This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030313a3a2f34382d3438203d3e203233363739.roa File: 323430313a323930303a383030313a3a2f34382d3438203d3e203233363739.roa (raw, json) Hash identifier: YPQpU8/gGKYA6cQRvUmrDyXo7vAKMiW4kBcAlcsyk0Q= Subject key identifier: EF:43:15:6B:A5:99:77:86:10:24:5C:0E:3A:03:3B:A0:68:DE:4C:FE Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 291EB761872E3EA81D70064B96EF05488977CECB Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030313a3a2f34382d3438203d3e203233363739.roa Signing time: Wed 03 Dec 2025 04:01:47 +0000 ROA not before: Wed 03 Dec 2025 03:56:47 +0000 ROA not after: Wed 02 Dec 2026 04:01:47 +0000 asID: 23679 IP address blocks: 2401:2900:8001::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1e:b7:61:87:2e:3e:a8:1d:70:06:4b:96:ef:05:48:89:77:ce:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 3 03:56:47 2025 GMT Not After : Dec 2 04:01:47 2026 GMT Subject: CN=EF43156BA599778610245C0E3A033BA068DE4CFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:34:34:e8:2b:95:f5:9c:03:ab:c6:6b:76:21: f9:d0:4b:81:27:67:97:41:1e:6b:61:71:b5:90:3d: 31:f7:33:78:22:b9:cb:85:55:29:8d:b4:60:0f:3e: 6b:c6:5c:4c:23:fb:d9:6e:71:b4:09:9b:07:fc:4a: 3b:c7:3d:66:5c:e8:16:d4:ff:d3:3c:d2:e8:d3:db: b5:25:b8:6f:24:6c:c4:84:f5:5d:ca:08:16:a4:33: de:98:56:c6:a8:37:4e:e5:c6:d7:20:38:b8:97:70: 5d:f2:c6:ef:d4:aa:ad:89:49:e8:b4:97:16:3c:97: 3b:69:2a:fb:d8:aa:71:0f:b2:e4:1d:22:f2:a4:ef: d7:6c:ce:92:62:20:14:02:ea:ac:3b:b3:8d:4c:5b: f2:39:30:0a:e8:ca:13:eb:bc:5c:8f:88:59:38:7b: 67:8e:d0:f5:8e:82:f8:17:68:4b:86:63:49:ce:26: c3:69:cb:00:fd:31:3b:7e:43:c3:a2:2d:64:23:c5: 5b:3c:27:3f:bb:cc:2a:30:c7:7d:7c:26:7e:32:7c: 42:7e:11:81:1a:b2:ae:98:90:87:a3:97:f0:c6:87: c4:5b:5f:6c:59:4a:d3:59:2c:b5:79:61:99:a1:fc: 79:b2:cf:f2:9d:4a:ed:48:15:bb:e8:59:c4:b2:88: d1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:43:15:6B:A5:99:77:86:10:24:5C:0E:3A:03:3B:A0:68:DE:4C:FE X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030313a3a2f34382d3438203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8001::/48 Signature Algorithm: sha256WithRSAEncryption 5b:25:c8:31:91:4a:00:aa:5a:8e:fd:8c:ad:61:7e:e2:b2:91: 4e:48:93:07:f1:1f:ca:f4:e9:1d:6d:cf:f5:3a:0f:89:9d:3f: 8d:66:6e:8f:4a:f7:38:d2:68:6d:f3:62:22:39:e2:27:99:f5: ec:cf:b5:a9:57:46:82:b1:8b:5b:7f:52:6c:3a:dd:7f:cf:26: d3:c9:f1:37:f1:b1:0e:ca:8d:03:39:eb:ed:66:98:af:45:bc: d6:79:3f:95:e9:c5:20:cf:79:09:71:cc:37:2d:ba:e8:af:23: 33:16:5c:14:52:fc:b9:da:2e:d0:51:39:29:08:31:35:f0:f8: 03:50:2d:3b:c6:5f:be:36:9f:18:42:28:f1:c7:a6:88:79:df: 53:63:22:4e:b2:b7:8f:64:a7:d7:87:88:db:45:bd:db:55:1d: ba:6f:ea:29:ba:c9:fe:2e:20:c2:f5:29:ad:6f:52:75:67:ca: d0:7b:cc:03:4a:23:a8:67:ee:80:44:4d:b1:a1:d2:05:a8:3d: c7:dd:a8:e2:4c:b1:68:c0:79:ae:04:cd:26:b1:c8:7f:f9:3f: e6:c8:ef:aa:cf:30:b8:6c:16:09:c8:72:a0:a3:b4:a6:e8:36: 06:10:fa:2b:ec:01:e8:f8:2a:81:01:d9:58:7e:fc:15:2d:b6: f4:1c:a3:53 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUKR63YYcuPqgdcAZLlu8FSIl3zsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMDMwMzU2NDdaFw0yNjEyMDIwNDAxNDdaMDMxMTAvBgNV BAMTKEVGNDMxNTZCQTU5OTc3ODYxMDI0NUMwRTNBMDMzQkEwNjhERTRDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNDToK5X1nAOrxmt2IfnQS4En Z5dBHmthcbWQPTH3M3giucuFVSmNtGAPPmvGXEwj+9lucbQJmwf8SjvHPWZc6BbU /9M80ujT27UluG8kbMSE9V3KCBakM96YVsaoN07lxtcgOLiXcF3yxu/Uqq2JSei0 lxY8lztpKvvYqnEPsuQdIvKk79dszpJiIBQC6qw7s41MW/I5MAroyhPrvFyPiFk4 e2eO0PWOgvgXaEuGY0nOJsNpywD9MTt+Q8OiLWQjxVs8Jz+7zCowx318Jn4yfEJ+ EYEasq6YkIejl/DGh8RbX2xZStNZLLV5YZmh/Hmyz/KdSu1IFbvoWcSyiNH1AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU70MVa6WZd4YQJFwOOgM7oGjeTP4wHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEp AIABMA0GCSqGSIb3DQEBCwUAA4IBAQBbJcgxkUoAqlqO/YytYX7ispFOSJMH8R/K 9Okdbc/1Og+JnT+NZm6PSvc40mht82IiOeInmfXsz7WpV0aCsYtbf1JsOt1/zybT yfE38bEOyo0DOevtZpivRbzWeT+V6cUgz3kJccw3LbroryMzFlwUUvy52i7QUTkp CDE18PgDUC07xl++Np8YQijxx6aIed9TYyJOsrePZKfXh4jbRb3bVR26b+opusn+ LiDC9Smtb1J1Z8rQe8wDSiOoZ+6ARE2xodIFqD3H3ajiTLFowHmuBM0msch/+T/m yO+qzzC4bBYJyHKgo7Sm6DYGEPor7AHo+CqBAdlYfvwVLbb0HKNT -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:48 2025 by rpki-client