This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/AS139994.roa File: AS139994.roa (raw, json) Hash identifier: 3MhCOE1JfpBzQV976XNeUOb97J9ofo+CArIJ1ybLWHw= Subject key identifier: 53:93:60:7B:45:BE:2B:14:A2:B2:E5:AF:02:10:E5:E7:C5:2E:C7:B9 Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 4DF52A18051338312E0700D2038323374CEE4F29 Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/AS139994.roa Signing time: Thu 13 Nov 2025 13:15:39 +0000 ROA not before: Thu 13 Nov 2025 13:10:39 +0000 ROA not after: Thu 12 Nov 2026 13:15:39 +0000 asID: 139994 IP address blocks: 140.213.1.0/24 maxlen: 24 140.213.3.0/24 maxlen: 24 140.213.8.0/24 maxlen: 24 140.213.10.0/24 maxlen: 24 140.213.12.0/24 maxlen: 24 140.213.94.0/24 maxlen: 24 140.213.95.0/24 maxlen: 24 140.213.118.0/24 maxlen: 24 140.213.186.0/24 maxlen: 24 140.213.187.0/24 maxlen: 24 140.213.188.0/24 maxlen: 24 140.213.190.0/24 maxlen: 24 140.213.192.0/24 maxlen: 24 140.213.193.0/24 maxlen: 24 140.213.194.0/24 maxlen: 24 140.213.195.0/24 maxlen: 24 140.213.196.0/24 maxlen: 24 140.213.197.0/24 maxlen: 24 140.213.198.0/24 maxlen: 24 140.213.199.0/24 maxlen: 24 140.213.200.0/24 maxlen: 24 140.213.201.0/24 maxlen: 24 140.213.202.0/24 maxlen: 24 140.213.203.0/24 maxlen: 24 140.213.210.0/24 maxlen: 24 140.213.212.0/24 maxlen: 24 140.213.213.0/24 maxlen: 24 140.213.214.0/24 maxlen: 24 140.213.215.0/24 maxlen: 24 140.213.216.0/24 maxlen: 24 140.213.217.0/24 maxlen: 24 140.213.234.0/24 maxlen: 24 140.213.235.0/24 maxlen: 24 140.213.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f5:2a:18:05:13:38:31:2e:07:00:d2:03:83:23:37:4c:ee:4f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Nov 13 13:10:39 2025 GMT Not After : Nov 12 13:15:39 2026 GMT Subject: CN=5393607B45BE2B14A2B2E5AF0210E5E7C52EC7B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5c:32:c0:01:e5:9c:56:43:ef:57:ab:8f:03: 08:7a:5f:54:74:0b:e0:cc:34:5a:46:5c:94:57:48: 51:87:b1:07:cd:11:ce:ba:64:75:29:a2:81:e4:93: 42:19:18:77:e1:7d:da:ed:85:d9:63:39:89:97:fc: 3a:42:00:f8:6d:53:ca:f7:22:f5:f1:f9:f3:8b:13: 33:cb:44:bc:8c:d0:26:60:74:62:e0:70:90:06:24: 4b:e6:cd:31:8a:0d:a9:51:2b:c5:fb:a8:39:4b:1e: 9d:34:d9:c1:4e:c2:e1:2b:fe:4b:8b:9b:73:56:0f: 1a:db:53:d4:cc:c9:3a:d7:3e:53:d8:80:c3:ec:ed: eb:d3:c9:ec:57:63:91:c2:47:fb:f3:84:5b:5c:01: 24:69:e4:1c:f6:0b:4c:ef:f3:c2:d1:b6:4a:1c:2e: 18:a6:47:53:df:d3:84:3b:ff:c9:55:52:54:4a:66: ac:15:6e:4b:a0:36:1a:a1:5d:0b:3a:a7:e7:c4:96: f5:e3:6b:35:79:4e:48:11:07:b3:69:b3:17:29:d0: a8:93:11:63:97:b7:63:49:f9:64:9e:93:72:eb:2b: 71:c4:2b:8a:28:29:d4:ff:bb:b9:68:38:5d:16:af: e2:fa:cb:87:d8:11:cf:ca:45:6b:dc:68:48:08:8d: c1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:93:60:7B:45:BE:2B:14:A2:B2:E5:AF:02:10:E5:E7:C5:2E:C7:B9 X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/AS139994.