This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32342d3234203d3e20313532303239.roa File: 33362e35302e35362e302f32342d3234203d3e20313532303239.roa (raw, json) Hash identifier: 3J7uJ2kwnNXV33soi5CVj9DuNVvTV0RMWa4++EPOkFc= Subject key identifier: 33:FB:CE:BF:C9:52:D8:D1:06:C2:81:DA:8C:73:58:6B:DA:BC:15:E7 Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A Certificate serial: 1301E77C20C821D50F14DC129A4642D5B983740E Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32342d3234203d3e20313532303239.roa Signing time: Thu 06 Nov 2025 08:02:25 +0000 ROA not before: Thu 06 Nov 2025 07:57:25 +0000 ROA not after: Thu 05 Nov 2026 08:02:25 +0000 asID: 152029 IP address blocks: 36.50.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:01:e7:7c:20:c8:21:d5:0f:14:dc:12:9a:46:42:d5:b9:83:74:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A Validity Not Before: Nov 6 07:57:25 2025 GMT Not After : Nov 5 08:02:25 2026 GMT Subject: CN=33FBCEBFC952D8D106C281DA8C73586BDABC15E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:ff:2c:e3:33:b0:82:43:f0:e3:6f:b5:d0: 4d:d6:b3:8e:38:c7:cc:44:fa:e1:ef:65:14:b6:01: d2:d3:e6:4b:a8:ef:70:fd:cd:b9:af:99:39:e6:90: 9b:99:6c:5a:5c:e8:07:29:32:8a:2d:3e:a3:ed:42: 76:77:c8:b4:4a:2d:d5:f9:17:a8:79:78:6f:4c:d8: 0c:9e:62:7d:7d:5c:2a:9a:4f:3e:00:f8:41:d1:13: 93:21:8c:b2:5d:c8:d4:9e:16:d7:76:3c:83:73:bc: 38:ae:01:b8:5a:95:2c:78:a7:8d:32:49:50:43:7d: 07:f3:77:1d:4b:79:fd:83:b5:ae:32:76:ec:2c:fb: 57:76:00:aa:d0:a6:70:18:2e:f3:16:d9:0b:86:9a: b8:3b:96:a9:ef:1d:35:5a:09:ce:44:ae:0f:cd:61: ab:c4:82:99:59:40:e2:cf:bd:34:01:a9:10:11:9e: aa:3c:bd:9d:b7:8f:d0:18:20:d9:13:7b:d4:47:a1: 92:f9:d7:17:ac:77:63:10:2f:d8:d9:8f:86:7a:7b: a2:0e:14:9a:cf:82:bb:08:56:f7:89:39:5a:49:57: a0:94:d7:ab:58:51:c0:c1:17:a3:06:c5:cd:3b:fb: e6:e3:74:44:72:ca:6a:54:26:5d:ae:29:e0:80:67: 94:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FB:CE:BF:C9:52:D8:D1:06:C2:81:DA:8C:73:58:6B:DA:BC:15:E7 X509v3 Authority Key Identifier: keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35362e302f32342d3234203d3e20313532303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.56.0/24 Signature Algorithm: sha256WithRSAEncryption a0:1b:59:28:58:41:5f:dc:d8:c4:67:bc:6e:a7:cc:30:bf:82: 88:cc:38:00:05:9f:18:65:5e:12:0a:16:3e:76:24:ec:c8:bd: 1f:e4:22:a6:8d:b8:36:38:55:8c:e3:d2:8d:35:d1:87:5a:83: 8c:f0:44:06:15:d3:a3:54:f7:46:73:cf:33:01:c3:3a:0a:0b: e9:60:94:6c:9e:5e:ac:05:d8:ad:34:8f:e9:82:1b:96:15:27: 9b:a9:20:fe:8b:5d:66:8a:20:d1:0d:4c:e9:34:61:7c:63:32: 14:ce:29:db:2d:05:12:e8:a9:8a:c6:b0:d3:04:db:e3:06:9c: a2:77:92:d3:17:39:44:44:46:4c:fd:c8:bc:84:bd:5c:76:6b: 19:7b:d5:b6:00:3a:d4:07:77:82:2c:dd:6a:c2:8d:4e:00:c5: dd:a6:7e:3c:38:3b:ca:33:aa:18:37:b0:55:ef:21:89:63:f9: 00:94:02:c3:f2:37:00:41:aa:8c:bd:b8:92:03:2e:c4:95:87: 26:fa:1c:6c:4b:ce:2d:c0:b7:2c:67:38:cc:a5:37:8e:0b:0f: 35:f2:21:1a:f4:bc:0f:99:40:48:38:49:36:c0:11:79:b4:7d: cd:69:3c:4f:8e:a7:67:04:14:20:1f:f0:b0:ee:ee:e3:b6:f6: b8:bd:be:22 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUEwHnfCDIIdUPFNwSmkZC1bmDdA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE RTc2RjgzQTAeFw0yNTExMDYwNzU3MjVaFw0yNjExMDUwODAyMjVaMDMxMTAvBgNV BAMTKDMzRkJDRUJGQzk1MkQ4RDEwNkMyODFEQThDNzM1ODZCREFCQzE1RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Jv8s4zOwgkPw42+10E3Ws444 x8xE+uHvZRS2AdLT5kuo73D9zbmvmTnmkJuZbFpc6AcpMootPqPtQnZ3yLRKLdX5 F6h5eG9M2AyeYn19XCqaTz4A+EHRE5MhjLJdyNSeFtd2PINzvDiuAbhalSx4p40y SVBDfQfzdx1Lef2Dta4yduws+1d2AKrQpnAYLvMW2QuGmrg7lqnvHTVaCc5Erg/N YavEgplZQOLPvTQBqRARnqo8vZ23j9AYINkTe9RHoZL51xesd2MQL9jZj4Z6e6IO FJrPgrsIVveJOVpJV6CU16tYUcDBF6MGxc07++bjdERyympUJl2uKeCAZ5SXAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUM/vOv8lS2NEGwoHajHNYa9q8FecwHwYDVR0j BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2 RjgzQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliOGE3ZmE1LWZkYTMtNGEzZS05 MmY3LWZhYmZlZDA1YTk1Yy8wLzMzMzYyZTM1MzAyZTM1MzYyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTM1MzIzMDMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAkMjgwDQYJKoZIhvcN AQELBQADggEBAKAbWShYQV/c2MRnvG6nzDC/gojMOAAFnxhlXhIKFj52JOzIvR/k IqaNuDY4VYzj0o010Ydag4zwRAYV06NU90ZzzzMBwzoKC+lglGyeXqwF2K00j+mC G5YVJ5upIP6LXWaKINENTOk0YXxjMhTOKdstBRLoqYrGsNME2+MGnKJ3ktMXOURE Rkz9yLyEvVx2axl71bYAOtQHd4Is3WrCjU4Axd2mfjw4O8ozqhg3sFXvIYlj+QCU AsPyNwBBqoy9uJIDLsSVhyb6HGxLzi3AtyxnOMylN44LDzXyIRr0vA+ZQEg4STbA EXm0fc1pPE+Op2cEFCAf8LDu7uO29ri9viI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:06 2025 by rpki-client