This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/323430333a393130303a3a2f33322d3332203d3e203435333032.roa File: 323430333a393130303a3a2f33322d3332203d3e203435333032.roa (raw, json) Hash identifier: hclG6eHZVb4H2Dv3mKJVXKKatJdKMCXUFJ5B8dDmEf4= Subject key identifier: BD:04:0D:80:74:83:FC:D9:AE:3E:BC:D6:C7:96:D5:47:37:97:6B:C9 Certificate issuer: /CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Certificate serial: 7C30796867B81F396FD8FE7672098B9F6CBD0544 Authority key identifier: 19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/323430333a393130303a3a2f33322d3332203d3e203435333032.roa Signing time: Tue 04 Nov 2025 10:00:04 +0000 ROA not before: Tue 04 Nov 2025 09:55:04 +0000 ROA not after: Tue 03 Nov 2026 10:00:04 +0000 asID: 45302 IP address blocks: 2403:9100::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:30:79:68:67:b8:1f:39:6f:d8:fe:76:72:09:8b:9f:6c:bd:05:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C Validity Not Before: Nov 4 09:55:04 2025 GMT Not After : Nov 3 10:00:04 2026 GMT Subject: CN=BD040D807483FCD9AE3EBCD6C796D54737976BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:c8:56:04:50:50:a1:cd:60:ea:10:e9:be: 74:1a:39:e3:3e:b5:c8:62:02:e9:42:2f:6e:64:00: ef:d1:e4:9d:0e:d4:ad:db:10:9f:86:53:8b:64:64: 05:20:09:6d:87:95:50:91:90:2c:6a:13:23:1c:4c: ef:10:94:41:af:cf:5f:5f:6b:f7:90:97:d2:dc:fe: 7c:53:5d:fa:72:1a:ff:16:e1:94:ba:d3:a1:5e:98: 2d:11:4b:d8:d5:82:7c:3a:e3:a6:99:8d:88:31:e3: 7d:6d:41:d9:1c:8a:48:83:7d:6a:df:09:79:e4:71: 67:8f:85:3b:97:78:36:e4:47:dc:b9:21:e4:c1:52: d5:1f:71:a0:98:a5:51:c2:df:bf:1c:00:ca:ff:09: dd:f7:7b:1f:84:51:d2:17:f9:f8:4f:92:f9:90:e7: 75:17:fe:29:a6:80:91:be:2a:c0:10:19:da:2c:11: 97:4c:11:9b:ab:85:1f:e4:d6:00:a1:22:2f:30:f1: 80:99:d6:32:09:05:0c:f3:dd:d7:c0:53:5d:31:d1: 0c:e4:80:0c:1c:49:ba:2d:40:4a:36:0a:e0:99:3d: db:47:f9:aa:1d:fd:ed:1b:99:c8:2e:c3:de:58:56: 9b:c4:9b:db:9b:38:1b:d7:50:03:bb:7d:22:0f:93: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:04:0D:80:74:83:FC:D9:AE:3E:BC:D6:C7:96:D5:47:37:97:6B:C9 X509v3 Authority Key Identifier: keyid:19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/323430333a393130303a3a2f33322d3332203d3e203435333032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:9100::/32 Signature Algorithm: sha256WithRSAEncryption 3e:31:13:8d:10:12:92:cf:54:73:5b:d9:5e:9e:2b:e7:0c:12: 0f:85:8b:36:91:02:3a:89:9e:72:0d:81:35:09:be:d1:5d:97: