This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/323430363a6263303a3a2f33322d3332203d3e20313430343032.roa File: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (raw, json) Hash identifier: gwBlMBrSpLgsa+ACTv/ospejLYlB+0aLA704l83TjHw= Subject key identifier: 66:EB:96:54:40:C7:6C:D6:41:0D:F9:8A:E5:34:A0:6A:EC:43:E7:03 Certificate issuer: /CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Certificate serial: 4843A57BE707E773B9E73AF1AE207B65027197A8 Authority key identifier: AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject info access: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/323430363a6263303a3a2f33322d3332203d3e20313430343032.roa Signing time: Thu 20 Nov 2025 14:00:06 +0000 ROA not before: Thu 20 Nov 2025 13:55:06 +0000 ROA not after: Thu 19 Nov 2026 14:00:06 +0000 asID: 140402 IP address blocks: 2406:bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:43:a5:7b:e7:07:e7:73:b9:e7:3a:f1:ae:20:7b:65:02:71:97:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Validity Not Before: Nov 20 13:55:06 2025 GMT Not After : Nov 19 14:00:06 2026 GMT Subject: CN=66EB965440C76CD6410DF98AE534A06AEC43E703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:96:43:89:8b:3c:38:22:c1:61:85:4b:2e:1c: 75:d7:22:1d:62:ed:1b:3a:04:9f:94:d1:7c:c1:76: cc:ee:f8:fd:a7:e4:94:73:7b:77:66:6a:c9:8b:41: 39:a4:ea:52:d9:33:5f:6f:9b:ee:ed:cd:95:a4:f2: 81:ac:c8:7c:4e:90:2a:5b:bb:85:7a:c4:78:d5:91: 91:79:52:2b:fb:68:9e:fe:a1:a3:a7:0e:f4:06:81: 71:60:5b:f0:20:82:25:2e:2f:79:8d:4a:6f:54:b2: a4:92:e6:a5:5b:e0:be:e2:22:9f:a2:33:c7:f8:c6: 16:ea:df:0d:bd:6c:f7:c7:6f:ae:ea:11:a0:a8:db: 65:7a:bd:ff:28:a7:d5:04:25:86:ba:39:6d:4c:11: 0d:ff:f7:2f:35:c8:b1:42:ca:c9:38:6c:1b:43:46: 33:6c:ea:5c:10:0e:33:29:ba:09:91:21:d1:8b:c4: 9b:9d:2b:cf:a5:53:71:f9:1c:eb:44:97:42:14:fb: 3d:e7:57:81:d2:6f:5a:c3:a0:9b:43:a6:0a:31:02: b7:21:81:3b:ef:05:7e:04:81:6d:54:71:2f:bf:d1: f2:f5:a5:04:e5:33:ac:53:19:21:a1:65:21:a0:60: 13:14:66:27:9f:51:bd:f2:7d:d3:6a:cd:b6:7f:a5: 11:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EB:96:54:40:C7:6C:D6:41:0D:F9:8A:E5:34:A0:6A:EC:43:E7:03 X509v3 Authority Key Identifier: keyid:AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/323430363a6263303a3a2f33322d3332203d3e20313430343032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:bc0::/32 Signature Algorithm: sha256WithRSAEncryption 5c:5e:38:82:58:e4:dd:4f:4d:1e:20:8e:ea:9d:d2:d3:0d:93: 