This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3a2f33322d3332203d3e20313333383237.roa File: 323430343a613634303a3a2f33322d3332203d3e20313333383237.roa (raw, json) Hash identifier: O51+yh/myhmzBLnFSKrmxNaOkN9zLMNSiLH+jGUuyWg= Subject key identifier: 9E:92:1E:B3:76:08:CF:9E:72:8B:8F:0C:32:0A:E8:3A:80:9B:33:90 Certificate issuer: /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F Certificate serial: 6FF12497F259FAEF98D0954165F4B89FA22D7936 Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3a2f33322d3332203d3e20313333383237.roa Signing time: Tue 16 Dec 2025 03:00:02 +0000 ROA not before: Tue 16 Dec 2025 02:55:02 +0000 ROA not after: Tue 15 Dec 2026 03:00:02 +0000 asID: 133827 IP address blocks: 2404:a640::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 18:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f1:24:97:f2:59:fa:ef:98:d0:95:41:65:f4:b8:9f:a2:2d:79:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F Validity Not Before: Dec 16 02:55:02 2025 GMT Not After : Dec 15 03:00:02 2026 GMT Subject: CN=9E921EB37608CF9E728B8F0C320AE83A809B3390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a3:fa:4f:18:f7:5f:83:15:56:d7:6d:85:36: 90:7a:1d:46:13:a9:48:f4:3e:0e:89:9e:04:7f:86: ac:e5:d5:b8:22:d3:0c:fe:04:6d:64:df:91:02:18: 09:f8:51:8e:ce:64:82:b6:5b:1d:bb:9c:91:d5:d7: f8:bc:9c:29:e1:66:b4:55:9e:39:fb:83:66:dd:00: aa:32:6a:c5:d9:81:07:6e:a2:3c:64:85:e9:89:ed: 74:29:04:8e:47:77:ba:c5:e7:ba:57:60:2f:92:96: c0:54:25:4e:90:7e:12:a7:74:61:35:12:27:65:80: 95:01:c5:bc:9b:ab:75:fd:df:05:5f:36:d7:a6:63: 0d:e5:71:95:ed:eb:b0:8d:2a:4d:8f:26:08:71:c4: 60:e8:90:62:01:50:1f:51:61:42:15:4e:bc:34:c9: ce:37:81:b7:20:cd:aa:0c:fb:f1:9d:e0:65:21:13: c9:43:fa:da:15:1c:95:84:7f:93:ed:5e:44:2e:8f: da:85:c6:55:12:76:1b:49:60:56:40:85:70:e2:85: 92:f8:50:14:f8:a5:40:fc:ea:54:a4:e1:cd:1c:f4: 55:b6:21:2b:45:ef:e6:01:43:9f:26:84:77:1c:41: a5:fd:e7:47:35:eb:41:56:e1:9f:24:ce:41:b8:f9: 1c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:92:1E:B3:76:08:CF:9E:72:8B:8F:0C:32:0A:E8:3A:80:9B:33:90 X509v3 Authority Key Identifier: keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/323430343a613634303a3a2f33322d3332203d3e20313333383237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:a640::/32 Signature Algorithm: sha256WithRSAEncryption 87:b4:eb:fd:ba:30:93:0e:c5:e9:cb:11:15:11:0f:72:db:0f: 12:2f:6d:52:b4:1b:e9:6a:21:f0:04:b6:44:8c:4d:8c:86:c6: 