This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f33332d3333203d3e203233363739.roa File: 323430313a323930303a383030303a3a2f33332d3333203d3e203233363739.roa (raw, json) Hash identifier: 83njewq1t6hVfLKxf8jlyxgQWDB7WAAUEUElhSI9Cco= Subject key identifier: 6E:53:8B:7D:86:7F:45:5F:6E:09:50:67:B6:7E:1B:42:F7:D5:20:9E Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 31941FFAE18CB99CF8751FCC5A53A3E7E326A966 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f33332d3333203d3e203233363739.roa Signing time: Wed 03 Dec 2025 04:01:47 +0000 ROA not before: Wed 03 Dec 2025 03:56:47 +0000 ROA not after: Wed 02 Dec 2026 04:01:47 +0000 asID: 23679 IP address blocks: 2401:2900:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:94:1f:fa:e1:8c:b9:9c:f8:75:1f:cc:5a:53:a3:e7:e3:26:a9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 3 03:56:47 2025 GMT Not After : Dec 2 04:01:47 2026 GMT Subject: CN=6E538B7D867F455F6E095067B67E1B42F7D5209E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5c:cf:0d:4a:ed:1f:31:04:eb:b4:d5:b7:70: 74:13:11:9c:a3:4a:11:4f:be:4d:a2:f2:59:98:b7: 35:3e:6f:d1:59:ae:3b:1b:1a:31:e2:0e:31:b1:fa: 2c:cd:4b:0e:03:cd:64:0d:20:4c:91:ba:23:24:f6: 62:bc:08:d9:30:bf:92:53:27:cd:b7:50:29:b1:ed: 1e:c7:c3:79:d0:51:3b:80:b1:33:d2:a8:cf:06:f3: bf:fe:23:5c:f9:92:02:b1:e9:71:a5:cb:8a:4a:ae: 78:58:59:14:54:52:e9:06:de:08:37:ee:bd:24:30: c3:09:66:31:0c:b0:0e:50:ff:e5:14:53:b9:9f:83: ff:66:b4:31:25:a1:45:c0:cf:27:35:3b:20:dc:b2: 1a:f5:bf:c3:d8:16:93:c8:04:51:90:5b:26:9d:6b: 5a:69:75:27:7f:0f:31:59:8f:1e:6a:c5:30:63:9f: ca:7b:2c:4d:a4:4b:a0:aa:b8:9a:e3:92:46:59:8f: d4:b8:23:6a:5a:09:42:6e:53:90:9e:b9:f7:5f:57: 15:63:ba:cc:97:3d:5f:74:8f:b4:fd:1e:2b:06:71: 4f:1d:45:33:02:25:a4:fd:b7:69:61:4d:85:8e:aa: f8:e9:32:ba:ed:19:38:83:2d:f3:69:0b:a7:3e:c4: 45:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:53:8B:7D:86:7F:45:5F:6E:09:50:67:B6:7E:1B:42:F7:D5:20:9E X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f33332d3333203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8000::/33 Signature Algorithm: sha256WithRSAEncryption 87:8c:f3:d4:de:fc:0c:1c:28:22:aa:38:4c:66:57:dc:93:81: dd:0f:2c:36:17:82:93:b8:6f:34:a7:9e:b6:8c:d7:49:31:71: e0:43:c0:e7:3a:f0:1b:4d:1d:5c:f7:74:85:9f:45:6e:a8:e0: 31:ba:ee:6d:89:98:0a:99:d9:de:60:3c:90:38:fa:7f:43:8d: 8f:53:eb:07:30:a0:a2:7c:cb:25:10:ca:3f:4b:05:e7:06:39: 3c:61:8c:35:9b:84:a0:5e:fe:78:95:9a:c1:5d:19:86:22:49: 79:c6:53:10:e0:6a:5b:6e:0c:6c:10:77:dd:b7:e2:01:a9:f5: 3a:33:7d:1f:6c:e5:b5:9e:5d:50:06:be:c5:30:e8:28:a8:0a: 36:b2:1c:75:88:c3:eb:50:ca:8c:01:78:60:7a:dd:91:f4:98: b3:50:59:af:92:8e:7b:a3:63:9b:ab:54:a9:41:20:af:2d:8e: 05:39:81:e2:6b:c8:bf:44:62:0a:53:9d:45:c6:5c:e9:02:76: 9a:0a:f1:2e:32:bb:b8:bb:b2:09:79:6f:02:d9:52:ff:8e:e0: 5e:b5:e7:b1:1f:aa:8b:5c:b1:fe:54:ec:68:82:dd:01:a8:4b: 90:97:46:90:ea:cf:8e:b3:14:00:19:99:6f:53:11:70:af:00: 2e:3f:91:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZQf+uGMuZz4dR/MWlOj5+MmqWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMDMwMzU2NDdaFw0yNjEyMDIwNDAxNDdaMDMxMTAvBgNV BAMTKDZFNTM4QjdEODY3RjQ1NUY2RTA5NTA2N0I2N0UxQjQyRjdENTIwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSXM8NSu0fMQTrtNW3cHQTEZyj ShFPvk2i8lmYtzU+b9FZrjsbGjHiDjGx+izNSw4DzWQNIEyRuiMk9mK8CNkwv5JT J823UCmx7R7Hw3nQUTuAsTPSqM8G87/+I1z5kgKx6XGly4pKrnhYWRRUUukG3gg3 7r0kMMMJZjEMsA5Q/+UUU7mfg/9mtDEloUXAzyc1OyDcshr1v8PYFpPIBFGQWyad a1ppdSd/DzFZjx5qxTBjn8p7LE2kS6CquJrjkkZZj9S4I2paCUJuU5CeufdfVxVj usyXPV90j7T9HisGcU8dRTMCJaT9t2lhTYWOqvjpMrrtGTiDLfNpC6c+xEWHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUblOLfYZ/RV9uCVBntn4bQvfVIJ4wHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzAz YTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHJAEp AIAwDQYJKoZIhvcNAQELBQADggEBAIeM89Te/AwcKCKqOExmV9yTgd0PLDYXgpO4 bzSnnraM10kxceBDwOc68BtNHVz3dIWfRW6o4DG67m2JmAqZ2d5gPJA4+n9DjY9T 6wcwoKJ8yyUQyj9LBecGOTxhjDWbhKBe/niVmsFdGYYiSXnGUxDgaltuDGwQd923 4gGp9TozfR9s5bWeXVAGvsUw6CioCjayHHWIw+tQyowBeGB63ZH0mLNQWa+Sjnuj Y5urVKlBIK8tjgU5geJryL9EYgpTnUXGXOkCdpoK8S4yu7i7sgl5bwLZUv+O4F61 57Efqotcsf5U7GiC3QGoS5CXRpDqz46zFAAZmW9TEXCvAC4/kbI= -----END CERTIFICATE-----Generated at Sat Dec 6 21:17:16 2025 by rpki-client