This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa File: 34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa (raw, json) Hash identifier: mxAwK/MKmBpPTXvB+y7TO9Vx/LAA3W9mHnGSKrGKpTI= Subject key identifier: 67:47:CC:15:CF:70:F3:4C:98:EB:BA:5A:E8:93:44:27:5F:31:03:66 Certificate issuer: /CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Certificate serial: 706FE4DAD735DD77686E017AD92DFD8A523CD650 Authority key identifier: 1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa Signing time: Fri 14 Nov 2025 17:03:31 +0000 ROA not before: Fri 14 Nov 2025 16:58:31 +0000 ROA not after: Fri 13 Nov 2026 17:03:31 +0000 asID: 152049 IP address blocks: 45.123.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:6f:e4:da:d7:35:dd:77:68:6e:01:7a:d9:2d:fd:8a:52:3c:d6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F609817DD084C4559EEB9B06E8013157EB82DB8 Validity Not Before: Nov 14 16:58:31 2025 GMT Not After : Nov 13 17:03:31 2026 GMT Subject: CN=6747CC15CF70F34C98EBBA5AE89344275F310366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:ea:58:8f:65:7d:9c:28:95:16:56:5b:2a: 15:7d:87:c0:66:2f:58:2a:8a:b5:e2:1b:85:a6:b6: 64:43:f2:ca:c0:23:22:18:6b:e6:3b:e5:5f:b0:c7: 3e:ea:93:4d:59:ff:d9:f0:1f:c6:3e:d0:8e:6d:1f: ed:a4:8e:42:9d:59:3e:3b:41:39:e2:08:68:23:43: 48:42:86:17:d5:18:9a:a0:ac:30:23:1e:d1:a3:1f: 0b:bf:62:8d:d6:1c:d8:b5:23:49:5a:ea:d1:76:0f: b2:e9:40:67:6b:4f:7b:30:d8:97:47:89:d1:45:b8: d3:8e:77:11:0d:e2:60:e3:24:ec:12:8e:fd:e2:e2: 80:51:5c:76:d5:c2:a4:9e:8d:82:09:f1:8d:0a:c6: de:0e:c4:88:7f:d4:dd:fa:3b:fc:22:6a:f8:c7:36: a2:d1:c5:fd:70:08:08:b5:93:df:06:24:dd:c8:f7: e5:a9:8b:2f:44:0c:c5:2e:c3:97:0e:46:7f:ac:0e: 23:f2:86:ad:20:29:bd:ac:83:cb:e4:49:f9:85:ee: 7b:e4:0c:b7:27:18:60:c8:2a:d1:60:d6:74:94:b7: 85:25:0d:a8:a3:f0:9a:e3:5b:02:a6:ec:81:81:6e: c7:4e:5a:44:0e:1d:d7:fc:0c:08:64:90:6d:56:96: 28:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:47:CC:15:CF:70:F3:4C:98:EB:BA:5A:E8:93:44:27:5F:31:03:66 X509v3 Authority Key Identifier: keyid:1F:60:98:17:DD:08:4C:45:59:EE:B9:B0:6E:80:13:15:7E:B8:2D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/1F609817DD084C4559EEB9B06E8013157EB82DB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F609817DD084C4559EEB9B06E8013157EB82DB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff7a7d98-2338-4d77-9662-f33ea68c86f2/0/34352e3132332e3134312e302f32342d3234203d3e20313532303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.123.141.0/24 Signature Algorithm: