This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa File: 323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa (raw, json) Hash identifier: jSEbOeozzsEZCSdGeWqpOPWmprMivxkyWYoadrFyhRg= Subject key identifier: 37:8E:98:5D:44:91:DE:F4:DF:E5:0F:06:2F:45:76:A1:F0:55:79:CD Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 05DBA1EB56D6626155151E38A069D085A5CB2F3F Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa Signing time: Thu 11 Dec 2025 22:12:35 +0000 ROA not before: Thu 11 Dec 2025 22:07:35 +0000 ROA not after: Thu 10 Dec 2026 22:12:35 +0000 asID: 140423 IP address blocks: 2001:df3:e5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 17:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:db:a1:eb:56:d6:62:61:55:15:1e:38:a0:69:d0:85:a5:cb:2f:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Dec 11 22:07:35 2025 GMT Not After : Dec 10 22:12:35 2026 GMT Subject: CN=378E985D4491DEF4DFE50F062F4576A1F05579CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:5f:82:bd:14:86:32:7d:0a:3c:25:21:c5: b7:94:13:94:35:1f:d2:d6:80:d7:2f:95:19:2b:33: 5c:f7:4e:e7:5c:37:69:b9:9a:d3:f8:91:2a:7a:98: 1f:bd:d3:70:ad:c7:b4:3b:79:57:52:a9:a2:5e:8e: 7f:29:4a:44:d0:25:27:78:4c:75:42:b9:7f:76:84: ad:9c:d3:a7:51:e4:ac:64:3b:33:83:ba:d6:fa:33: 4c:48:62:4e:21:51:8b:f3:2b:7a:1b:f3:47:17:81: 7b:df:a4:ca:d2:e7:cc:87:be:b3:0e:1a:61:cb:83: 00:98:2b:db:9a:0a:9e:e3:5f:ce:be:10:e0:4f:31: 5e:c8:59:61:0d:c4:68:1f:3a:1a:a3:d3:28:aa:d8: 6d:a5:cc:c8:28:b1:fb:f8:da:00:bb:e2:dd:9d:ca: a5:4f:2d:7f:2f:85:5e:29:fa:5f:43:3b:8e:e3:ac: 19:64:8c:46:59:c0:a7:fc:a2:3c:8e:b4:2b:8b:ba: 1c:ff:12:93:e9:ac:46:a1:da:e6:46:7e:a5:f5:0e: 65:7d:13:9d:db:8f:f5:e9:6d:fd:cc:68:5a:81:5c: 0c:c1:ab:99:e6:5e:e5:50:e0:01:6a:ab:31:3b:bb: 5e:fd:df:05:44:d7:85:3a:40:4f:93:e0:fe:e3:f1: fd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8E:98:5D:44:91:DE:F4:DF:E5:0F:06:2F:45:76:A1:F0:55:79:CD X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/323030313a6466333a653563303a3a2f34382d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:e5c0::/48 Signature Algorithm: sha256WithRSAEncryption a3:f0:c5:d3:40:b2:aa:e4:f1:b3:a8:22:32:66:1a:bf:fb:42: af:96:39:66:be:7f:f0:b8:fd:1a:36:ad:61:b4:af:31:b4:aa: ad:a4:a8:16:9b:90:12:76:0e:d8:48:52:9e:92:5d:3a:cf:a4: 1a:4c:60:20:f2:53:39:3c:a2:02:bd:81:c7:8f:85:a9:8e:1d: 67:81:48:61:86:a9:d6:ee:2b:64:f1:2a:f3:8c:d6:ad:eb:11: 96:7c:34:11:30:69:88:8e:c7:b9:52:6b:9e:5c:b7:33:d7:d6: 75:d3:49:82:46:60:f3:db:4a:33:43:9e:84:92:be:8e:c1:aa: 6b:dd:ac:0c:94:85:60:1e:51:5d:2c:f6:aa:cc:bd:e8:cd:89: a3:89:ae:b1:31:9c:24:b4:f8:6e:61:f1:e8:61:0f:e5:4a:df: fc:20:8c:50:2a:86:e9:90:ff:25:b8:11:f6:0a:85:a7:c8:37: ea:21:8b:64:0d:1a:8b:be:22:dc:1b:25:59:aa:8b:5c:67:30: 2a:bb:f4:89:06:d5:b1:1e:fb:98:fd:52:fa:ff:66:96:0d:b3: e7:1c:68:79:b4:c8:5a:3b:e5:5a:1c:4f:bf:28:9c:0f:c0:8a: e7:77:c7:ba:fb:17:be:f0:a0:6f:d4:21:5b:ec:14:6e:80:07: b1:a4:77:aa -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUBduh61bWYmFVFR44oGnQhaXLLz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNTEyMTEyMjA3MzVaFw0yNjEyMTAyMjEyMzVaMDMxMTAvBgNV BAMTKDM3OEU5ODVENDQ5MURFRjRERkU1MEYwNjJGNDU3NkExRjA1NTc5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoOF+CvRSGMn0KPCUhxbeUE5Q1 H9LWgNcvlRkrM1z3TudcN2m5mtP4kSp6mB+903Ctx7Q7eVdSqaJejn8pSkTQJSd4 THVCuX92hK2c06dR5KxkOzODutb6M0xIYk4hUYvzK3ob80cXgXvfpMrS58yHvrMO GmHLgwCYK9uaCp7jX86+EOBPMV7IWWENxGgfOhqj0yiq2G2lzMgosfv42gC74t2d yqVPLX8vhV4p+l9DO47jrBlkjEZZwKf8ojyOtCuLuhz/EpPprEah2uZGfqX1DmV9 E53bj/Xpbf3MaFqBXAzBq5nmXuVQ4AFqqzE7u1793wVE14U6QE+T4P7j8f2/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUN46YXUSR3vTf5Q8GL0V2ofBVec0wHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlYzY3N2ZkLWQ1NjktNGNjNS1h NTYzLTliMGYyNDhiMWFmMS8xLzMyMzAzMDMxM2E2NDY2MzMzYTY1MzU2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMwMzQzMjMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8+XAMA0GCSqGSIb3DQEBCwUAA4IBAQCj8MXTQLKq5PGzqCIyZhq/+0Kvljlmvn/w uP0aNq1htK8xtKqtpKgWm5ASdg7YSFKekl06z6QaTGAg8lM5PKICvYHHj4Wpjh1n gUhhhqnW7itk8SrzjNat6xGWfDQRMGmIjse5UmueXLcz19Z100mCRmDz20ozQ56E kr6Owapr3awMlIVgHlFdLPaqzL3ozYmjia6xMZwktPhuYfHoYQ/lSt/8IIxQKobp kP8luBH2CoWnyDfqIYtkDRqLviLcGyVZqotcZzAqu/SJBtWxHvuY/VL6/2aWDbPn HGh5tMhaO+VaHE+/KJwPwIrnd8e6+xe+8KBv1CFb7BRugAexpHeq -----END CERTIFICATE-----Generated at Tue Dec 16 06:38:40 2025 by rpki-client