This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa File: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (raw, json) Hash identifier: x8GA7f+9To0zJWTPLU22XKkbJl3cpNPeZ955m1OcAKM= Subject key identifier: B6:72:34:DD:06:50:53:04:AF:84:BB:62:9A:C9:59:C0:2F:77:2C:B9 Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Certificate serial: DDBBE19E27A24B6E5382753C051C0FCDF9BF4C Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa Signing time: Wed 12 Nov 2025 15:00:03 +0000 ROA not before: Wed 12 Nov 2025 14:55:03 +0000 ROA not after: Wed 11 Nov 2026 15:00:03 +0000 asID: 38523 IP address blocks: 2401:2c40:4::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: dd:bb:e1:9e:27:a2:4b:6e:53:82:75:3c:05:1c:0f:cd:f9:bf:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Validity Not Before: Nov 12 14:55:03 2025 GMT Not After : Nov 11 15:00:03 2026 GMT Subject: CN=B67234DD06505304AF84BB629AC959C02F772CB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:f5:b4:35:5d:34:81:09:4c:a5:ee:04:9f: 72:6f:0c:03:35:46:76:60:83:b2:1c:6b:07:2a:6d: 81:7f:e4:84:bf:93:d9:09:09:a0:93:7d:68:1d:90: f6:7d:e3:f0:05:db:d1:4a:0d:eb:51:fd:5e:1f:ec: e5:1f:19:8c:41:9c:cf:1b:17:6d:fd:aa:29:9d:a1: b1:8e:ea:fe:e9:10:d2:b6:75:b4:4a:82:eb:41:e4: ca:7a:9d:1b:65:fd:ae:64:f9:97:8e:7c:ad:08:63: a0:00:10:7c:4b:4d:e9:4d:79:92:71:e3:89:ea:00: 5b:ae:d5:71:08:31:cb:97:b6:1f:48:fb:d2:8e:58: 2a:08:ef:75:d7:49:e2:99:18:bd:18:f3:19:25:22: 56:66:c8:3b:4e:83:3a:59:ac:69:be:85:e0:9c:1f: bb:e8:04:12:91:03:5d:7b:03:71:5e:d9:18:fe:0e: d2:77:51:aa:35:65:3d:77:50:ff:74:71:74:76:b6: aa:ea:c6:cc:e4:5a:85:23:b5:15:d6:88:96:ed:c7: 8d:08:5a:b7:80:e0:cb:15:80:47:55:c3:a8:80:91: 56:6e:25:94:f1:e3:15:b8:15:82:ff:9c:73:d8:7b: 54:a7:02:0a:21:fd:d8:37:2c:e7:b7:a9:5a:0a:3c: b4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:72:34:DD:06:50:53:04:AF:84:BB:62:9A:C9:59:C0:2F:77:2C:B9 X509v3 Authority Key Identifier: keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2c40:4::/48 Signature Algorithm: sha256WithRSAEncryption 26:b5:25:f8:9a:84:f3:f0:a8:b8:d8:11:78:77:0d:90:3b:a3: 84:06:65:67:2b:65:dc:98:33:ac:f4:ef:c8:bd:55:1f:cf:85: 6e:c6:4e:70:bf:c6:aa:0d:87:58:e4:83:d0:7c:23:e6:43:04: 1d:de:bd:02:d2:0f:a2:2a:38:3a:0d:3c:70:85:46:68:2c:9c: 61:24:2b:4b:11:9c:14:09:52:f2:64:a3:75:65:49:6e:95:1f: 46:c3:c8:c8:0e:b8:2a:3f:07:00:89:31:4b:d0:ef:52:85:41: 8f:71:4b:a0:d0:da:8e:23:b1:c2:79:79:53:18:86:bf:36:19: 75:c2:64:66:f4:ca:a8:47:06:79:69:79:f0:fb:f0:e9:d8:92: fc:ca:6f:68:1b:7a:0b:f4:0b:f9:05:4f:91:66:8f:e5:f6:23: 7e:e6:2c:f8:e4:ac:5b:de:29:de:a9:cc:30:77:c1:0c:02:3b: c8:5b:9f:fa:23:56:3e:7a:18:b4:49:b0:1e:e6:5b:de:90:18: 98:4d:57:23:40:3d:04:8e:7d:0c:d0:d1:04:83:8b:4c:d4:45: 6c:67:e2:b8:52:64:5c:87:67:33:f4:46:b3:a0:d0:11:6a:1e: b3:27:21:0a:6f:72:c4:71:7f:61:29:c6:5e:21:cd:ca:a9:53: 6d:61:4f:19 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUAN274Z4noktuU4J1PAUcD835v0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2 MDM5NDQ4RjAeFw0yNTExMTIxNDU1MDNaFw0yNjExMTExNTAwMDNaMDMxMTAvBgNV BAMTKEI2NzIzNEREMDY1MDUzMDRBRjg0QkI2MjlBQzk1OUMwMkY3NzJDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2WPW0NV00gQlMpe4En3JvDAM1 RnZgg7IcawcqbYF/5IS/k9kJCaCTfWgdkPZ94/AF29FKDetR/V4f7OUfGYxBnM8b F239qimdobGO6v7pENK2dbRKgutB5Mp6nRtl/a5k+ZeOfK0IY6AAEHxLTelNeZJx 44nqAFuu1XEIMcuXth9I+9KOWCoI73XXSeKZGL0Y8xklIlZmyDtOgzpZrGm+heCc H7voBBKRA117A3Fe2Rj+DtJ3Uao1ZT13UP90cXR2tqrqxszkWoUjtRXWiJbtx40I WreA4MsVgEdVw6iAkVZuJZTx4xW4FYL/nHPYe1SnAgoh/dg3LOe3qVoKPLQdAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUtnI03QZQUwSvhLtimslZwC93LLkwHwYDVR0j BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5 NDQ4Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1NWExYTQ0LTMzN2QtNGRiNC05 MGQ3LTViZDRmMzcyMTRiOC8wLzMyMzQzMDMxM2EzMjYzMzQzMDNhMzQzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEsQAAEMA0G CSqGSIb3DQEBCwUAA4IBAQAmtSX4moTz8Ki42BF4dw2QO6OEBmVnK2XcmDOs9O/I vVUfz4Vuxk5wv8aqDYdY5IPQfCPmQwQd3r0C0g+iKjg6DTxwhUZoLJxhJCtLEZwU CVLyZKN1ZUlulR9Gw8jIDrgqPwcAiTFL0O9ShUGPcUug0NqOI7HCeXlTGIa/Nhl1 wmRm9MqoRwZ5aXnw+/Dp2JL8ym9oG3oL9Av5BU+RZo/l9iN+5iz45Kxb3ineqcww d8EMAjvIW5/6I1Y+ehi0SbAe5lvekBiYTVcjQD0Ejn0M0NEEg4tM1EVsZ+K4UmRc h2cz9EazoNARah6zJyEKb3LEcX9hKcZeIc3KqVNtYU8Z -----END CERTIFICATE-----Generated at Wed Dec 3 16:53:04 2025 by rpki-client