This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa File: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (raw, json) Hash identifier: qNVUMuIrsRym1al7QBcjtB+KpEbJtW/3ayQKIjCttbA= Subject key identifier: 3F:2A:F3:5A:67:7E:F6:6F:13:FF:79:05:51:25:88:07:EA:5E:0E:68 Certificate issuer: /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Certificate serial: 49ECC3FF175435F6C5C474DFFBF119A08765E1AE Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa Signing time: Thu 13 Nov 2025 07:00:01 +0000 ROA not before: Thu 13 Nov 2025 06:55:01 +0000 ROA not after: Thu 12 Nov 2026 07:00:01 +0000 asID: 138077 IP address blocks: 160.20.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Dec 2025 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ec:c3:ff:17:54:35:f6:c5:c4:74:df:fb:f1:19:a0:87:65:e1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Validity Not Before: Nov 13 06:55:01 2025 GMT Not After : Nov 12 07:00:01 2026 GMT Subject: CN=3F2AF35A677EF66F13FF790551258807EA5E0E68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:b5:c1:a9:d7:74:95:12:a1:1c:dc:00:52: d2:bf:2e:52:5a:64:35:62:71:b6:42:96:58:63:c9: d7:72:af:39:2e:41:3a:b1:c7:69:c6:7a:2d:ce:f9: 14:2c:3b:6b:2a:9b:46:7d:f0:dd:05:74:55:e2:45: 48:a6:9e:70:d9:2f:4b:e4:a0:7f:4b:67:cd:f5:60: e6:63:2f:1e:60:24:ec:6f:ea:a8:d0:6c:62:af:15: 47:50:1e:dd:80:3f:f7:23:0f:e3:52:01:2d:e8:1d: 3b:e8:d3:f1:a3:84:7e:65:9b:d1:78:20:b7:0e:bf: d4:d2:d2:ea:77:d7:98:00:50:7d:38:10:7f:ee:24: cd:af:e0:28:be:89:39:e7:b9:36:5d:0b:c4:e7:ea: 50:16:7c:dc:cf:6a:ce:28:4c:7d:d1:15:d0:ff:21: b8:a5:a9:ce:7b:89:22:cd:65:31:29:c3:59:a6:cf: 4e:4c:3e:ff:80:81:fb:f9:d1:9a:a2:24:33:e6:85: 04:2f:91:84:d9:47:5a:ff:84:9f:0d:e0:3c:93:24: 08:88:97:7f:75:75:9d:4d:25:03:cd:36:d7:25:74: 4f:3e:63:af:20:c7:05:e9:b7:72:3f:13:bb:00:bb: ce:92:04:4b:76:a0:11:8b:47:c4:5c:ab:ad:27:e8: d5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2A:F3:5A:67:7E:F6:6F:13:FF:79:05:51:25:88:07:EA:5E:0E:68 X509v3 Authority Key Identifier: keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.222.0/24 Signature Algorithm: sha256WithRSAEncryption 79:b0:f6:e2:89:ba:e9:63:52:6c:46:63:ef:41:39:14:cc:ed: 76:30:df:1c:33:c8:f2:46:93:9d:69:ad:99:28:de:3c:d4:d0: 3f:9f:fa:25:7e:2d:c0:ca:3e:33:4d:82:20:98:fa:32:71:52: f7:5e:1d:af:c5:fe:7c:52:35:84:12:ae:24:e7:cc:15:05:df: 93:52:39:66:85:d4:e6:38:82:44:57:d8:16:ba:9a:79:20:c1: 58:7f:9e:cc:0f:86:38:6d:87:e0:8d:a6:15:aa:b5:b8:80:e2: e6:98:3f:e8:bd:14:6d:0e:a5:77:c4:2c:4e:35:c2:72:9a:9d: 33:f4:33:d3:bf:64:4f:24:f7:64:9f:7c:0a:cc:18:86:9f:fb: 64:8e:27:e8:76:53:10:a0:ac:03:b6:f3:c7:11:b4:2c:c4:50: de:b5:6f:26:f5:94:6a:6d:07:83:67:a6:81:a3:3f:ec:03:8d: e1:cd:4f:3b:bd:12:eb:9d:b1:07:a8:a4:40:b2:d6:3d:8c:2e: 30:b3:63:7e:bd:79:56:84:ed:d5:b2:b7:96:12:3d:93:2c:5f: 47:dd:57:56:f0:d7:1a:b0:80:df:4f:93:8a:3e:fe:12:28:42: fa:1c:5a:73:2b:39:22:6a:68:76:4d:53:ac:0a:c9:25:9e:c3: 61:7f:a4:a6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSezD/xdUNfbFxHTf+/EZoIdl4a4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3 RTkzNzZFNDAeFw0yNTExMTMwNjU1MDFaFw0yNjExMTIwNzAwMDFaMDMxMTAvBgNV BAMTKDNGMkFGMzVBNjc3RUY2NkYxM0ZGNzkwNTUxMjU4ODA3RUE1RTBFNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOrXBqdd0lRKhHNwAUtK/LlJa ZDVicbZCllhjyddyrzkuQTqxx2nGei3O+RQsO2sqm0Z98N0FdFXiRUimnnDZL0vk oH9LZ831YOZjLx5gJOxv6qjQbGKvFUdQHt2AP/cjD+NSAS3oHTvo0/GjhH5lm9F4 ILcOv9TS0up315gAUH04EH/uJM2v4Ci+iTnnuTZdC8Tn6lAWfNzPas4oTH3RFdD/ Ibilqc57iSLNZTEpw1mmz05MPv+Agfv50ZqiJDPmhQQvkYTZR1r/hJ8N4DyTJAiI l391dZ1NJQPNNtcldE8+Y68gxwXpt3I/E7sAu86SBEt2oBGLR8Rcq60n6NVNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPyrzWmd+9m8T/3kFUSWIB+peDmgwHwYDVR0j BBgwFoAUuHfNHFQsPeLLuO8VHxebhX6TduQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMC9CODc3Q0QxQzU0 MkMzREUyQ0JCOEVGMTUxRjE3OUI4NTdFOTM3NkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3RTkz NzZFNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmNmQxODVlLWQ0ZjQtNDgyMC1i NGI2LTc5OGMzMDdhZDdlNS8wLzMxMzYzMDJlMzIzMDJlMzIzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBTeMA0GCSqG SIb3DQEBCwUAA4IBAQB5sPbiibrpY1JsRmPvQTkUzO12MN8cM8jyRpOdaa2ZKN48 1NA/n/olfi3Ayj4zTYIgmPoycVL3Xh2vxf58UjWEEq4k58wVBd+TUjlmhdTmOIJE V9gWupp5IMFYf57MD4Y4bYfgjaYVqrW4gOLmmD/ovRRtDqV3xCxONcJymp0z9DPT v2RPJPdkn3wKzBiGn/tkjifodlMQoKwDtvPHEbQsxFDetW8m9ZRqbQeDZ6aBoz/s A43hzU87vRLrnbEHqKRAstY9jC4ws2N+vXlWhO3VsreWEj2TLF9H3VdW8NcasIDf T5OKPv4SKEL6HFpzKzkiamh2TVOsCsklnsNhf6Sm -----END CERTIFICATE-----Generated at Sun Nov 30 06:12:25 2025 by rpki-client