This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa File: 323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa (raw, json) Hash identifier: Ty7LXGWFu77417YzD9LySsWN2AIJ4KwCcp3kNzWJAIM= Subject key identifier: D5:E5:81:55:67:C1:6B:75:0E:BB:B9:70:1B:BA:F8:CB:8F:00:91:D0 Certificate issuer: /CN=1952B074D19D5AB562D7EE537AD3059EA097353B Certificate serial: 6295A7A7554A226FA7C1A3E1D160B48C4E297F87 Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa Signing time: Wed 22 Oct 2025 04:02:37 +0000 ROA not before: Wed 22 Oct 2025 03:57:37 +0000 ROA not after: Wed 21 Oct 2026 04:02:37 +0000 asID: 141675 IP address blocks: 2406:aec0:a::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:95:a7:a7:55:4a:22:6f:a7:c1:a3:e1:d1:60:b4:8c:4e:29:7f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B Validity Not Before: Oct 22 03:57:37 2025 GMT Not After : Oct 21 04:02:37 2026 GMT Subject: CN=D5E5815567C16B750EBBB9701BBAF8CB8F0091D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:39:71:ea:f0:64:c3:47:5e:94:55:e8:ba: c6:96:6f:4c:2e:d1:c8:a5:6b:01:d1:71:b4:e0:2f: 92:fb:09:e5:d5:93:8a:d4:a7:26:4c:b4:40:6e:10: eb:01:50:cb:9a:1f:9e:23:a8:9d:fb:d6:e5:77:ca: 06:85:1a:0a:9f:7b:9c:dd:45:aa:88:e5:76:de:01: da:32:82:8d:70:d2:e2:83:d1:26:69:13:3b:97:22: a4:2a:7e:56:a6:d5:e6:4c:86:58:01:89:b3:ff:4b: 46:3c:a2:d8:c7:db:90:aa:bf:6e:54:87:c2:56:67: 39:61:4e:ce:ae:e9:ab:a5:1f:e6:97:4b:71:5f:00: 51:35:9c:47:60:42:e7:e9:7b:f8:81:c0:61:03:db: 99:06:03:45:64:92:b7:3d:27:f1:26:62:dc:7d:d0: 80:b1:29:f3:2d:22:a6:c8:2d:f3:1c:ad:3e:67:a9: 3e:be:63:78:08:f1:ae:90:d4:8d:90:0a:f8:42:97: ac:c4:31:b2:f6:84:e1:60:c8:b0:b6:b2:97:09:5e: dc:4a:34:80:61:db:74:72:2e:c2:6c:56:ee:08:a8: a8:d7:ee:13:e2:53:7d:0d:a4:b6:ac:e9:46:ca:87: 80:53:16:be:02:9e:64:ee:59:2a:a1:aa:e2:2f:aa: 7a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E5:81:55:67:C1:6B:75:0E:BB:B9:70:1B:BA:F8:CB:8F:00:91:D0 X509v3 Authority Key Identifier: keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a613a3a2f34382d3438203d3e20313431363735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:aec0:a::/48 Signature Algorithm: sha256WithRSAEncryption 5f:71:c6:78:ab:4c:78:79:f7:dc:cb:e9:80:88:2b:27:8d:76: c8:d2:85:34:e6:70:d1:cf:b1:ff:df:53:59:b6:cd:b9:ad:df: f5:9b:b3:08:70:c7:81:f2:e0:8c:60:17:62:58:51:f1:1b:ba: d8:a0:64:9a:77:31:9f:33:1c:74:50:32:7b:3e:d7:06:e9:07: c0:b5:48:71:1f:c8:e2:d1:66:44:11:99:f4:37:94:5e:d6:03: 63:78:c7:5a:ec:16:53:7b:b4:b8:01:3a:96:54:b9:de:46:61: 6e:17:ca:af:c2:37:43:57:a1:3e:a2:c4:64:79:bf:b0:2c:91: ef:74:fb:9f:b0:ae:13:d6:45:c5:04:01:e9:75:d8:1d:12:e5: dc:21:c5:e2:55:55:5e:82:a9:75:b2:2a:9c:29:ca:5b:1b:bc: d5:a8:90:96:df:f0:78:fa:2b:6a:ee:1d:73:df:87:5b:f2:aa: 1a:6b:a3:fc:b3:b1:2c:17:16:06:01:9c:b2:a0:bc:8b:5c:67: 3f:5f:c4:92:92:3e:87:6a:86:f5:c9:48:4b:1d:49:e2:38:54: 71:6b:64:52:50:fe:e8:bb:0a:f0:f5:c1:df:1f:63:00:18:f3: ab:cf:6f:8e:3c:9c:0a:b0:45:e4:61:09:58:c3:f8:53:07:ac: 66:99:a2:eb -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUYpWnp1VKIm+nwaPh0WC0jE4pf4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVB MDk3MzUzQjAeFw0yNTEwMjIwMzU3MzdaFw0yNjEwMjEwNDAyMzdaMDMxMTAvBgNV BAMTKEQ1RTU4MTU1NjdDMTZCNzUwRUJCQjk3MDFCQkFGOENCOEYwMDkxRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq9Tlx6vBkw0delFXousaWb0wu 0cilawHRcbTgL5L7CeXVk4rUpyZMtEBuEOsBUMuaH54jqJ371uV3ygaFGgqfe5zd RaqI5XbeAdoygo1w0uKD0SZpEzuXIqQqflam1eZMhlgBibP/S0Y8otjH25Cqv25U h8JWZzlhTs6u6aulH+aXS3FfAFE1nEdgQufpe/iBwGED25kGA0Vkkrc9J/EmYtx9 0ICxKfMtIqbILfMcrT5nqT6+Y3gI8a6Q1I2QCvhCl6zEMbL2hOFgyLC2spcJXtxK NIBh23RyLsJsVu4IqKjX7hPiU30NpLas6UbKh4BTFr4CnmTuWSqhquIvqnq7AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU1eWBVWfBa3UOu7lwG7r4y48AkdAwHwYDVR0j BBgwFoAUGVKwdNGdWrVi1+5TetMFnqCXNTswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGYyYzAyNS0xZDc2LTRhMzYtODE2MC1hOWU4YWZlMzU3OWYvMC8xOTUyQjA3NEQx OUQ1QUI1NjJEN0VFNTM3QUQzMDU5RUEwOTczNTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVBMDk3 MzUzQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0ZjJjMDI1LTFkNzYtNGEzNi04 MTYwLWE5ZThhZmUzNTc5Zi8wLzMyMzQzMDM2M2E2MTY1NjMzMDNhNjEzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTM0MzEzNjM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBq7AAAow DQYJKoZIhvcNAQELBQADggEBAF9xxnirTHh599zL6YCIKyeNdsjShTTmcNHPsf/f U1m2zbmt3/Wbswhwx4Hy4IxgF2JYUfEbutigZJp3MZ8zHHRQMns+1wbpB8C1SHEf yOLRZkQRmfQ3lF7WA2N4x1rsFlN7tLgBOpZUud5GYW4Xyq/CN0NXoT6ixGR5v7As ke90+5+wrhPWRcUEAel12B0S5dwhxeJVVV6CqXWyKpwpylsbvNWokJbf8Hj6K2ru HXPfh1vyqhpro/yzsSwXFgYBnLKgvItcZz9fxJKSPodqhvXJSEsdSeI4VHFrZFJQ /ui7CvD1wd8fYwAY86vPb448nAqwReRhCVjD+FMHrGaZous= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:29 2025 by rpki-client