This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa File: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (raw, json) Hash identifier: B1+mJ2NWxCErJO3eSkTT+IRh+1v8gS/UXtodN0rllAY= Subject key identifier: 9C:E7:54:09:37:FA:DA:8D:D4:CC:B4:60:EC:4D:6C:3C:19:31:A5:5F Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Certificate serial: 457101767487DBAC0790E9F994C38E1A5925EA83 Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa Signing time: Wed 12 Nov 2025 15:00:03 +0000 ROA not before: Wed 12 Nov 2025 14:55:03 +0000 ROA not after: Wed 11 Nov 2026 15:00:03 +0000 asID: 38523 IP address blocks: 2401:2c40:5::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:71:01:76:74:87:db:ac:07:90:e9:f9:94:c3:8e:1a:59:25:ea:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Validity Not Before: Nov 12 14:55:03 2025 GMT Not After : Nov 11 15:00:03 2026 GMT Subject: CN=9CE7540937FADA8DD4CCB460EC4D6C3C1931A55F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:59:e1:6d:8a:cb:6b:db:94:ec:95:9b:88: 2e:46:0f:5b:8c:49:b1:12:d0:02:f7:27:0b:fa:d4: 01:2d:55:cf:bd:31:18:bd:d7:27:45:5a:93:4e:86: 08:57:14:33:a1:47:f3:23:2e:58:c9:a8:a5:3a:50: 23:54:85:60:ce:c0:70:07:40:cc:6f:a6:71:0c:6b: 8c:24:6c:0e:a4:8d:62:4c:da:e9:86:32:ab:0b:5e: 15:d7:34:be:8a:2c:16:ec:25:a0:29:26:47:62:5f: b8:48:8e:aa:c7:a2:23:4d:f2:cd:9d:bd:41:0d:ea: 38:64:2c:b5:23:09:fe:69:72:77:de:2d:d5:b3:58: f7:44:9d:10:3f:8d:35:01:57:32:36:9a:b8:95:c5: ae:03:2e:7d:ea:e0:6c:4a:74:a5:f6:1e:f3:f4:15: 9c:bf:6c:42:3e:f7:d6:e2:57:96:65:55:a7:fd:6a: 44:60:6b:58:19:ff:48:9e:b7:ba:dd:7f:dd:a0:07: 12:11:d7:ca:53:5d:f4:39:ca:de:24:78:11:5e:1c: e8:82:8b:f7:90:b6:09:1c:1d:2a:43:03:f6:6d:90: 1a:02:78:51:04:4f:ed:53:e0:62:4f:27:c5:ab:27: e1:73:3f:c1:97:5f:52:88:d7:6f:16:de:ca:39:97: 15:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E7:54:09:37:FA:DA:8D:D4:CC:B4:60:EC:4D:6C:3C:19:31:A5:5F X509v3 Authority Key Identifier: keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2c40:5::/48 Signature Algorithm: sha256WithRSAEncryption 13:9d:11:30:62:0d:e3:02:bb:b1:76:76:ce:1f:59:be:d4:23: 67:9c:40:1e:40:0e:5d:c3:32:2b:62:78:c9:ec:d7:39:18:d2: d2:0e:0e:1e:6c:6b:6a:14:aa:ad:9c:df:63:0f:60:7a:20:11: a5:ce:26:ba:92:27:d6:24:df:4c:ca:27:57:3e:14:56:85:b6: e9:c4:be:36:8f:08:f8:ba:0a:32:15:0d:74:30:62:67:38:4a: ab:9c:af:11:83:77:77:ff:81:46:c8:52:5e:0f:26:eb:5c:8c: 69:a9:69:c0:fa:c0:6c:44:a2:70:04:47:07:17:bb:1f:04:c9: 35:d2:8c:03:0a:41:69:b7:cb:d0:05:7d:ec:c3:43:9b:66:f5: bb:1c:08:47:7f:35:bd:89:19:23:b8:7d:ac:91:72:fb:05:43: b0:1f:ed:de:b8:b1:e3:26:3a:2b:36:3c:df:ef:34:0b:31:17: 67:af:9d:4a:f4:9d:c6:c3:65:56:22:17:28:a3:15:8a:99:7a: 39:ad:13:e2:20:3d:33:44:c3:8a:a0:63:4a:a4:59:5b:2f:b5: 59:89:5f:89:eb:66:fb:e3:68:a7:f1:77:be:ea:ac:fb:62:fb: 8a:42:d0:10:f7:e4:32:0c:5f:4b:6f:a2:2c:e1:e5:fd:7a:71: b4:c0:d7:86 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIURXEBdnSH26wHkOn5lMOOGlkl6oMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2 MDM5NDQ4RjAeFw0yNTExMTIxNDU1MDNaFw0yNjExMTExNTAwMDNaMDMxMTAvBgNV BAMTKDlDRTc1NDA5MzdGQURBOERENENDQjQ2MEVDNEQ2QzNDMTkzMUE1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYVnhbYrLa9uU7JWbiC5GD1uM SbES0AL3Jwv61AEtVc+9MRi91ydFWpNOhghXFDOhR/MjLljJqKU6UCNUhWDOwHAH QMxvpnEMa4wkbA6kjWJM2umGMqsLXhXXNL6KLBbsJaApJkdiX7hIjqrHoiNN8s2d vUEN6jhkLLUjCf5pcnfeLdWzWPdEnRA/jTUBVzI2mriVxa4DLn3q4GxKdKX2HvP0 FZy/bEI+99biV5ZlVaf9akRga1gZ/0iet7rdf92gBxIR18pTXfQ5yt4keBFeHOiC i/eQtgkcHSpDA/ZtkBoCeFEET+1T4GJPJ8WrJ+FzP8GXX1KI128W3so5lxXvAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUnOdUCTf62o3UzLRg7E1sPBkxpV8wHwYDVR0j BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5 NDQ4Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1NWExYTQ0LTMzN2QtNGRiNC05 MGQ3LTViZDRmMzcyMTRiOC8wLzMyMzQzMDMxM2EzMjYzMzQzMDNhMzUzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEsQAAFMA0G CSqGSIb3DQEBCwUAA4IBAQATnREwYg3jAruxdnbOH1m+1CNnnEAeQA5dwzIrYnjJ 7Nc5GNLSDg4ebGtqFKqtnN9jD2B6IBGlzia6kifWJN9MyidXPhRWhbbpxL42jwj4 ugoyFQ10MGJnOEqrnK8Rg3d3/4FGyFJeDybrXIxpqWnA+sBsRKJwBEcHF7sfBMk1 0owDCkFpt8vQBX3sw0ObZvW7HAhHfzW9iRkjuH2skXL7BUOwH+3euLHjJjorNjzf 7zQLMRdnr51K9J3Gw2VWIhcooxWKmXo5rRPiID0zRMOKoGNKpFlbL7VZiV+J62b7 42in8Xe+6qz7YvuKQtAQ9+QyDF9Lb6Is4eX9enG0wNeG -----END CERTIFICATE-----Generated at Wed Dec 3 16:53:04 2025 by rpki-client