This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/323430353a663234303a3a2f33322d3332203d3e20313430333834.roa File: 323430353a663234303a3a2f33322d3332203d3e20313430333834.roa (raw, json) Hash identifier: jCC55QoiailnQ1RFdBW81Arc7TozD6cSp8bDswcvT9g= Subject key identifier: 81:A0:C7:BB:92:BE:71:5A:DC:2E:35:E1:1A:2F:B8:F9:30:85:AB:FF Certificate issuer: /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Certificate serial: 0D1E4D15371DF73406133E146CC24E931BA3F558 Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/323430353a663234303a3a2f33322d3332203d3e20313430333834.roa Signing time: Thu 23 Oct 2025 17:10:28 +0000 ROA not before: Thu 23 Oct 2025 17:05:28 +0000 ROA not after: Thu 22 Oct 2026 17:10:28 +0000 asID: 140384 IP address blocks: 2405:f240::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 06:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1e:4d:15:37:1d:f7:34:06:13:3e:14:6c:c2:4e:93:1b:a3:f5:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Validity Not Before: Oct 23 17:05:28 2025 GMT Not After : Oct 22 17:10:28 2026 GMT Subject: CN=81A0C7BB92BE715ADC2E35E11A2FB8F93085ABFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:b5:ea:fa:8d:4b:c5:dd:78:db:c4:51:78: 61:a5:8d:44:aa:5f:51:a5:b0:9c:aa:1e:53:f5:15: c1:22:3e:57:1f:19:3c:03:bf:b3:22:a2:57:20:9a: f1:90:0a:e8:d7:a7:8d:fe:d4:fe:90:07:67:26:27: ad:fc:0a:17:c0:0e:5a:df:b8:8a:b4:f9:78:6d:16: c4:58:b8:15:34:44:11:f8:21:95:6e:c3:f4:d0:bf: 51:6c:06:35:79:40:9d:c4:be:41:67:f5:90:c0:23: 77:d4:91:e2:fe:f1:f9:c9:71:f9:41:cd:98:ec:a0: 1e:0b:d3:65:2b:27:5d:53:8a:a0:2d:77:bc:aa:c4: 6c:50:b2:26:ae:73:62:6a:e7:cf:47:4d:0a:46:57: db:ef:69:96:4a:03:4a:36:ec:a2:fa:47:0c:4c:aa: 2c:d8:c0:c8:39:5f:37:15:9e:52:e4:5c:b6:a9:93: bc:30:e4:66:4d:71:bc:78:ca:d3:03:ef:f9:8b:6b: ca:a1:92:cf:ce:e3:ec:99:96:e6:67:04:fd:4e:79: 4d:49:21:29:49:e4:b7:76:9f:8a:01:f8:d7:8a:ac: e3:91:b9:55:4f:7a:c1:8c:04:d9:41:8f:68:1f:f3: 36:0c:c3:73:9d:ef:6f:44:b2:11:9a:41:4e:c4:4c: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A0:C7:BB:92:BE:71:5A:DC:2E:35:E1:1A:2F:B8:F9:30:85:AB:FF X509v3 Authority Key Identifier: keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/323430353a663234303a3a2f33322d3332203d3e20313430333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:f240::/32 Signature Algorithm: sha256WithRSAEncryption 35:35:4c:96:96:31:f1:d0:33:85:8e:dd:c2:d2:35:4c:47:2e: ad:9c:30:eb:2d:5d:2a:3d:58:85:4f:7d:79:58:8a:06:2b:59: 