This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa File: 323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa (raw, json) Hash identifier: +h69YPXoiC31k13cSEzWyv6wTFkos1CLOZsQnIEiGv0= Subject key identifier: 6A:BD:72:4B:B5:5E:5F:E9:16:B4:55:F7:22:7A:DD:D1:C3:5C:29:9F Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 46A8901D70151622BDA6B6407033EA4D55AC2C76 Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa Signing time: Thu 06 Nov 2025 11:00:00 +0000 ROA not before: Thu 06 Nov 2025 10:55:00 +0000 ROA not after: Thu 05 Nov 2026 11:00:00 +0000 asID: 24534 IP address blocks: 2404:9580:32::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a8:90:1d:70:15:16:22:bd:a6:b6:40:70:33:ea:4d:55:ac:2c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Nov 6 10:55:00 2025 GMT Not After : Nov 5 11:00:00 2026 GMT Subject: CN=6ABD724BB55E5FE916B455F7227ADDD1C35C299F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:4e:a3:c8:85:6e:5a:49:4e:4d:48:cb:c7: 10:96:9e:13:85:25:6b:44:cf:c7:43:37:53:2a:6b: 51:56:31:74:7c:84:84:42:2b:3c:e8:1f:61:77:a6: 4b:cd:50:a0:55:43:05:75:43:c8:fd:70:c8:4a:f6: f4:14:e1:d3:34:ef:95:a0:8a:c0:52:80:4c:81:4a: 9f:11:ac:d3:84:65:22:9c:46:6b:61:da:74:33:dd: 20:4d:23:64:cb:9d:95:0a:94:09:20:68:33:91:8a: 3a:ea:28:84:ed:b6:b4:88:94:e3:81:74:b3:db:17: e2:be:5d:5f:20:4e:4b:be:cb:d0:05:76:b5:32:82: 61:56:65:49:f2:e4:e8:75:2f:e3:e9:c7:f4:7b:83: 06:1e:c3:a9:e3:2f:7a:7e:16:8c:ab:19:3f:fe:23: ad:84:ac:c1:5f:44:ec:a4:93:62:c3:ec:57:a4:85: 4a:a6:c6:16:45:81:5e:5e:b5:cc:89:7e:56:8e:d6: 04:a9:1a:81:58:82:90:ed:a2:ac:e2:33:b6:e8:55: c8:69:c8:33:f5:10:6c:b1:03:22:09:1c:85:18:da: 32:e7:67:8b:0f:b3:c3:06:f4:d3:c1:ee:8f:fd:5a: 56:15:47:90:ae:fb:32:4e:ce:3b:fd:7e:25:a4:cd: 79:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BD:72:4B:B5:5E:5F:E9:16:B4:55:F7:22:7A:DD:D1:C3:5C:29:9F X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a33323a3a2f34382d3438203d3e203234353334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:9580:32::/48 Signature Algorithm: sha256WithRSAEncryption 13:53:15:a2:0f:91:ee:81:5b:36:c2:0a:d7:36:85:78:3f:bc: 54:e7:19:3f:54:a5:75:9d:d7:8d:b4:ca:50:98:5f:03:c1:f6: f5:ad:10:9d:df:17:89:0b:67:22:37:7a:40:9b:3a:5d:77:1f: 9a:7f:fd:7f:32:bb:3b:ea:c1:76:ff:03:a1:d5:1b:ce:a8:df: 20:fb:66:c2:49:dc:6e:b7:b0:90:d3:b3:6c:51:99:2f:ee:d7: 43:cf:c4:1d:68:3e:69:32:60:db:a3:b2:d4:61:a6:d8:9e:93: 2d:53:78:b5:ae:ff:9c:65:bc:ed:66:89:c4:73:ec:64:7f:53: 2b:93:20:c5:30:f7:3e:d3:a1:6a:1f:d3:8e:f3:d2:2a:fa:13: c3:80:51:5b:c6:e3:10:d8:db:de:39:0e:74:5d:3b:71:9a:b3: 27:69:14:d6:20:1e:46:15:39:8b:4e:57:18:b6:19:da:38:7b: fa:b7:1a:a4:58:1f:2d:cd:f8:b3:7f:5d:8a:a5:b7:95:0f:2c: 65:2b:68:41:41:cd:ee:77:ef:4c:05:3d:f4:fd:2d:20:29:12: c3:43:13:2b:83:bf:02:6b:61:3b:4a:7b:2d:8c:34:dc:73:88: 22:0a:69:a4:90:9a:d7:0c:25:5d:6a:cb:0a:03:6e:83:d2:48: e7:e7:e0:c1 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIURqiQHXAVFiK9prZAcDPqTVWsLHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNTExMDYxMDU1MDBaFw0yNjExMDUxMTAwMDBaMDMxMTAvBgNV BAMTKDZBQkQ3MjRCQjU1RTVGRTkxNkI0NTVGNzIyN0FEREQxQzM1QzI5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKE6jyIVuWklOTUjLxxCWnhOF JWtEz8dDN1Mqa1FWMXR8hIRCKzzoH2F3pkvNUKBVQwV1Q8j9cMhK9vQU4dM075Wg isBSgEyBSp8RrNOEZSKcRmth2nQz3SBNI2TLnZUKlAkgaDORijrqKITttrSIlOOB dLPbF+K+XV8gTku+y9AFdrUygmFWZUny5Oh1L+Ppx/R7gwYew6njL3p+FoyrGT/+ I62ErMFfROykk2LD7FekhUqmxhZFgV5etcyJflaO1gSpGoFYgpDtoqziM7boVchp yDP1EGyxAyIJHIUY2jLnZ4sPs8MG9NPB7o/9WlYVR5Cu+zJOzjv9fiWkzXnfAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUar1yS7VeX+kWtFX3Inrd0cNcKZ8wHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MjQwNTJlLTIyMDUtNDhmMy1h M2NiLWNlOGIzMjZiOGY3MS8wLzMyMzQzMDM0M2EzOTM1MzgzMDNhMzMzMjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQzNTMzMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBJWAADIw DQYJKoZIhvcNAQELBQADggEBABNTFaIPke6BWzbCCtc2hXg/vFTnGT9UpXWd1420 ylCYXwPB9vWtEJ3fF4kLZyI3ekCbOl13H5p//X8yuzvqwXb/A6HVG86o3yD7ZsJJ 3G63sJDTs2xRmS/u10PPxB1oPmkyYNujstRhptieky1TeLWu/5xlvO1micRz7GR/ UyuTIMUw9z7ToWof047z0ir6E8OAUVvG4xDY2945DnRdO3GasydpFNYgHkYVOYtO Vxi2Gdo4e/q3GqRYHy3N+LN/XYqlt5UPLGUraEFBze5370wFPfT9LSApEsNDEyuD vwJrYTtKey2MNNxziCIKaaSQmtcMJV1qywoDboPSSOfn4ME= -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:14 2025 by rpki-client