This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030353a3a2f34382d3438203d3e203233363739.roa File: 323430313a323930303a383030353a3a2f34382d3438203d3e203233363739.roa (raw, json) Hash identifier: 8BmEmnjfR6a4kYRBdFKi4vZjY0LSQhg+q0f8Hmn27+I= Subject key identifier: 52:81:A9:BA:B2:5D:63:07:4F:AB:53:3C:D0:A0:E3:47:7E:B8:D1:1D Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 2175A44F1F3DC8B06A825C5EF263CFD0CD0EF1B2 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030353a3a2f34382d3438203d3e203233363739.roa Signing time: Wed 03 Dec 2025 04:01:48 +0000 ROA not before: Wed 03 Dec 2025 03:56:48 +0000 ROA not after: Wed 02 Dec 2026 04:01:48 +0000 asID: 23679 IP address blocks: 2401:2900:8005::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:75:a4:4f:1f:3d:c8:b0:6a:82:5c:5e:f2:63:cf:d0:cd:0e:f1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 3 03:56:48 2025 GMT Not After : Dec 2 04:01:48 2026 GMT Subject: CN=5281A9BAB25D63074FAB533CD0A0E3477EB8D11D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:92:38:86:28:b6:d3:0f:d9:fd:eb:04:e1:e0: e6:5a:9d:63:28:90:76:57:f0:12:f3:bd:79:9d:c1: 16:29:ef:34:b5:13:bd:6f:3f:14:02:4c:4e:b5:f0: d9:e0:87:75:25:a0:b9:27:03:33:30:9d:91:78:d8: 7b:ee:d3:bc:f3:d9:76:eb:b7:8a:5e:d2:ce:22:b9: 43:c7:8d:43:0b:57:d5:4c:75:0d:3e:3b:12:97:06: 44:16:1e:64:3b:ba:62:85:76:68:92:56:20:f5:04: 8f:49:60:91:b0:1d:b1:31:93:aa:2a:45:35:4d:df: 47:51:6b:6d:a5:75:a6:e2:56:4b:49:ee:96:aa:a9: 70:51:06:74:19:9f:36:71:e1:ce:e2:a8:b6:73:b0: 8c:69:8f:aa:48:64:8e:81:78:7c:61:5b:37:c8:34: 88:0e:0c:63:b2:b4:a6:7e:7c:39:a2:ec:57:23:df: fe:b7:2e:07:eb:c6:50:05:50:0a:64:9c:69:92:06: e7:83:ac:41:ae:36:99:a6:db:ce:a9:19:bc:e6:f6: fd:be:6e:65:ff:ea:1c:b7:d1:92:72:31:65:a1:b9: 5b:9f:25:41:87:0c:70:29:87:9e:1a:ce:25:42:9c: 79:2e:65:89:dc:b3:14:8f:58:c9:83:d4:52:46:eb: 82:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:81:A9:BA:B2:5D:63:07:4F:AB:53:3C:D0:A0:E3:47:7E:B8:D1:1D X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030353a3a2f34382d3438203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8005::/48 Signature Algorithm: sha256WithRSAEncryption 6b:53:3b:0d:40:60:e0:3e:d7:19:59:b5:2e:27:6c:4e:82:e9: 4b:83:e1:8a:82:b4:c9:e0:85:69:4c:dc:fd:fe:5b:a6:56:3a: 54:33:df:ae:1d:35:1c:d7:6e:8e:c1:8d:aa:d8:a2:a0:ef:3b: 3b:6c:27:5e:1d:5d:71:a2:e9:fc:8f:df:8d:cb:b2:26:e9:a1: ee:9d:0c:12:36:ac:a5:56:8c:52:09:5c:6b:f5:68:94:30:d1: 4e:17:d3:01:57:7e:95:43:dc:cb:38:23:a0:b0:71:2a:ca:17: 34:ce:98:05:64:4d:a7:24:39:38:9a:8b:be:b3:b7:34:8d:35: 88:1e:dd:a1:db:71:d7:9a:37:eb:68:80:a1:c4:3f:d9:cb:97: bd:e0:19:67:6d:6a:d6:ba:77:af:fd:4e:64:d6:c0:29:e8:15: 1f:d9:2a:c7:3b:fa:10:fe:f3:21:e4:d3:7f:92:61:58:30:cd: 64:57:1c:44:d7:f8:29:f5:02:55:05:99:85:0b:d1:cb:db:12: 95:fd:0d:61:50:9d:91:77:a6:c7:4b:eb:7b:9f:d5:bd:e5:56: 45:da:58:02:31:c9:e6:b7:02:69:5d:4b:c2:bf:c5:c4:d5:36: af:48:84:8d:3a:9c:59:e6:83:24:cd:26:4f:8c:9c:c9:a8:03: a2:cc:3b:50 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIXWkTx89yLBqglxe8mPP0M0O8bIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMDMwMzU2NDhaFw0yNjEyMDIwNDAxNDhaMDMxMTAvBgNV BAMTKDUyODFBOUJBQjI1RDYzMDc0RkFCNTMzQ0QwQTBFMzQ3N0VCOEQxMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGkjiGKLbTD9n96wTh4OZanWMo kHZX8BLzvXmdwRYp7zS1E71vPxQCTE618Nngh3UloLknAzMwnZF42Hvu07zz2Xbr t4pe0s4iuUPHjUMLV9VMdQ0+OxKXBkQWHmQ7umKFdmiSViD1BI9JYJGwHbExk6oq RTVN30dRa22ldabiVktJ7paqqXBRBnQZnzZx4c7iqLZzsIxpj6pIZI6BeHxhWzfI NIgODGOytKZ+fDmi7Fcj3/63LgfrxlAFUApknGmSBueDrEGuNpmm286pGbzm9v2+ bmX/6hy30ZJyMWWhuVufJUGHDHAph54aziVCnHkuZYncsxSPWMmD1FJG64KdAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUUoGpurJdYwdPq1M80KDjR3640R0wHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzUz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEp AIAFMA0GCSqGSIb3DQEBCwUAA4IBAQBrUzsNQGDgPtcZWbUuJ2xOgulLg+GKgrTJ 4IVpTNz9/lumVjpUM9+uHTUc126OwY2q2KKg7zs7bCdeHV1xoun8j9+Ny7Im6aHu nQwSNqylVoxSCVxr9WiUMNFOF9MBV36VQ9zLOCOgsHEqyhc0zpgFZE2nJDk4mou+ s7c0jTWIHt2h23HXmjfraIChxD/Zy5e94BlnbWrWunev/U5k1sAp6BUf2SrHO/oQ /vMh5NN/kmFYMM1kVxxE1/gp9QJVBZmFC9HL2xKV/Q1hUJ2Rd6bHS+t7n9W95VZF 2lgCMcnmtwJpXUvCv8XE1TavSISNOpxZ5oMkzSZPjJzJqAOizDtQ -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:41 2025 by rpki-client