This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f34382d3438203d3e203233363739.roa File: 323430313a323930303a383030303a3a2f34382d3438203d3e203233363739.roa (raw, json) Hash identifier: dpRcCIscfiUzWKLvgbzAXV+sjmyndgH7LvuHIFuXxbA= Subject key identifier: 2F:A7:14:35:A7:0E:DA:7B:F9:22:D9:4C:C0:EA:B3:6A:E1:E3:43:69 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 352E23950B603F83F83D3AEB5E6535314B6D0C5B Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f34382d3438203d3e203233363739.roa Signing time: Wed 03 Dec 2025 04:01:48 +0000 ROA not before: Wed 03 Dec 2025 03:56:48 +0000 ROA not after: Wed 02 Dec 2026 04:01:48 +0000 asID: 23679 IP address blocks: 2401:2900:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2e:23:95:0b:60:3f:83:f8:3d:3a:eb:5e:65:35:31:4b:6d:0c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 3 03:56:48 2025 GMT Not After : Dec 2 04:01:48 2026 GMT Subject: CN=2FA71435A70EDA7BF922D94CC0EAB36AE1E34369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:60:1b:30:bc:80:ec:e7:d0:b5:60:9b:b4:28: dc:b7:63:1f:19:2d:db:da:28:c3:f0:a3:32:9b:b6: 56:1e:89:71:5e:2f:4f:2f:e0:21:00:29:1e:50:2d: a1:93:6c:4b:ae:74:9e:69:c3:5b:94:f8:fa:f7:2a: bb:b9:69:e5:9e:2d:f3:6f:fd:86:31:47:d8:55:76: cc:4e:2b:28:2b:7b:b0:08:7f:be:17:91:3d:56:4c: ec:9b:1c:32:04:ff:8f:2a:45:15:4f:1b:3f:ed:86: 8c:95:1f:f2:11:e9:af:2a:be:fb:a1:88:cd:2d:4a: 84:2e:25:75:d2:4a:1e:ac:4e:7a:81:76:ae:31:9d: 81:73:a4:e8:07:64:38:41:c0:07:5c:35:54:25:c1: ec:f1:9d:29:80:07:62:64:9f:17:23:b6:48:2d:73: 3d:a7:82:d0:d8:14:f2:13:d8:3a:f7:4b:fa:06:23: d9:db:10:d2:3a:b5:0f:c4:ce:0d:22:4f:da:f1:fd: da:e1:ff:21:7c:bd:9e:ef:69:e7:9a:ee:7d:25:e7: d8:92:89:e2:b7:9b:d9:5b:a7:fc:89:2c:4b:61:e3: b8:ad:a3:8f:0e:6e:5d:ba:c2:28:a6:4c:4b:74:43: b5:eb:ac:28:b2:04:c4:c7:b0:e1:bd:ec:b5:ac:21: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A7:14:35:A7:0E:DA:7B:F9:22:D9:4C:C0:EA:B3:6A:E1:E3:43:69 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030303a3a2f34382d3438203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8000::/48 Signature Algorithm: sha256WithRSAEncryption 77:9c:57:76:eb:ff:5b:6a:fa:f2:99:21:e4:1e:5b:94:c8:ce: b2:f0:b6:7d:7b:4e:03:48:2d:f8:d2:67:5d:29:fd:db:04:17: ce:e6:14:ca:d0:0b:c0:e0:3b:43:ed:30:d3:96:f3:af:92:76: 2b:f4:0b:69:b5:b8:e5:d6:dc:c2:d9:9d:e4:ee:df:27:e2:14: cf:51:16:fb:fd:c4:40:44:39:ab:ea:c1:cc:51:bc:e2:77:a9: 15:17:e8:e8:09:57:17:6a:51:5c:a5:62:0a:4f:1e:f9:8c:77: 49:33:b2:2a:95:b7:bf:3e:50:88:29:45:48:ea:0d:16:24:3d: e5:3c:3f:62:e7:57:0a:dc:20:48:d2:95:76:84:95:5d:b3:41: de:7f:ed:c7:1c:fc:de:e2:04:de:79:21:15:2b:95:6d:ac:f0: 1a:42:29:d0:6f:55:f3:ef:de:02:21:9c:39:a0:ee:61:6b:b9: 82:15:85:3f:30:cd:e9:c6:2b:8d:43:32:93:1e:48:85:45:6c: 66:0b:a8:8d:b3:8c:84:0a:b4:c9:83:17:29:0a:58:d6:08:70: 33:d4:43:37:a7:1b:37:ff:b8:b4:5f:61:ae:42:43:13:0c:e8: fe:25:20:1e:55:68:70:90:24:fc:4d:91:f7:ba:27:79:04:49: 5e:89:51:0f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUNS4jlQtgP4P4PTrrXmU1MUttDFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMDMwMzU2NDhaFw0yNjEyMDIwNDAxNDhaMDMxMTAvBgNV BAMTKDJGQTcxNDM1QTcwRURBN0JGOTIyRDk0Q0MwRUFCMzZBRTFFMzQzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFYBswvIDs59C1YJu0KNy3Yx8Z LdvaKMPwozKbtlYeiXFeL08v4CEAKR5QLaGTbEuudJ5pw1uU+Pr3Kru5aeWeLfNv /YYxR9hVdsxOKygre7AIf74XkT1WTOybHDIE/48qRRVPGz/thoyVH/IR6a8qvvuh iM0tSoQuJXXSSh6sTnqBdq4xnYFzpOgHZDhBwAdcNVQlwezxnSmAB2Jknxcjtkgt cz2ngtDYFPIT2Dr3S/oGI9nbENI6tQ/Ezg0iT9rx/drh/yF8vZ7vaeea7n0l59iS ieK3m9lbp/yJLEth47ito48Obl26wiimTEt0Q7XrrCiyBMTHsOG97LWsIUvpAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUL6cUNacO2nv5ItlMwOqzauHjQ2kwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEp AIAAMA0GCSqGSIb3DQEBCwUAA4IBAQB3nFd26/9bavrymSHkHluUyM6y8LZ9e04D SC340mddKf3bBBfO5hTK0AvA4DtD7TDTlvOvknYr9Atptbjl1tzC2Z3k7t8n4hTP URb7/cRARDmr6sHMUbzid6kVF+joCVcXalFcpWIKTx75jHdJM7Iqlbe/PlCIKUVI 6g0WJD3lPD9i51cK3CBI0pV2hJVds0Hef+3HHPze4gTeeSEVK5VtrPAaQinQb1Xz 794CIZw5oO5ha7mCFYU/MM3pxiuNQzKTHkiFRWxmC6iNs4yECrTJgxcpCljWCHAz 1EM3pxs3/7i0X2GuQkMTDOj+JSAeVWhwkCT8TZH3uid5BEleiVEP -----END CERTIFICATE-----Generated at Sat Dec 6 21:17:46 2025 by rpki-client