This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa File: 323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa (raw, json) Hash identifier: Fv3PzH/PpXCb1xS63tcNe76mWTrdMYYDd+HvPixKLKI= Subject key identifier: 9B:40:FF:EB:03:73:EC:BB:8E:57:1E:84:3D:45:33:7D:91:4F:E3:55 Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 6B34809A0023814CD3C799D71A21F332E317589E Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa Signing time: Sun 30 Nov 2025 14:00:00 +0000 ROA not before: Sun 30 Nov 2025 13:55:00 +0000 ROA not after: Sun 29 Nov 2026 14:00:00 +0000 asID: 131749 IP address blocks: 2402:be80:e000::/35 maxlen: 35 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 06:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:34:80:9a:00:23:81:4c:d3:c7:99:d7:1a:21:f3:32:e3:17:58:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Nov 30 13:55:00 2025 GMT Not After : Nov 29 14:00:00 2026 GMT Subject: CN=9B40FFEB0373ECBB8E571E843D45337D914FE355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4c:8f:6f:ec:83:bc:2a:0c:24:78:31:bb:a2: c4:ff:a6:2e:f0:12:ac:06:50:96:3b:d3:47:46:2d: 79:a9:23:d1:e1:62:84:b2:78:55:16:13:ec:88:89: 91:bc:5c:24:15:3d:5f:83:ad:ca:39:d4:3b:7e:03: 03:35:81:1c:22:e6:c3:e7:c8:4d:aa:42:5c:3a:7f: a2:fb:17:47:df:bd:f6:b8:d5:11:bd:6a:cf:f0:5f: 6b:c0:e2:8a:d2:5e:0d:22:c7:e4:d1:56:3c:2f:73: 66:2a:ed:08:b9:55:03:77:53:86:30:bc:d9:ae:5e: e1:48:37:d9:70:db:4f:c5:71:35:ea:b0:6b:6d:b0: de:22:58:8c:8f:2f:18:f6:60:6a:09:19:8a:2c:d7: 70:0d:6e:d2:15:83:45:cd:7d:fc:06:3a:2a:a4:82: 92:8d:7c:9b:d7:3e:ac:da:cc:49:be:20:84:d0:6d: 0d:1d:e3:dd:41:97:22:dc:c4:ab:02:3a:b2:0a:6a: 61:2d:a6:37:e3:d4:ad:f5:a4:db:25:dc:29:05:7c: 8b:cc:2b:b9:4a:58:4b:81:d3:29:76:58:44:c2:cc: 98:e3:91:c1:5d:0b:ca:77:15:12:b7:e5:b9:41:1b: c9:c9:cb:b6:d4:27:95:e3:72:74:8b:f1:64:af:be: e1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:40:FF:EB:03:73:EC:BB:8E:57:1E:84:3D:45:33:7D:91:4F:E3:55 X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a653030303a3a2f33352d3335203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:be80:e000::/35 Signature Algorithm: sha256WithRSAEncryption 08:86:17:cc:e6:a3:9e:70:e8:8a:83:ac:70:73:db:ca:d0:b9: 79:ba:94:56:21:43:49:88:de:80:af:5b:b5:fb:ab:ba:97:f2: 4d:fc:8f:3d:ff:c1:af:f6:b1:6f:81:23:2e:be:05:b8:f8:f2: 77:0b:65:38:82:fa:0a:2d:6a:96:04:0f:bb:0d:0a:28:05:18: 6b:a0:a0:4d:c4:fe:ba:d2:e9:53:8d:2b:82:2f:eb:43:88:e1: 11:ac:ba:02:3c:72:5b:26:a6:c9:9b:63:b2:12:37:a7:8b:6e: eb:f9:f3:53:79:cc:92:8a:0e:31:3c:d7:ad:c6:80:fe:19:fe: 4c:7e:cc:63:67:60:58:8e:44:7d:82:8f:0b:9d:9b:6f:0d:7c: eb:e3:c9:33:af:91:69:91:d3:bf:15:b6:27:b4:0e:09:a7:1e: bb:b9:2d:f4:e5:66:b9:78:3e:fc:6f:29:01:9c:0a:67:a3:43: 7a:67:6d:f3:16:41:14:16:10:a9:b7:48:9a:87:ba:94:9f:3c: 67:17:44:ef:6b:f3:c3:50:0f:8a:04:00:17:31:37:fe:aa:5c: 02:79:af:1b:fd:fe:9f:5f:99:cc:ef:10:66:4b:b2:d5:49:d9: 61:cb:ad:f1:f5:20:5b:dd:9a:54:35:ac:63:ba:51:32:a2:19: 36:59:d1:30 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUazSAmgAjgUzTx5nXGiHzMuMXWJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNTExMzAxMzU1MDBaFw0yNjExMjkxNDAwMDBaMDMxMTAvBgNV BAMTKDlCNDBGRkVCMDM3M0VDQkI4RTU3MUU4NDNENDUzMzdEOTE0RkUzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPTI9v7IO8KgwkeDG7osT/pi7w EqwGUJY700dGLXmpI9HhYoSyeFUWE+yIiZG8XCQVPV+Drco51Dt+AwM1gRwi5sPn yE2qQlw6f6L7F0ffvfa41RG9as/wX2vA4orSXg0ix+TRVjwvc2Yq7Qi5VQN3U4Yw vNmuXuFIN9lw20/FcTXqsGttsN4iWIyPLxj2YGoJGYos13ANbtIVg0XNffwGOiqk gpKNfJvXPqzazEm+IITQbQ0d491BlyLcxKsCOrIKamEtpjfj1K31pNsl3CkFfIvM K7lKWEuB0yl2WETCzJjjkcFdC8p3FRK35blBG8nJy7bUJ5XjcnSL8WSvvuGNAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUm0D/6wNz7LuOVx6EPUUzfZFP41UwHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhNjUzMDMwMzAz YTNhMmYzMzM1MmQzMzM1MjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgUk Ar6A4DANBgkqhkiG9w0BAQsFAAOCAQEACIYXzOajnnDoioOscHPbytC5ebqUViFD SYjegK9btfurupfyTfyPPf/Br/axb4EjLr4FuPjydwtlOIL6Ci1qlgQPuw0KKAUY a6CgTcT+utLpU40rgi/rQ4jhEay6AjxyWyamyZtjshI3p4tu6/nzU3nMkooOMTzX rcaA/hn+TH7MY2dgWI5EfYKPC52bbw186+PJM6+RaZHTvxW2J7QOCaceu7kt9OVm uXg+/G8pAZwKZ6NDemdt8xZBFBYQqbdImoe6lJ88ZxdE72vzw1APigQAFzE3/qpc AnmvG/3+n1+ZzO8QZkuy1UnZYcut8fUgW92aVDWsY7pRMqIZNlnRMA== -----END CERTIFICATE-----Generated at Sun Dec 7 07:27:32 2025 by rpki-client