0c:47:26:ab:8e:d0:0f:b7:d4:83:9f:f2:cb:68:d2:8d:99:0f: 1a:23:c2:fe:c4:b1:88:fd:83:dd:3b:95:23:9f:02:db:0d:d6: cf:ad:1d:33:b2:48:1a:55:1b:7d:70:17:25:3c:1e:28:4e:ca: c3:16:19:a4:ae:ba:da:92:8a:62:58:66:b5:ca:aa:8c:cd:fb: 3c:25:be:7a:09:60:c0:b1:d6:c8:bc:bf:3c:5d:fb:38:56:18: 87:01:f2:73:a3:89:08:fe:5f:71:0c:ca:09:1c:bf:02:94:a8: d5:f9:3a:9f:c8:d7:24:57:78:fa:0b:3e:f2:4a:4e:dc:61:bd: 2c:0b:83:e6:d4:2e:e8:72:de:87:a3:75:bb:1a:7a:b3:30:d0: 33:77:03:14:f4:4e:a2:db:63:d5:43:ce:5c:92:f8:9f:5b:79: 6a:b3:d2:58:fb:32:b4:1d:9d:d5:1c:15:ef:66:31:c5:5c:40: 64:ec:3a:93:1f:29:b5:5c:72:12:12:a9:ba:61:20:ad:35:c7: ae:38:93:9c:c4:d7:a7:6b:e1:f0:65:21:c1:88:1f:c6:68:84: 9a:e1:4c:31 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUb/Ekl/JZ+u+Y0JVBZfS4n6IteTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1 NjlGODM2RjAeFw0yNTEyMTYwMjU1MDJaFw0yNjEyMTUwMzAwMDJaMDMxMTAvBgNV BAMTKDlFOTIxRUIzNzYwOENGOUU3MjhCOEYwQzMyMEFFODNBODA5QjMzOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCno/pPGPdfgxVW122FNpB6HUYT qUj0Pg6JngR/hqzl1bgi0wz+BG1k35ECGAn4UY7OZIK2Wx27nJHV1/i8nCnhZrRV njn7g2bdAKoyasXZgQduojxkhemJ7XQpBI5Hd7rF57pXYC+SlsBUJU6QfhKndGE1 EidlgJUBxbybq3X93wVfNtemYw3lcZXt67CNKk2PJghxxGDokGIBUB9RYUIVTrw0 yc43gbcgzaoM+/Gd4GUhE8lD+toVHJWEf5PtXkQuj9qFxlUSdhtJYFZAhXDihZL4 UBT4pUD86lSk4c0c9FW2IStF7+YBQ58mhHccQaX950c160FW4Z8kzkG4+RwJAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUnpIes3YIz55yi48MMgroOoCbM5AwHwYDVR0j BBgwFoAUDOannVPYKfKlViNnbo0qmlafg28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTk5MDEyNS02MDlhLTQ4YzgtYWM4Ni0xYzNiYzMxNWJhZDYvMC8wQ0U2QTc5RDUz RDgyOUYyQTU1NjIzNjc2RThEMkE5QTU2OUY4MzZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFNkE3OUQ1M0Q4MjlGMkE1NTYyMzY3NkU4RDJBOUE1NjlG ODM2Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhOTkwMTI1LTYwOWEtNDhjOC1h Yzg2LTFjM2JjMzE1YmFkNi8wLzMyMzQzMDM0M2E2MTM2MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzMzM4MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEpkAwDQYJKoZI hvcNAQELBQADggEBAIe06/26MJMOxenLERURD3LbDxIvbVK0G+lqIfAEtkSMTYyG xgxHJquO0A+31IOf8sto0o2ZDxojwv7EsYj9g907lSOfAtsN1s+tHTOySBpVG31w FyU8HihOysMWGaSuutqSimJYZrXKqozN+zwlvnoJYMCx1si8vzxd+zhWGIcB8nOj iQj+X3EMygkcvwKUqNX5Op/I1yRXePoLPvJKTtxhvSwLg+bULuhy3oejdbsaerMw 0DN3AxT0TqLbY9VDzlyS+J9beWqz0lj7MrQdndUcFe9mMcVcQGTsOpMfKbVcchIS qbphIK01x644k5zE16dr4fBlIcGIH8ZohJrhTDE= -----END CERTIFICATE-----Generated at Fri Dec 19 11:38:33 2025 by rpki-client