sha256WithRSAEncryption 70:19:03:15:5c:2c:e2:1e:1b:2a:a3:dc:c2:98:86:63:b2:4e: 0b:c7:7c:2a:d9:44:94:d6:f3:6a:57:4a:32:b7:f9:a1:22:0e: 57:5f:21:ef:77:97:60:c1:b7:dc:ec:28:4a:33:41:6a:39:2c: 8c:40:22:de:fa:b8:83:5f:17:a3:06:fc:ee:00:10:71:62:69: 2b:7f:ef:d3:e8:65:dd:14:10:c8:c8:d1:a2:e1:1e:dd:ed:42: f5:19:ad:9c:ef:cb:fc:97:fb:98:87:66:98:f9:a2:90:39:09: f8:e1:68:e7:29:ba:e7:41:3f:09:72:e7:89:42:8b:11:33:b5: 68:da:d2:33:d3:4b:66:27:f2:a5:c5:b8:2d:69:4d:8e:c8:5d: d0:25:cb:ee:67:42:9b:7f:5e:b4:63:30:a0:f7:93:e4:70:af: 6c:5c:19:44:8f:7e:ff:ee:62:7b:e9:3f:9e:32:81:36:40:27: 00:55:85:c5:78:4f:38:95:d3:77:45:de:d4:d5:45:2a:1b:2c: ff:9e:31:fd:67:08:a0:56:33:cf:ae:4e:d6:48:21:09:6e:77: 28:e7:ad:1c:b8:2c:c2:52:70:d4:d7:27:ef:1c:84:9b:55:1b: 47:74:07:b5:5c:36:38:4e:0a:46:89:00:6b:20:87:c7:7a:d6: 12:98:b1:ba -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcG/k2tc13XdobgF62S39ilI81lAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3 RUI4MkRCODAeFw0yNTExMTQxNjU4MzFaFw0yNjExMTMxNzAzMzFaMDMxMTAvBgNV BAMTKDY3NDdDQzE1Q0Y3MEYzNEM5OEVCQkE1QUU4OTM0NDI3NUYzMTAzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhepYj2V9nCiVFlZbKhV9h8Bm L1gqirXiG4WmtmRD8srAIyIYa+Y75V+wxz7qk01Z/9nwH8Y+0I5tH+2kjkKdWT47 QTniCGgjQ0hChhfVGJqgrDAjHtGjHwu/Yo3WHNi1I0la6tF2D7LpQGdrT3sw2JdH idFFuNOOdxEN4mDjJOwSjv3i4oBRXHbVwqSejYIJ8Y0Kxt4OxIh/1N36O/wiavjH NqLRxf1wCAi1k98GJN3I9+Wpiy9EDMUuw5cORn+sDiPyhq0gKb2sg8vkSfmF7nvk DLcnGGDIKtFg1nSUt4UlDaij8JrjWwKm7IGBbsdOWkQOHdf8DAhkkG1WliinAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZ0fMFc9w80yY67pa6JNEJ18xA2YwHwYDVR0j BBgwFoAUH2CYF90ITEVZ7rmwboATFX64LbgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjdhN2Q5OC0yMzM4LTRkNzctOTY2Mi1mMzNlYTY4Yzg2ZjIvMC8xRjYwOTgxN0RE MDg0QzQ1NTlFRUI5QjA2RTgwMTMxNTdFQjgyREI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY2MDk4MTdERDA4NEM0NTU5RUVCOUIwNkU4MDEzMTU3RUI4 MkRCOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZmN2E3ZDk4LTIzMzgtNGQ3Ny05 NjYyLWYzM2VhNjhjODZmMi8wLzM0MzUyZTMxMzIzMzJlMzEzNDMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXuNMA0GCSqG SIb3DQEBCwUAA4IBAQBwGQMVXCziHhsqo9zCmIZjsk4Lx3wq2USU1vNqV0oyt/mh Ig5XXyHvd5dgwbfc7ChKM0FqOSyMQCLe+riDXxejBvzuABBxYmkrf+/T6GXdFBDI yNGi4R7d7UL1Ga2c78v8l/uYh2aY+aKQOQn44WjnKbrnQT8JcueJQosRM7Vo2tIz 00tmJ/KlxbgtaU2OyF3QJcvuZ0Kbf160YzCg95PkcK9sXBlEj37/7mJ76T+eMoE2 QCcAVYXFeE84ldN3Rd7U1UUqGyz/njH9ZwigVjPPrk7WSCEJbnco560cuCzCUnDU 1yfvHISbVRtHdAe1XDY4TgpGiQBrIIfHetYSmLG6 -----END CERTIFICATE-----Generated at Wed Dec 3 15:26:57 2025 by rpki-client