This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/34352e3132362e3133322e302f32322d3232203d3e20313332363434.roa File: 34352e3132362e3133322e302f32322d3232203d3e20313332363434.roa (raw, json) Hash identifier: nEvjJAuLU5NVHyPCkT4t36RWeV+PULX/Gg0P3xFzBdA= Subject key identifier: 38:3E:75:C9:F1:1B:E8:01:7F:E2:DC:CF:8F:B8:03:61:81:F9:7F:6D Certificate issuer: /CN=FFD09495181408CBE83FD333EACEF29FBCDAD633 Certificate serial: 045CF6324A29930DC86E3198FC23460475A6DBE6 Authority key identifier: FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/34352e3132362e3133322e302f32322d3232203d3e20313332363434.roa Signing time: Fri 28 Nov 2025 07:44:35 +0000 ROA not before: Fri 28 Nov 2025 07:39:35 +0000 ROA not after: Fri 27 Nov 2026 07:44:35 +0000 asID: 132644 IP address blocks: 45.126.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5c:f6:32:4a:29:93:0d:c8:6e:31:98:fc:23:46:04:75:a6:db:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFD09495181408CBE83FD333EACEF29FBCDAD633 Validity Not Before: Nov 28 07:39:35 2025 GMT Not After : Nov 27 07:44:35 2026 GMT Subject: CN=383E75C9F11BE8017FE2DCCF8FB8036181F97F6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:f2:ba:6a:c2:e3:c6:74:c1:d0:52:40:be: 33:45:62:32:15:42:06:f6:db:b1:e8:3d:27:92:d3: b1:39:2d:3a:12:c7:69:b9:fb:d9:46:b0:71:9e:82: df:6f:cb:34:53:55:7f:ee:19:1b:1e:70:80:e3:f2: eb:58:58:ba:06:f4:d6:f7:96:41:cc:2b:85:3f:23: 8e:dc:80:13:11:66:30:34:82:c6:eb:b1:91:40:1b: 21:f9:e2:fc:00:01:f2:06:2e:e6:48:da:41:2f:20: e6:5d:26:f6:91:08:c6:33:af:bc:1d:23:b4:40:e4: 6c:d7:82:ef:c1:a8:9e:5d:5c:8e:2c:9a:ad:6c:d5: fb:0f:23:13:da:9e:f0:de:7c:7e:02:05:35:1c:15: 85:f9:c9:c5:1f:ad:f9:09:54:25:87:4b:fa:46:33: 92:73:58:28:87:1e:bc:2a:6e:0e:c8:c5:d7:d6:21: ed:a2:8a:a5:cf:4f:2b:c7:9a:4e:c6:fc:52:33:3c: e8:c0:d2:61:d8:2b:9a:0a:2d:86:54:94:70:f0:ab: 1c:f9:c7:13:8b:3e:14:2d:b1:a7:f9:5a:91:2e:1f: 49:34:55:a1:6d:73:ed:be:5c:56:e8:57:65:e9:ed: 0e:93:af:5f:3a:31:7c:ac:f8:2c:2d:b6:ca:99:db: 6d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3E:75:C9:F1:1B:E8:01:7F:E2:DC:CF:8F:B8:03:61:81:F9:7F:6D X509v3 Authority Key Identifier: keyid:FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/34352e3132362e3133322e302f32322d3232203d3e20313332363434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.132.