00:99:50:cc:8f:47:3e:ed:b4:0c:97:29:98:a7:fd:9f:be:88: ad:8c:d9:ea:3f:8f:f7:fc:0f:a3:ae:63:09:00:1a:8b:7b:17: e8:0c:c4:b0:85:87:5d:26:f8:58:9a:46:b2:26:2c:88:ba:b9: 7c:e4:46:cf:eb:5d:98:da:45:bc:4e:c5:76:7c:e7:7e:6a:36: f6:9e:3d:2b:87:12:79:28:1a:fb:15:8b:0f:03:8c:c7:f9:db: 0d:8a:15:d1:0f:67:8f:32:55:ee:9f:e3:fd:e4:63:d2:b7:99: 30:bf:2e:9f:64:20:35:57:ac:91:b1:f2:d8:34:31:63:e2:ee: c1:f3:4a:3b:74:27:4e:d2:a5:c5:4d:63:d6:8b:4c:74:44:9c: 9d:ac:fc:f0:aa:5c:c4:40:36:e6:35:04:3f:55:d7:f7:e3:7a: bc:79:7d:7f:86:02:60:df:6a:71:34:50:de:80:39:91:d3:7c: cb:3c:79:08:52:ec:83:e7:04:a7:34:6e:b5:f6:e3:b8:be:5f: c5:e4:b3:60:de:ff:ef:f2:21:df:2c:ca:ce:86:ad:33:d6:1d: 0c:f2:b0:e0 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUDR5NFTcd9zQGEz4UbMJOkxuj9VgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJE MEI0RDhCRDAeFw0yNTEwMjMxNzA1MjhaFw0yNjEwMjIxNzEwMjhaMDMxMTAvBgNV BAMTKDgxQTBDN0JCOTJCRTcxNUFEQzJFMzVFMTFBMkZCOEY5MzA4NUFCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3jrXq+o1Lxd1428RReGGljUSq X1GlsJyqHlP1FcEiPlcfGTwDv7MiolcgmvGQCujXp43+1P6QB2cmJ638ChfADlrf uIq0+XhtFsRYuBU0RBH4IZVuw/TQv1FsBjV5QJ3EvkFn9ZDAI3fUkeL+8fnJcflB zZjsoB4L02UrJ11TiqAtd7yqxGxQsiauc2Jq589HTQpGV9vvaZZKA0o27KL6RwxM qizYwMg5XzcVnlLkXLapk7ww5GZNcbx4ytMD7/mLa8qhks/O4+yZluZnBP1OeU1J ISlJ5Ld2n4oB+NeKrOORuVVPesGMBNlBj2gf8zYMw3Od729EshGaQU7ETDyxAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUgaDHu5K+cVrcLjXhGi+4+TCFq/8wHwYDVR0j BBgwFoAUti5ELI0scND1q14qOh8RstC02L0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGQzNGU3Ny02Y2Y2LTQxODctOTA4My0xYzdhODgxOWU5NjUvMC9CNjJFNDQyQzhE MkM3MEQwRjVBQjVFMkEzQTFGMTFCMkQwQjREOEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJEMEI0 RDhCRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwZDM0ZTc3LTZjZjYtNDE4Ny05 MDgzLTFjN2E4ODE5ZTk2NS8wLzMyMzQzMDM1M2E2NjMyMzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMDMzMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQF8kAwDQYJKoZI hvcNAQELBQADggEBADU1TJaWMfHQM4WO3cLSNUxHLq2cMOstXSo9WIVPfXlYigYr WQCZUMyPRz7ttAyXKZin/Z++iK2M2eo/j/f8D6OuYwkAGot7F+gMxLCFh10m+Fia RrImLIi6uXzkRs/rXZjaRbxOxXZ8535qNvaePSuHEnkoGvsViw8DjMf52w2KFdEP Z48yVe6f4/3kY9K3mTC/Lp9kIDVXrJGx8tg0MWPi7sHzSjt0J07SpcVNY9aLTHRE nJ2s/PCqXMRANuY1BD9V1/fjerx5fX+GAmDfanE0UN6AOZHTfMs8eQhS7IPnBKc0 brX247i+X8Xks2De/+/yId8sys6GrTPWHQzysOA= -----END CERTIFICATE-----Generated at Wed Dec 3 16:34:21 2025 by rpki-client