This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134302e302f32332d3234203d3e20313532303439.roa File: 34352e3132332e3134302e302f32332d3234203d3e20313532303439.roa (raw, json) Hash identifier: RD/RO/ie3tKJhpXhiY1wvpRhxWsn6xjmVmvMhdZr4lk= Subject key identifier: 67:67:F8:D2:D7:F8:30:39:05:CB:72:64:27:5A:B4:E5:26:47:D5:31 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 0E0E069EDD32495EA99041F38487AA7C76F943D9 Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134302e302f32332d3234203d3e20313532303439.roa Signing time: Fri 14 Nov 2025 17:02:32 +0000 ROA not before: Fri 14 Nov 2025 16:57:32 +0000 ROA not after: Fri 13 Nov 2026 17:02:32 +0000 asID: 152049 IP address blocks: 45.123.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:0e:06:9e:dd:32:49:5e:a9:90:41:f3:84:87:aa:7c:76:f9:43:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Nov 14 16:57:32 2025 GMT Not After : Nov 13 17:02:32 2026 GMT Subject: CN=6767F8D2D7F8303905CB7264275AB4E52647D531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:39:e0:bb:fb:53:c0:4d:44:a0:e0:a5:6a:f2: 46:d7:b5:a8:eb:cc:8d:9f:8a:ea:80:c7:86:a6:69: 6d:a0:43:94:65:b6:e4:9b:a3:89:73:bf:8b:34:cf: 59:7f:aa:6a:b5:0e:f3:0c:2e:6f:fd:d6:76:40:78: f0:96:5d:e7:ab:c5:b9:9f:3e:06:52:c8:d6:7b:b1: 71:ef:54:28:b9:5b:ad:5f:aa:34:17:72:f0:30:2f: 8a:e2:1c:33:2d:e2:31:11:78:f4:22:d9:5d:35:70: da:91:e9:23:e6:43:b7:ef:b2:14:b7:85:29:44:1e: 83:2e:bd:78:3b:1b:d0:26:f0:68:4c:60:0d:22:a5: a5:d6:d8:80:3b:41:cf:70:09:61:4e:13:29:7c:31: 98:ef:8e:77:4a:13:86:7c:d8:4a:75:d1:2a:1a:60: 2b:ea:9a:59:41:76:e5:ff:8b:18:61:b6:67:c4:81: 4f:e0:c9:f4:d0:82:ab:a2:00:33:35:54:d6:2f:04: fa:f3:ce:ad:87:fa:a7:e7:f8:f8:8c:96:cd:8e:c7: 7d:86:08:f1:d5:c4:d1:a3:b1:ca:fd:55:b8:08:df: ba:b2:45:f4:a9:8a:a2:84:d5:e9:1b:06:3f:a3:f3: a9:08:3d:34:b9:f6:a4:bf:de:af:05:6e:34:a9:35: 61:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:67:F8:D2:D7:F8:30:39:05:CB:72:64:27:5A:B4:E5:26:47:D5:31 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134302e302f32332d3234203d3e20313532303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.140.0/23 Signature Algorithm: sha256WithRSAEncryption 63:39:c5:b1:13:af:25:8a:76:92:cb:a4:5f:76:57:f6:d9:d8: 84:8c:87:20:b6:3a:ff:52:b0:e8:2a:fd:45:2c:31:ef:6f:e2: 52:cf:8e:c8:7b:77:9b:81:bf:bd:bc:a1:c1:3c:9f:50:10:b5: 72:c8:a8:50:4d:aa:d1:47:fc:37:83:4a:23:25:75:6a:1b:a8: 90:a7:0a:e1:48:8c:21:a6:3f:a9:d1:4f:17:3f:d4:48:c1:5f: b7:82:c6:0b:72:a2:7d:3c:fd:91:e4:49:14:68:3a:19:d9:b0: 75:71:79:e5:ca:49:da:2a:7c:a8:b7:5e:c6:ce:b2:1d:a6:48: dc:8f:f4:70:b2:fd:81:c0:ae:4c:08:cc:1c:ce:e4:55:58:d6: 51:0b:63:8c:c7:3a:3e:3b:f8:8d:bd:12:c9:ff:09:6f:a3:00: 4c:af:d1:14:8e:b1:b2:b8:f6:aa:bb:82:22:21:4b:bf:27:c1: 2b:33:f2:7e:1c:4b:71:ea:27:d7:b2:f1:58:14:06:5e:ef:fb: 88:6c:e9:3f:5e:78:12:20:4f:7c:b3:6c:d0:ec:3b:7b:08:44: c6:4e:59:0a:c6:6c:b9:69:73:70:e0:fa:04:7e:08:cd:95:8e: 13:1e:cb:5e:79:47:4f:80:41:f4:49:03:8f:e0:27:5f:ed:cf: c9:30:70:b1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDg4Gnt0ySV6pkEHzhIeqfHb5Q9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNTExMTQxNjU3MzJaFw0yNjExMTMxNzAyMzJaMDMxMTAvBgNV BAMTKDY3NjdGOEQyRDdGODMwMzkwNUNCNzI2NDI3NUFCNEU1MjY0N0Q1MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlOeC7+1PATUSg4KVq8kbXtajr zI2fiuqAx4amaW2gQ5RltuSbo4lzv4s0z1l/qmq1DvMMLm/91nZAePCWXeerxbmf PgZSyNZ7sXHvVCi5W61fqjQXcvAwL4riHDMt4jERePQi2V01cNqR6SPmQ7fvshS3 hSlEHoMuvXg7G9Am8GhMYA0ipaXW2IA7Qc9wCWFOEyl8MZjvjndKE4Z82Ep10Soa YCvqmllBduX/ixhhtmfEgU/gyfTQgquiADM1VNYvBPrzzq2H+qfn+PiMls2Ox32G CPHVxNGjscr9VbgI37qyRfSpiqKE1ekbBj+j86kIPTS59qS/3q8FbjSpNWHzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZ2f40tf4MDkFy3JkJ1q05SZH1TEwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZmN2E3ZDk4LTIzMzgtNGQ3Ny05 NjYyLWYzM2VhNjhjODZmMi8wLzM0MzUyZTMxMzIzMzJlMzEzNDMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLXuMMA0GCSqG SIb3DQEBCwUAA4IBAQBjOcWxE68linaSy6Rfdlf22diEjIcgtjr/UrDoKv1FLDHv b+JSz47Ie3ebgb+9vKHBPJ9QELVyyKhQTarRR/w3g0ojJXVqG6iQpwrhSIwhpj+p 0U8XP9RIwV+3gsYLcqJ9PP2R5EkUaDoZ2bB1cXnlyknaKnyot17GzrIdpkjcj/Rw sv2BwK5MCMwczuRVWNZRC2OMxzo+O/iNvRLJ/wlvowBMr9EUjrGyuPaqu4IiIUu/ J8ErM/J+HEtx6ifXsvFYFAZe7/uIbOk/XngSIE98s2zQ7Dt7CETGTlkKxmy5aXNw 4PoEfgjNlY4THsteeUdPgEH0SQOP4Cdf7c/JMHCx -----END CERTIFICATE-----Generated at Wed Dec 3 15:26:53 2025 by rpki-client