This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa File: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (raw, json) Hash identifier: U633ym5jUdptckJshhV25CxUbvCB8/wjZ9iL8MKR52I= Subject key identifier: A5:77:52:9F:31:88:AD:29:84:1A:AD:9E:A9:0B:21:97:94:82:FE:AE Certificate issuer: /CN=B152586AE46FCAB640629D941147319E05FCF34B Certificate serial: 6E6958CE16D36E7447DB1194C20956B846FF652D Authority key identifier: B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa Signing time: Thu 20 Nov 2025 11:00:01 +0000 ROA not before: Thu 20 Nov 2025 10:55:01 +0000 ROA not after: Thu 19 Nov 2026 11:00:01 +0000 asID: 147154 IP address blocks: 2001:df0:7c40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:69:58:ce:16:d3:6e:74:47:db:11:94:c2:09:56:b8:46:ff:65:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B152586AE46FCAB640629D941147319E05FCF34B Validity Not Before: Nov 20 10:55:01 2025 GMT Not After : Nov 19 11:00:01 2026 GMT Subject: CN=A577529F3188AD29841AAD9EA90B21979482FEAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:79:76:fd:83:aa:9a:c2:cf:b8:2f:f4:04: 49:26:01:5f:0f:ea:25:f1:d7:09:51:8e:0c:45:80: 8c:51:c0:7e:55:fb:d0:45:2b:b4:0d:97:28:b5:6d: 3c:93:82:bd:63:20:5e:e8:d6:8d:b9:0d:30:cc:06: 2d:4b:50:c2:36:6f:28:71:2e:88:a4:d0:4f:9d:60: dd:9d:04:15:44:52:cf:30:a7:c0:89:87:b6:31:64: 23:53:b9:0b:62:43:b5:94:2e:d0:a7:2d:e1:dc:6f: 22:e3:e8:7e:7b:92:e3:26:f3:e1:0c:db:e1:3b:4f: 95:48:9c:a9:7d:1f:27:7e:f6:d1:3e:fb:48:79:e5: 63:aa:de:24:b9:2d:b8:7b:8c:e7:f3:6e:7a:40:e6: 25:9b:5e:c4:4f:ff:51:c7:b1:b1:20:f1:04:d8:fd: 4d:e1:bc:37:14:b9:aa:1e:a1:39:80:60:97:a5:00: bc:ef:26:dd:67:48:6a:12:78:37:4c:89:c0:78:6f: 9d:56:b2:ef:1d:78:95:96:da:d0:f5:be:bb:5f:30: 7f:e5:a6:34:21:d7:b5:0e:be:19:53:57:51:ce:e3: 17:2c:1f:00:21:8d:b1:54:83:61:27:64:09:34:52: 48:25:80:1e:32:96:ea:3a:1b:d8:5f:80:c3:eb:ad: 35:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:77:52:9F:31:88:AD:29:84:1A:AD:9E:A9:0B:21:97:94:82:FE:AE X509v3 Authority Key Identifier: keyid:B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:7c40::/48 Signature Algorithm: sha256WithRSAEncryption 8e:84:7a:5b:ba:8a:88:92:fc:cc:fc:15:65:41:25:bf:4b:87: 18:5e:c6:8a:49:e3:60:ca:0b:62:92:a9:81:7f:ab:30:ce:42: 03:8f:b1:b6:d7:78:81:aa:ad:6c:9a:a6:30:39:a8:2f:f0:ea: 25:d2:34:11:54:9b:14:68:85:0d:51:eb:98:c2:0f:28:b3:77: ae:82:8c:ae:3d:8f:69:00:aa:7d:51:49:4b:3c:1f:aa:0c:0e: 24:f1:e9:6c:c4:b5:75:09:9e:7d:21:a3:c2:6a:cc:a8:23:8d: 83:38:fa:fa:75:b9:c2:a3:fe:0c:ed:a7:d1:5c:16:91:43:92: be:70:6e:98:5b:bd:ba:bd:f7:72:90:0a:03:73:52:8a:8f:8c: c6:f3:74:90:9c:68:f6:bd:c3:d5:d1:38:92:32:43:fd:a3:81: e7:1a:18:f8:65:b2:a4:f5:ca:31:d7:58:5e:f2:64:34:9b:63: 6a:0e:71:f4:c9:1c:b5:4d:f7:69:45:82:1a:1d:20:ae:0d:f1: b3:7f:55:71:17:bd:5d:dc:6d:68:ac:6c:66:5c:88:a5:3b:30: d3:98:3a:df:c1:61:56:f6:88:63:47:c4:20:0b:1a:5b:ec:d7: b1:18:db:ed:43:63:75:c0:c0:6d:f3:db:69:8c:e4:7f:4c:a6: 88:c9:62:d2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUbmlYzhbTbnRH2xGUwglWuEb/ZS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUw NUZDRjM0QjAeFw0yNTExMjAxMDU1MDFaFw0yNjExMTkxMTAwMDFaMDMxMTAvBgNV BAMTKEE1Nzc1MjlGMzE4OEFEMjk4NDFBQUQ5RUE5MEIyMTk3OTQ4MkZFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwnl2/YOqmsLPuC/0BEkmAV8P 6iXx1wlRjgxFgIxRwH5V+9BFK7QNlyi1bTyTgr1jIF7o1o25DTDMBi1LUMI2byhx Loik0E+dYN2dBBVEUs8wp8CJh7YxZCNTuQtiQ7WULtCnLeHcbyLj6H57kuMm8+EM 2+E7T5VInKl9Hyd+9tE++0h55WOq3iS5Lbh7jOfzbnpA5iWbXsRP/1HHsbEg8QTY /U3hvDcUuaoeoTmAYJelALzvJt1nSGoSeDdMicB4b51Wsu8deJWW2tD1vrtfMH/l pjQh17UOvhlTV1HO4xcsHwAhjbFUg2EnZAk0UkglgB4yluo6G9hfgMPrrTXvAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUpXdSnzGIrSmEGq2eqQshl5SC/q4wHwYDVR0j BBgwFoAUsVJYauRvyrZAYp2UEUcxngX880swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTllMjg5OC0wMjNiLTQ3NDEtODczNS1hMDcxOGNjNmNmMmIvMC9CMTUyNTg2QUU0 NkZDQUI2NDA2MjlEOTQxMTQ3MzE5RTA1RkNGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUwNUZD RjM0Qi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhOWUyODk4LTAyM2ItNDc0MS04 NzM1LWEwNzE4Y2M2Y2YyYi8wLzMyMzAzMDMxM2E2NDY2MzAzYTM3NjMzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDM3MzEzNTM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8HxAMA0GCSqGSIb3DQEBCwUAA4IBAQCOhHpbuoqIkvzM/BVlQSW/S4cYXsaKSeNg ygtikqmBf6swzkIDj7G213iBqq1smqYwOagv8Ool0jQRVJsUaIUNUeuYwg8os3eu goyuPY9pAKp9UUlLPB+qDA4k8elsxLV1CZ59IaPCasyoI42DOPr6dbnCo/4M7afR XBaRQ5K+cG6YW726vfdykAoDc1KKj4zG83SQnGj2vcPV0TiSMkP9o4HnGhj4ZbKk 9cox11he8mQ0m2NqDnH0yRy1TfdpRYIaHSCuDfGzf1VxF71d3G1orGxmXIilOzDT mDrfwWFW9ohjR8QgCxpb7NexGNvtQ2N1wMBt89tpjOR/TKaIyWLS -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:58 2025 by rpki-client