This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa File: 3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa (raw, json) Hash identifier: uCH/JrJsLPZexF0rUx1EEQxpnCx3s5VDJ8IscbtIU4M= Subject key identifier: 15:06:EF:8E:3C:C1:64:67:13:0A:9D:DC:C8:AC:91:37:65:10:92:B7 Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Certificate serial: 525CFEF0B658F943C19AD487A67962BCFA2E3197 Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa Signing time: Tue 02 Dec 2025 04:07:34 +0000 ROA not before: Tue 02 Dec 2025 04:02:34 +0000 ROA not after: Tue 01 Dec 2026 04:07:34 +0000 asID: 136873 IP address blocks: 157.66.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 19:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5c:fe:f0:b6:58:f9:43:c1:9a:d4:87:a6:79:62:bc:fa:2e:31:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D Validity Not Before: Dec 2 04:02:34 2025 GMT Not After : Dec 1 04:07:34 2026 GMT Subject: CN=1506EF8E3CC16467130A9DDCC8AC9137651092B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c0:43:53:7d:b8:bd:cd:46:81:bc:d9:7e:ea: cd:aa:f6:35:05:8d:61:cc:ad:8c:f8:61:e7:13:55: bb:e6:23:59:6d:af:80:f5:3f:89:0f:d1:eb:06:da: 2c:9b:73:0d:c2:b8:6a:e1:9c:e6:ab:03:8c:6f:9f: e5:2f:3a:06:24:5c:d6:35:bf:74:e2:59:eb:2b:71: 70:e3:84:9a:62:e2:e3:f7:51:fa:a9:3b:7c:27:f1: 20:d6:2f:09:d2:3a:73:0f:bb:4e:5d:67:6f:26:72: cc:f2:d7:01:fb:fa:4f:c2:32:76:b8:ae:06:da:ba: f4:69:54:9a:1b:48:1a:53:a4:a7:e0:0c:71:de:30: a9:81:22:9a:89:fc:00:d7:8e:e4:be:07:0f:da:c3: 10:ed:d6:80:3f:73:b8:5b:ab:fc:e1:24:59:ed:02: b5:82:ad:b1:4f:74:e4:7b:ee:b1:af:f0:60:6c:5f: de:c1:e0:18:87:52:48:51:af:83:a6:4c:f4:bd:26: f3:a3:d6:e9:f7:b6:63:53:a2:29:61:ed:d1:5d:20: ca:84:49:14:22:79:75:f2:90:2f:e8:e8:1a:82:77: 57:59:ee:8e:1f:da:0a:06:f3:8c:56:3f:54:03:2b: ad:71:43:c1:ff:3a:e3:a2:07:36:97:8b:44:23:11: a8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:06:EF:8E:3C:C1:64:67:13:0A:9D:DC:C8:AC:91:37:65:10:92:B7 X509v3 Authority Key Identifier: keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/3135372e36362e3132382e302f32332d3234203d3e20313336383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.128.0/23 Signature Algorithm: sha256WithRSAEncryption c5:f3:3c:c3:25:5f:72:12:58:13:62:60:ba:2b:69:c7:9a:5a: 82:ab:cd:95:22:0f:66:18:d5:c2:a5:7a:82:a4:a5:96:eb:2a: 35:ba:10:8d:30:ef:4f:66:b6:82:ff:97:01:da:b9:7f:6c:5a: 10:05:44:56:9e:f3:2b:34:d2:72:8e:a4:7e:fd:18:20:eb:5c: f4:35:a3:18:43:30:d5:ad:73:04:1b:15:9f:0a:c8:58:e9:03: ae:b5:c5:67:77:3b:35:a5:1b:33:2c:a1:fd:d6:ad:98:9e:bb: 23:8a:d2:e2:28:b5:6e:eb:2f:ab:76:4e:a5:e8:29:45:29:a7: 34:ce:29:4b:5f:25:9f:54:f7:03:e0:b8:96:6d:f9:b9:57:4f: 50:b5:72:21:db:07:28:b8:86:25:e3:50:a0:4d:41:8b:cd:9d: 56:71:85:09:fc:24:dd:25:d1:f3:12:fc:8f:47:8f:a4:74:ee: 8e:96:b6:3f:d9:b0:31:fd:79:27:cd:1b:a0:88:c3:04:a8:eb: 3d:f3:96:a7:1e:92:61:41:4e:71:12:54:66:71:bf:79:94:4c: 21:43:1b:f6:4f:0b:43:f5:9f:c4:14:d6:fd:dd:3c:99:b8:f1: 48:09:09:69:86:8a:85:df:4a:5b:43:04:27:e1:15:63:01:d4: 3f:e4:e9:34 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUlz+8LZY+UPBmtSHpnlivPouMZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNC RUYxMkY3RDAeFw0yNTEyMDIwNDAyMzRaFw0yNjEyMDEwNDA3MzRaMDMxMTAvBgNV BAMTKDE1MDZFRjhFM0NDMTY0NjcxMzBBOUREQ0M4QUM5MTM3NjUxMDkyQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbwENTfbi9zUaBvNl+6s2q9jUF jWHMrYz4YecTVbvmI1ltr4D1P4kP0esG2iybcw3CuGrhnOarA4xvn+UvOgYkXNY1 v3TiWesrcXDjhJpi4uP3UfqpO3wn8SDWLwnSOnMPu05dZ28mcszy1wH7+k/CMna4 rgbauvRpVJobSBpTpKfgDHHeMKmBIpqJ/ADXjuS+Bw/awxDt1oA/c7hbq/zhJFnt ArWCrbFPdOR77rGv8GBsX97B4BiHUkhRr4OmTPS9JvOj1un3tmNToilh7dFdIMqE SRQieXXykC/o6BqCd1dZ7o4f2goG84xWP1QDK61xQ8H/OuOiBzaXi0QjEaj/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFQbvjjzBZGcTCp3cyKyRN2UQkrcwHwYDVR0j BBgwFoAUY8S/Sxwnw0Be58odVDwfA77xL30wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjRkMWViYi1hZWViLTQ5NDUtOWVmMi0zMmFkOWJmZGViMTkvMC82M0M0QkY0QjFD MjdDMzQwNUVFN0NBMUQ1NDNDMUYwM0JFRjEyRjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjNDNEJGNEIxQzI3QzM0MDVFRTdDQTFENTQzQzFGMDNCRUYx MkY3RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyNGQxZWJiLWFlZWItNDk0NS05 ZWYyLTMyYWQ5YmZkZWIxOS8wLzMxMzUzNzJlMzYzNjJlMzEzMjM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnUKAMA0GCSqG SIb3DQEBCwUAA4IBAQDF8zzDJV9yElgTYmC6K2nHmlqCq82VIg9mGNXCpXqCpKWW 6yo1uhCNMO9PZraC/5cB2rl/bFoQBURWnvMrNNJyjqR+/Rgg61z0NaMYQzDVrXME GxWfCshY6QOutcVndzs1pRszLKH91q2YnrsjitLiKLVu6y+rdk6l6ClFKac0zilL XyWfVPcD4LiWbfm5V09QtXIh2wcouIYl41CgTUGLzZ1WcYUJ/CTdJdHzEvyPR4+k dO6OlrY/2bAx/XknzRugiMMEqOs985anHpJhQU5xElRmcb95lEwhQxv2TwtD9Z/E FNb93TyZuPFICQlphoqF30pbQwQn4RVjAdQ/5Ok0 -----END CERTIFICATE-----Generated at Mon Dec 8 06:25:31 2025 by rpki-client