This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa File: 323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa (raw, json) Hash identifier: 1Jp8cCDyjncp4Wpa0IwwHsbMLezQ3Rf5CCYJ9Uaw69A= Subject key identifier: 90:A3:9B:D8:F5:0A:FC:6F:08:F5:7D:9F:3C:F5:B7:CD:52:DC:22:32 Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 41306A455FDFD2957102E28CB0680F535A14A987 Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa Signing time: Thu 06 Nov 2025 12:00:01 +0000 ROA not before: Thu 06 Nov 2025 11:55:01 +0000 ROA not after: Thu 05 Nov 2026 12:00:01 +0000 asID: 24534 IP address blocks: 2404:9580:30::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:30:6a:45:5f:df:d2:95:71:02:e2:8c:b0:68:0f:53:5a:14:a9:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Nov 6 11:55:01 2025 GMT Not After : Nov 5 12:00:01 2026 GMT Subject: CN=90A39BD8F50AFC6F08F57D9F3CF5B7CD52DC2232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e3:50:e4:8a:46:8e:d1:68:21:05:6d:28:b0: 0a:a4:69:8c:5d:41:e8:27:6e:9e:e2:00:81:37:ae: 2f:d2:fe:a5:8f:9b:f6:4b:69:27:43:6f:9c:e5:7e: b2:4e:ce:ae:ff:38:64:9f:62:f1:b3:db:df:73:db: c7:ae:66:d2:36:f1:cc:7f:61:d8:5e:6c:8c:c8:f6: 72:44:af:bc:d3:7e:aa:e0:f6:8b:54:7a:5f:b1:5b: 86:15:cf:be:95:13:fd:3b:18:e7:24:02:56:c7:27: aa:78:01:0f:d2:fe:03:6a:e1:8d:fd:d4:b7:92:3f: 88:d8:67:9f:3e:ad:b9:86:77:41:6a:62:42:4a:60: 96:7f:45:18:05:c4:42:8b:e1:27:99:ad:8e:00:e8: 67:c4:75:5f:b2:53:39:4d:93:2f:7c:39:f3:b6:f0: d4:4b:b3:50:cf:09:20:af:d7:75:d6:e4:a4:8d:95: 38:3f:9c:08:28:02:e8:dd:e1:20:bd:3a:be:b5:15: 08:c6:0f:fb:db:bc:d6:90:38:89:aa:f0:9a:6a:31: 3d:5e:db:09:1b:3e:14:11:89:f6:3d:40:2f:3f:22: 3a:d2:5b:b2:da:2d:28:6b:58:50:e8:e3:90:e5:49: d2:d2:61:06:2b:0d:b3:46:b6:10:99:fb:0f:bf:58: be:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A3:9B:D8:F5:0A:FC:6F:08:F5:7D:9F:3C:F5:B7:CD:52:DC:22:32 X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a33303a3a2f34382d3438203d3e203234353334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:9580:30::/48 Signature Algorithm: sha256WithRSAEncryption 56:27:bc:67:50:76:be:85:a7:10:99:04:e9:0a:4d:99:02:c4: 21:93:76:a9:98:ef:be:e2:b2:71:95:de:8b:34:6e:98:e5:5a: f0:cb:ff:a8:b7:09:fd:f7:ac:93:77:e7:5f:3b:7f:aa:12:d7: 3a:82:72:51:a2:e6:27:5b:a8:89:ef:fd:3e:d3:ce:e0:8e:b6: f0:8e:38:39:e4:7a:7e:73:56:88:47:28:03:45:f7:c5:5a:a4: d6:31:79:7d:b6:a5:13:65:f8:f4:54:44:dd:84:41:63:9f:88: 04:70:06:56:ec:c0:c4:f6:5c:89:8a:f0:42:33:b3:de:98:38: 03:02:f1:4c:bc:ec:e9:b2:cb:83:8d:b1:e0:88:07:7a:c9:ec: 11:10:a3:b3:0d:ec:de:9a:ed:44:58:67:05:3e:64:ac:77:b5: 8d:1f:3f:02:ff:41:a0:04:68:45:95:ff:1e:a0:ef:2d:af:e2: b4:30:63:16:f9:7d:a1:39:ef:42:8f:f7:df:76:1d:40:ab:e2: f8:b9:70:b6:77:8e:72:fe:92:bb:80:61:de:85:ad:17:7f:23: ee:54:2d:ee:c7:84:93:b1:0f:26:05:a5:60:2f:9c:db:c6:83: d1:f2:f8:90:81:3d:eb:08:98:58:2c:e6:d7:34:5b:d4:a5:40: a9:8a:e3:6f -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUQTBqRV/f0pVxAuKMsGgPU1oUqYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNTExMDYxMTU1MDFaFw0yNjExMDUxMjAwMDFaMDMxMTAvBgNV BAMTKDkwQTM5QkQ4RjUwQUZDNkYwOEY1N0Q5RjNDRjVCN0NENTJEQzIyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn41DkikaO0WghBW0osAqkaYxd Qegnbp7iAIE3ri/S/qWPm/ZLaSdDb5zlfrJOzq7/OGSfYvGz299z28euZtI28cx/ YdhebIzI9nJEr7zTfqrg9otUel+xW4YVz76VE/07GOckAlbHJ6p4AQ/S/gNq4Y39 1LeSP4jYZ58+rbmGd0FqYkJKYJZ/RRgFxEKL4SeZrY4A6GfEdV+yUzlNky98OfO2 8NRLs1DPCSCv13XW5KSNlTg/nAgoAujd4SC9Or61FQjGD/vbvNaQOImq8JpqMT1e 2wkbPhQRifY9QC8/IjrSW7LaLShrWFDo45DlSdLSYQYrDbNGthCZ+w+/WL7tAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUkKOb2PUK/G8I9X2fPPW3zVLcIjIwHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MjQwNTJlLTIyMDUtNDhmMy1h M2NiLWNlOGIzMjZiOGY3MS8wLzMyMzQzMDM0M2EzOTM1MzgzMDNhMzMzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQzNTMzMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBJWAADAw DQYJKoZIhvcNAQELBQADggEBAFYnvGdQdr6FpxCZBOkKTZkCxCGTdqmY777isnGV 3os0bpjlWvDL/6i3Cf33rJN35187f6oS1zqCclGi5idbqInv/T7TzuCOtvCOODnk en5zVohHKANF98VapNYxeX22pRNl+PRURN2EQWOfiARwBlbswMT2XImK8EIzs96Y OAMC8Uy87Omyy4ONseCIB3rJ7BEQo7MN7N6a7URYZwU+ZKx3tY0fPwL/QaAEaEWV /x6g7y2v4rQwYxb5faE570KP9992HUCr4vi5cLZ3jnL+kruAYd6FrRd/I+5ULe7H hJOxDyYFpWAvnNvGg9Hy+JCBPesImFgs5tc0W9SlQKmK428= -----END CERTIFICATE-----Generated at Sat Dec 6 19:50:13 2025 by rpki-client