This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa File: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (raw, json) Hash identifier: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo= Subject key identifier: 3F:D0:BF:AB:1B:10:A0:00:7C:B3:7B:34:13:37:69:D1:9F:2C:CE:34 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 792A7C0F49934AAA257CF8779F9920823E5266DB Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa Signing time: Sun 16 Feb 2025 14:25:50 +0000 ROA not before: Sun 16 Feb 2025 14:20:50 +0000 ROA not after: Sun 15 Feb 2026 14:25:50 +0000 asID: 131705 IP address blocks: 2406:5c40:2000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 13:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:2a:7c:0f:49:93:4a:aa:25:7c:f8:77:9f:99:20:82:3e:52:66:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Feb 16 14:20:50 2025 GMT Not After : Feb 15 14:25:50 2026 GMT Subject: CN=3FD0BFAB1B10A0007CB37B34133769D19F2CCE34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:45:da:e0:f3:7a:ab:69:a0:f4:0e:f4:17:22: 68:bf:e3:f8:02:6b:17:93:86:fa:a8:53:5d:ec:88: bb:6b:ff:85:3f:44:c0:d9:50:66:f6:a4:a8:4c:6e: 6f:9b:f9:0e:ca:94:f9:d1:ea:76:5e:ad:b4:9e:82: db:78:82:ac:06:dd:e3:fb:72:03:d3:17:7f:fd:e0: aa:36:51:64:05:71:e4:42:bb:da:95:b9:ab:02:03: 55:31:1f:2a:58:3d:64:a8:0b:df:9b:97:6f:af:d5: 6a:1c:e6:27:63:50:27:e6:81:62:b0:2b:22:bf:67: b7:07:8e:6f:72:c1:08:8b:70:0d:72:a6:dd:71:ca: ed:12:67:4b:61:b2:f8:04:3d:2c:15:80:bf:2e:5c: c7:cb:7a:8d:d8:02:f5:a5:81:0b:58:46:b2:44:a7: 7d:44:4b:39:49:c7:6f:ba:19:45:3f:d3:2a:45:84: 38:8d:05:da:e1:b5:fb:4a:67:a3:a3:31:80:61:06: a4:ea:9d:71:5e:d7:ea:09:15:d7:ab:13:3d:80:60: 46:23:44:79:7e:56:bd:fd:f9:e6:a5:06:e3:b1:84: 65:50:47:09:6b:cf:4e:0a:ca:09:de:9a:e5:8e:33: 14:e2:ee:09:da:b8:d3:54:2d:ea:82:79:00:06:e4: fd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D0:BF:AB:1B:10:A0:00:7C:B3:7B:34:13:37:69:D1:9F:2C:CE:34 X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:5c40:2000::/36 Signature Algorithm: sha256WithRSAEncryption 11:ba:71:6f:c4:ef:8a:e6:f8:2c:d4:77:f9:dc:22:59:fe:f2: 1f:c7:e2:3b:cf:df:19:4c:be:b6:59:58:b5:c8:88:d0:0e:6b: 63:ac:43:5f:b0:59:85:de:7e:36:7c:73:97:8f:ae:cf:1d:77: b6:4a:cd:05:81:2f:95:51:eb:3f:3e:8e:33:83:70:f4:66:3d: 82:fd:21:93:98:7d:36:c8:02:b8:c2:55:c8:5d:ef:f8:68:47: 4b:21:69:fd:93:a2:81:64:3a:49:b8:e3:3e:6b:3b:05:59:c4: 83:f0:8b:76:6c:1a:50:74:55:f2:b0:89:2d:a9:50:07:f4:a4: 76:b1:63:09:96:1c:e1:e2:29:bb:9e:d2:31:0e:f9:d0:52:18: e1:46:53:f9:87:fa:9b:96:0b:d4:e7:b0:97:0c:1f:76:b6:cf: 40:76:10:00:5c:42:90:a5:d5:59:e7:5b:c1:23:37:bd:47:9f: 57:1e:37:8f:86:53:26:22:2b:ea:e3:88:2e:fa:d7:ad:05:63: d8:8d:52:ad:91:75:91:95:6a:56:f7:e1:e4:20:11:6a:bc:39: 6f:a1:c8:c7:14:b4:e5:73:9a:dc:38:a8:e6:b4:7f:2f:1c:c6: fc:5c:7d:56:fd:ce:fd:4d:f0:04:e2:48:5e:ce:e9:e8:49:7e: df:02:ac:3c -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUeSp8D0mTSqolfPh3n5kggj5SZtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTAyMTYxNDIwNTBaFw0yNjAyMTUxNDI1NTBaMDMxMTAvBgNV BAMTKDNGRDBCRkFCMUIxMEEwMDA3Q0IzN0IzNDEzMzc2OUQxOUYyQ0NFMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Rdrg83qraaD0DvQXImi/4/gC axeThvqoU13siLtr/4U/RMDZUGb2pKhMbm+b+Q7KlPnR6nZerbSegtt4gqwG3eP7 cgPTF3/94Ko2UWQFceRCu9qVuasCA1UxHypYPWSoC9+bl2+v1Woc5idjUCfmgWKw KyK/Z7cHjm9ywQiLcA1ypt1xyu0SZ0thsvgEPSwVgL8uXMfLeo3YAvWlgQtYRrJE p31ESzlJx2+6GUU/0ypFhDiNBdrhtftKZ6OjMYBhBqTqnXFe1+oJFderEz2AYEYj RHl+Vr39+ealBuOxhGVQRwlrz04KygnemuWOMxTi7gnauNNULeqCeQAG5P3fAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUP9C/qxsQoAB8s3s0Ezdp0Z8szjQwHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5ZDZhY2M2LTBhZjMtNGI5Ny05 OWE0LTBmNDVlOGVjZjU3Ni8wLzMyMzQzMDM2M2EzNTYzMzQzMDNhMzIzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTMzMzEzNzMwMzUucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BlxAIDANBgkqhkiG9w0BAQsFAAOCAQEAEbpxb8Tviub4LNR3+dwiWf7yH8fiO8/f GUy+tllYtciI0A5rY6xDX7BZhd5+Nnxzl4+uzx13tkrNBYEvlVHrPz6OM4Nw9GY9 gv0hk5h9NsgCuMJVyF3v+GhHSyFp/ZOigWQ6SbjjPms7BVnEg/CLdmwaUHRV8rCJ LalQB/SkdrFjCZYc4eIpu57SMQ750FIY4UZT+Yf6m5YL1OewlwwfdrbPQHYQAFxC kKXVWedbwSM3vUefVx43j4ZTJiIr6uOILvrXrQVj2I1SrZF1kZVqVvfh5CARarw5 b6HIxxS05XOa3Dio5rR/LxzG/Fx9Vv3O/U3wBOJIXs7p6El+3wKsPA== -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:07 2025 by rpki-client