:D0:57:C7:DC:C3:5D:D5:35:89:D1:BB:DD:72:3D:C7 Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Certificate serial: 7B85A6182ABF4FDB158085158BEE853C51F7F0E1 Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa Signing time: Wed 12 Nov 2025 15:00:02 +0000 ROA not before: Wed 12 Nov 2025 14:55:02 +0000 ROA not after: Wed 11 Nov 2026 15:00:02 +0000 asID: 38523 IP address blocks: 2401:2c40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:85:a6:18:2a:bf:4f:db:15:80:85:15:8b:ee:85:3c:51:f7:f0:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Validity Not Before: Nov 12 14:55:02 2025 GMT Not After : Nov 11 15:00:02 2026 GMT Subject: CN=1A47B26D45D057C7DCC35DD53589D1BBDD723DC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2f:c9:7e:01:b9:59:ec:da:5e:49:34:0e:fd: 18:26:7e:8a:2d:d8:48:cc:1e:9f:4d:e7:e7:f2:8f: 28:3e:6a:78:12:f7:f2:cb:4b:a0:9f:e8:e0:24:8e: 67:d7:42:2d:8a:1e:ca:9d:c5:b4:9e:ed:3a:2b:1e: b5:73:0f:23:65:c1:a8:0b:0b:7a:94:a1:32:e0:e1: 73:6e:21:7f:c3:77:6e:50:a8:db:9c:ac:5b:cf:ed: 4d:29:75:23:aa:74:e8:ff:5a:65:01:06:1d:d2:8a: 54:16:63:d5:ca:80:af:ce:f5:a8:7e:57:b1:1a:0d: fb:ef:13:48:69:9c:c6:13:9c:5c:14:be:70:23:cc: ae:e5:ef:31:ef:f4:ee:8f:ce:e7:e3:c5:57:97:48: 3c:fb:90:f8:71:a9:62:a8:75:89:ea:f4:5e:f4:3d: a4:dd:c3:55:c2:0a:e3:3e:92:8a:2b:6a:53:1e:e1: fb:d1:bb:99:1a:fe:f7:78:33:ec:4a:7d:bb:0e:06: 7d:1a:20:fc:f3:49:ff:24:5a:15:f1:58:d4:69:ae: ec:c8:e7:87:56:3e:09:c0:ea:de:0b:0c:00:30:4b: 46:71:07:97:43:1d:50:f8:77:bf:d6:3e:fa:6f:86: c5:8e:3c:6b:09:d3:82:ec:f0:97:74:de:60:97:83: 56:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:47:B2:6D:45:D0:57:C7:DC:C3:5D:D5:35:89:D1:BB:DD:72:3D:C7 X509v3 Authority Key Identifier: keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2c40:3::/48 Signature Algorithm: sha256WithRSAEncryption 85:98:3e:58:3b:da:5b:a5:a9:97:c9:1c:dc:3c:1d:2e:a9:85: 1b:f7:d6:23:9c:a2:25:fd:59:d7:a8:17:cb:c5:89:55:0b:17: dc:45:d0:00:50:2a:a6:93:b6:e1:95:6a:4a:43:f9:55:fe:9f: b1:14:55:6c:b3:e3:18:a8:76:be:db:df:d3:3e:de:b0:04:9c: 0d:66:02:4b:65:33:24:f9:f0:20:1c:1d:e7:71:58:e5:c9:30: 9a:29:e7:50:2b:db:e0:f7:66:08:6c:32:ee:03:96:c0:31:ba: b8:46:58:63:d1:04:8c:36:11:2d:af:d2:2c:92:78:61:7a:10: e1:3a:d3:4d:b2:66:76:f7:71:2a:39:19:e6:a1:45:0d:e4:06: b2:1a:35:f9:a3:5c:2b:a3:28:6e:8b:cb:ec:68:4d:35:f9:a5: 4c:54:d4:bb:d6:f7:e3:f4:32:3a:48:f4:cb:70:db:c5:ea:5e: d7:5b:94:19:66:73:e4:d1:80:84:38:cc:e9:fb:9b:02:34:80: 67:f4:be:70:88:49:7d:0f:6d:3b:9b:02:40:ff:4b:68:62:a8: 5f:af:de:b2:86:e8:3b:45:35:59:35:52:b9:98:27:93:e7:a4: 73:04:c4:c4:ff:3f:fe:79:fc:34:08:76:9a:78:14:75:9d:42: dd:58:be:c4 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUe4WmGCq/T9sVgIUVi+6FPFH38OEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2 MDM5NDQ4RjAeFw0yNTExMTIxNDU1MDJaFw0yNjExMTExNTAwMDJaMDMxMTAvBgNV BAMTKDFBNDdCMjZENDVEMDU3QzdEQ0MzNURENTM1ODlEMUJCREQ3MjNEQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDL8l+AblZ7NpeSTQO/Rgmfoot 2EjMHp9N5+fyjyg+angS9/LLS6Cf6OAkjmfXQi2KHsqdxbSe7TorHrVzDyNlwagL C3qUoTLg4XNuIX/Dd25QqNucrFvP7U0pdSOqdOj/WmUBBh3SilQWY9XKgK/O9ah+ V7EaDfvvE0hpnMYTnFwUvnAjzK7l7zHv9O6PzufjxVeXSDz7kPhxqWKodYnq9F70 PaTdw1XCCuM+kooralMe4fvRu5ka/vd4M+xKfbsOBn0aIPzzSf8kWhXxWNRpruzI 54dWPgnA6t4LDAAwS0ZxB5dDHVD4d7/WPvpvhsWOPGsJ04Ls8Jd03mCXg1ZvAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUGkeybUXQV8fcw13VNYnRu91yPccwHwYDVR0j BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5 NDQ4Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1NWExYTQ0LTMzN2QtNGRiNC05 MGQ3LTViZDRmMzcyMTRiOC8wLzMyMzQzMDMxM2EzMjYzMzQzMDNhMzMzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEsQAADMA0G CSqGSIb3DQEBCwUAA4IBAQCFmD5YO9pbpamXyRzcPB0uqYUb99YjnKIl/VnXqBfL xYlVCxfcRdAAUCqmk7bhlWpKQ/lV/p+xFFVss+MYqHa+29/TPt6wBJwNZgJLZTMk +fAgHB3ncVjlyTCaKedQK9vg92YIbDLuA5bAMbq4Rlhj0QSMNhEtr9IsknhhehDh OtNNsmZ293EqORnmoUUN5AayGjX5o1wroyhui8vsaE01+aVMVNS71vfj9DI6SPTL cNvF6l7XW5QZZnPk0YCEOMzp+5sCNIBn9L5wiEl9D207mwJA/0toYqhfr96yhug7 RTVZNVK5mCeT56RzBMTE/z/+efw0CHaaeBR1nULdWL7E -----END CERTIFICATE-----Generated at Wed Dec 3 16:53:04 2025 by rpki-client