This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135322e302f32342d3234203d3e203535363533.roa File: 31342e3130322e3135322e302f32342d3234203d3e203535363533.roa (raw, json) Hash identifier: Ic0fHoziZDQ5ySiUrW0yV+eRMvxq+Fv+lvK78woem+Y= Subject key identifier: CE:20:7A:EF:AD:13:F7:0F:C3:19:F9:B9:37:2A:91:B8:22:03:E0:17 Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3 Certificate serial: 454BF34101F00166D8E50856561A74763FE5A062 Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135322e302f32342d3234203d3e203535363533.roa Signing time: Sat 08 Nov 2025 10:24:06 +0000 ROA not before: Sat 08 Nov 2025 10:19:06 +0000 ROA not after: Sat 07 Nov 2026 10:24:06 +0000 asID: 55653 IP address blocks: 14.102.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 00:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:4b:f3:41:01:f0:01:66:d8:e5:08:56:56:1a:74:76:3f:e5:a0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3 Validity Not Before: Nov 8 10:19:06 2025 GMT Not After : Nov 7 10:24:06 2026 GMT Subject: CN=CE207AEFAD13F70FC319F9B9372A91B82203E017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d9:45:43:f8:85:10:d0:fd:be:6d:e1:78:72: e4:53:61:ef:4f:5f:b4:75:64:e3:8f:9c:2e:f1:8e: 06:77:2d:4a:df:48:6a:08:66:5e:ef:1a:1f:58:a6: 7e:bc:61:ed:4a:60:80:79:94:67:b0:62:33:f6:1b: ac:91:2a:88:82:ea:2b:74:e4:60:85:fe:f2:7f:ea: 77:eb:2f:92:d8:23:13:58:34:5b:73:8a:81:b3:ee: fb:d5:07:77:b2:79:d4:15:f8:28:49:a7:c7:0a:44: 5e:3b:18:1e:71:51:92:e0:1f:22:b2:e0:1b:51:96: e2:d1:2c:3f:6a:bc:0d:63:27:ce:23:37:4e:a3:7e: 79:2c:98:0d:7e:6f:2a:76:1f:54:f7:0e:81:07:bc: 61:aa:54:2b:f2:58:dd:57:09:ad:4a:be:c7:38:18: 9e:c1:b7:f1:a8:a0:35:ba:7c:bb:0e:89:e4:f0:5e: ae:f2:49:5b:b0:af:07:a9:e6:3b:ac:b4:63:f6:b8: 72:78:32:aa:cf:57:14:d7:d4:5d:04:eb:db:52:23: fd:12:1c:40:83:92:e9:20:a2:f9:32:1d:d3:34:5e: 3b:85:6c:78:44:f2:9b:63:d2:78:01:0a:b4:ee:35: 27:72:20:d6:41:f8:11:f4:f6:61:91:14:ef:6b:b4: a1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:20:7A:EF:AD:13:F7:0F:C3:19:F9:B9:37:2A:91:B8:22:03:E0:17 X509v3 Authority Key Identifier: keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135322e302f32342d3234203d3e203535363533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.152.0/24 Signature Algorithm: sha256WithRSAEncryption 64:d0:82:ee:7c:ca:e0:95:96:ad:44:c5:07:16:74:db:43:15: 92:cc:c6:dc:2f:b7:45:1c:83:ba:21:59:9e:e8:3b:fa:a1:45: 74:e2:22:3e:b7:a4:28:04:f1:dc:f7:87:d6:d0:61:50:44:ba: e5:22:fc:ad:eb:86:79:24:ec:a3:46:a6:c5:73:eb:8a:ef:a0: 94:7b:e2:99:85:f7:03:fc:e2:01:f7:12:f1:40:82:3f:52:7b: db:70:d6:4f:32:f1:2b:d1:b5:53:c3:77:24:7e:6c:b2:ea:44: 94:b7:c4:84:e5:e9:2b:d4:7d:b1:64:f6:aa:24:d9:84:48:45: 25:19:cb:75:ce:fb:80:0f:8e:90:3d:06:16:67:50:85:7d:a5: 76:09:e3:eb:ad:f9:2d:af:13:60:37:e6:f3:1e:e9:b3:63:7b: e6:c3:39:29:79:10:be:68:94:de:c7:60:49:8d:e4:8b:1d:8e: ca:e0:77:69:88:d9:61:d0:8f:be:3a:e3:ec:3a:cc:1f:9c:3a: 6c:96:c7:d6:7c:91:68:06:b1:75:5f:57:4e:e8:3d:cc:50:54: f3:6b:2c:e3:ee:79:e3:b5:8f:ac:fb:a6:8d:19:cc:5a:1f:57: 20:bf:70:ef:8c:40:8e:26:96:12:a1:a5:18:7a:db:3c:4f:11: 7d:7d:92:26 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURUvzQQHwAWbY5QhWVhp0dj/loGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1 MzU3RTZBMzAeFw0yNTExMDgxMDE5MDZaFw0yNjExMDcxMDI0MDZaMDMxMTAvBgNV BAMTKENFMjA3QUVGQUQxM0Y3MEZDMzE5RjlCOTM3MkE5MUI4MjIwM0UwMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2UVD+IUQ0P2+beF4cuRTYe9P X7R1ZOOPnC7xjgZ3LUrfSGoIZl7vGh9Ypn68Ye1KYIB5lGewYjP2G6yRKoiC6it0 5GCF/vJ/6nfrL5LYIxNYNFtzioGz7vvVB3eyedQV+ChJp8cKRF47GB5xUZLgHyKy 4BtRluLRLD9qvA1jJ84jN06jfnksmA1+byp2H1T3DoEHvGGqVCvyWN1XCa1Kvsc4 GJ7Bt/GooDW6fLsOieTwXq7ySVuwrwep5justGP2uHJ4MqrPVxTX1F0E69tSI/0S HECDkukgovkyHdM0XjuFbHhE8ptj0ngBCrTuNSdyINZB+BH09mGRFO9rtKHhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUziB6760T9w/DGfm5NyqRuCID4BcwHwYDVR0j BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2 ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3 RTZBMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5NzQ2NWUzLTc4YTAtNDk2NS1h ZTE0LWU0Y2I0ZDBmYzE4NS8wLzMxMzQyZTMxMzAzMjJlMzEzNTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAA5mmDANBgkqhkiG 9w0BAQsFAAOCAQEAZNCC7nzK4JWWrUTFBxZ020MVkszG3C+3RRyDuiFZnug7+qFF dOIiPrekKATx3PeH1tBhUES65SL8reuGeSTso0amxXPriu+glHvimYX3A/ziAfcS 8UCCP1J723DWTzLxK9G1U8N3JH5ssupElLfEhOXpK9R9sWT2qiTZhEhFJRnLdc77 gA+OkD0GFmdQhX2ldgnj6635La8TYDfm8x7ps2N75sM5KXkQvmiU3sdgSY3kix2O yuB3aYjZYdCPvjrj7DrMH5w6bJbH1nyRaAaxdV9XTug9zFBU82ss4+5547WPrPum jRnMWh9XIL9w74xAjiaWEqGlGHrbPE8RfX2SJg== -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:16 2025 by rpki-client