This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a336630303a3a2f34382d3438203d3e203233363739.roa File: 323430313a323930303a336630303a3a2f34382d3438203d3e203233363739.roa (raw, json) Hash identifier: MubXjgJnHsTj2S1bO1Vqt7rp720Qrj9peyZ7MyHT9qA= Subject key identifier: 95:8E:F4:1B:08:15:F3:17:4D:7F:BA:6E:FA:CC:A0:06:6C:69:D1:8D Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 3449C7D9D8CF69454EAE44B5A2C372F269119347 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a336630303a3a2f34382d3438203d3e203233363739.roa Signing time: Wed 03 Dec 2025 04:01:48 +0000 ROA not before: Wed 03 Dec 2025 03:56:48 +0000 ROA not after: Wed 02 Dec 2026 04:01:48 +0000 asID: 23679 IP address blocks: 2401:2900:3f00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:49:c7:d9:d8:cf:69:45:4e:ae:44:b5:a2:c3:72:f2:69:11:93:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 3 03:56:48 2025 GMT Not After : Dec 2 04:01:48 2026 GMT Subject: CN=958EF41B0815F3174D7FBA6EFACCA0066C69D18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:41:18:3b:5c:b6:ce:46:9d:e3:ac:60:5b: 52:39:0d:e0:05:f9:57:ed:4b:ba:01:0f:b5:a9:73: b5:c5:28:74:d6:57:f6:b7:71:dc:84:3d:7a:1c:27: c0:13:ed:d0:9c:b8:ed:ac:4c:6b:c9:e6:b1:7b:6f: 33:df:17:f8:a0:d6:0d:0d:b9:6f:42:d2:2b:f6:98: 01:eb:3d:da:a8:80:f6:e2:a9:d4:7f:79:4a:88:38: 44:8e:0e:fc:a0:57:f9:d9:8c:b1:f0:40:28:18:73: 76:78:01:a5:61:96:75:16:38:ae:fb:d8:e2:db:09: 28:4b:a9:cb:a5:12:7c:38:2f:44:b2:68:cc:e9:e2: 63:be:7d:75:68:29:6f:af:7e:4e:1f:81:7c:f6:7b: 0b:45:28:49:28:0d:fb:da:da:37:38:77:00:06:ec: 1c:6e:36:d1:a2:88:87:c0:27:b0:df:1e:48:98:fb: 24:6d:9a:59:50:80:74:70:8a:28:3b:7c:27:3b:ae: f3:c4:69:bb:1c:8c:15:7c:6d:7d:dd:b2:c5:b8:4b: f6:71:fc:46:04:a7:c8:12:d8:1a:6d:65:33:2f:5c: 71:e3:1d:84:41:bb:d3:0a:c5:b5:8c:fb:df:ec:23: 58:e1:b2:0d:c0:dc:6b:a4:ba:a0:98:dc:9a:cd:9b: 70:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8E:F4:1B:08:15:F3:17:4D:7F:BA:6E:FA:CC:A0:06:6C:69:D1:8D X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a336630303a3a2f34382d3438203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:3f00::/48 Signature Algorithm: sha256WithRSAEncryption 18:93:bb:c7:51:37:1b:36:dc:a8:4e:9b:00:05:b0:25:2f:8e: 6b:23:2b:17:b7:e0:58:02:cf:e6:ca:d6:43:05:ba:40:83:59: 56:4f:d9:31:93:9a:ca:50:90:20:f2:7f:77:c9:ae:d9:9d:ce: 07:ee:fc:2e:e4:6b:26:14:96:7b:af:00:80:0b:43:9e:78:c5: 19:60:ed:7e:ff:00:b9:81:e6:76:74:04:ba:60:6f:aa:17:6b: 50:d2:44:a6:43:a8:9f:65:dc:cc:8d:0d:a6:e2:0e:fa:c3:44: 0e:42:ed:15:aa:19:e6:87:ea:ff:12:57:08:f5:60:a6:b4:8c: 67:c3:33:54:dc:19:64:17:2c:d2:59:05:6c:57:66:8e:4c:0c: 8b:da:0c:0e:d9:85:7b:bc:4b:47:c8:17:5a:9d:f7:71:c9:b9: a6:4b:24:c0:e2:22:16:b8:1a:09:c6:f3:5f:0f:c9:16:e1:4c: c7:48:90:ea:bc:dd:fa:ce:3c:05:cc:d5:a7:df:f1:42:6b:9d: 4a:3f:0b:8b:ea:c3:1b:be:a7:e4:d6:1b:35:c5:c2:15:75:53: 1f:4a:d8:e4:f0:2f:37:df:33:be:76:de:f3:77:0d:fa:52:30: f2:85:56:28:cd:66:e5:92:d5:d6:37:12:ff:26:21:7f:4c:0a: 36:9a:55:ca -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUNEnH2djPaUVOrkS1osNy8mkRk0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMDMwMzU2NDhaFw0yNjEyMDIwNDAxNDhaMDMxMTAvBgNV BAMTKDk1OEVGNDFCMDgxNUYzMTc0RDdGQkE2RUZBQ0NBMDA2NkM2OUQxOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuAkEYO1y2zkad46xgW1I5DeAF +VftS7oBD7Wpc7XFKHTWV/a3cdyEPXocJ8AT7dCcuO2sTGvJ5rF7bzPfF/ig1g0N uW9C0iv2mAHrPdqogPbiqdR/eUqIOESODvygV/nZjLHwQCgYc3Z4AaVhlnUWOK77 2OLbCShLqculEnw4L0SyaMzp4mO+fXVoKW+vfk4fgXz2ewtFKEkoDfva2jc4dwAG 7BxuNtGiiIfAJ7DfHkiY+yRtmllQgHRwiig7fCc7rvPEabscjBV8bX3dssW4S/Zx /EYEp8gS2BptZTMvXHHjHYRBu9MKxbWM+9/sI1jhsg3A3GukuqCY3JrNm3BbAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUlY70GwgV8xdNf7pu+sygBmxp0Y0wHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzM2NjMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEp AD8AMA0GCSqGSIb3DQEBCwUAA4IBAQAYk7vHUTcbNtyoTpsABbAlL45rIysXt+BY As/mytZDBbpAg1lWT9kxk5rKUJAg8n93ya7Znc4H7vwu5GsmFJZ7rwCAC0OeeMUZ YO1+/wC5geZ2dAS6YG+qF2tQ0kSmQ6ifZdzMjQ2m4g76w0QOQu0Vqhnmh+r/ElcI 9WCmtIxnwzNU3BlkFyzSWQVsV2aOTAyL2gwO2YV7vEtHyBdanfdxybmmSyTA4iIW uBoJxvNfD8kW4UzHSJDqvN36zjwFzNWn3/FCa51KPwuL6sMbvqfk1hs1xcIVdVMf Stjk8C833zO+dt7zdw36UjDyhVYozWblktXWNxL/JiF/TAo2mlXK -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:42 2025 by rpki-client