This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa File: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (raw, json) Hash identifier: ov8mTxysBfKB49F8VOvh3Huj6S60dY93AQe/+n5tsMc= Subject key identifier: 6D:BD:2F:61:77:21:24:7A:48:AF:6D:45:35:E8:21:56:6F:78:BD:70 Certificate issuer: /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3 Certificate serial: 20316F4B02BBEA10529397280123AABFD77ECF52 Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa Signing time: Mon 17 Nov 2025 10:02:32 +0000 ROA not before: Mon 17 Nov 2025 09:57:32 +0000 ROA not after: Mon 16 Nov 2026 10:02:32 +0000 asID: 50104 IP address blocks: 2001:df1:1c40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:31:6f:4b:02:bb:ea:10:52:93:97:28:01:23:aa:bf:d7:7e:cf:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3 Validity Not Before: Nov 17 09:57:32 2025 GMT Not After : Nov 16 10:02:32 2026 GMT Subject: CN=6DBD2F617721247A48AF6D4535E821566F78BD70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ec:1b:ae:42:a3:cd:db:1b:df:08:ef:e8:0a: ed:b6:c8:a5:69:a0:40:ea:b5:3b:78:ef:6d:83:ff: cd:43:10:53:ea:7c:b7:86:c2:62:ee:b7:4d:8d:c5: f0:bb:3d:9d:a8:7c:ff:a2:f4:24:a2:c5:e3:23:85: e3:9f:e5:ca:49:1b:04:ba:ae:07:2a:14:67:76:ff: 0c:ad:2b:04:5e:0b:f3:a6:b3:a7:ae:d0:80:88:e5: 04:2e:11:01:3a:69:4d:98:00:c5:6d:b2:9a:c7:0f: 78:ac:a8:3c:e1:88:9a:74:92:58:1d:91:78:01:2d: b4:cf:3d:ae:df:cf:5f:11:b0:38:77:2c:8e:6f:81: 62:5f:f4:9c:80:20:4e:41:e0:6e:ae:d7:ff:9c:a4: 98:a2:14:46:56:e5:ff:59:13:48:60:d5:ea:63:f8: 38:e2:fb:d8:c5:96:6b:b2:35:51:8b:8c:a5:a0:59: 68:ae:db:20:bd:ca:2a:a2:12:1d:6a:7e:92:c9:ea: 6e:d5:1c:f5:e6:34:6f:ef:2b:07:14:ec:72:35:40: 50:b5:72:fd:d4:49:2c:99:d7:db:75:f9:5d:63:36: 79:45:e3:2d:db:e5:08:4d:3f:1a:c9:11:5f:34:77: 6b:f5:bf:f5:66:b7:58:50:9b:88:ff:72:b4:cf:a6: 0c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BD:2F:61:77:21:24:7A:48:AF:6D:45:35:E8:21:56:6F:78:BD:70 X509v3 Authority Key Identifier: keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:1c40::/48 Signature Algorithm: sha256WithRSAEncryption 28:0d:88:aa:7b:eb:bf:7d:f1:37:64:90:7d:78:20:a1:02:89: ef:a8:14:73:0b:a6:83:1f:22:ad:83:1f:4b:6e:19:43:a6:1c: 74:39:67:8b:90:48:64:f6:db:fc:c9:99:88:3b:8e:62:a0:38: 63:b1:28:8f:8d:a6:be:f6:53:22:3a:78:48:8e:cd:62:94:27: 1e:da:bc:cf:6c:bb:2e:c5:0d:eb:02:d8:5d:bc:b9:23:8a:67: 7e:f3:81:94:c5:bf:25:81:e2:49:d7:f8:2b:05:07:8b:10:78: 9b:7a:03:fa:ba:d0:62:91:9d:31:d6:02:fc:63:5e:2f:43:d2: 0d:13:a8:c9:52:6c:a3:5a:a3:ac:2f:4e:1b:25:de:b7:c2:3e: 89:c3:bb:5c:e4:c0:89:66:d8:c7:4f:1f:61:93:0c:36:09:7d: 3b:13:15:88:ba:e1:c7:e7:e7:7b:e0:ea:10:78:1e:b0:81:73: ca:15:92:5d:a3:42:85:d1:6d:12:c3:72:47:54:4b:54:05:d6: 97:32:dd:23:83:f3:16:e5:b8:95:ba:4f:44:14:8f:c8:35:12: 12:e0:fd:3e:08:66:29:f0:c3:2b:07:9a:e0:53:e4:cf:f6:4c: da:a9:65:0d:57:6d:ed:87:23:34:05:8a:b9:cc:e5:23:37:cf: 36:b2:62:10 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUIDFvSwK76hBSk5coASOqv9d+z1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZC MDhFRkJGMzAeFw0yNTExMTcwOTU3MzJaFw0yNjExMTYxMDAyMzJaMDMxMTAvBgNV BAMTKDZEQkQyRjYxNzcyMTI0N0E0OEFGNkQ0NTM1RTgyMTU2NkY3OEJENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy7BuuQqPN2xvfCO/oCu22yKVp oEDqtTt4722D/81DEFPqfLeGwmLut02NxfC7PZ2ofP+i9CSixeMjheOf5cpJGwS6 rgcqFGd2/wytKwReC/Oms6eu0ICI5QQuEQE6aU2YAMVtsprHD3isqDzhiJp0klgd kXgBLbTPPa7fz18RsDh3LI5vgWJf9JyAIE5B4G6u1/+cpJiiFEZW5f9ZE0hg1epj +Dji+9jFlmuyNVGLjKWgWWiu2yC9yiqiEh1qfpLJ6m7VHPXmNG/vKwcU7HI1QFC1 cv3USSyZ19t1+V1jNnlF4y3b5QhNPxrJEV80d2v1v/Vmt1hQm4j/crTPpgxDAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUbb0vYXchJHpIr21FNeghVm94vXAwHwYDVR0j BBgwFoAU27GMz1iRRSSvsRP+EzWcxrCO+/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5ZDdjYi02Y2ZiLTRkZTAtOWRhYS1kMjIyYjdhODkwNzIvMC9EQkIxOENDRjU4 OTE0NTI0QUZCMTEzRkUxMzM1OUNDNkIwOEVGQkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZCMDhF RkJGMy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlkN2NiLTZjZmItNGRlMC05 ZGFhLWQyMjJiN2E4OTA3Mi8wLzMyMzAzMDMxM2E2NDY2MzEzYTMxNjMzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMDMxMzAzNC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfEc QDANBgkqhkiG9w0BAQsFAAOCAQEAKA2Iqnvrv33xN2SQfXggoQKJ76gUcwumgx8i rYMfS24ZQ6YcdDlni5BIZPbb/MmZiDuOYqA4Y7Eoj42mvvZTIjp4SI7NYpQnHtq8 z2y7LsUN6wLYXby5I4pnfvOBlMW/JYHiSdf4KwUHixB4m3oD+rrQYpGdMdYC/GNe L0PSDROoyVJso1qjrC9OGyXet8I+icO7XOTAiWbYx08fYZMMNgl9OxMViLrhx+fn e+DqEHgesIFzyhWSXaNChdFtEsNyR1RLVAXWlzLdI4PzFuW4lbpPRBSPyDUSEuD9 PghmKfDDKwea4FPkz/ZM2qllDVdt7YcjNAWKuczlIzfPNrJiEA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:47:43 2025 by rpki-client