This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32302d3234203d3e20313335343738.roa File: 3137352e3135382e33322e302f32302d3234203d3e20313335343738.roa (raw, json) Hash identifier: 7pDLsHgOcZwn1eSxA+Npm2ov2bKnIJgWI3SSJl41Zls= Subject key identifier: B3:4B:AF:54:24:9D:AB:62:2C:AD:3F:0D:C7:07:F8:81:0C:5E:45:B9 Certificate issuer: /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Certificate serial: 680201D97EE5EED6311546DCD294A77985CFD8D6 Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32302d3234203d3e20313335343738.roa Signing time: Mon 02 Jun 2025 02:04:39 +0000 ROA not before: Mon 02 Jun 2025 01:59:39 +0000 ROA not after: Mon 01 Jun 2026 02:04:39 +0000 asID: 135478 IP address blocks: 175.158.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:02:01:d9:7e:e5:ee:d6:31:15:46:dc:d2:94:a7:79:85:cf:d8:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Validity Not Before: Jun 2 01:59:39 2025 GMT Not After : Jun 1 02:04:39 2026 GMT Subject: CN=B34BAF54249DAB622CAD3F0DC707F8810C5E45B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:87:21:11:79:ea:ef:d8:82:c2:48:4b:5f: 22:c5:1d:f7:7a:11:78:6f:1a:00:8f:3d:18:29:f8: 42:af:44:9b:8a:f3:89:b7:a2:b3:36:e3:6c:81:b7: a8:4e:f0:c7:62:7c:45:06:4d:88:92:b8:a5:6a:53: c7:48:8f:1f:3c:31:7a:e7:c2:ce:1c:87:c3:aa:b3: 32:d3:5b:60:8b:19:13:ae:35:12:9a:43:7c:17:8d: 83:cd:d9:89:15:56:84:22:9f:4a:e4:70:ad:eb:8f: bb:23:91:18:e0:e8:d1:fe:f4:ed:1b:d6:75:b8:65: ce:70:42:7c:5f:97:38:19:fc:80:4e:22:9e:ce:7d: 98:d1:0b:55:09:0c:34:9d:4e:16:ee:90:19:90:01: ca:a8:4d:4b:eb:98:b7:56:1c:f2:20:ab:4e:9b:45: 05:2d:63:1b:83:ad:8a:d2:6f:77:ac:c5:7b:39:75: 76:28:74:49:4f:41:d6:21:f6:f6:98:e9:e4:ab:e5: 73:c5:8a:8f:b4:d3:c3:96:37:2e:b9:0a:e8:43:2f: 58:c8:18:44:23:b3:d5:96:cc:20:05:94:09:67:cd: f2:43:45:0c:f1:0b:6e:b2:9b:ab:8d:58:f9:f3:08: 11:ef:32:79:34:24:60:da:a3:ac:ae:f9:e8:d4:35: 06:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4B:AF:54:24:9D:AB:62:2C:AD:3F:0D:C7:07:F8:81:0C:5E:45:B9 X509v3 Authority Key Identifier: keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32302d3234203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.158.32.0/20 Signature Algorithm: sha256WithRSAEncryption 36:ff:fc:bf:84:af:2b:81:20:4a:96:1a:4a:6f:92:fe:85:f7: 7f:ea:b0:c4:34:2b:66:8c:60:c5:8b:75:57:d5:c2:38:1e:48: d1:93:42:87:eb:90:18:5f:7a:68:a1:e5:b8:89:c2:a6:92:de: c8:8c:7c:22:5d:5b:7c:7e:e1:5b:f4:5c:ef:ef:ff:5f:a1:98: df:81:74:8d:aa:06:ec:88:2b:0e:35:a7:dc:c7:e9:4c:75:e1: 53:9e:66:14:bc:19:96:7f:9b:2b:55:11:3a:88:06:3c:61:5c: 51:7d:5b:fa:64:6c:04:93:f1:2e:44:fe:82:c2:b1:df:a2:af: d6:7f:f1:7d:b5:57:cb:23:45:2a:0e:5e:52:cb:c9:6a:c5:90: 97:3e:c8:30:21:1c:c8:69:44:ab:76:c3:55:ae:5e:7c:b5:99: ac:12:8c:c2:ce:af:db:c2:c2:f5:88:84:b5:03:91:bb:cb:fb: ef:dd:1f:90:52:29:fd:21:da:df:64:35:ce:52:d3:74:a9:9c: d2:5e:79:9e:00:7f:bd:72:de:7c:ee:4d:cc:9e:2e:e3:25:74: 0b:8a:c7:f7:e9:91:d1:53:29:b9:6a:36:c4:3b:06:12:b7:15: 10:36:4b:ac:8c:d9:ae:ab:0d:b9:4e:86:24:f6:cf:9c:74:7f: 4a:f9:9a:0c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaAIB2X7l7tYxFUbc0pSneYXP2NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3 MkZGQUUwRTAeFw0yNTA2MDIwMTU5MzlaFw0yNjA2MDEwMjA0MzlaMDMxMTAvBgNV BAMTKEIzNEJBRjU0MjQ5REFCNjIyQ0FEM0YwREM3MDdGODgxMEM1RTQ1QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8B4chEXnq79iCwkhLXyLFHfd6 EXhvGgCPPRgp+EKvRJuK84m3orM242yBt6hO8MdifEUGTYiSuKVqU8dIjx88MXrn ws4ch8OqszLTW2CLGROuNRKaQ3wXjYPN2YkVVoQin0rkcK3rj7sjkRjg6NH+9O0b 1nW4Zc5wQnxflzgZ/IBOIp7OfZjRC1UJDDSdThbukBmQAcqoTUvrmLdWHPIgq06b RQUtYxuDrYrSb3esxXs5dXYodElPQdYh9vaY6eSr5XPFio+008OWNy65CuhDL1jI GEQjs9WWzCAFlAlnzfJDRQzxC26ym6uNWPnzCBHvMnk0JGDao6yu+ejUNQbzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUs0uvVCSdq2IsrT8Nxwf4gQxeRbkwHwYDVR0j BBgwFoAU/NBThZBOAPPBCjOe4Z2STXL/rg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzhmZDRhZi1mZTY3LTQ1YzgtODBiNy0wNmZjMTE4ZGY4ZTIvMC9GQ0QwNTM4NTkw NEUwMEYzQzEwQTMzOUVFMTlEOTI0RDcyRkZBRTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3MkZG QUUwRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFmLWZlNjctNDVjOC04 MGI3LTA2ZmMxMThkZjhlMi8wLzMxMzczNTJlMzEzNTM4MmUzMzMyMmUzMDJmMzIz MDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEr54gMA0GCSqG SIb3DQEBCwUAA4IBAQA2//y/hK8rgSBKlhpKb5L+hfd/6rDENCtmjGDFi3VX1cI4 HkjRk0KH65AYX3pooeW4icKmkt7IjHwiXVt8fuFb9Fzv7/9foZjfgXSNqgbsiCsO Nafcx+lMdeFTnmYUvBmWf5srVRE6iAY8YVxRfVv6ZGwEk/EuRP6CwrHfoq/Wf/F9 tVfLI0UqDl5Sy8lqxZCXPsgwIRzIaUSrdsNVrl58tZmsEozCzq/bwsL1iIS1A5G7 y/vv3R+QUin9IdrfZDXOUtN0qZzSXnmeAH+9ct587k3Mni7jJXQLisf36ZHRUym5 ajbEOwYStxUQNkusjNmuqw25ToYk9s+cdH9K+ZoM -----END CERTIFICATE-----Generated at Wed Dec 3 11:48:56 2025 by rpki-client