This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/323430363a373234303a3a2f33322d3332203d3e20313431303634.roa File: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (raw, json) Hash identifier: VY0reLZgneAzg7R84Tad2iOKQP0XACwiXAAd1W212Yc= Subject key identifier: 7F:C6:24:D3:B9:A5:0C:6F:7A:DA:7D:AC:77:17:09:74:8D:8B:AD:A4 Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 7D9FB9F9561794EABDFABD08FE136626E4A62B08 Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/323430363a373234303a3a2f33322d3332203d3e20313431303634.roa Signing time: Fri 14 Nov 2025 00:56:58 +0000 ROA not before: Fri 14 Nov 2025 00:51:58 +0000 ROA not after: Fri 13 Nov 2026 00:56:58 +0000 asID: 141064 IP address blocks: 2406:7240::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:9f:b9:f9:56:17:94:ea:bd:fa:bd:08:fe:13:66:26:e4:a6:2b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: Nov 14 00:51:58 2025 GMT Not After : Nov 13 00:56:58 2026 GMT Subject: CN=7FC624D3B9A50C6F7ADA7DAC771709748D8BADA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:39:bf:4a:c8:55:2a:59:58:4f:59:d5:7b: 88:ce:bb:6a:6d:83:1e:ea:52:18:40:c9:c2:51:f5: 75:74:22:48:cb:21:99:e1:35:6d:1f:da:fd:09:f5: 4f:9f:46:11:ce:74:71:ae:6e:4a:66:c5:6b:b7:98: 94:ed:9c:54:59:0e:e2:69:34:f3:4c:f1:4a:0d:10: 77:76:96:34:1f:45:a4:41:43:a4:d1:35:c4:02:16: aa:fd:e0:58:99:a6:0d:14:94:41:89:7a:75:69:14: 80:3f:95:c6:a0:22:5a:47:8b:43:00:36:6c:91:61: 11:cc:d1:aa:c8:fd:63:d4:3e:f2:50:f3:82:63:89: be:07:55:34:a1:f8:9b:1f:79:e7:74:01:00:98:a1: 09:19:24:d8:43:28:b8:eb:9f:ef:37:85:6a:60:b9: ac:dc:5b:72:e9:a6:4b:ac:a6:89:ed:ce:77:28:19: e5:cf:cd:ba:f1:6c:3e:3e:45:de:0a:ac:5d:1b:10: 26:fa:3b:03:75:0c:33:a9:c9:5e:eb:47:0b:56:28: 93:e2:a8:11:70:05:d4:7f:4f:34:87:43:41:82:46: 7b:07:8a:67:a5:8c:59:e8:00:66:93:21:51:a7:12: 96:19:7a:d6:ed:d9:50:16:b6:4d:f1:04:61:64:78: 55:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C6:24:D3:B9:A5:0C:6F:7A:DA:7D:AC:77:17:09:74:8D:8B:AD:A4 X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/323430363a373234303a3a2f33322d3332203d3e20313431303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:7240::/32 Signature Algorithm: sha256WithRSAEncryption 78:d2:33:63:7f:fb:a1:a7:7a:d7:e3:f5:c4:bf:73:c1:c4:00: 4e:d4:85:b3:8e:4d:5b:f4:d0:9e:5c:da:ee:b7:62:62:48:8a: 26:85:1d:72:46:1d:4c:6c:53:39:ce:0b:e8:30:83:11:5d:fd: f5:3e:b3:26:7f:3b:14:c3:ea:7c:26:3b:58:4b:0c:2c:36:0b: 54:14:f7:47:56:ed:81:a4:b2:6e:73:0c:24:f7:17:c6:9c:29: 62:4d:70:c5:c8:a1:9e:7a:da:32:b9:95:3e:02:08:ee:79:2a: 96:d6:f9:60:57:8f:71:39:ea:63:19:1b:f4:5b:ec:8c:9b:17: 1a:e0:39:03:b1:e9:9d:60:15:74:dd:3c:f4:0a:fc:d6:5d:a1: a1:ad:a2:43:7f:2d:2c:7c:db:27:dc:7f:91:41:1c:0a:d2:11: 24:18:8e:8b:58:cf:67:7a:af:89:f8:bc:9f:3a:73:a4:31:88: 69:a7:96:0e:aa:73:34:5f:d2:e2:b1:68:78:bc:ff:06:fb:4e: 41:8b:2d:52:06:49:88:68:8b:c3:71:d4:b3:e0:8a:82:44:38: 51:c6:d9:df:96:75:0c:ad:98:f1:7c:f6:d8:2b:21:f8:90:27: c3:ad:03:d7:39:6a:d2:a2:ae:e1:96:17:da:b8:d4:0b:3d:7e: 97:dd:b1:21 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUfZ+5+VYXlOq9+r0I/hNmJuSmKwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yNTExMTQwMDUxNThaFw0yNjExMTMwMDU2NThaMDMxMTAvBgNV BAMTKDdGQzYyNEQzQjlBNTBDNkY3QURBN0RBQzc3MTcwOTc0OEQ4QkFEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMDm/SshVKllYT1nVe4jOu2pt gx7qUhhAycJR9XV0IkjLIZnhNW0f2v0J9U+fRhHOdHGubkpmxWu3mJTtnFRZDuJp NPNM8UoNEHd2ljQfRaRBQ6TRNcQCFqr94FiZpg0UlEGJenVpFIA/lcagIlpHi0MA NmyRYRHM0arI/WPUPvJQ84Jjib4HVTSh+Jsfeed0AQCYoQkZJNhDKLjrn+83hWpg uazcW3LppkuspontzncoGeXPzbrxbD4+Rd4KrF0bECb6OwN1DDOpyV7rRwtWKJPi qBFwBdR/TzSHQ0GCRnsHimeljFnoAGaTIVGnEpYZetbt2VAWtk3xBGFkeFXrAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUf8Yk07mlDG962n2sdxcJdI2LraQwHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRjNmIyYmQ3LWQ3ZjEtNDgxNS1h NjBhLWNhZDU0MDI5Y2U4OC8wLzMyMzQzMDM2M2EzNzMyMzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMTMwMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGckAwDQYJKoZI hvcNAQELBQADggEBAHjSM2N/+6Gnetfj9cS/c8HEAE7UhbOOTVv00J5c2u63YmJI iiaFHXJGHUxsUznOC+gwgxFd/fU+syZ/OxTD6nwmO1hLDCw2C1QU90dW7YGksm5z DCT3F8acKWJNcMXIoZ562jK5lT4CCO55KpbW+WBXj3E56mMZG/Rb7IybFxrgOQOx 6Z1gFXTdPPQK/NZdoaGtokN/LSx82yfcf5FBHArSESQYjotYz2d6r4n4vJ86c6Qx iGmnlg6qczRf0uKxaHi8/wb7TkGLLVIGSYhoi8Nx1LPgioJEOFHG2d+WdQytmPF8 9tgrIfiQJ8OtA9c5atKiruGWF9q41As9fpfdsSE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:50 2025 by rpki-client