This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a336630303a3a2f34302d3430203d3e203233363739.roa File: 323430313a323930303a336630303a3a2f34302d3430203d3e203233363739.roa (raw, json) Hash identifier: BNkSIB8mZ+l0xOyr4bAvl+jXjAkxdMVwaQRK66lD5wA= Subject key identifier: 97:05:03:8B:9C:CE:45:AF:BE:A7:6F:70:FF:94:C2:2F:F0:DD:3C:A8 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 5ED60D849AF7011C007AEF5E052CBAE75E6B924A Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a336630303a3a2f34302d3430203d3e203233363739.roa Signing time: Wed 03 Dec 2025 04:01:46 +0000 ROA not before: Wed 03 Dec 2025 03:56:46 +0000 ROA not after: Wed 02 Dec 2026 04:01:46 +0000 asID: 23679 IP address blocks: 2401:2900:3f00::/40 maxlen: 40 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d6:0d:84:9a:f7:01:1c:00:7a:ef:5e:05:2c:ba:e7:5e:6b:92:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 3 03:56:46 2025 GMT Not After : Dec 2 04:01:46 2026 GMT Subject: CN=9705038B9CCE45AFBEA76F70FF94C22FF0DD3CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a0:58:7a:4b:92:6e:c4:e3:6b:4a:33:24:d7: a2:29:3a:34:77:1a:2f:92:6f:77:0b:7c:5a:5c:b1: d2:e7:7d:9e:ca:18:87:be:08:f2:87:7b:6d:f0:07: c1:41:d8:e7:f8:1c:aa:10:fe:8a:6a:e0:c2:e4:b9: 0b:89:cc:5f:4d:aa:4f:80:68:13:f6:53:97:15:35: 75:83:2c:9d:c3:80:06:da:11:3b:2f:57:72:37:3a: 3c:9a:b1:fb:2f:8e:00:1f:ae:5c:a2:60:0a:67:4f: 95:d2:d9:fb:fc:e6:4e:53:3e:fb:e9:d6:1a:90:8f: 28:92:01:82:61:0d:58:66:b0:23:78:7e:7b:62:cc: 83:8a:ef:8b:ac:0b:85:cd:a6:34:b8:7f:37:80:c1: 7a:b8:ad:9d:f6:c2:1e:bf:7a:ab:f7:5b:d1:f4:a4: c0:ef:3f:fe:6d:30:34:43:6f:e9:3c:58:95:e8:1c: d5:72:e2:b2:d4:bd:b8:9b:fd:d5:2f:a8:aa:ff:19: f0:ea:43:37:a6:6a:06:15:cc:e7:a0:fb:8d:81:f0: 57:6d:42:61:a8:32:7b:bd:c5:fc:e5:d7:d1:8e:9c: 3a:f9:e3:75:24:33:3e:c8:68:55:a3:bb:0c:1f:e9: a8:08:4b:5e:40:a4:42:a4:b8:3b:9b:68:6d:dc:ce: df:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:05:03:8B:9C:CE:45:AF:BE:A7:6F:70:FF:94:C2:2F:F0:DD:3C:A8 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a336630303a3a2f34302d3430203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:3f00::/40 Signature Algorithm: sha256WithRSAEncryption 48:4d:c9:9c:91:a2:14:f7:85:5e:a1:c7:3e:e9:6d:d1:d9:09: f7:17:47:0e:58:f4:7f:37:51:50:55:4e:1a:66:f9:8e:c6:cd: 00:d4:0a:f7:1a:65:7e:4c:ac:bf:a1:d6:99:37:cb:81:8f:47: 00:bf:d1:47:e5:ac:16:de:16:b5:e3:dd:f9:1c:60:f3:17:a4: 50:9e:d6:7d:ba:0b:2e:9d:28:98:b8:b7:6a:97:59:53:79:ae: ed:a8:4b:16:e1:a5:2b:a7:81:58:5a:80:5a:fe:6e:d1:c4:79: ab:f2:19:e8:57:c5:2d:78:72:e8:b9:c6:c5:25:28:f3:32:ef: 1c:39:6b:5f:fd:7b:99:34:83:16:e4:36:b0:81:30:cc:18:a8: ae:60:d4:34:2c:77:8d:f9:0c:7d:75:b7:78:5b:3e:db:29:34: 60:a0:8c:40:73:f9:ed:a6:21:da:29:eb:3d:e4:26:8f:d1:e0: d0:36:cc:3f:f0:00:f9:bb:c8:4f:d9:a1:3e:91:51:45:ee:a9: 7f:c9:a2:cb:2e:8f:80:a3:01:90:90:82:f1:69:99:ea:f5:07: a1:56:fa:2e:1c:ba:ef:d8:13:00:bc:2c:37:52:01:cd:e9:90: 85:ac:cd:57:fc:76:24:7b:39:f2:f7:6e:a2:db:6b:34:e5:8f: 77:9d:d9:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXtYNhJr3ARwAeu9eBSy6515rkkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMDMwMzU2NDZaFw0yNjEyMDIwNDAxNDZaMDMxMTAvBgNV BAMTKDk3MDUwMzhCOUNDRTQ1QUZCRUE3NkY3MEZGOTRDMjJGRjBERDNDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnoFh6S5JuxONrSjMk16IpOjR3 Gi+Sb3cLfFpcsdLnfZ7KGIe+CPKHe23wB8FB2Of4HKoQ/opq4MLkuQuJzF9Nqk+A aBP2U5cVNXWDLJ3DgAbaETsvV3I3OjyasfsvjgAfrlyiYApnT5XS2fv85k5TPvvp 1hqQjyiSAYJhDVhmsCN4fntizIOK74usC4XNpjS4fzeAwXq4rZ32wh6/eqv3W9H0 pMDvP/5tMDRDb+k8WJXoHNVy4rLUvbib/dUvqKr/GfDqQzemagYVzOeg+42B8Fdt QmGoMnu9xfzl19GOnDr543UkMz7IaFWjuwwf6agIS15ApEKkuDubaG3czt+BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlwUDi5zORa++p29w/5TCL/DdPKgwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzM2NjMwMzAz YTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAEp AD8wDQYJKoZIhvcNAQELBQADggEBAEhNyZyRohT3hV6hxz7pbdHZCfcXRw5Y9H83 UVBVThpm+Y7GzQDUCvcaZX5MrL+h1pk3y4GPRwC/0UflrBbeFrXj3fkcYPMXpFCe 1n26Cy6dKJi4t2qXWVN5ru2oSxbhpSungVhagFr+btHEeavyGehXxS14cui5xsUl KPMy7xw5a1/9e5k0gxbkNrCBMMwYqK5g1DQsd435DH11t3hbPtspNGCgjEBz+e2m Idop6z3kJo/R4NA2zD/wAPm7yE/ZoT6RUUXuqX/Jossuj4CjAZCQgvFpmer1B6FW +i4cuu/YEwC8LDdSAc3pkIWszVf8diR7OfL3bqLbazTlj3ed2VU= -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:45 2025 by rpki-client