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:23:ae:31:9b:d8:a5:e8:b9:e9:7d:cf:b4:86:d8:35:14:da: 75:91:be:e2:9e:5f:b7:4c:f9:03:c6:ae:cd:fc:6f:0f:a0:de: 3b:c6:9d:d5:f4:7a:4e:61:38:ff:f5:35:0b:de:5b:a2:63:6e: 6e:3a:23:24:c9:f7:f6:69:c7:f7:1a:dd:fd:e0:87:6c:3b:24: 24:b4:66:ce:6d:ec:11:82:86:e3:12:31:f6:41:79:0d:a5:21: 89:98:ca:33:60:d6:c5:73:73:e8:e9:c7:66:28:fa:06:b9:0a: fe:d6:9c:2e:92:e4:0b:04:14:9c:91:07:c5:a9:60:e3:ae:73: 0a:93:66:34:fc:08:aa:bb:d3:93:40:99:f6:96:18:1f:1f:59: 6a:bb:18:c7:d9:2d:b9:b5:3e:b7:4b:7f:4e:71:32:ea:21:ad: 82:34:56:12:7c:b6:3e:01:7f:55:c4:01:47:66:b9:53:f6:15: 1a:3d:41:4f:61:5f:60:48:69:13:38:c3:37:77:de:b2:30:e2: 65:be:e5:f7:46:bd:fc:a5:1c:09:8e:58:45:99:2c:e8:d9:6f: 0d:34:20:3e:3d:93:0b:a8:4e:ec:e2:43:d6:a1:ce:a9:dc:ad: 8d:28:b0:6d:c3:8a:90:49:bd:74:bd:6a:02:57:6c:87:43:4d: 88:07:63:4f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBFz2Mkopkw3IbjGY/CNGBHWm2+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYyOUZC Q0RBRDYzMzAeFw0yNTExMjgwNzM5MzVaFw0yNjExMjcwNzQ0MzVaMDMxMTAvBgNV BAMTKDM4M0U3NUM5RjExQkU4MDE3RkUyRENDRjhGQjgwMzYxODFGOTdGNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/j/K6asLjxnTB0FJAvjNFYjIV Qgb227HoPSeS07E5LToSx2m5+9lGsHGegt9vyzRTVX/uGRsecIDj8utYWLoG9Nb3 lkHMK4U/I47cgBMRZjA0gsbrsZFAGyH54vwAAfIGLuZI2kEvIOZdJvaRCMYzr7wd I7RA5GzXgu/BqJ5dXI4smq1s1fsPIxPanvDefH4CBTUcFYX5ycUfrfkJVCWHS/pG M5JzWCiHHrwqbg7IxdfWIe2iiqXPTyvHmk7G/FIzPOjA0mHYK5oKLYZUlHDwqxz5 xxOLPhQtsaf5WpEuH0k0VaFtc+2+XFboV2Xp7Q6Tr186MXys+CwttsqZ220NAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOD51yfEb6AF/4tzPj7gDYYH5f20wHwYDVR0j BBgwFoAU/9CUlRgUCMvoP9Mz6s7yn7za1jMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTM5YWMxZi0zOGUyLTQ1YWEtOTdkYy05OTI3OTY0MTFjYzEvMC9GRkQwOTQ5NTE4 MTQwOENCRTgzRkQzMzNFQUNFRjI5RkJDREFENjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYyOUZCQ0RB RDYzMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxMzlhYzFmLTM4ZTItNDVhYS05 N2RjLTk5Mjc5NjQxMWNjMS8wLzM0MzUyZTMxMzIzNjJlMzEzMzMyMmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzEzMzMyMzYzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLX6EMA0GCSqG SIb3DQEBCwUAA4IBAQA8I64xm9il6Lnpfc+0htg1FNp1kb7inl+3TPkDxq7N/G8P oN47xp3V9HpOYTj/9TUL3luiY25uOiMkyff2acf3Gt394IdsOyQktGbObewRgobj EjH2QXkNpSGJmMozYNbFc3Po6cdmKPoGuQr+1pwukuQLBBSckQfFqWDjrnMKk2Y0 /Aiqu9OTQJn2lhgfH1lquxjH2S25tT63S39OcTLqIa2CNFYSfLY+AX9VxAFHZrlT 9hUaPUFPYV9gSGkTOMM3d96yMOJlvuX3Rr38pRwJjlhFmSzo2W8NNCA+PZMLqE7s 4kPWoc6p3K2NKLBtw4qQSb10vWoCV2yHQ02IB2NP -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:08 2025 by rpki-client