This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa File: 323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa (raw, json) Hash identifier: enRFDNsINaXuM942aLBgO6/K1x23AVUulYAPpYAOvsA= Subject key identifier: 49:96:EC:09:21:1B:96:1E:C9:6F:A4:40:38:E4:73:69:20:72:25:0C Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 5D4CEAEF1628E2264713866CB33C99EC9D8B423F Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa Signing time: Wed 03 Dec 2025 04:01:47 +0000 ROA not before: Wed 03 Dec 2025 03:56:47 +0000 ROA not after: Wed 02 Dec 2026 04:01:47 +0000 asID: 23679 IP address blocks: 2401:2900:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:4c:ea:ef:16:28:e2:26:47:13:86:6c:b3:3c:99:ec:9d:8b:42:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 3 03:56:47 2025 GMT Not After : Dec 2 04:01:47 2026 GMT Subject: CN=4996EC09211B961EC96FA44038E473692072250C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:49:cc:79:52:2b:a8:04:8c:9c:ba:75:4d: fc:68:3b:8c:73:6f:eb:05:97:38:af:c3:64:0b:de: 25:73:24:c8:b8:c8:5a:4c:52:2e:d7:71:08:c0:01: 78:1a:14:72:a6:cd:41:d8:fa:74:c2:08:d6:5e:89: 4c:89:5c:6d:02:8f:c5:ee:1e:cd:c5:6c:a1:da:84: ac:e5:40:71:a7:78:fc:fb:0f:99:57:b7:fd:de:b5: 7d:fa:5c:cf:d1:ed:e1:95:f6:d1:40:13:b2:ba:fc: ee:25:ce:6c:a0:1e:9b:09:15:6b:4e:3e:87:d3:43: 1f:e4:83:02:30:d3:6c:9a:42:79:25:e6:77:f1:aa: ac:6f:54:71:99:41:dc:6c:8f:95:d5:cf:a7:c0:1d: f5:c8:38:36:6c:a0:d5:24:b1:15:c1:65:2c:7a:45: 30:57:46:9e:26:d8:6c:63:d8:d8:4b:a2:2c:13:e9: b0:ea:f1:d7:bb:4a:d5:7c:a1:8e:57:d7:14:1f:de: 47:ce:1c:7f:a2:e5:a0:91:50:6b:4e:03:7c:ae:a5: a0:fb:c1:62:c5:48:c6:53:3d:0e:e4:b7:56:ae:21: 5d:92:ae:5e:7c:19:94:8d:b5:fb:c1:0f:e8:52:c3: 3e:52:b7:40:f9:14:b7:a6:ae:a2:5b:60:ec:a6:2a: f9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:96:EC:09:21:1B:96:1E:C9:6F:A4:40:38:E4:73:69:20:72:25:0C X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030323a3a2f34382d3438203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8002::/48 Signature Algorithm: sha256WithRSAEncryption be:ea:9f:7c:bc:e7:2f:3f:56:a8:23:16:46:fd:64:54:2e:8e: 7e:f4:db:db:21:87:2a:8d:8c:90:5f:3f:21:4a:11:c0:00:af: 6d:bc:17:ef:1a:33:ee:b9:41:02:cb:4b:16:f5:1b:0d:bb:d7: 68:cf:89:60:a1:d3:e2:bf:1c:98:b4:dd:a5:e7:48:cd:53:f1: 18:f5:bf:93:7c:9e:4a:e2:22:72:30:23:21:d6:8b:01:da:c8: a6:80:eb:c8:9c:5f:e3:fc:14:28:55:1b:d5:41:0a:ff:74:94: 4d:23:89:fd:e5:6a:4a:4b:3d:b7:d1:a6:b4:7d:71:27:d6:d5: c1:3d:8d:d6:84:63:3b:50:a2:83:a3:31:9f:f0:3e:3b:9d:b7: 03:dc:ba:78:8b:fb:57:1d:d3:97:d6:86:b2:b2:ca:18:cc:a7: 0b:b2:eb:a6:29:09:8a:17:bb:68:e5:62:55:09:7b:df:61:68: 40:77:36:fb:1f:4e:9d:06:f8:5b:cd:8d:77:57:5b:d5:f1:84: ae:b1:d2:ac:ea:5c:80:ae:d9:2c:b2:52:06:5f:43:cd:31:cb: 81:3b:c3:8d:a6:70:a0:92:c7:1c:ea:3b:2e:40:2a:a2:c1:81: 37:bf:ac:0b:c1:d8:21:b6:25:15:7e:f2:a2:cc:94:f2:52:12: 47:96:27:e3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXUzq7xYo4iZHE4ZsszyZ7J2LQj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMDMwMzU2NDdaFw0yNjEyMDIwNDAxNDdaMDMxMTAvBgNV BAMTKDQ5OTZFQzA5MjExQjk2MUVDOTZGQTQ0MDM4RTQ3MzY5MjA3MjI1MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LUnMeVIrqASMnLp1TfxoO4xz b+sFlzivw2QL3iVzJMi4yFpMUi7XcQjAAXgaFHKmzUHY+nTCCNZeiUyJXG0Cj8Xu Hs3FbKHahKzlQHGnePz7D5lXt/3etX36XM/R7eGV9tFAE7K6/O4lzmygHpsJFWtO PofTQx/kgwIw02yaQnkl5nfxqqxvVHGZQdxsj5XVz6fAHfXIODZsoNUksRXBZSx6 RTBXRp4m2Gxj2NhLoiwT6bDq8de7StV8oY5X1xQf3kfOHH+i5aCRUGtOA3yupaD7 wWLFSMZTPQ7kt1auIV2Srl58GZSNtfvBD+hSwz5St0D5FLemrqJbYOymKvn9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUSZbsCSEblh7Jb6RAOORzaSByJQwwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEp AIACMA0GCSqGSIb3DQEBCwUAA4IBAQC+6p98vOcvP1aoIxZG/WRULo5+9NvbIYcq jYyQXz8hShHAAK9tvBfvGjPuuUECy0sW9RsNu9doz4lgodPivxyYtN2l50jNU/EY 9b+TfJ5K4iJyMCMh1osB2simgOvInF/j/BQoVRvVQQr/dJRNI4n95WpKSz230aa0 fXEn1tXBPY3WhGM7UKKDozGf8D47nbcD3Lp4i/tXHdOX1oayssoYzKcLsuumKQmK F7to5WJVCXvfYWhAdzb7H06dBvhbzY13V1vV8YSusdKs6lyArtksslIGX0PNMcuB O8ONpnCgkscc6jsuQCqiwYE3v6wLwdghtiUVfvKizJTyUhJHlifj -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:43 2025 by rpki-client