ba:2f:74:3a:fb:70:ec:f8:27:68:6a:7c:3a:67:bf:1f:28:fb: 3f:57:f4:ea:b7:3b:2c:5f:ae:9c:2f:cb:e0:1d:ec:d0:df:38: f4:38:7a:c5:ff:c7:75:3f:d6:a3:b4:0e:09:56:fc:d6:c6:c2: 7f:7d:fb:c0:0e:7b:d7:d6:61:97:8f:8b:04:c7:58:d2:e3:00: 34:38:35:1b:1d:66:e3:cc:1c:fc:49:5f:34:1c:d9:ca:a3:60: e6:66:da:95:3c:5f:8b:81:e2:11:7f:87:1e:63:94:a7:6a:b4: 88:13:a2:4b:5e:88:e0:f2:ba:69:24:4f:0e:59:b2:06:d3:61: 7f:1b:6b:95:8e:66:40:7e:51:39:68:92:b5:29:27:a4:bf:52: 1f:a7:de:4b:2f:18:7a:4c:2c:67:8b:48:c6:aa:d3:98:3d:03: 81:0c:53:0c:fc:bd:dc:73:51:8c:16:e3:52:7f:78:4d:5c:7c: aa:1d:3c:55:1e:a8:ad:00:5a:c4:a8:a6:95:05:9a:fa:de:19: 44:5a:1f:51:38:10:79:7a:fe:8c:72:66:40:bd:1d:42:6d:63: a9:e7:6f:17 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUfDB5aGe4Hzlv2P52cgmLn2y9BUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4 N0U2NUMzQzAeFw0yNTExMDQwOTU1MDRaFw0yNjExMDMxMDAwMDRaMDMxMTAvBgNV BAMTKEJEMDQwRDgwNzQ4M0ZDRDlBRTNFQkNENkM3OTZENTQ3Mzc5NzZCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvF8hWBFBQoc1g6hDpvnQaOeM+ tchiAulCL25kAO/R5J0O1K3bEJ+GU4tkZAUgCW2HlVCRkCxqEyMcTO8QlEGvz19f a/eQl9Lc/nxTXfpyGv8W4ZS606FemC0RS9jVgnw646aZjYgx431tQdkcikiDfWrf CXnkcWePhTuXeDbkR9y5IeTBUtUfcaCYpVHC378cAMr/Cd33ex+EUdIX+fhPkvmQ 53UX/immgJG+KsAQGdosEZdMEZurhR/k1gChIi8w8YCZ1jIJBQzz3dfAU10x0Qzk gAwcSbotQEo2CuCZPdtH+aod/e0bmcguw95YVpvEm9ubOBvXUAO7fSIPk03RAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUvQQNgHSD/NmuPrzWx5bVRzeXa8kwHwYDVR0j BBgwFoAUGaGW9eW6ujGSbFru9E/BY4fmXDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yjg4NThlMC1lY2YwLTRlNTMtYTQ5MC0zYjdjMmRlMTY5M2MvMC8xOUExOTZGNUU1 QkFCQTMxOTI2QzVBRUVGNDRGQzE2Mzg3RTY1QzNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlBMTk2RjVFNUJBQkEzMTkyNkM1QUVFRjQ0RkMxNjM4N0U2 NUMzQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiODg1OGUwLWVjZjAtNGU1My1h NDkwLTNiN2MyZGUxNjkzYy8wLzMyMzQzMDMzM2EzOTMxMzAzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM0MzUzMzMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA5EAMA0GCSqGSIb3 DQEBCwUAA4IBAQA+MRONEBKSz1RzW9lenivnDBIPhYs2kQI6iZ5yDYE1Cb7RXZe6 L3Q6+3Ds+Cdoanw6Z78fKPs/V/TqtzssX66cL8vgHezQ3zj0OHrF/8d1P9ajtA4J VvzWxsJ/ffvADnvX1mGXj4sEx1jS4wA0ODUbHWbjzBz8SV80HNnKo2DmZtqVPF+L geIRf4ceY5SnarSIE6JLXojg8rppJE8OWbIG02F/G2uVjmZAflE5aJK1KSekv1If p95LLxh6TCxni0jGqtOYPQOBDFMM/L3cc1GMFuNSf3hNXHyqHTxVHqitAFrEqKaV BZr63hlEWh9ROBB5ev6McmZAvR1CbWOp528X -----END CERTIFICATE-----Generated at Wed Dec 3 15:28:43 2025 by rpki-client