This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f33342d3334203d3e203233363739.roa File: 323430313a323930303a383030303a3a2f33342d3334203d3e203233363739.roa (raw, json) Hash identifier: F4LwZxcv1p42ooV8Ues2Ijstpo0FHxvB/U1NIU7mQ24= Subject key identifier: 04:65:0C:67:FD:C0:C6:9B:86:C2:21:F3:05:2E:73:E5:92:79:A7:60 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 2BFED51BDA9706F477A2AC4112D29300190AD7C4 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f33342d3334203d3e203233363739.roa Signing time: Wed 03 Dec 2025 04:01:47 +0000 ROA not before: Wed 03 Dec 2025 03:56:47 +0000 ROA not after: Wed 02 Dec 2026 04:01:47 +0000 asID: 23679 IP address blocks: 2401:2900:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:fe:d5:1b:da:97:06:f4:77:a2:ac:41:12:d2:93:00:19:0a:d7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 3 03:56:47 2025 GMT Not After : Dec 2 04:01:47 2026 GMT Subject: CN=04650C67FDC0C69B86C221F3052E73E59279A760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:e1:be:07:45:d9:fa:94:1d:2d:4d:c5:62: bc:5b:2f:88:39:cc:ce:49:35:e8:34:05:79:d3:a3: ca:92:96:9f:17:5d:cd:dc:5f:2a:f5:72:b6:59:00: e1:50:f5:66:31:c2:b1:d5:9b:b7:18:ba:a6:0c:85: 6b:f0:dc:fd:f0:db:08:50:cb:1d:36:87:ce:3a:b7: 41:a4:75:e5:6a:4d:ae:90:47:bf:8a:41:6c:5b:f4: f4:61:ec:c0:3a:2a:55:c1:18:ab:cb:85:77:ad:64: ba:00:a0:57:42:39:cf:0e:ca:70:fb:70:20:97:4e: a9:e9:0d:4a:78:01:cd:16:81:74:ba:62:72:13:05: cc:0f:97:7c:0b:58:1a:6a:0f:41:ef:05:34:5f:35: 05:78:25:d2:93:69:f5:49:5f:af:cf:28:f0:6d:d4: 2c:e4:30:bd:c0:e2:76:9b:b9:6d:c8:f2:75:e0:50: 40:c0:e3:55:7b:f1:6b:78:2f:c4:7f:cc:3d:01:ca: 7b:75:4d:9d:21:57:bd:ee:83:ca:82:8f:42:f8:ae: b8:7f:e7:95:78:c2:dd:8a:ce:ea:d5:ee:d2:ee:c8: fe:25:0b:89:cf:33:63:39:12:08:21:ed:5a:9d:77: e0:f5:ff:25:e6:a5:68:82:a0:dd:1b:6f:6f:a4:82: c5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:65:0C:67:FD:C0:C6:9B:86:C2:21:F3:05:2E:73:E5:92:79:A7:60 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f33342d3334203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8000::/34 Signature Algorithm: sha256WithRSAEncryption d5:39:4c:36:55:a4:a3:4f:f6:6c:68:b9:4d:15:02:4b:73:e1: 67:45:f2:2e:d2:0e:d9:3b:30:91:a2:b2:76:26:70:05:8c:30: bc:7f:22:2c:66:7b:70:92:25:7d:c7:8f:4e:63:9e:1e:3f:92: b5:66:c4:83:50:a8:18:d1:88:d0:68:b2:a7:cc:17:d4:0d:52: 0a:5c:c1:08:d1:97:3e:e8:32:bf:f6:34:62:93:43:66:d8:80: 1d:a4:a1:b9:f9:a2:2b:e2:65:20:0d:d8:f7:4e:99:b0:56:ca: 99:c8:2e:28:2a:9c:99:82:5e:8a:ed:17:e7:ee:16:e7:af:12: 59:39:2b:9b:78:75:f0:2e:61:9c:74:d6:6d:fe:6f:17:09:d2: 49:3f:e5:90:6f:e2:18:fb:6a:c4:8e:f6:70:96:7d:77:77:d2: 89:86:74:0e:46:d5:33:76:7e:fe:24:88:96:39:70:9f:a9:45: a7:f9:61:fa:cb:56:d0:43:cf:7c:91:bd:25:24:2d:3f:43:dd: 14:5a:b0:95:27:12:93:ba:c9:2b:04:e5:1b:4b:a2:e3:ad:71: b7:9d:04:1c:7b:6a:05:6e:74:0c:61:9f:98:3d:3c:01:f7:af: 3a:31:a9:e5:bd:cd:b7:28:47:6f:56:b0:fb:4b:83:31:31:f5: 64:ff:01:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/7VG9qXBvR3oqxBEtKTABkK18QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMDMwMzU2NDdaFw0yNjEyMDIwNDAxNDdaMDMxMTAvBgNV BAMTKDA0NjUwQzY3RkRDMEM2OUI4NkMyMjFGMzA1MkU3M0U1OTI3OUE3NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUeG+B0XZ+pQdLU3FYrxbL4g5 zM5JNeg0BXnTo8qSlp8XXc3cXyr1crZZAOFQ9WYxwrHVm7cYuqYMhWvw3P3w2whQ yx02h846t0GkdeVqTa6QR7+KQWxb9PRh7MA6KlXBGKvLhXetZLoAoFdCOc8OynD7 cCCXTqnpDUp4Ac0WgXS6YnITBcwPl3wLWBpqD0HvBTRfNQV4JdKTafVJX6/PKPBt 1CzkML3A4nabuW3I8nXgUEDA41V78Wt4L8R/zD0Bynt1TZ0hV73ug8qCj0L4rrh/ 55V4wt2KzurV7tLuyP4lC4nPM2M5Eggh7Vqdd+D1/yXmpWiCoN0bb2+kgsWhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBGUMZ/3AxpuGwiHzBS5z5ZJ5p2AwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzAz YTNhMmYzMzM0MmQzMzM0MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJAEp AIAwDQYJKoZIhvcNAQELBQADggEBANU5TDZVpKNP9mxouU0VAktz4WdF8i7SDtk7 MJGisnYmcAWMMLx/Iixme3CSJX3Hj05jnh4/krVmxINQqBjRiNBosqfMF9QNUgpc wQjRlz7oMr/2NGKTQ2bYgB2kobn5oiviZSAN2PdOmbBWypnILigqnJmCXortF+fu FuevElk5K5t4dfAuYZx01m3+bxcJ0kk/5ZBv4hj7asSO9nCWfXd30omGdA5G1TN2 fv4kiJY5cJ+pRaf5YfrLVtBDz3yRvSUkLT9D3RRasJUnEpO6ySsE5RtLouOtcbed BBx7agVudAxhn5g9PAH3rzoxqeW9zbcoR29WsPtLgzEx9WT/AXw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:46 2025 by rpki-client