This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f33322d3332203d3e203233363739.roa File: 323430313a323930303a3a2f33322d3332203d3e203233363739.roa (raw, json) Hash identifier: VrE1ff/yCXOeH9kVc0DvXS+pX3TlJ+5WhDTZC9TAQaE= Subject key identifier: E3:E8:95:73:39:4D:D9:AF:CB:97:97:73:E0:C9:D8:D1:92:27:29:0D Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 7B7274948C6C21F6F975BF62C287E9EB0E51CF19 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f33322d3332203d3e203233363739.roa Signing time: Wed 03 Dec 2025 04:01:47 +0000 ROA not before: Wed 03 Dec 2025 03:56:47 +0000 ROA not after: Wed 02 Dec 2026 04:01:47 +0000 asID: 23679 IP address blocks: 2401:2900::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:72:74:94:8c:6c:21:f6:f9:75:bf:62:c2:87:e9:eb:0e:51:cf:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 3 03:56:47 2025 GMT Not After : Dec 2 04:01:47 2026 GMT Subject: CN=E3E89573394DD9AFCB979773E0C9D8D19227290D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:15:4e:4f:e8:22:d3:f0:5b:1b:10:d2:0a:1d: bf:e3:4c:02:8a:40:e2:66:44:64:2a:a2:73:ed:5a: 9e:16:d1:6d:02:4d:f0:a5:70:06:96:06:66:c4:86: bc:73:d1:00:ce:89:ab:21:5a:fc:4a:e1:35:c5:a5: a1:94:20:2e:f7:10:4f:f1:2c:aa:34:67:f7:08:50: 32:c3:ee:e0:e2:ec:dc:ac:ae:43:d6:33:56:6b:82: c5:02:30:d3:90:8c:8b:7b:f3:31:34:73:19:4b:8a: 72:f2:f2:7d:e9:c4:e8:3b:2b:6c:80:fd:10:4c:c0: de:6f:b1:9a:e1:a9:aa:d3:ad:4a:06:da:33:c6:1c: 87:ab:83:11:3d:aa:9b:ab:ec:cd:93:97:47:7e:26: 11:02:fe:56:bc:42:7d:08:f2:97:91:6d:51:70:be: 46:9d:71:9f:60:d8:11:11:b3:9c:48:26:f9:cb:21: c6:16:bf:68:9e:cd:9f:52:84:3c:f5:6c:73:e9:b9: 93:8a:26:a2:03:34:55:14:af:48:62:e5:9f:fe:9a: 97:91:de:76:5e:46:d8:1c:17:57:bd:25:3f:1c:a0: db:e1:e1:e2:2b:f0:cb:4e:45:3a:83:94:e5:79:d5: 94:36:05:ec:10:ab:0b:c4:bd:f2:be:06:b4:f0:65: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E8:95:73:39:4D:D9:AF:CB:97:97:73:E0:C9:D8:D1:92:27:29:0D X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3a2f33322d3332203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900::/32 Signature Algorithm: sha256WithRSAEncryption 49:d8:d3:f3:6b:de:5d:9f:20:7e:aa:5b:a3:8f:c6:c2:d8:a8: aa:d2:37:3d:60:f3:29:78:96:86:2a:4d:a5:ba:ba:54:70:a7: 30:f4:0e:e6:c3:a8:5d:06:00:94:95:df:da:a4:e1:d7:0f:ee: 58:aa:23:99:45:cf:ae:d9:2e:55:17:e7:94:46:69:b7:08:b0: 31:71:c4:3c:d3:d8:c7:26:58:d7:bb:82:b4:7f:16:ab:1a:4d: c9:14:a6:47:61:e5:b3:a1:4a:02:27:06:83:91:27:f6:f4:7d: 96:8f:e5:3d:ae:6f:be:d7:6e:0d:58:a3:8e:99:6f:ad:77:cf: 7f:3b:15:59:4c:01:96:aa:1c:d9:4f:56:fd:44:66:91:90:b9: 6a:50:8a:82:8e:45:45:e9:57:46:4f:8b:99:53:46:9a:21:15: 25:0a:7e:43:32:3e:09:cd:23:c4:ca:46:c7:05:17:35:53:23: d9:4e:30:f3:a9:d7:4f:8f:c4:8e:a8:45:e2:ba:5f:71:d5:f0: a0:d7:c8:02:7a:73:46:94:ab:76:41:39:6f:30:99:8a:85:90: 5c:69:8e:54:3b:c6:ef:04:b0:b0:3c:c5:11:7c:26:01:20:de: d2:0a:12:f6:74:73:f3:50:53:56:4d:08:14:21:d7:d2:13:81: 2d:59:9a:0b -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUe3J0lIxsIfb5db9iwofp6w5RzxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMDMwMzU2NDdaFw0yNjEyMDIwNDAxNDdaMDMxMTAvBgNV BAMTKEUzRTg5NTczMzk0REQ5QUZDQjk3OTc3M0UwQzlEOEQxOTIyNzI5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoFU5P6CLT8FsbENIKHb/jTAKK QOJmRGQqonPtWp4W0W0CTfClcAaWBmbEhrxz0QDOiashWvxK4TXFpaGUIC73EE/x LKo0Z/cIUDLD7uDi7NysrkPWM1ZrgsUCMNOQjIt78zE0cxlLinLy8n3pxOg7K2yA /RBMwN5vsZrhqarTrUoG2jPGHIergxE9qpur7M2Tl0d+JhEC/la8Qn0I8peRbVFw vkadcZ9g2BERs5xIJvnLIcYWv2iezZ9ShDz1bHPpuZOKJqIDNFUUr0hi5Z/+mpeR 3nZeRtgcF1e9JT8coNvh4eIr8MtORTqDlOV51ZQ2BewQqwvEvfK+BrTwZZwpAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU4+iVczlN2a/Ll5dz4MnY0ZInKQ0wHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMyMzMzNjM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkASkAMA0GCSqGSIb3 DQEBCwUAA4IBAQBJ2NPza95dnyB+qlujj8bC2Kiq0jc9YPMpeJaGKk2lurpUcKcw 9A7mw6hdBgCUld/apOHXD+5YqiOZRc+u2S5VF+eURmm3CLAxccQ809jHJljXu4K0 fxarGk3JFKZHYeWzoUoCJwaDkSf29H2Wj+U9rm++124NWKOOmW+td89/OxVZTAGW qhzZT1b9RGaRkLlqUIqCjkVF6VdGT4uZU0aaIRUlCn5DMj4JzSPEykbHBRc1UyPZ TjDzqddPj8SOqEXiul9x1fCg18gCenNGlKt2QTlvMJmKhZBcaY5UO8bvBLCwPMUR fCYBIN7SChL2dHPzUFNWTQgUIdfSE4EtWZoL -----END CERTIFICATE-----Generated at Sat Dec 6 23:13:50 2025 by rpki-client