This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa File: 323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa (raw, json) Hash identifier: 47GvXgllqrS1MxJptUYHVOsa05orn3J0qbEjvOU+c+c= Subject key identifier: 11:C2:22:D2:C5:99:18:C4:29:41:2A:8E:F8:0B:10:E4:EE:61:31:C8 Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 2A8F261C2ACB462177268C08D737CD0E0792F3DF Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa Signing time: Thu 06 Nov 2025 12:00:00 +0000 ROA not before: Thu 06 Nov 2025 11:55:00 +0000 ROA not after: Thu 05 Nov 2026 12:00:00 +0000 asID: 24534 IP address blocks: 2404:9580:48::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8f:26:1c:2a:cb:46:21:77:26:8c:08:d7:37:cd:0e:07:92:f3:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Nov 6 11:55:00 2025 GMT Not After : Nov 5 12:00:00 2026 GMT Subject: CN=11C222D2C59918C429412A8EF80B10E4EE6131C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:d7:17:9d:01:03:6c:17:85:7f:7a:9d:f8: 16:ad:aa:18:db:a4:03:3d:19:f4:71:90:6a:e4:e4: 3f:8c:4b:91:06:19:52:0f:97:56:a5:ee:15:11:48: e4:cc:db:f7:b2:12:37:e4:7b:4d:c6:28:31:85:03: 46:80:63:23:0f:66:1b:a8:35:bd:e4:2d:62:ea:58: c1:97:c6:c2:b8:3d:3e:bd:70:8c:36:2b:56:e2:b1: b7:e0:df:9a:6e:e5:f8:24:45:d4:2f:da:57:76:26: d4:d9:9e:7b:0e:c4:b2:87:4d:6e:0f:01:27:a1:7e: f8:08:9b:00:4a:17:9d:bd:5a:00:cc:85:ab:69:6f: fc:e8:61:ef:f1:98:f6:cf:af:bf:f2:3f:38:26:3a: 64:6b:38:fc:50:e1:9d:f5:4e:d9:1b:a6:1c:b3:9f: 55:b2:4b:97:a0:dd:61:f3:71:0f:51:b7:f0:fc:36: 0b:6d:7e:a1:73:70:c2:fe:ee:00:58:3c:61:59:74: d3:e2:a4:e1:87:89:ca:e8:8a:60:1e:11:8d:1a:3f: c8:55:64:55:a7:a1:03:d3:2e:1e:41:db:d1:84:0e: 77:4d:46:29:21:d9:58:55:f2:94:02:53:74:4d:60: cb:86:71:4d:57:56:f5:5a:1e:c1:f1:08:df:11:77: 52:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C2:22:D2:C5:99:18:C4:29:41:2A:8E:F8:0B:10:E4:EE:61:31:C8 X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/323430343a393538303a34383a3a2f34382d3438203d3e203234353334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:9580:48::/48 Signature Algorithm: sha256WithRSAEncryption 27:d5:ca:2b:3f:9f:82:68:ed:d8:5a:0e:13:ad:47:04:3e:f1: bc:01:57:a3:cc:01:c1:93:cc:ee:9a:af:31:58:ae:87:86:5f: d7:af:73:39:44:25:35:41:f3:e3:3a:12:0c:5a:48:ef:e7:fe: a6:10:c5:45:d1:4d:28:72:9f:9e:16:9b:cb:60:a7:e0:8f:51: cf:95:b7:8e:ca:ac:1c:11:d1:4b:fe:dd:f0:e3:bb:cf:b3:ef: ff:6b:43:33:de:b3:23:0f:68:e7:47:86:d6:72:90:c3:c3:e1: 4e:15:ee:92:4f:60:b9:3e:82:d6:b5:6e:4c:62:53:54:c0:52: c9:43:26:6f:27:c4:c0:70:35:59:ab:9a:9a:41:9f:2e:6d:4b: fc:73:a3:eb:f6:69:2b:b8:92:c7:c6:1a:c9:d3:a0:3c:06:5d: e7:80:00:90:aa:7e:9d:e8:12:66:66:ed:97:20:c2:f5:8e:30: dc:f2:4b:ac:43:f5:23:58:17:e9:6a:54:2e:30:d8:11:23:aa: db:07:8b:37:76:57:ee:d6:17:e2:df:36:1c:d3:9c:3a:28:4e: 64:13:17:fe:cd:99:e5:3f:59:ef:dc:8a:e6:7a:ff:29:6f:b6: 93:08:c9:6c:7b:68:36:0e:d7:1b:72:e5:40:52:7b:2f:ad:28: e9:59:e5:03 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUKo8mHCrLRiF3JowI1zfNDgeS898wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNTExMDYxMTU1MDBaFw0yNjExMDUxMjAwMDBaMDMxMTAvBgNV BAMTKDExQzIyMkQyQzU5OTE4QzQyOTQxMkE4RUY4MEIxMEU0RUU2MTMxQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU/dcXnQEDbBeFf3qd+Batqhjb pAM9GfRxkGrk5D+MS5EGGVIPl1al7hURSOTM2/eyEjfke03GKDGFA0aAYyMPZhuo Nb3kLWLqWMGXxsK4PT69cIw2K1bisbfg35pu5fgkRdQv2ld2JtTZnnsOxLKHTW4P ASehfvgImwBKF529WgDMhatpb/zoYe/xmPbPr7/yPzgmOmRrOPxQ4Z31Ttkbphyz n1WyS5eg3WHzcQ9Rt/D8NgttfqFzcML+7gBYPGFZdNPipOGHicroimAeEY0aP8hV ZFWnoQPTLh5B29GEDndNRikh2VhV8pQCU3RNYMuGcU1XVvVaHsHxCN8Rd1K1AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUEcIi0sWZGMQpQSqO+AsQ5O5hMcgwHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MjQwNTJlLTIyMDUtNDhmMy1h M2NiLWNlOGIzMjZiOGY3MS8wLzMyMzQzMDM0M2EzOTM1MzgzMDNhMzQzODNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQzNTMzMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBJWAAEgw DQYJKoZIhvcNAQELBQADggEBACfVyis/n4Jo7dhaDhOtRwQ+8bwBV6PMAcGTzO6a rzFYroeGX9evczlEJTVB8+M6EgxaSO/n/qYQxUXRTShyn54Wm8tgp+CPUc+Vt47K rBwR0Uv+3fDju8+z7/9rQzPesyMPaOdHhtZykMPD4U4V7pJPYLk+gta1bkxiU1TA UslDJm8nxMBwNVmrmppBny5tS/xzo+v2aSu4ksfGGsnToDwGXeeAAJCqfp3oEmZm 7ZcgwvWOMNzyS6xD9SNYF+lqVC4w2BEjqtsHizd2V+7WF+LfNhzTnDooTmQTF/7N meU/We/ciuZ6/ylvtpMIyWx7aDYO1xty5UBSey+tKOlZ5QM= -----END CERTIFICATE-----Generated at Sat Dec 6 20:04:12 2025 by rpki-client