This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa File: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (raw, json) Hash identifier: EbL+LGKDt0V5U6jXXy9+v+fX+4Su7Ml6HM1hNFrtkbw= Subject key identifier: 19:F8:FB:B0:26:64:DC:FA:94:99:D5:65:E9:22:5F:75:4C:43:6B:39 Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Certificate serial: 4A192F26672A174BA871C74B5BE3655CD6B90F69 Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa Signing time: Fri 21 Nov 2025 09:00:01 +0000 ROA not before: Fri 21 Nov 2025 08:55:01 +0000 ROA not after: Fri 20 Nov 2026 09:00:01 +0000 asID: 136839 IP address blocks: 2001:df2:3d00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:19:2f:26:67:2a:17:4b:a8:71:c7:4b:5b:e3:65:5c:d6:b9:0f:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Validity Not Before: Nov 21 08:55:01 2025 GMT Not After : Nov 20 09:00:01 2026 GMT Subject: CN=19F8FBB02664DCFA9499D565E9225F754C436B39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c3:b3:ec:9f:e8:df:7c:4c:b9:f3:11:43:9b: 29:f2:ec:e5:95:d4:1b:5d:af:e2:fd:92:ad:59:cc: e8:23:ab:cb:b5:f8:6a:d2:7a:d9:0f:0a:af:ba:94: 06:69:0f:b9:5b:a4:29:bd:3f:62:89:bb:e1:f2:e5: b8:0e:b6:5b:d5:e0:0d:3e:97:d5:48:89:e5:ff:f3: d9:a6:57:54:8b:54:5f:d5:ce:3a:27:36:3f:47:86: aa:e8:6d:f1:98:fb:f1:b2:04:25:0e:b0:08:70:f8: 63:5f:b6:de:25:30:ec:ee:18:49:a2:ed:ce:7f:dc: 25:4a:e0:90:de:8b:9d:bc:49:83:95:86:ce:d8:f0: b5:0b:da:96:8e:bd:8d:24:2e:7f:f4:3c:62:96:46: 48:78:29:8a:9c:f5:82:95:3f:4a:f0:04:81:0f:86: 0c:5e:10:32:54:e8:0e:b9:7f:6e:31:25:47:c4:54: 4f:95:2d:24:f0:fb:74:f0:2d:82:31:88:ae:26:df: 05:5a:2a:bb:b1:36:f3:51:1b:64:dd:a8:b4:29:74: 15:3c:fc:19:07:4e:5f:78:e7:e6:29:c8:27:5c:93: d6:48:9a:c4:e7:2c:e7:79:22:50:90:4e:77:0d:01: 5a:64:1e:a7:9f:19:6e:cc:a5:3e:94:f1:4d:a5:2b: 5c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F8:FB:B0:26:64:DC:FA:94:99:D5:65:E9:22:5F:75:4C:43:6B:39 X509v3 Authority Key Identifier: keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:3d00::/48 Signature Algorithm: sha256WithRSAEncryption 9b:d3:18:6b:74:de:f6:13:65:c5:cc:dd:62:f5:83:02:1d:25: c2:d7:77:8b:b9:9d:cf:1d:76:57:eb:21:f0:53:86:50:37:be: 25:4e:84:af:3a:7c:05:b8:6b:b4:97:97:fc:a3:8c:f2:18:bb: b5:6f:8c:79:17:cd:5e:bd:11:61:f1:7f:1f:64:f6:38:c5:93: 88:4b:86:68:e9:d1:24:04:47:94:7a:c6:76:5a:4d:90:8e:6b: c3:7a:d0:26:84:5e:7f:a9:6e:01:b2:f9:64:0a:d8:b9:e2:45: 6c:f0:9a:c2:e3:56:d7:bd:19:87:00:2c:6c:f3:31:c5:f7:7b: 04:73:b0:f8:e1:86:93:b7:69:88:e9:43:33:42:f5:e2:d8:ed: a5:51:e3:52:70:4e:5c:67:fb:2d:0b:16:b4:9c:ce:b0:b2:55: 9b:47:ab:71:c6:8a:33:9f:8b:10:fa:1e:9f:cf:c1:07:ee:56: bd:8f:00:5b:fa:5d:e8:6a:21:78:6f:f9:2d:c0:03:be:da:ed: e5:d6:d7:a2:aa:0f:b7:d4:1e:06:d3:c0:71:26:77:af:80:75: f4:57:2c:e2:53:74:85:5f:ed:04:7f:4f:c9:d1:af:1a:6d:cc: 74:8b:f0:cf:66:0f:0a:fd:ba:21:f6:8b:c9:10:98:02:4c:61: 26:48:2b:f3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUShkvJmcqF0uoccdLW+NlXNa5D2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZE MzZBNUI4NjAeFw0yNTExMjEwODU1MDFaFw0yNjExMjAwOTAwMDFaMDMxMTAvBgNV BAMTKDE5RjhGQkIwMjY2NERDRkE5NDk5RDU2NUU5MjI1Rjc1NEM0MzZCMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgw7Psn+jffEy58xFDmyny7OWV 1Btdr+L9kq1ZzOgjq8u1+GrSetkPCq+6lAZpD7lbpCm9P2KJu+Hy5bgOtlvV4A0+ l9VIieX/89mmV1SLVF/VzjonNj9HhqrobfGY+/GyBCUOsAhw+GNftt4lMOzuGEmi 7c5/3CVK4JDei528SYOVhs7Y8LUL2paOvY0kLn/0PGKWRkh4KYqc9YKVP0rwBIEP hgxeEDJU6A65f24xJUfEVE+VLSTw+3TwLYIxiK4m3wVaKruxNvNRG2TdqLQpdBU8 /BkHTl945+YpyCdck9ZImsTnLOd5IlCQTncNAVpkHqefGW7MpT6U8U2lK1zDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUGfj7sCZk3PqUmdVl6SJfdUxDazkwHwYDVR0j BBgwFoAU0cNRNigEFWVd7B1ELHyYL9NqW4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjljMDI5YS1kYjUxLTRhMGUtOTIwMy02ZWUyMzMyZGY4M2YvMC9EMUMzNTEzNjI4 MDQxNTY1NURFQzFENDQyQzdDOTgyRkQzNkE1Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZEMzZB NUI4Ni5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmOWMwMjlhLWRiNTEtNGEwZS05 MjAzLTZlZTIzMzJkZjgzZi8wLzMyMzAzMDMxM2E2NDY2MzIzYTMzNjQzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM2MzgzMzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8j0AMA0GCSqGSIb3DQEBCwUAA4IBAQCb0xhrdN72E2XFzN1i9YMCHSXC13eLuZ3P HXZX6yHwU4ZQN74lToSvOnwFuGu0l5f8o4zyGLu1b4x5F81evRFh8X8fZPY4xZOI S4Zo6dEkBEeUesZ2Wk2QjmvDetAmhF5/qW4BsvlkCti54kVs8JrC41bXvRmHACxs 8zHF93sEc7D44YaTt2mI6UMzQvXi2O2lUeNScE5cZ/stCxa0nM6wslWbR6txxooz n4sQ+h6fz8EH7la9jwBb+l3oaiF4b/ktwAO+2u3l1teiqg+31B4G08BxJnevgHX0 VyziU3SFX+0Ef0/J0a8abcx0i/DPZg8K/boh9ovJEJgCTGEmSCvz -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:54 2025 by rpki-client