This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa File: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (raw, json) Hash identifier: f6CLm//dO0n6OthDYmsvLFicH09gzcmnHxf/Flc+xDQ= Subject key identifier: B5:3B:D9:93:46:1A:E2:38:65:51:F0:A0:87:11:C7:EA:8D:81:8B:F2 Certificate issuer: /CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323 Certificate serial: 173771F50E94B2B41670F121D701F19AC09D5089 Authority key identifier: 74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa Signing time: Tue 11 Nov 2025 15:00:00 +0000 ROA not before: Tue 11 Nov 2025 14:55:00 +0000 ROA not after: Tue 10 Nov 2026 15:00:00 +0000 asID: 151011 IP address blocks: 2001:df2:e4c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:37:71:f5:0e:94:b2:b4:16:70:f1:21:d7:01:f1:9a:c0:9d:50:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323 Validity Not Before: Nov 11 14:55:00 2025 GMT Not After : Nov 10 15:00:00 2026 GMT Subject: CN=B53BD993461AE2386551F0A08711C7EA8D818BF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:4f:60:4a:56:1e:84:d5:1d:c3:ed:7d:4f: 4b:ef:17:87:b4:67:16:54:50:4e:af:83:c0:a1:86: 03:f5:7a:be:21:8d:fd:3c:b7:40:d0:7d:20:6d:a8: 10:29:4c:0e:7d:9e:5f:ce:dc:ca:47:44:12:2a:c3: e2:d4:fe:36:cf:83:4d:96:66:8b:f6:13:35:1a:bf: 74:4b:78:8c:58:0c:fd:9c:35:39:93:ad:a8:42:5c: ab:f0:57:09:39:1f:57:d6:e2:de:17:ef:0e:41:70: 89:56:ed:83:09:97:03:59:85:32:47:80:ee:4d:a8: 56:a7:77:b8:b7:a2:66:ce:c4:3d:8c:64:f6:e6:1a: a3:e9:1d:88:31:d7:94:f8:7d:28:99:d7:b0:f3:68: 89:15:db:91:18:0f:e4:1c:4e:b7:b4:ac:5b:6c:1d: 5d:9c:d6:bb:e7:bf:a2:68:0e:46:66:e0:3d:d3:4b: ab:8c:4c:3e:45:21:3e:9c:b7:38:8d:d3:ae:99:4c: bf:f5:79:fb:c3:10:54:29:25:a4:0c:5c:0e:17:c7: e4:c4:1b:9f:c1:df:ac:a5:69:de:76:f7:32:08:c3: b1:04:8a:76:05:04:f0:23:f7:19:52:83:55:08:54: f4:42:02:e5:dd:fb:9a:15:d9:0c:23:e8:f2:a2:96: a4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3B:D9:93:46:1A:E2:38:65:51:F0:A0:87:11:C7:EA:8D:81:8B:F2 X509v3 Authority Key Identifier: keyid:74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:e4c0::/48 Signature Algorithm: sha256WithRSAEncryption 70:45:90:13:e5:54:d8:ee:6e:fb:74:cb:6c:8e:fa:bd:ad:f3: aa:41:be:b1:ba:72:1f:e1:66:9c:79:28:3e:73:c7:0b:7c:0e: a5:40:67:b6:f1:ed:13:ff:9c:ac:dd:9b:b4:51:05:73:c0:d6: 1a:b4:02:76:19:5f:cb:40:5a:d7:10:a5:42:0f:f6:9f:5c:4d: 0d:11:42:8e:53:ec:0e:01:4a:bf:6b:f4:8b:27:24:84:f7:73: c8:4b:31:f8:43:66:fe:8d:16:4b:7a:e8:23:53:69:1a:51:22: 0b:d7:44:fd:f8:41:ba:2c:03:08:cf:6e:f4:0f:15:e3:f8:88: de:90:b8:b3:b4:2e:6f:59:da:f4:ed:92:80:26:03:51:e6:fb: 03:0a:46:c6:9e:84:7a:c4:bb:33:a4:1e:37:f0:ee:41:ee:12: d9:56:d5:f0:fe:46:64:46:e6:77:93:ea:58:13:78:cf:89:e9: 26:c5:45:51:11:f2:7e:f9:4d:f5:71:c0:fd:97:0c:65:82:59: 6f:20:2f:7f:89:2e:7b:b2:06:2c:7e:80:e8:7e:42:14:83:ee: 1f:6f:3b:05:1a:a4:54:6f:6f:5a:4c:fd:5e:0a:71:7c:fb:23: d3:32:63:30:e1:d6:a1:8f:b2:f5:ab:7e:46:2f:3b:4f:11:63: ce:89:05:26 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFzdx9Q6UsrQWcPEh1wHxmsCdUIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4ODQ5 OEY0MzMyMzAeFw0yNTExMTExNDU1MDBaFw0yNjExMTAxNTAwMDBaMDMxMTAvBgNV BAMTKEI1M0JEOTkzNDYxQUUyMzg2NTUxRjBBMDg3MTFDN0VBOEQ4MThCRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFk9gSlYehNUdw+19T0vvF4e0 ZxZUUE6vg8ChhgP1er4hjf08t0DQfSBtqBApTA59nl/O3MpHRBIqw+LU/jbPg02W Zov2EzUav3RLeIxYDP2cNTmTrahCXKvwVwk5H1fW4t4X7w5BcIlW7YMJlwNZhTJH gO5NqFand7i3ombOxD2MZPbmGqPpHYgx15T4fSiZ17DzaIkV25EYD+QcTre0rFts HV2c1rvnv6JoDkZm4D3TS6uMTD5FIT6ctziN066ZTL/1efvDEFQpJaQMXA4Xx+TE G5/B36ylad529zIIw7EEinYFBPAj9xlSg1UIVPRCAuXd+5oV2Qwj6PKilqSRAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUtTvZk0Ya4jhlUfCghxHH6o2Bi/IwHwYDVR0j BBgwFoAUdE+X4d8b1tN+bC6o8CwIhJj0MyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODBkZGU5NC1lNWJlLTRkMjktYmIxMi00NWZiNWMxZDJjNzkvMC83NDRGOTdFMURG MUJENkQzN0U2QzJFQThGMDJDMDg4NDk4RjQzMzIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ0Rjk3RTFERjFCRDZEMzdFNkMyRUE4RjAyQzA4ODQ5OEY0 MzMyMy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4MGRkZTk0LWU1YmUtNGQyOS1i YjEyLTQ1ZmI1YzFkMmM3OS8wLzMyMzAzMDMxM2E2NDY2MzIzYTY1MzQ2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMxMzAzMTMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8uTAMA0GCSqGSIb3DQEBCwUAA4IBAQBwRZAT5VTY7m77dMtsjvq9rfOqQb6xunIf 4WaceSg+c8cLfA6lQGe28e0T/5ys3Zu0UQVzwNYatAJ2GV/LQFrXEKVCD/afXE0N EUKOU+wOAUq/a/SLJySE93PISzH4Q2b+jRZLeugjU2kaUSIL10T9+EG6LAMIz270 DxXj+IjekLiztC5vWdr07ZKAJgNR5vsDCkbGnoR6xLszpB438O5B7hLZVtXw/kZk RuZ3k+pYE3jPiekmxUVREfJ++U31ccD9lwxlgllvIC9/iS57sgYsfoDofkIUg+4f bzsFGqRUb29aTP1eCnF8+yPTMmMw4dahj7L1q35GLztPEWPOiQUm -----END CERTIFICATE-----Generated at Wed Dec 3 16:08:19 2025 by rpki-client