This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa File: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (raw, json) Hash identifier: 1GdsDMn9IlNA2FNYR2FdTgcFsp12pZf8bJqQ9ss5+PA= Subject key identifier: 77:82:2B:82:63:D3:C8:4E:D4:C8:D5:48:D7:49:C8:57:97:C1:F0:86 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 10E77AA175EED004836DF9ADBA5E1BE30982ADE6 Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa Signing time: Fri 14 Nov 2025 17:00:02 +0000 ROA not before: Fri 14 Nov 2025 16:55:02 +0000 ROA not after: Fri 13 Nov 2026 17:00:02 +0000 asID: 153073 IP address blocks: 160.25.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 20:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e7:7a:a1:75:ee:d0:04:83:6d:f9:ad:ba:5e:1b:e3:09:82:ad:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Nov 14 16:55:02 2025 GMT Not After : Nov 13 17:00:02 2026 GMT Subject: CN=77822B8263D3C84ED4C8D548D749C85797C1F086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:b3:42:4a:ec:3a:d5:8b:99:33:cf:40:0f: a6:45:7e:01:d9:dc:7a:63:2b:18:fa:55:ee:d5:8b: e9:b3:ec:55:80:d3:04:71:e2:92:8e:4c:a0:c7:26: ec:a2:13:90:2f:ea:94:b0:96:9a:e6:58:f2:74:15: 77:b4:16:c5:36:d6:11:44:86:cc:f3:f2:24:d1:b2: e2:7f:2f:78:f8:0d:87:ad:cb:93:d2:34:60:7c:0f: 18:85:d4:4a:8d:b7:58:55:5c:a2:83:5d:9b:4d:b4: 8a:7e:0a:cf:8b:db:24:55:e2:b7:93:e5:4a:19:0e: 12:37:3c:d2:79:6b:09:56:26:4e:14:14:87:9a:9c: ea:08:1e:32:85:73:6d:38:e1:9b:96:0d:9c:c2:9d: 4c:59:cb:a4:65:19:27:89:22:52:1f:bb:50:57:75: 92:db:f8:4a:80:e6:50:b6:0a:de:81:0d:9d:27:f9: 12:95:fe:6d:8a:c3:d0:f3:29:ea:a3:10:08:e3:97: a9:ef:c4:51:d9:18:63:51:06:d3:ee:fa:44:15:a2: cd:4f:d4:bf:e6:dc:14:77:5d:10:74:7a:1d:a1:83: 42:4b:4a:14:59:d1:62:ba:48:ed:38:dc:20:8a:8e: a3:20:15:10:7e:4d:65:4c:96:3b:35:38:a6:de:67: 5c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:82:2B:82:63:D3:C8:4E:D4:C8:D5:48:D7:49:C8:57:97:C1:F0:86 X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.175.0/24 Signature Algorithm: sha256WithRSAEncryption 55:56:ac:89:b5:f5:c4:5a:3e:af:10:3b:18:47:83:c6:5c:ae: 8a:0d:5d:74:fb:af:8e:fe:e9:ec:7f:be:81:88:77:b8:6d:40: 2e:a1:ab:e1:e1:2d:02:f9:be:7a:d2:34:09:f7:26:d3:d1:e9: 94:68:28:b2:b9:ff:40:44:d7:9d:2b:c4:a2:9c:98:69:c8:42: f9:57:2d:af:d8:aa:d4:c5:18:4d:e5:a0:be:a0:d1:15:99:11: a2:2e:94:a5:a7:e9:28:4f:c6:5b:d9:c7:57:33:c5:b0:2a:fa: 6e:f4:3f:fd:fb:6f:7e:fa:30:07:e1:70:37:ef:f1:04:fe:b8: 38:3f:56:60:30:c0:48:be:7c:f2:a0:15:4f:b9:e7:71:3c:28: 75:aa:08:48:01:30:f6:46:e2:08:c2:34:ee:60:51:25:92:56: ff:5c:23:2d:bf:53:aa:47:a5:d8:d0:14:ae:ae:86:b6:4a:5f: 5a:9d:a2:ef:0c:ba:76:fa:c3:59:d4:f6:ef:b7:c8:2a:de:c8: 68:8b:d8:37:37:ff:f7:ca:a6:fd:c3:42:7f:45:f4:bc:ad:04: f0:d0:52:33:04:a9:f4:36:97:2f:2b:6a:15:58:c6:1f:8e:47: 93:60:fd:bc:cb:36:40:d6:a6:77:ca:96:9d:6f:01:da:5c:a7: 26:a6:ce:66 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEOd6oXXu0ASDbfmtul4b4wmCreYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNTExMTQxNjU1MDJaFw0yNjExMTMxNzAwMDJaMDMxMTAvBgNV BAMTKDc3ODIyQjgyNjNEM0M4NEVENEM4RDU0OEQ3NDlDODU3OTdDMUYwODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/I7NCSuw61YuZM89AD6ZFfgHZ 3HpjKxj6Ve7Vi+mz7FWA0wRx4pKOTKDHJuyiE5Av6pSwlprmWPJ0FXe0FsU21hFE hszz8iTRsuJ/L3j4DYety5PSNGB8DxiF1EqNt1hVXKKDXZtNtIp+Cs+L2yRV4reT 5UoZDhI3PNJ5awlWJk4UFIeanOoIHjKFc2044ZuWDZzCnUxZy6RlGSeJIlIfu1BX dZLb+EqA5lC2Ct6BDZ0n+RKV/m2Kw9DzKeqjEAjjl6nvxFHZGGNRBtPu+kQVos1P 1L/m3BR3XRB0eh2hg0JLShRZ0WK6SO043CCKjqMgFRB+TWVMljs1OKbeZ1xnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUd4IrgmPTyE7UyNVI10nIV5fB8IYwHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjNzJlZTNjLWUxODAtNDI5Ni05 ZGFkLTk1MDBlZmQ5NDg5MC8wLzMxMzYzMDJlMzIzNTJlMzEzNzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBmvMA0GCSqG SIb3DQEBCwUAA4IBAQBVVqyJtfXEWj6vEDsYR4PGXK6KDV10+6+O/unsf76BiHe4 bUAuoavh4S0C+b560jQJ9ybT0emUaCiyuf9ARNedK8SinJhpyEL5Vy2v2KrUxRhN 5aC+oNEVmRGiLpSlp+koT8Zb2cdXM8WwKvpu9D/9+29++jAH4XA37/EE/rg4P1Zg MMBIvnzyoBVPuedxPCh1qghIATD2RuIIwjTuYFElklb/XCMtv1OqR6XY0BSuroa2 Sl9anaLvDLp2+sNZ1Pbvt8gq3shoi9g3N//3yqb9w0J/RfS8rQTw0FIzBKn0Npcv K2oVWMYfjkeTYP28yzZA1qZ3ypadbwHaXKcmps5m -----END CERTIFICATE-----Generated at Mon Dec 8 06:09:27 2025 by rpki-client