This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030363a3a2f34382d3438203d3e203233363739.roa File: 323430313a323930303a383030363a3a2f34382d3438203d3e203233363739.roa (raw, json) Hash identifier: fTeBgy+p+gmT7pTeem/UO8GbvSIEbnE8GD6/ESrxmTU= Subject key identifier: AC:CC:81:F7:05:2A:F2:E3:71:AD:46:17:CE:93:F0:BB:F7:F9:7C:6C Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 40229C2DF7C65F1A937BB4B728709B307DF52E35 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030363a3a2f34382d3438203d3e203233363739.roa Signing time: Wed 03 Dec 2025 04:01:47 +0000 ROA not before: Wed 03 Dec 2025 03:56:47 +0000 ROA not after: Wed 02 Dec 2026 04:01:47 +0000 asID: 23679 IP address blocks: 2401:2900:8006::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:22:9c:2d:f7:c6:5f:1a:93:7b:b4:b7:28:70:9b:30:7d:f5:2e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 3 03:56:47 2025 GMT Not After : Dec 2 04:01:47 2026 GMT Subject: CN=ACCC81F7052AF2E371AD4617CE93F0BBF7F97C6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:ec:27:eb:26:e8:09:08:cc:bb:5a:a8:84: 9a:98:73:9f:c1:91:52:3d:b4:c3:65:69:6d:ff:a6: 0d:76:0b:54:46:76:2f:42:6e:f7:e3:62:53:e7:a8: 51:0f:2f:ed:9f:76:91:ae:b7:2e:10:fa:e2:8b:45: 96:0d:d5:62:ad:b3:36:fb:ca:57:c5:b2:14:35:66: 9d:fc:24:a6:84:a9:e7:81:78:82:f1:bf:fb:d5:59: 3a:eb:0b:7d:f4:c4:68:93:a6:89:3d:75:6c:30:80: 20:1e:ca:19:c4:6c:7d:f1:97:7e:df:97:fe:24:3b: 08:e4:89:1a:04:26:ff:f2:3c:e3:d4:e4:75:d1:90: f0:0f:1b:91:0e:06:55:bc:0a:63:31:31:a2:f8:7e: 94:77:89:69:20:b0:10:7a:96:4d:f3:f7:c0:17:b6: 7d:30:33:72:1c:d4:25:44:b4:86:13:7a:29:b6:f7: 6b:d6:e0:45:57:4b:3a:95:00:7a:ec:36:a9:a4:c0: 7b:62:1d:69:7e:e5:c0:a6:ae:36:a4:23:69:d5:80: 13:c2:08:42:c3:5b:5a:fd:e9:a3:b0:14:4b:b4:24: c9:fe:33:f7:17:c3:9c:e2:74:ec:c4:db:1d:9a:33: c5:71:65:82:09:d0:5f:b3:65:f4:2e:cb:a0:87:51: 54:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CC:81:F7:05:2A:F2:E3:71:AD:46:17:CE:93:F0:BB:F7:F9:7C:6C X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030363a3a2f34382d3438203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8006::/48 Signature Algorithm: sha256WithRSAEncryption 24:e3:9d:71:52:6c:04:60:4d:c1:45:13:e2:7b:ff:59:89:11: 94:a2:e0:03:f4:27:57:60:5f:ed:e9:40:02:9d:f4:1c:d5:db: 2d:1e:63:ef:c1:55:62:3c:0b:ea:93:ea:12:0a:9a:93:54:54: 04:2d:52:bd:8c:0e:e3:4d:6c:4d:35:7e:84:3b:05:a9:3b:4b: ac:6d:9c:50:ab:4f:f4:43:b8:dc:5a:77:5a:25:cb:f9:be:c8: 12:48:c5:76:b1:8b:05:f1:87:d1:3c:bb:64:3c:63:b5:bc:fb: 38:ca:7f:9c:06:76:37:d2:b4:46:c0:12:5f:a5:b1:d1:9c:06: 27:a1:c5:d1:40:1c:52:18:2b:4f:a5:67:f3:4b:a9:78:15:01: 26:5c:9d:2b:c5:04:b9:54:8f:78:35:88:50:8c:f3:08:b4:6c: 00:f8:d8:cf:28:08:8c:00:28:cd:c3:e9:ac:56:7d:93:48:94: 81:ed:e4:2d:51:d4:ca:05:b5:18:af:96:74:f3:1b:fa:12:98: 8a:40:3e:7b:4a:ba:ff:3e:2a:05:52:2a:94:16:3b:56:2c:62: 4c:9e:e2:1e:f3:2f:23:e5:0f:ac:9a:59:3f:43:f6:1f:b3:e0: 71:11:55:52:7c:ee:65:e6:5c:91:bb:bb:45:b8:9a:be:27:47: ea:8d:a4:4e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQCKcLffGXxqTe7S3KHCbMH31LjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMDMwMzU2NDdaFw0yNjEyMDIwNDAxNDdaMDMxMTAvBgNV BAMTKEFDQ0M4MUY3MDUyQUYyRTM3MUFENDYxN0NFOTNGMEJCRjdGOTdDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92ewn6yboCQjMu1qohJqYc5/B kVI9tMNlaW3/pg12C1RGdi9CbvfjYlPnqFEPL+2fdpGuty4Q+uKLRZYN1WKtszb7 ylfFshQ1Zp38JKaEqeeBeILxv/vVWTrrC330xGiTpok9dWwwgCAeyhnEbH3xl37f l/4kOwjkiRoEJv/yPOPU5HXRkPAPG5EOBlW8CmMxMaL4fpR3iWkgsBB6lk3z98AX tn0wM3Ic1CVEtIYTeim292vW4EVXSzqVAHrsNqmkwHtiHWl+5cCmrjakI2nVgBPC CELDW1r96aOwFEu0JMn+M/cXw5zidOzE2x2aM8VxZYIJ0F+zZfQuy6CHUVQZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUrMyB9wUq8uNxrUYXzpPwu/f5fGwwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEp AIAGMA0GCSqGSIb3DQEBCwUAA4IBAQAk451xUmwEYE3BRRPie/9ZiRGUouAD9CdX YF/t6UACnfQc1dstHmPvwVViPAvqk+oSCpqTVFQELVK9jA7jTWxNNX6EOwWpO0us bZxQq0/0Q7jcWndaJcv5vsgSSMV2sYsF8YfRPLtkPGO1vPs4yn+cBnY30rRGwBJf pbHRnAYnocXRQBxSGCtPpWfzS6l4FQEmXJ0rxQS5VI94NYhQjPMItGwA+NjPKAiM ACjNw+msVn2TSJSB7eQtUdTKBbUYr5Z08xv6EpiKQD57Srr/PioFUiqUFjtWLGJM nuIe8y8j5Q+smlk/Q/Yfs+BxEVVSfO5l5lyRu7tFuJq+J0fqjaRO -----END CERTIFICATE-----Generated at Sat Dec 6 21:18:28 2025 by rpki-client