This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa File: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (raw, json) Hash identifier: vCfsiCBtIlOugg7uUiCY5W27DPGj57q2k0yd5yu2I5s= Subject key identifier: FF:82:91:73:26:ED:59:95:49:80:21:2A:69:FA:46:D4:29:84:92:BA Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 14386BE84ECA690885DEFB169C3256094E895CC8 Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa Signing time: Sat 22 Nov 2025 11:01:02 +0000 ROA not before: Sat 22 Nov 2025 10:56:02 +0000 ROA not after: Sat 21 Nov 2026 11:01:02 +0000 asID: 152429 IP address blocks: 157.20.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 12:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:38:6b:e8:4e:ca:69:08:85:de:fb:16:9c:32:56:09:4e:89:5c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Nov 22 10:56:02 2025 GMT Not After : Nov 21 11:01:02 2026 GMT Subject: CN=FF82917326ED59954980212A69FA46D4298492BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b1:de:a8:48:f5:fd:29:0b:8e:9f:5f:5c:32: 47:f1:4a:9d:c8:c6:df:a7:10:31:16:02:12:93:fb: 53:3f:f6:53:0f:f2:c0:44:0f:07:85:a7:11:5a:67: dd:59:55:f3:f4:63:53:d7:b8:bb:5b:b6:5e:e7:b0: 4d:77:ba:2d:b2:42:62:85:84:11:4d:6b:aa:05:52: 61:a8:b6:6d:3c:12:19:6b:f0:e8:13:e0:37:58:2b: 5b:14:08:11:25:40:b2:d7:81:89:2d:7c:c8:e8:13: ea:bc:9a:11:e6:3e:a8:4b:5a:a6:13:91:77:45:ae: f7:ad:58:aa:e0:22:67:5b:e0:22:77:a0:77:1b:32: 37:22:71:29:7e:42:e5:d0:1a:dd:70:df:bc:ea:e6: f8:35:93:e8:b3:5d:71:5e:d7:d9:5f:cb:40:43:6d: 86:54:38:33:30:1b:5d:1d:59:56:7f:d1:ca:bd:5b: f3:b0:84:63:c5:43:a3:eb:cc:7c:78:ed:e1:22:12: 95:69:f1:50:49:79:9b:f4:e0:c3:9b:d4:f0:35:70: ab:cb:46:8f:26:d3:9e:9f:69:3b:2d:ff:7a:0a:f2: f1:6d:22:f5:59:cb:ab:31:2a:54:7f:d6:23:72:ec: bc:0c:55:82:10:5a:27:5a:05:81:90:e4:50:ed:0b: 0f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:82:91:73:26:ED:59:95:49:80:21:2A:69:FA:46:D4:29:84:92:BA X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.238.0/23 Signature Algorithm: sha256WithRSAEncryption 74:ef:1b:22:35:c1:af:91:2c:33:21:21:af:b8:93:36:19:ba: c5:a3:70:ab:be:49:97:e5:f9:17:9e:01:cc:c9:1b:81:7c:cb: 3b:42:cc:e3:3f:16:83:af:5a:73:a2:14:9d:ea:97:b2:ca:e5: 8b:e2:ed:18:0c:1f:3b:61:03:ad:c6:81:94:25:d5:3c:a3:6c: 5b:4d:30:b4:22:14:4f:96:c1:3a:ad:77:cd:5c:f1:81:b8:f3: 0b:eb:cc:06:94:19:e9:85:89:b5:ed:21:92:6a:4e:9f:d0:bf: 96:9a:67:51:83:99:50:23:68:0b:1d:d3:78:e6:ee:29:37:a9: 23:2f:e9:d4:2c:81:7f:f7:07:03:e6:52:46:89:2b:8f:bf:ff: b9:d8:f6:21:03:55:1b:40:c3:9e:c6:0f:48:d2:24:e6:c1:28: a1:c1:7a:2a:3d:47:0f:d4:2d:42:17:f7:90:d2:9f:82:a8:c1: 94:8e:a0:b5:09:b2:1e:a1:e9:9c:48:99:5b:84:a7:92:d9:7a: f1:c7:69:5e:24:b0:5f:f1:0b:2a:45:35:5d:3c:ac:23:6d:1d: d1:ea:51:a1:62:d4:87:cc:c7:13:ad:3d:72:e4:88:78:da:29: b4:de:8b:31:82:ef:04:9a:28:35:bc:79:d1:9e:15:8e:09:be: c2:17:32:b2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFDhr6E7KaQiF3vsWnDJWCU6JXMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNTExMjIxMDU2MDJaFw0yNjExMjExMTAxMDJaMDMxMTAvBgNV BAMTKEZGODI5MTczMjZFRDU5OTU0OTgwMjEyQTY5RkE0NkQ0Mjk4NDkyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbsd6oSPX9KQuOn19cMkfxSp3I xt+nEDEWAhKT+1M/9lMP8sBEDweFpxFaZ91ZVfP0Y1PXuLtbtl7nsE13ui2yQmKF hBFNa6oFUmGotm08Ehlr8OgT4DdYK1sUCBElQLLXgYktfMjoE+q8mhHmPqhLWqYT kXdFrvetWKrgImdb4CJ3oHcbMjcicSl+QuXQGt1w37zq5vg1k+izXXFe19lfy0BD bYZUODMwG10dWVZ/0cq9W/OwhGPFQ6PrzHx47eEiEpVp8VBJeZv04MOb1PA1cKvL Ro8m056faTst/3oK8vFtIvVZy6sxKlR/1iNy7LwMVYIQWidaBYGQ5FDtCw/BAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/4KRcybtWZVJgCEqafpG1CmEkrowHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4ZDFjNDQ5LTk3OGMtNDg0NS1i ODIzLWI1OTI1YTkwNTQyNy8wLzMxMzUzNzJlMzIzMDJlMzIzMzM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMyMzQzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnRTuMA0GCSqG SIb3DQEBCwUAA4IBAQB07xsiNcGvkSwzISGvuJM2GbrFo3CrvkmX5fkXngHMyRuB fMs7QszjPxaDr1pzohSd6peyyuWL4u0YDB87YQOtxoGUJdU8o2xbTTC0IhRPlsE6 rXfNXPGBuPML68wGlBnphYm17SGSak6f0L+WmmdRg5lQI2gLHdN45u4pN6kjL+nU LIF/9wcD5lJGiSuPv/+52PYhA1UbQMOexg9I0iTmwSihwXoqPUcP1C1CF/eQ0p+C qMGUjqC1CbIeoemcSJlbhKeS2Xrxx2leJLBf8QsqRTVdPKwjbR3R6lGhYtSHzMcT rT1y5Ih42im03osxgu8Emig1vHnRnhWOCb7CFzKy -----END CERTIFICATE-----Generated at Mon Dec 8 09:22:26 2025 by rpki-client