This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa File: 34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa (raw, json) Hash identifier: eyKVqxooc3TAGiXmLnd8fFBCsIdu4PICiXyXT8Mjh6M= Subject key identifier: 9D:6F:04:49:B0:E3:55:2F:8D:69:0B:B8:87:6B:CB:BE:E7:77:09:50 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 02967920BA20D8A6E0DC9D48B5C89B3D4C2037BB Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa Signing time: Fri 14 Nov 2025 17:03:14 +0000 ROA not before: Fri 14 Nov 2025 16:58:14 +0000 ROA not after: Fri 13 Nov 2026 17:03:14 +0000 asID: 152049 IP address blocks: 45.123.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:96:79:20:ba:20:d8:a6:e0:dc:9d:48:b5:c8:9b:3d:4c:20:37:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Nov 14 16:58:14 2025 GMT Not After : Nov 13 17:03:14 2026 GMT Subject: CN=9D6F0449B0E3552F8D690BB8876BCBBEE7770950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bc:dd:54:92:b8:f0:44:2d:ec:d9:51:11:af: f6:fa:5b:23:35:b3:05:29:e6:9f:f6:e3:56:80:18: a0:f5:44:53:3f:c5:c0:99:15:f9:e8:7a:39:81:d8: ee:b3:97:02:65:ac:fb:e2:51:32:dd:1f:c7:ae:e6: 58:76:68:d3:2f:0e:f4:42:b7:2f:43:d7:03:12:5c: 5c:d9:43:87:16:92:4d:53:c5:04:60:12:46:6d:10: e1:43:3a:29:8d:92:62:1a:72:42:7f:0e:64:ee:ab: ee:d8:aa:1f:a1:5d:89:a6:33:73:6b:9a:5b:d3:8a: 1a:4a:2b:e0:eb:d9:8c:90:5e:80:ee:8c:7e:8b:ab: 47:8a:38:0c:96:22:6a:58:99:9b:d3:25:6f:f4:4a: 48:0e:db:af:68:6d:ce:b0:36:74:fa:5f:1f:e9:8d: ca:fd:b1:9d:84:6e:09:c8:e6:31:cf:87:07:92:da: fb:a5:c0:86:d8:56:09:a9:32:f3:35:4a:ea:ed:19: e2:8a:71:49:24:ae:72:e8:e2:7e:a7:f2:71:cc:d1: 70:10:ff:59:db:9b:d7:65:87:62:5a:ea:d0:aa:fc: f6:1b:ce:a7:fc:0c:8a:b4:be:50:6c:1a:77:f7:f3: 40:16:fb:08:1e:77:8e:b2:51:b0:16:18:24:86:51: 4e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6F:04:49:B0:E3:55:2F:8D:69:0B:B8:87:6B:CB:BE:E7:77:09:50 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134302e302f32342d3234203d3e20313532303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.140.0/24 Signature Algorithm: sha256WithRSAEncryption df:17:48:ab:6e:9a:4c:fb:79:ad:22:b5:2f:13:5d:ec:06:ab: 38:69:be:60:90:7e:98:d0:73:ed:78:04:6f:f1:f9:1f:cf:c0: b6:a0:ca:96:95:92:8a:9c:a2:0a:ac:39:29:a8:cd:50:27:f5: 64:de:34:b9:90:89:8a:d3:6c:ee:a3:a2:44:ef:93:23:97:a9: 68:85:28:82:46:7a:02:1f:4c:8a:a3:af:40:80:89:55:aa:3f: 95:28:20:46:38:ee:a1:68:6a:8b:78:10:43:0f:a6:98:73:55: a7:91:60:3b:41:b1:7f:92:76:41:34:19:72:1f:24:11:26:fe: c5:d3:b0:05:99:af:c5:2b:b2:9a:88:3e:30:ef:d0:c9:62:90: 8c:41:11:ef:d7:91:6d:53:20:0d:d8:8b:e3:27:f3:a6:20:1a: b4:22:49:9c:27:37:b8:e1:68:e5:9d:0c:73:e3:31:c6:40:45: e8:24:51:83:ea:8d:c2:71:9c:38:32:17:0f:75:c4:0e:4a:e0: bc:d1:5a:ec:89:03:a4:e2:aa:7d:bf:af:5a:c0:45:e9:f5:08: c9:86:0d:a0:da:62:14:8d:90:46:9d:61:fc:f2:12:f2:c6:8d: 3e:c4:c6:f7:bb:4e:8a:f6:07:df:c0:a5:b9:07:0b:6a:2f:59: 5d:00:4b:5e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUApZ5ILog2Kbg3J1ItcibPUwgN7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNTExMTQxNjU4MTRaFw0yNjExMTMxNzAzMTRaMDMxMTAvBgNV BAMTKDlENkYwNDQ5QjBFMzU1MkY4RDY5MEJCODg3NkJDQkJFRTc3NzA5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxvN1UkrjwRC3s2VERr/b6WyM1 swUp5p/241aAGKD1RFM/xcCZFfnoejmB2O6zlwJlrPviUTLdH8eu5lh2aNMvDvRC ty9D1wMSXFzZQ4cWkk1TxQRgEkZtEOFDOimNkmIackJ/DmTuq+7Yqh+hXYmmM3Nr mlvTihpKK+Dr2YyQXoDujH6Lq0eKOAyWImpYmZvTJW/0SkgO269obc6wNnT6Xx/p jcr9sZ2EbgnI5jHPhweS2vulwIbYVgmpMvM1SurtGeKKcUkkrnLo4n6n8nHM0XAQ /1nbm9dlh2Ja6tCq/PYbzqf8DIq0vlBsGnf380AW+wged46yUbAWGCSGUU4RAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUnW8ESbDjVS+NaQu4h2vLvud3CVAwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZmN2E3ZDk4LTIzMzgtNGQ3Ny05 NjYyLWYzM2VhNjhjODZmMi8wLzM0MzUyZTMxMzIzMzJlMzEzNDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXuMMA0GCSqG SIb3DQEBCwUAA4IBAQDfF0irbppM+3mtIrUvE13sBqs4ab5gkH6Y0HPteARv8fkf z8C2oMqWlZKKnKIKrDkpqM1QJ/Vk3jS5kImK02zuo6JE75Mjl6lohSiCRnoCH0yK o69AgIlVqj+VKCBGOO6haGqLeBBDD6aYc1WnkWA7QbF/knZBNBlyHyQRJv7F07AF ma/FK7KaiD4w79DJYpCMQRHv15FtUyAN2IvjJ/OmIBq0IkmcJze44WjlnQxz4zHG QEXoJFGD6o3CcZw4MhcPdcQOSuC80VrsiQOk4qp9v69awEXp9QjJhg2g2mIUjZBG nWH88hLyxo0+xMb3u06K9gffwKW5BwtqL1ldAEte -----END CERTIFICATE-----Generated at Wed Dec 3 15:26:54 2025 by rpki-client