This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3230303a3a2f34302d3430203d3e203233363739.roa File: 323430313a323930303a3230303a3a2f34302d3430203d3e203233363739.roa (raw, json) Hash identifier: OjbTPDSkld4UjQ8CtjmoAyluMa/CGtl1NKP0bZ6NAtI= Subject key identifier: 81:F9:11:AA:8F:76:08:6F:9C:11:52:04:EB:86:E0:08:98:4B:B9:85 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 180111F698239B9C794FE62DA35A733CD1709708 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3230303a3a2f34302d3430203d3e203233363739.roa Signing time: Thu 04 Dec 2025 01:00:02 +0000 ROA not before: Thu 04 Dec 2025 00:55:02 +0000 ROA not after: Thu 03 Dec 2026 01:00:02 +0000 asID: 23679 IP address blocks: 2401:2900:200::/40 maxlen: 40 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:01:11:f6:98:23:9b:9c:79:4f:e6:2d:a3:5a:73:3c:d1:70:97:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 4 00:55:02 2025 GMT Not After : Dec 3 01:00:02 2026 GMT Subject: CN=81F911AA8F76086F9C115204EB86E008984BB985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:0d:e1:93:6a:64:e5:89:c6:27:62:39:23: 0d:2f:d8:ac:e2:18:cd:9d:1f:76:13:a8:21:42:4a: a9:6b:a0:16:3b:01:51:01:dc:76:fd:4f:96:ca:d9: a2:7f:f5:ff:5a:81:b4:a5:8d:f7:b8:74:1c:c7:04: ba:61:93:52:62:71:c3:c0:b0:d6:b1:9a:54:ce:79: 51:d8:4a:08:32:30:1f:4b:80:d7:d8:c2:82:9b:da: 6f:9d:e8:8b:de:1a:8c:73:0b:fb:1f:0b:46:13:7b: 80:c2:3e:8e:be:9c:25:e0:ac:29:ab:e3:69:90:1a: 41:b6:21:9f:ac:83:43:ee:03:8c:fa:34:55:97:02: 08:0d:f7:e7:2e:e5:c5:f3:8c:6c:95:46:dd:8d:3d: c1:a4:d9:ee:25:5f:55:69:6b:7c:fc:e8:32:6c:af: 3c:2d:48:da:aa:7b:b3:bd:18:32:07:e4:c4:6c:01: 7b:aa:bd:7e:82:f8:09:5e:83:79:72:f3:80:16:a2: 42:a9:39:a6:6b:bc:47:da:ca:a9:65:7b:08:f1:c7: 92:c5:18:f0:3a:4a:c2:cb:1c:8e:70:32:7b:4e:23: a7:33:6b:23:bc:20:e3:c3:13:7a:60:7d:c8:8f:0a: 4a:2b:59:91:40:60:a6:74:12:5e:3f:fd:a2:66:ce: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F9:11:AA:8F:76:08:6F:9C:11:52:04:EB:86:E0:08:98:4B:B9:85 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3230303a3a2f34302d3430203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:200::/40 Signature Algorithm: sha256WithRSAEncryption 1f:fc:ee:7e:fa:59:86:6c:b3:9b:e2:82:a7:f3:ab:dc:7c:e2: 00:e4:82:c9:58:d3:e3:30:ae:ec:78:42:6a:a3:ca:ce:a1:c2: 9d:4a:d4:1b:1e:6a:13:8b:ed:69:30:59:b4:da:99:b9:6a:f6: e0:31:f1:ce:24:9f:f6:fa:b7:d8:81:6c:f1:85:5f:36:b6:a8: 8a:d7:00:42:ec:e9:c2:8a:00:a8:25:d4:68:f3:f7:54:d8:d3: 57:79:5d:e3:ea:2b:14:5a:6a:b8:56:96:4f:6f:cc:30:3e:e6: 4d:d4:e8:3e:1e:6f:28:7a:28:4b:34:7e:70:54:8b:df:3b:9a: 55:0a:59:c5:8e:c3:2f:0a:c7:3c:2b:2d:99:75:d5:b0:57:b9: 9f:d0:15:27:34:5a:73:27:99:4c:6f:8d:d2:19:a5:e5:ba:fb: d9:ba:c3:18:7a:c6:76:d0:83:8e:41:67:13:e2:cc:b0:e5:fb: 52:3e:e6:6b:4b:fc:a8:4d:f0:12:df:68:eb:57:6c:35:05:df: 9a:7e:09:05:0f:00:85:d7:22:4a:18:94:77:99:c2:a4:c5:9e: 7c:91:84:ed:56:82:0e:e7:cd:47:4c:61:52:ce:69:37:a4:80: b7:3b:e1:b0:d7:33:a6:9f:fd:4f:eb:80:10:b2:f0:38:ea:0c: 8d:d9:ec:0d -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUGAER9pgjm5x5T+Yto1pzPNFwlwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMDQwMDU1MDJaFw0yNjEyMDMwMTAwMDJaMDMxMTAvBgNV BAMTKDgxRjkxMUFBOEY3NjA4NkY5QzExNTIwNEVCODZFMDA4OTg0QkI5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yQ3hk2pk5YnGJ2I5Iw0v2Kzi GM2dH3YTqCFCSqlroBY7AVEB3Hb9T5bK2aJ/9f9agbSljfe4dBzHBLphk1JiccPA sNaxmlTOeVHYSggyMB9LgNfYwoKb2m+d6IveGoxzC/sfC0YTe4DCPo6+nCXgrCmr 42mQGkG2IZ+sg0PuA4z6NFWXAggN9+cu5cXzjGyVRt2NPcGk2e4lX1Vpa3z86DJs rzwtSNqqe7O9GDIH5MRsAXuqvX6C+Aleg3ly84AWokKpOaZrvEfayqllewjxx5LF GPA6SsLLHI5wMntOI6czayO8IOPDE3pgfciPCkorWZFAYKZ0El4//aJmzoARAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUgfkRqo92CG+cEVIE64bgCJhLuYUwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzIzMDMwM2Ez YTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACQBKQAC MA0GCSqGSIb3DQEBCwUAA4IBAQAf/O5++lmGbLOb4oKn86vcfOIA5ILJWNPjMK7s eEJqo8rOocKdStQbHmoTi+1pMFm02pm5avbgMfHOJJ/2+rfYgWzxhV82tqiK1wBC 7OnCigCoJdRo8/dU2NNXeV3j6isUWmq4VpZPb8wwPuZN1Og+Hm8oeihLNH5wVIvf O5pVClnFjsMvCsc8Ky2ZddWwV7mf0BUnNFpzJ5lMb43SGaXluvvZusMYesZ20IOO QWcT4syw5ftSPuZrS/yoTfAS32jrV2w1Bd+afgkFDwCF1yJKGJR3mcKkxZ58kYTt VoIO581HTGFSzmk3pIC3O+Gw1zOmn/1P64AQsvA46gyN2ewN -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:44 2025 by rpki-client