This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa File: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (raw, json) Hash identifier: wr6UHliebQd7p9YyHhYQ444oA44R+pMzEhtNFNELTlg= Subject key identifier: D0:AE:6B:90:A5:23:BC:9B:28:55:1F:7F:77:EF:D0:33:72:EB:FD:2D Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Certificate serial: 1314AA681FCF8884550B21CF7DBA0515E83FFC4A Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa Signing time: Tue 11 Nov 2025 15:02:32 +0000 ROA not before: Tue 11 Nov 2025 14:57:32 +0000 ROA not after: Tue 10 Nov 2026 15:02:32 +0000 asID: 138866 IP address blocks: 2404:fec0:7071::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:14:aa:68:1f:cf:88:84:55:0b:21:cf:7d:ba:05:15:e8:3f:fc:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97 Validity Not Before: Nov 11 14:57:32 2025 GMT Not After : Nov 10 15:02:32 2026 GMT Subject: CN=D0AE6B90A523BC9B28551F7F77EFD03372EBFD2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1c:1d:65:3b:e2:8b:95:8e:f7:4b:98:f5:91: d3:d3:d7:ce:2b:66:9a:40:dc:17:04:b0:57:e9:dd: 47:33:02:e9:ba:c2:71:d2:fd:0a:36:fe:97:41:ee: bf:19:72:40:e2:c9:9d:73:ec:f2:b0:c8:ae:ae:59: d8:65:3b:87:a7:ac:73:db:67:a1:40:86:45:b0:3c: a2:e0:cd:cb:21:c4:a2:34:e7:26:bf:5b:a5:a4:8c: c8:8a:fb:b4:50:99:24:e5:95:21:18:5d:36:46:1f: 94:54:6f:8a:96:8d:58:b3:b3:92:05:98:1d:8e:33: 90:1c:b3:b0:73:03:f6:4d:17:b4:81:a2:ca:9c:32: 9d:2c:e1:18:ff:67:29:ca:6f:30:0b:70:97:72:cf: 7b:c7:ae:39:9e:6d:dc:b1:18:d3:2f:72:5c:46:0c: a2:6b:76:40:32:67:f3:99:1e:30:d1:6e:37:8c:43: f9:70:7c:26:c0:9b:72:e1:b9:16:61:b5:ac:a9:25: 3a:70:9e:10:b3:c5:10:f6:53:f2:9a:50:2f:25:53: 5d:eb:e1:bd:04:24:e3:19:bc:d6:a9:09:a5:64:81: eb:a6:d0:89:6c:9e:de:e9:a7:df:fa:d3:f3:73:2a: c9:92:04:71:e5:f6:b4:06:9b:7e:a2:b9:b6:ff:e7: c3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:AE:6B:90:A5:23:BC:9B:28:55:1F:7F:77:EF:D0:33:72:EB:FD:2D X509v3 Authority Key Identifier: keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fec0:7071::/48 Signature Algorithm: sha256WithRSAEncryption 78:db:0f:c7:2e:8f:f6:31:53:5e:70:80:8a:50:58:a5:6c:d3: 66:60:94:62:69:bf:20:30:52:86:e1:bb:ba:73:2e:60:f7:73: 70:8f:3d:b8:e9:1c:f0:1d:e6:93:61:3c:96:73:bc:07:ba:2c: 22:82:88:e1:33:8c:ce:ca:82:58:bf:bf:b8:ba:21:02:76:6a: 9e:3e:27:9e:40:8e:31:18:a6:85:b9:d3:7b:f1:d1:d0:e5:55: 80:7e:71:4a:24:86:02:67:39:74:0a:93:1f:88:31:3d:52:8e: d8:d5:ca:63:eb:77:6b:98:0f:52:ce:d4:d3:00:85:07:99:ee: 6a:a5:7f:15:1d:69:06:bc:5b:e3:d5:ca:79:93:d2:41:21:ef: 87:63:5f:b4:71:a9:51:b3:06:03:70:d0:ec:ef:f7:eb:64:e6: c9:e9:26:52:c0:4d:cd:e8:1b:d3:24:ec:3c:84:76:2d:23:27: d7:06:89:3a:8d:fc:d0:f5:8d:8c:a6:41:30:19:12:cc:d0:a4: ba:96:60:bc:f7:ae:c2:fa:01:fb:47:c9:9f:96:40:d7:f9:b0: 86:2b:98:3d:dc:b2:de:9a:0c:75:c2:a1:50:7f:44:da:18:b7: c7:b8:fa:e9:aa:b9:fd:b3:7f:b5:f9:4b:3a:e6:e0:6f:1a:db: e1:9c:97:cd -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUExSqaB/PiIRVCyHPfboFFeg//EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG QzhBN0U5NzAeFw0yNTExMTExNDU3MzJaFw0yNjExMTAxNTAyMzJaMDMxMTAvBgNV BAMTKEQwQUU2QjkwQTUyM0JDOUIyODU1MUY3Rjc3RUZEMDMzNzJFQkZEMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeHB1lO+KLlY73S5j1kdPT184r ZppA3BcEsFfp3UczAum6wnHS/Qo2/pdB7r8ZckDiyZ1z7PKwyK6uWdhlO4enrHPb Z6FAhkWwPKLgzcshxKI05ya/W6WkjMiK+7RQmSTllSEYXTZGH5RUb4qWjVizs5IF mB2OM5Acs7BzA/ZNF7SBosqcMp0s4Rj/ZynKbzALcJdyz3vHrjmebdyxGNMvclxG DKJrdkAyZ/OZHjDRbjeMQ/lwfCbAm3LhuRZhtaypJTpwnhCzxRD2U/KaUC8lU13r 4b0EJOMZvNapCaVkgeum0Ilsnt7pp9/60/NzKsmSBHHl9rQGm36iubb/58PVAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU0K5rkKUjvJsoVR9/d+/QM3Lr/S0wHwYDVR0j BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB N0U5Ny5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhNTE5YWViLTVjNTYtNGNiMy05 NGEwLTBmNDAwZWE2YTM3NS8wLzMyMzQzMDM0M2E2NjY1NjMzMDNhMzczMDM3MzEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODM2MzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BP7AcHEwDQYJKoZIhvcNAQELBQADggEBAHjbD8cuj/YxU15wgIpQWKVs02ZglGJp vyAwUobhu7pzLmD3c3CPPbjpHPAd5pNhPJZzvAe6LCKCiOEzjM7Kgli/v7i6IQJ2 ap4+J55AjjEYpoW503vx0dDlVYB+cUokhgJnOXQKkx+IMT1SjtjVymPrd2uYD1LO 1NMAhQeZ7mqlfxUdaQa8W+PVynmT0kEh74djX7RxqVGzBgNw0Ozv9+tk5snpJlLA Tc3oG9Mk7DyEdi0jJ9cGiTqN/ND1jYymQTAZEszQpLqWYLz3rsL6AftHyZ+WQNf5 sIYrmD3cst6aDHXCoVB/RNoYt8e4+umquf2zf7X5Szrm4G8a2+Gcl80= -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:00 2025 by rpki-client