This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030373a3a2f34382d3438203d3e203233363739.roa File: 323430313a323930303a383030373a3a2f34382d3438203d3e203233363739.roa (raw, json) Hash identifier: FEfIZjIZaOX7X90su4DXl46HioI3bDhlNzm96PoWsrs= Subject key identifier: D2:8C:EA:31:64:43:52:A3:A5:A2:3F:B2:3E:A5:7F:0B:D3:75:9F:48 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 4EE7CCACE906DA4D1D25CBD480D0E1C4BAF228EC Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030373a3a2f34382d3438203d3e203233363739.roa Signing time: Wed 03 Dec 2025 04:01:48 +0000 ROA not before: Wed 03 Dec 2025 03:56:48 +0000 ROA not after: Wed 02 Dec 2026 04:01:48 +0000 asID: 23679 IP address blocks: 2401:2900:8007::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e7:cc:ac:e9:06:da:4d:1d:25:cb:d4:80:d0:e1:c4:ba:f2:28:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 3 03:56:48 2025 GMT Not After : Dec 2 04:01:48 2026 GMT Subject: CN=D28CEA31644352A3A5A23FB23EA57F0BD3759F48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b9:b9:55:6d:32:ad:36:84:c8:da:2d:39:4b: 15:a9:d3:88:ef:30:7b:0a:03:76:5f:d5:75:5e:cd: ce:78:03:50:2b:be:31:ee:6e:6c:06:72:76:40:04: f4:6d:81:50:4f:61:45:b1:7e:44:84:d0:64:84:49: b5:0b:a4:b5:b4:a3:3a:86:e8:d5:98:1a:2d:11:77: 38:b0:c3:03:89:42:ff:4c:c2:73:df:07:be:3a:a2: 4e:6b:f7:78:51:e5:e8:88:3e:23:05:de:67:12:3b: ab:d9:70:94:c9:1e:8e:e5:9f:ee:3e:2f:69:f4:9d: 35:b7:2b:76:11:fc:9e:56:db:d5:fc:4e:8f:5d:bf: f4:a5:74:51:cf:53:55:f4:b0:1e:f4:82:45:cd:fc: 7c:ec:5e:08:09:f3:cd:34:25:37:e6:16:50:26:9c: 87:46:33:a1:bb:4e:1e:5c:d2:ba:20:a1:0b:82:30: 75:89:83:87:e9:23:32:83:a4:d7:5e:77:d4:ee:51: 75:b9:80:a3:6b:27:3a:86:c6:08:c3:97:27:ae:89: 07:6f:ad:33:a9:78:b6:b9:d2:71:61:a3:19:95:ab: d0:da:a2:a1:6f:2f:28:f9:2e:4e:12:a0:e4:36:09: 98:13:9a:af:b7:d7:b1:bf:72:8a:01:a3:d2:de:46: 9c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8C:EA:31:64:43:52:A3:A5:A2:3F:B2:3E:A5:7F:0B:D3:75:9F:48 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030373a3a2f34382d3438203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8007::/48 Signature Algorithm: sha256WithRSAEncryption 28:11:65:4d:54:fc:a3:5e:5a:8e:52:fa:8f:47:b0:a2:21:f5: 0b:82:17:66:59:25:a7:43:0a:6e:5b:16:02:4f:db:d5:bc:f0: ad:12:d6:28:c7:e5:3e:23:a3:1b:65:02:82:08:ad:aa:c0:84: 95:12:4c:9c:6b:8d:98:2c:33:8e:5e:03:12:73:26:60:df:bf: 4a:7f:41:d8:2c:59:97:51:7f:68:e9:29:51:80:cb:e9:53:7f: c5:96:3e:20:bf:43:7b:59:f9:e8:13:f7:58:5d:c3:92:22:82: b5:fe:5b:bc:d6:03:b4:4b:b3:30:09:da:08:41:d2:b2:82:9f: bf:16:be:ed:bc:cf:47:4e:b2:eb:de:d7:14:bf:75:5a:c8:2e: c1:19:86:fe:bf:23:2a:e8:8b:a5:16:d6:61:b6:95:c3:e4:13: a5:f9:7a:de:5d:6b:6d:91:26:a6:51:b3:63:d5:3c:d0:77:1e: 6d:5c:7c:3a:9d:33:e0:72:8a:ff:c9:ac:66:d3:16:6f:05:b6: 11:6e:83:23:fb:ba:3d:fc:5e:9f:e3:f8:50:d2:bb:9a:47:87: 79:d7:f7:12:ed:19:9e:83:39:45:b6:72:4d:b3:7b:fe:27:c8: ab:97:b4:4f:e3:a8:8c:92:37:60:0c:09:4e:f4:2c:c2:d1:68: 72:1d:e4:64 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTufMrOkG2k0dJcvUgNDhxLryKOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMDMwMzU2NDhaFw0yNjEyMDIwNDAxNDhaMDMxMTAvBgNV BAMTKEQyOENFQTMxNjQ0MzUyQTNBNUEyM0ZCMjNFQTU3RjBCRDM3NTlGNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaublVbTKtNoTI2i05SxWp04jv MHsKA3Zf1XVezc54A1ArvjHubmwGcnZABPRtgVBPYUWxfkSE0GSESbULpLW0ozqG 6NWYGi0RdziwwwOJQv9MwnPfB746ok5r93hR5eiIPiMF3mcSO6vZcJTJHo7ln+4+ L2n0nTW3K3YR/J5W29X8To9dv/SldFHPU1X0sB70gkXN/HzsXggJ8800JTfmFlAm nIdGM6G7Th5c0rogoQuCMHWJg4fpIzKDpNded9TuUXW5gKNrJzqGxgjDlyeuiQdv rTOpeLa50nFhoxmVq9DaoqFvLyj5Lk4SoOQ2CZgTmq+317G/cooBo9LeRpzJAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU0ozqMWRDUqOloj+yPqV/C9N1n0gwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzcz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEp AIAHMA0GCSqGSIb3DQEBCwUAA4IBAQAoEWVNVPyjXlqOUvqPR7CiIfULghdmWSWn QwpuWxYCT9vVvPCtEtYox+U+I6MbZQKCCK2qwISVEkyca42YLDOOXgMScyZg379K f0HYLFmXUX9o6SlRgMvpU3/Flj4gv0N7WfnoE/dYXcOSIoK1/lu81gO0S7MwCdoI QdKygp+/Fr7tvM9HTrLr3tcUv3VayC7BGYb+vyMq6IulFtZhtpXD5BOl+XreXWtt kSamUbNj1TzQdx5tXHw6nTPgcor/yaxm0xZvBbYRboMj+7o9/F6f4/hQ0ruaR4d5 1/cS7RmegzlFtnJNs3v+J8irl7RP46iMkjdgDAlO9CzC0WhyHeRk -----END CERTIFICATE-----Generated at Sun Dec 7 00:17:56 2025 by rpki-client