This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134302e302f32332d3233203d3e20313532303439.roa File: 34352e3132332e3134302e302f32332d3233203d3e20313532303439.roa (raw, json) Hash identifier: PHcAVEeTYthOcGmorVA2c1r7wtqCpaWxCrN7FWMDJio= Subject key identifier: B1:B4:27:1A:51:CA:84:94:C3:FE:0E:E8:C0:E6:0D:4D:25:66:13:B3 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 64E00B3122CA83A06C36CB4C0DBF2EEC586E1BA5 Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134302e302f32332d3233203d3e20313532303439.roa Signing time: Fri 14 Nov 2025 17:03:44 +0000 ROA not before: Fri 14 Nov 2025 16:58:44 +0000 ROA not after: Fri 13 Nov 2026 17:03:44 +0000 asID: 152049 IP address blocks: 45.123.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e0:0b:31:22:ca:83:a0:6c:36:cb:4c:0d:bf:2e:ec:58:6e:1b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Nov 14 16:58:44 2025 GMT Not After : Nov 13 17:03:44 2026 GMT Subject: CN=B1B4271A51CA8494C3FE0EE8C0E60D4D256613B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:75:a9:88:41:9c:05:95:b4:83:76:3d:1d:1f: b9:d9:35:37:78:fd:50:4a:d3:b9:c6:26:ad:f4:10: a8:b7:54:bf:9b:5d:47:8c:7b:92:c0:7d:98:58:b9: 56:01:e7:15:e9:95:eb:6d:e1:88:6d:03:7e:ce:05: e1:54:67:04:d2:72:51:c4:96:a7:8e:75:be:f7:d1: 41:5e:fb:71:1a:ce:51:a7:fe:b2:9e:d8:a3:dd:e6: 75:fa:d3:dc:72:7c:37:68:fb:d1:bb:e7:ac:35:9d: cd:b2:17:32:e7:11:25:f2:59:ea:e6:0c:56:71:79: b7:2a:ca:cc:81:50:f9:08:8c:39:d7:38:75:2c:1b: 43:c6:88:6a:1c:d6:f5:b0:4d:36:d5:b9:2e:79:21: c2:84:28:58:46:02:f2:8c:9f:aa:07:ae:2e:c4:36: 1c:12:6a:21:9f:16:84:ef:b8:19:04:f1:f8:8f:32: 31:c7:ee:15:96:03:d8:1c:31:4a:62:a6:8c:1f:5e: f1:74:4f:f8:42:2a:a1:02:3d:54:5e:cf:61:ff:e2: c2:e2:85:32:a9:88:4d:8b:bb:be:c2:6f:d1:5a:31: 4b:74:5a:62:86:f3:1b:a7:82:4e:38:5a:c4:72:97: 80:95:85:a0:72:4d:4b:45:dc:e1:4c:f0:7e:9f:c5: 90:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B4:27:1A:51:CA:84:94:C3:FE:0E:E8:C0:E6:0D:4D:25:66:13:B3 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134302e302f32332d3233203d3e20313532303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.140.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:13:e4:60:84:b3:b0:ae:23:09:5a:55:6a:fd:ef:d9:36:d3: 81:0a:64:b0:5a:f1:c4:99:c3:ef:e3:ef:e9:2f:85:9a:c1:e0: f3:8b:6c:63:08:a7:95:5f:19:bc:19:55:87:dd:35:86:7c:63: 4c:bd:a4:c0:b1:8a:8c:bf:93:ee:b6:1e:86:ba:87:f9:3d:93: d6:b9:6f:bf:06:01:d5:4f:76:0f:6b:29:82:8f:fc:79:4f:62: 4e:03:48:2f:33:8a:aa:8f:02:4b:5d:0d:fc:f0:63:8f:b9:d1: 8b:dc:01:59:9e:9a:46:44:95:9b:1b:3f:eb:85:11:dc:db:76: 8e:5e:9a:a3:f1:b4:a2:bb:cc:e4:36:15:23:81:cf:d5:4f:26: 14:7d:01:82:61:cc:e2:1f:3f:bf:8e:1d:ef:1e:af:49:d4:c5: ae:e1:e2:1d:d5:0b:de:67:2c:c3:05:8d:1d:d4:14:13:f4:5d: 60:dc:39:12:9b:aa:71:81:fc:b4:a2:90:5a:37:96:b9:bf:b4: 38:e7:cb:05:4f:bb:aa:d4:62:c4:3f:a7:b3:df:24:e6:69:a4: 85:31:44:cb:01:3c:35:78:b7:54:03:ae:52:a2:98:18:e9:e5: 1a:aa:32:33:b7:97:bc:b9:d2:a4:e6:28:67:25:df:41:e0:5a: 1c:0f:9b:35 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZOALMSLKg6BsNstMDb8u7FhuG6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNTExMTQxNjU4NDRaFw0yNjExMTMxNzAzNDRaMDMxMTAvBgNV BAMTKEIxQjQyNzFBNTFDQTg0OTRDM0ZFMEVFOEMwRTYwRDREMjU2NjEzQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYdamIQZwFlbSDdj0dH7nZNTd4 /VBK07nGJq30EKi3VL+bXUeMe5LAfZhYuVYB5xXplett4YhtA37OBeFUZwTSclHE lqeOdb730UFe+3EazlGn/rKe2KPd5nX609xyfDdo+9G756w1nc2yFzLnESXyWerm DFZxebcqysyBUPkIjDnXOHUsG0PGiGoc1vWwTTbVuS55IcKEKFhGAvKMn6oHri7E NhwSaiGfFoTvuBkE8fiPMjHH7hWWA9gcMUpipowfXvF0T/hCKqECPVRez2H/4sLi hTKpiE2Lu77Cb9FaMUt0WmKG8xungk44WsRyl4CVhaByTUtF3OFM8H6fxZChAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUsbQnGlHKhJTD/g7owOYNTSVmE7MwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZmN2E3ZDk4LTIzMzgtNGQ3Ny05 NjYyLWYzM2VhNjhjODZmMi8wLzM0MzUyZTMxMzIzMzJlMzEzNDMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMyMzAzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLXuMMA0GCSqG SIb3DQEBCwUAA4IBAQCaE+RghLOwriMJWlVq/e/ZNtOBCmSwWvHEmcPv4+/pL4Wa weDzi2xjCKeVXxm8GVWH3TWGfGNMvaTAsYqMv5Puth6Guof5PZPWuW+/BgHVT3YP aymCj/x5T2JOA0gvM4qqjwJLXQ388GOPudGL3AFZnppGRJWbGz/rhRHc23aOXpqj 8bSiu8zkNhUjgc/VTyYUfQGCYcziHz+/jh3vHq9J1MWu4eId1QveZyzDBY0d1BQT 9F1g3DkSm6pxgfy0opBaN5a5v7Q458sFT7uq1GLEP6ez3yTmaaSFMUTLATw1eLdU A65SopgY6eUaqjIzt5e8udKk5ihnJd9B4FocD5s1 -----END CERTIFICATE-----Generated at Wed Dec 3 15:26:56 2025 by rpki-client