This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/323430323a323638303a3a2f33322d3438203d3e203633383733.roa File: 323430323a323638303a3a2f33322d3438203d3e203633383733.roa (raw, json) Hash identifier: i6JZ/uan2F0mTAhu/58NkGrI8IpjuHVX3ZFhTweqB/M= Subject key identifier: 44:DC:BC:AD:63:96:D1:9F:68:11:00:C5:73:EC:F7:22:F3:8F:8E:13 Certificate issuer: /CN=6E740E0191A423D6D9A0908C8B778DD2416F842E Certificate serial: 2085240AC928CD64A2B56E2108AFCD8F7C734AAC Authority key identifier: 6E:74:0E:01:91:A4:23:D6:D9:A0:90:8C:8B:77:8D:D2:41:6F:84:2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E740E0191A423D6D9A0908C8B778DD2416F842E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/323430323a323638303a3a2f33322d3438203d3e203633383733.roa Signing time: Tue 18 Nov 2025 10:03:37 +0000 ROA not before: Tue 18 Nov 2025 09:58:37 +0000 ROA not after: Tue 17 Nov 2026 10:03:37 +0000 asID: 63873 IP address blocks: 2402:2680::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.crl rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E740E0191A423D6D9A0908C8B778DD2416F842E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:85:24:0a:c9:28:cd:64:a2:b5:6e:21:08:af:cd:8f:7c:73:4a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E740E0191A423D6D9A0908C8B778DD2416F842E Validity Not Before: Nov 18 09:58:37 2025 GMT Not After : Nov 17 10:03:37 2026 GMT Subject: CN=44DCBCAD6396D19F681100C573ECF722F38F8E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:18:6a:8f:4d:42:11:5c:7d:15:97:00:32:7f: ae:3f:a4:03:33:71:cc:99:7f:2a:6d:87:b8:f5:16: de:6f:e0:91:de:07:95:92:c7:9e:57:6b:47:16:05: 48:c9:8a:5e:5d:f6:4e:54:d1:4a:3e:f9:11:01:29: ee:85:3f:21:17:0d:99:0f:68:95:e2:e8:5f:88:be: 6e:ed:07:5f:6e:9d:ae:62:06:18:0e:d8:20:bf:ba: 01:3c:08:85:5b:a8:e9:18:f1:87:f4:90:5b:2b:f8: 42:66:0f:b0:07:47:35:ad:3f:c0:b7:a6:b0:11:c9: e3:ab:ba:76:f9:f4:b1:8d:f9:a0:d2:0e:d8:c6:42: 0e:7d:cc:4c:ec:36:c8:ff:74:85:6c:40:2b:5f:e9: 55:5f:17:01:a8:b5:68:ca:29:ef:0f:3e:9a:d5:93: 49:36:5d:f9:f9:8c:50:9b:5a:8e:ae:56:d8:e5:c6: 9c:4e:00:cd:d3:82:81:77:40:37:7e:30:c1:56:38: ce:dc:bf:44:91:3b:2e:63:13:45:4d:5c:0d:68:a6: b5:28:4d:8a:db:df:7f:9e:f3:40:76:75:12:c7:1c: ca:9d:d7:f4:df:00:0d:f5:c3:31:e8:fc:58:76:fc: db:76:14:c6:c9:63:be:a5:d5:45:01:59:cf:20:19: 50:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DC:BC:AD:63:96:D1:9F:68:11:00:C5:73:EC:F7:22:F3:8F:8E:13 X509v3 Authority Key Identifier: keyid:6E:74:0E:01:91:A4:23:D6:D9:A0:90:8C:8B:77:8D:D2:41:6F:84:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/6E740E0191A423D6D9A0908C8B778DD2416F842E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E740E0191A423D6D9A0908C8B778DD2416F842E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec51e7ab-a638-4fa0-bbcc-b0f856a8a157/0/323430323a323638303a3a2f33322d3438203d3e203633383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:2680::/32 