79:e1:2f:cd:e9:5a:a3:2c:21:10:3e:2b:ef:fb:30:73:28:7e: c4:4c:60:bf:e1:59:9f:5a:f9:f8:a2:fd:23:bf:28:2d:44:cb: aa:f1:37:8e:07:80:4d:88:df:25:7e:d4:f3:30:55:87:b8:b4: a9:71:c0:a2:76:4a:3c:97:81:f0:b2:9d:fc:b7:94:22:4e:17: 66:b5:a3:b3:f9:0e:52:ae:77:3c:7d:8c:00:4b:cf:27:f9:64: 40:01:dc:8f:60:c2:e4:d3:2b:c2:52:59:d6:d0:7e:80:90:0c: c8:67:57:f5:3d:4b:32:37:eb:1b:e2:85:4e:83:f5:31:db:ac: 94:40:2d:3f:9e:fc:26:d1:15:ac:9f:9a:d1:3d:e2:40:cc:14: 21:82:0a:91:48:69:f8:b8:bc:d6:0d:5a:f0:3d:30:83:fa:c0: 5b:b7:95:f9:9a:92:4a:e6:25:d6:64:8e:b1:75:6c:4a:74:69: 3a:b2:a7:e1:bd:c4:32:46:de:ca:b6:d9:9e:4f:5d:c0:2a:52: 1d:5b:a3:0f:eb:71:24:a6:d1:2a:99:d2:73:97:6d:79:f2:3b: 18:57:7c:e7:29:8b:03:de:8a:f8:d3:45:5a:4b:bb:ce:d9:b7: b6:2f:cb:0f -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUSEOle+cH53O55zrxriB7ZQJxl6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkw NTY4RjQ5NDAeFw0yNTExMjAxMzU1MDZaFw0yNjExMTkxNDAwMDZaMDMxMTAvBgNV BAMTKDY2RUI5NjU0NDBDNzZDRDY0MTBERjk4QUU1MzRBMDZBRUM0M0U3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmlkOJizw4IsFhhUsuHHXXIh1i 7Rs6BJ+U0XzBdszu+P2n5JRze3dmasmLQTmk6lLZM19vm+7tzZWk8oGsyHxOkCpb u4V6xHjVkZF5Uiv7aJ7+oaOnDvQGgXFgW/AggiUuL3mNSm9UsqSS5qVb4L7iIp+i M8f4xhbq3w29bPfHb67qEaCo22V6vf8op9UEJYa6OW1MEQ3/9y81yLFCysk4bBtD RjNs6lwQDjMpugmRIdGLxJudK8+lU3H5HOtEl0IU+z3nV4HSb1rDoJtDpgoxArch gTvvBX4EgW1UcS+/0fL1pQTlM6xTGSGhZSGgYBMUZiefUb3yfdNqzbZ/pRFJAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUZuuWVEDHbNZBDfmK5TSgauxD5wMwHwYDVR0j BBgwFoAUrV6nbXq72GF8Mj8G4k71GQVo9JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjllNzA2NC1iMzUyLTQzYjYtOWYwOS01MTRkNjhhMjczOWUvMC9BRDVFQTc2RDdB QkJEODYxN0MzMjNGMDZFMjRFRjUxOTA1NjhGNDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkwNTY4 RjQ5NC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyOWU3MDY0LWIzNTItNDNiNi05 ZjA5LTUxNGQ2OGEyNzM5ZS8wLzMyMzQzMDM2M2E2MjYzMzAzYTNhMmYzMzMyMmQz MzMyMjAzZDNlMjAzMTM0MzAzNDMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBgvAMA0GCSqGSIb3 DQEBCwUAA4IBAQBcXjiCWOTdT00eII7qndLTDZN54S/N6VqjLCEQPivv+zBzKH7E TGC/4VmfWvn4ov0jvygtRMuq8TeOB4BNiN8lftTzMFWHuLSpccCidko8l4Hwsp38 t5QiThdmtaOz+Q5Srnc8fYwAS88n+WRAAdyPYMLk0yvCUlnW0H6AkAzIZ1f1PUsy N+sb4oVOg/Ux26yUQC0/nvwm0RWsn5rRPeJAzBQhggqRSGn4uLzWDVrwPTCD+sBb t5X5mpJK5iXWZI6xdWxKdGk6sqfhvcQyRt7KttmeT13AKlIdW6MP63EkptEqmdJz l2158jsYV3znKYsD3or400VaS7vO2be2L8sP -----END CERTIFICATE-----Generated at Sun Dec 7 08:36:29 2025 by rpki-client