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.213.1.0/24 140.213.3.0/24 140.213.8.0/24 140.213.10.0/24 140.213.12.0/24 140.213.94.0/23 140.213.118.0/24 140.213.186.0-140.213.188.255 140.213.190.0/24 140.213.192.0-140.213.203.255 140.213.210.0/24 140.213.212.0-140.213.217.255 140.213.234.0-140.213.236.255 Signature Algorithm: sha256WithRSAEncryption 60:4e:b7:80:53:35:a1:4d:1e:ac:bd:dc:de:51:f4:04:3c:8c: 61:9d:a2:51:98:ad:4d:67:a0:ba:05:56:3b:ef:86:24:bd:cf: 68:41:cb:ed:9f:20:87:42:70:ee:f9:ae:9e:01:53:01:6e:e3: 4b:7a:cb:68:dc:6a:47:db:76:0d:8d:09:9a:a7:cb:7f:e6:1f: 79:a9:df:e8:12:bd:04:61:8c:d0:e8:86:b8:b8:44:c8:62:d3: 6d:4a:4a:1f:15:85:de:dc:bb:35:e8:94:40:56:ab:b3:d3:6f: 03:91:95:00:fe:04:eb:ab:9f:01:f9:6f:71:ab:8f:31:e8:ee: 6a:83:bc:21:e5:c7:50:3a:79:b4:7d:c9:4d:d6:c7:1e:2c:84: 0d:c7:38:46:f1:7d:05:9e:bf:32:4c:eb:99:0b:bb:60:6b:c7: 35:23:1e:e7:96:64:82:ea:cd:ea:f8:f5:10:38:52:1f:19:e6: bf:32:45:63:e8:a2:28:49:99:d1:b0:ed:b0:f8:2e:a3:9d:cb: 0f:77:d5:9d:d3:75:0d:93:92:88:99:ab:63:4a:a6:0f:3d:0d: dd:d8:50:7f:60:1e:12:42:6d:ca:28:68:f8:8d:82:82:92:a4: 13:0d:4e:6c:a8:9c:5f:43:8b:20:b3:35:44:ea:92:5e:8d:77: 8f:db:00:64 -----BEGIN CERTIFICATE----- MIIFXjCCBEagAwIBAgIUTfUqGAUTODEuBwDSA4MjN0zuTykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTExMTMxMzEwMzlaFw0yNjExMTIxMzE1MzlaMDMxMTAvBgNV BAMTKDUzOTM2MDdCNDVCRTJCMTRBMkIyRTVBRjAyMTBFNUU3QzUyRUM3QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbXDLAAeWcVkPvV6uPAwh6X1R0 C+DMNFpGXJRXSFGHsQfNEc66ZHUpooHkk0IZGHfhfdrthdljOYmX/DpCAPhtU8r3 IvXx+fOLEzPLRLyM0CZgdGLgcJAGJEvmzTGKDalRK8X7qDlLHp002cFOwuEr/kuL m3NWDxrbU9TMyTrXPlPYgMPs7evTyexXY5HCR/vzhFtcASRp5Bz2C0zv88LRtkoc LhimR1Pf04Q7/8lVUlRKZqwVbkugNhqhXQs6p+fElvXjazV5TkgRB7Npsxcp0KiT EWOXt2NJ+WSek3LrK3HEK4ooKdT/u7loOF0Wr+L6y4fYEc/KRWvcaEgIjcENAgMB AAGjggJoMIICZDAdBgNVHQ4EFgQUU5Nge0W+KxSisuWvAhDl58Uux7kwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jl cG8tcnBraS5pZG5pYy5uZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04 ZDdlN2ZjMmMyMjcvMS9BUzEzOTk5NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjCBhwYIKwYBBQUHAQcBAf8EeDB2MHQEAgABMG4DBACM1QEDBACM1QMDBACM 1QgDBACM1QoDBACM1QwDBAGM1V4DBACM1XYwDAMEAYzVugMEAIzVvAMEAIzVvjAM AwQGjNXAAwQCjNXIAwQAjNXSMAwDBAKM1dQDBAGM1dgwDAMEAYzV6gMEAIzV7DAN BgkqhkiG9w0BAQsFAAOCAQEAYE63gFM1oU0erL3c3lH0BDyMYZ2iUZitTWegugVW O++GJL3PaEHL7Z8gh0Jw7vmungFTAW7jS3rLaNxqR9t2DY0JmqfLf+Yfeanf6BK9 BGGM0OiGuLhEyGLTbUpKHxWF3ty7NeiUQFars9NvA5GVAP4E66ufAflvcauPMeju aoO8IeXHUDp5tH3JTdbHHiyEDcc4RvF9BZ6/MkzrmQu7YGvHNSMe55ZkgurN6vj1 EDhSHxnmvzJFY+iiKEmZ0bDtsPguo53LD3fVndN1DZOSiJmrY0qmDz0N3dhQf2Ae EkJtyiho+I2CgpKkEw1ObKicX0OLILM1ROqSXo13j9sAZA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:29:09 2025 by rpki-client