This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa File: 323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa (raw, json) Hash identifier: TCUPKlg7kQPNlt+DuDLObLWam/60pHmjwqxGHPtQjYY= Subject key identifier: 04:BC:FD:47:76:6C:4E:FF:B2:41:70:91:C6:E7:77:DD:AF:76:23:F3 Certificate issuer: /CN=6969B3009665224541D322068C9E3444C78F90F9 Certificate serial: 5D9F95E9B12A84AC1EF772ED63078322EA393798 Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa Signing time: Mon 15 Dec 2025 09:02:32 +0000 ROA not before: Mon 15 Dec 2025 08:57:32 +0000 ROA not after: Mon 14 Dec 2026 09:02:32 +0000 asID: 139972 IP address blocks: 2405:c440:1399::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 15:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9f:95:e9:b1:2a:84:ac:1e:f7:72:ed:63:07:83:22:ea:39:37:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9 Validity Not Before: Dec 15 08:57:32 2025 GMT Not After : Dec 14 09:02:32 2026 GMT Subject: CN=04BCFD47766C4EFFB2417091C6E777DDAF7623F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:05:a5:81:17:77:2d:01:6a:ef:00:eb:0c:00: 0f:2b:e0:f3:e1:11:49:57:ae:fa:54:e7:d9:88:b2: 2e:70:c3:60:c0:e9:6c:f3:12:4e:72:1c:fb:88:a6: 29:a4:de:e9:c0:52:4d:d0:1c:1d:9e:e5:94:ce:90: 01:71:76:50:fc:bf:fb:9f:29:bb:3c:1e:9d:1b:20: 56:32:45:84:b3:81:5a:5a:53:c9:7f:2d:fa:71:6a: 82:80:bb:a2:18:41:84:61:88:bd:42:ec:2c:f7:e3: dd:e5:e6:25:72:45:1b:3c:0b:0e:0b:d1:94:63:20: f3:9e:60:8e:1d:4e:4e:7f:d9:80:68:6d:47:fb:39: 3c:68:1b:6d:35:8e:13:3c:64:f9:36:c8:dc:d2:32: 02:72:bc:9e:7c:3d:84:01:d6:93:64:00:85:06:6b: 26:21:ae:94:d8:98:cd:60:a7:d5:f0:90:3e:8e:a4: 9b:84:eb:55:68:cd:63:7e:e0:fd:b7:6a:3d:b3:2f: 8c:84:09:91:a6:68:27:6b:65:ac:b1:83:23:f4:15: 28:19:02:d8:db:d2:ab:89:cf:fb:37:c7:31:73:dd: 67:68:1d:41:bc:0b:37:98:7c:6d:60:95:8a:da:31: 7c:1d:d4:fc:04:1a:65:e6:27:33:8f:49:8d:93:e5: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BC:FD:47:76:6C:4E:FF:B2:41:70:91:C6:E7:77:DD:AF:76:23:F3 X509v3 Authority Key Identifier: keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a313339393a3a2f34382d3438203d3e20313339393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c440:1399::/48 Signature Algorithm: sha256WithRSAEncryption 88:9b:41:6f:4c:24:86:23:95:db:e2:ee:30:7d:33:c1:4b:49: 1d:cb:97:61:55:3c:b6:82:00:d3:ab:a6:0b:cf:22:aa:dd:17: 29:3a:c5:b5:be:ea:11:74:67:ac:e1:b3:58:5e:51:72:2c:e5: a0:1f:8b:67:49:1e:a8:4f:2d:52:e3:37:d5:96:7e:00:6f:98: bd:8f:ab:0e:41:4b:e9:ad:89:8f:ea:8c:e0:df:0f:78:55:1b: 82:34:b5:03:ce:fa:90:93:f7:47:44:9b:78:a1:31:48:ef:61: 5e:89:dd:bf:e0:80:29:c8:bf:bb:77:c3:dc:d5:e4:3e:36:da: ae:75:5b:76:3b:58:8f:8d:e1:d6:47:93:4b:52:57:22:21:0b: 97:d8:24:1b:cb:69:19:f2:91:21:db:97:a5:70:dc:3b:ae:ae: 60:9c:60:39:77:39:2d:fe:18:9e:bd:61:30:bb:e2:cc:94:b9: 38:27:b5:8b:7c:55:72:e3:ff:90:78:a9:52:43:03:9f:fe:ce: eb:38:a0:f3:ca:c2:0f:22:f7:d9:3a:f9:7d:9a:30:be:3b:a6: 63:65:35:91:c6:1a:7b:85:b9:1e:1b:56:e2:db:71:ea:f7:99: 1e:38:d7:80:18:89:9f:6d:3c:38:64:10:d3:2d:1c:7f:47:4d: 8c:e5:96:e1 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUXZ+V6bEqhKwe93LtYweDIuo5N5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRD NzhGOTBGOTAeFw0yNTEyMTUwODU3MzJaFw0yNjEyMTQwOTAyMzJaMDMxMTAvBgNV BAMTKDA0QkNGRDQ3NzY2QzRFRkZCMjQxNzA5MUM2RTc3N0REQUY3NjIzRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BaWBF3ctAWrvAOsMAA8r4PPh EUlXrvpU59mIsi5ww2DA6WzzEk5yHPuIpimk3unAUk3QHB2e5ZTOkAFxdlD8v/uf Kbs8Hp0bIFYyRYSzgVpaU8l/LfpxaoKAu6IYQYRhiL1C7Cz3493l5iVyRRs8Cw4L 0ZRjIPOeYI4dTk5/2YBobUf7OTxoG201jhM8ZPk2yNzSMgJyvJ58PYQB1pNkAIUG ayYhrpTYmM1gp9XwkD6OpJuE61VozWN+4P23aj2zL4yECZGmaCdrZayxgyP0FSgZ Atjb0quJz/s3xzFz3WdoHUG8CzeYfG1glYraMXwd1PwEGmXmJzOPSY2T5bF9AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUBLz9R3ZsTv+yQXCRxud33a92I/MwHwYDVR0j BBgwFoAUaWmzAJZlIkVB0yIGjJ40RMePkPkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWVlYmY3Yy1mZTM4LTQ2YTktODMxMS1lMDUzZmNhNTBkZmQvMC82OTY5QjMwMDk2 NjUyMjQ1NDFEMzIyMDY4QzlFMzQ0NEM3OEY5MEY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRDNzhG OTBGOS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04 MzExLWUwNTNmY2E1MGRmZC8wLzMyMzQzMDM1M2E2MzM0MzQzMDNhMzEzMzM5Mzkz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BcRAE5kwDQYJKoZIhvcNAQELBQADggEBAIibQW9MJIYjldvi7jB9M8FLSR3Ll2FV PLaCANOrpgvPIqrdFyk6xbW+6hF0Z6zhs1heUXIs5aAfi2dJHqhPLVLjN9WWfgBv mL2Pqw5BS+mtiY/qjODfD3hVG4I0tQPO+pCT90dEm3ihMUjvYV6J3b/ggCnIv7t3 w9zV5D422q51W3Y7WI+N4dZHk0tSVyIhC5fYJBvLaRnykSHbl6Vw3DuurmCcYDl3 OS3+GJ69YTC74syUuTgntYt8VXLj/5B4qVJDA5/+zus4oPPKwg8i99k6+X2aML47 pmNlNZHGGnuFuR4bVuLbcer3mR4414AYiZ9tPDhkENMtHH9HTYzlluE= -----END CERTIFICATE-----Generated at Mon Dec 15 16:53:41 2025 by rpki-client