This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa
File: 3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa (raw, json)
Hash identifier: culnOZ+9LI8JbiM/iJt/J//Lb5wajjvnBMY/KnuE8Q4=
Subject key identifier: FF:59:3E:8C:55:6D:D3:95:E0:5F:CF:5B:B4:30:A4:CA:31:D5:C8:11
Certificate issuer: /CN=6A755F0ECD114936B4C154BE153030E6BFE42025
Certificate serial: 7C08700E164F3DD367184A12B1E01B9BE8F4C0AB
Authority key identifier: 6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa
Signing time: Mon 17 Nov 2025 10:04:29 +0000
ROA not before: Mon 17 Nov 2025 09:59:29 +0000
ROA not after: Mon 16 Nov 2026 10:04:29 +0000
asID: 153111
IP address blocks: 160.25.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl
rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 08:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:08:70:0e:16:4f:3d:d3:67:18:4a:12:b1:e0:1b:9b:e8:f4:c0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A755F0ECD114936B4C154BE153030E6BFE42025
Validity
Not Before: Nov 17 09:59:29 2025 GMT
Not After : Nov 16 10:04:29 2026 GMT
Subject: CN=FF593E8C556DD395E05FCF5BB430A4CA31D5C811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:d1:53:2d:17:d2:0f:3c:b3:ff:1b:ce:90:
84:d2:ee:0a:71:18:60:0e:e2:e2:7e:90:2b:b5:98:
97:af:74:47:0c:5c:2d:c9:9b:82:13:25:cc:91:b6:
13:05:3d:52:30:ea:56:ea:cb:c4:74:97:c5:85:51:
96:ba:00:a0:45:27:18:fc:b0:50:f6:1d:aa:d5:60:
8d:29:b5:63:72:7e:85:94:95:2a:10:36:45:ea:28:
bb:b9:3c:3c:8a:c8:28:00:6d:51:be:4c:1e:39:75:
87:9e:a6:af:2c:df:99:5b:07:58:90:91:2d:45:c8:
1e:13:3c:d5:ef:57:01:96:6d:cb:bb:75:4a:74:e5:
7d:7a:51:3b:c4:cf:07:61:d0:86:78:0a:aa:7c:34:
5a:98:05:ae:34:0a:9e:af:ff:b3:a2:0b:fe:45:75:
8d:9a:6e:2f:2e:13:88:68:a7:88:29:34:55:6e:7c:
a7:0f:c8:17:7d:f4:95:92:15:0f:d9:c8:22:11:4c:
5e:91:9c:04:4b:5f:f4:1d:20:1f:73:7e:b3:c2:ac:
0a:5e:98:aa:4c:94:85:89:c0:5f:27:6a:49:26:83:
97:3c:46:e8:3b:42:b9:e7:0b:3c:c8:b3:29:14:52:
df:08:35:28:ef:d4:8d:ca:64:a7:6d:1a:d3:18:0e:
a2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:59:3E:8C:55:6D:D3:95:E0:5F:CF:5B:B4:30:A4:CA:31:D5:C8:11
X509v3 Authority Key Identifier:
keyid:6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.244.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:3f:fc:1c:d1:3a:12:52:9b:18:da:8a:12:01:e3:9b:a3:13:
e9:3d:7c:95:8c:a4:b9:b2:1e:01:e6:9e:73:63:2f:79:49:00:
a3:99:63:03:95:33:5d:1f:8d:36:77:5b:ba:39:49:6e:8b:48:
d8:f6:5e:88:a6:de:c7:ac:43:6f:df:f0:3d:08:0e:ca:dc:06:
f5:20:03:28:38:09:a9:1e:5d:a9:9f:84:04:61:e2:19:b6:51:
e9:42:7b:b2:df:49:5f:e0:da:da:cd:11:f1:40:59:8c:f2:0b:
bc:dd:7c:4c:46:58:b8:92:02:6d:3c:bc:dd:e1:e1:38:63:0e:
5d:aa:55:92:6d:7c:40:c7:bc:b4:32:5b:b9:22:a9:85:b5:4a:
40:15:b7:f5:41:28:c9:6a:db:1e:b0:5e:4b:b5:30:99:42:37:
0f:54:40:0b:dc:05:78:84:46:84:dc:70:ad:e1:f9:2d:51:88:
18:2e:fb:79:4e:33:a4:a3:d5:41:00:a3:2b:33:f8:c4:c7:39:
49:15:c2:26:32:c0:47:27:02:bd:c0:3c:86:79:92:07:e0:ff:
f6:da:c7:75:12:f4:84:17:e4:14:48:8e:9c:32:b0:b6:fa:a3:
82:8b:d8:3c:b4:53:40:b4:fd:f5:0e:0c:5c:c8:ca:f0:e8:f2:
84:6f:82:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:39:36 2025 by rpki-client