Signature Algorithm: sha256WithRSAEncryption 72:0d:c9:ff:41:4b:41:24:e8:85:f6:df:74:ad:24:1e:e1:80: 74:73:b5:d2:95:a9:46:81:54:68:99:1b:14:de:91:42:ea:8b: ee:f0:db:26:ff:90:ff:db:64:e9:ca:a6:b4:16:68:1e:ca:2d: 38:43:7a:4d:a1:d9:dc:a6:74:b9:d9:2a:d7:26:fe:7c:d5:e0: 5b:90:89:4d:24:16:70:50:1c:51:56:d7:2a:b5:a8:d2:87:d5: a4:a0:4a:c9:c8:b5:6a:c3:bf:d0:4e:d2:de:cd:f0:07:ad:73: 66:a4:d8:d8:b9:40:79:3a:12:71:c9:d0:dc:61:ea:01:3a:9f: 5a:ad:eb:4d:39:4b:e3:59:47:cd:0a:27:e0:7a:2b:85:4b:b9: ff:2b:40:e5:4d:a3:3d:c0:89:27:13:f7:97:4c:b2:2d:10:63: 60:8a:90:29:a3:24:69:72:54:72:c1:31:fb:ce:42:0e:8f:60: 86:97:05:51:30:57:ec:53:02:8a:d8:18:63:76:44:64:03:33: c9:76:1e:d8:d6:da:db:0f:dd:26:7a:85:07:85:38:42:8e:82: e1:4a:ed:93:27:ac:88:42:3f:c9:45:ea:5e:e6:f8:05:38:50: ae:57:8e:bc:d8:b5:47:fd:22:e8:30:a4:2e:6d:5f:47:95:48: cd:e6:13:f7 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUIIUkCskozWSitW4hCK/Nj3xzSqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU3NDBFMDE5MUE0MjNENkQ5QTA5MDhDOEI3NzhERDI0 MTZGODQyRTAeFw0yNTExMTgwOTU4MzdaFw0yNjExMTcxMDAzMzdaMDMxMTAvBgNV BAMTKDQ0RENCQ0FENjM5NkQxOUY2ODExMDBDNTczRUNGNzIyRjM4RjhFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/GGqPTUIRXH0VlwAyf64/pAMz ccyZfypth7j1Ft5v4JHeB5WSx55Xa0cWBUjJil5d9k5U0Uo++REBKe6FPyEXDZkP aJXi6F+Ivm7tB19una5iBhgO2CC/ugE8CIVbqOkY8Yf0kFsr+EJmD7AHRzWtP8C3 prARyeOrunb59LGN+aDSDtjGQg59zEzsNsj/dIVsQCtf6VVfFwGotWjKKe8PPprV k0k2Xfn5jFCbWo6uVtjlxpxOAM3TgoF3QDd+MMFWOM7cv0SROy5jE0VNXA1oprUo TYrb33+e80B2dRLHHMqd1/TfAA31wzHo/Fh2/Nt2FMbJY76l1UUBWc8gGVCvAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQURNy8rWOW0Z9oEQDFc+z3IvOPjhMwHwYDVR0j BBgwFoAUbnQOAZGkI9bZoJCMi3eN0kFvhC4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzUxZTdhYi1hNjM4LTRmYTAtYmJjYy1iMGY4NTZhOGExNTcvMC82RTc0MEUwMTkx QTQyM0Q2RDlBMDkwOEM4Qjc3OEREMjQxNkY4NDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkU3NDBFMDE5MUE0MjNENkQ5QTA5MDhDOEI3NzhERDI0MTZG ODQyRS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjNTFlN2FiLWE2MzgtNGZhMC1i YmNjLWIwZjg1NmE4YTE1Ny8wLzMyMzQzMDMyM2EzMjM2MzgzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM2MzMzODM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAiaAMA0GCSqGSIb3 DQEBCwUAA4IBAQByDcn/QUtBJOiF9t90rSQe4YB0c7XSlalGgVRomRsU3pFC6ovu 8Nsm/5D/22Tpyqa0Fmgeyi04Q3pNodncpnS52SrXJv581eBbkIlNJBZwUBxRVtcq tajSh9WkoErJyLVqw7/QTtLezfAHrXNmpNjYuUB5OhJxydDcYeoBOp9aretNOUvj WUfNCifgeiuFS7n/K0DlTaM9wIknE/eXTLItEGNgipApoyRpclRywTH7zkIOj2CG lwVRMFfsUwKK2BhjdkRkAzPJdh7Y1trbD90meoUHhThCjoLhSu2TJ6yIQj/JRepe 5vgFOFCuV4682LVH/SLoMKQubV9HlUjN5hP3 -----END CERTIFICATE-----Generated at Wed Dec 3 16:50:55 2025 by rpki-client