This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa File: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (raw, json) Hash identifier: hi3RbUon3vVwgiqeI1gyjrmQwwjp0fD8/eAvTLaFma0= Subject key identifier: 38:8B:54:4C:6E:65:13:46:26:7C:7E:3B:14:0F:22:7E:29:D4:A4:57 Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 5CE82359506367B10E555312AFE0084F34B98F0A Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa Signing time: Tue 06 Jan 2026 08:00:02 +0000 ROA not before: Tue 06 Jan 2026 07:55:02 +0000 ROA not after: Tue 05 Jan 2027 08:00:02 +0000 asID: 141607 IP address blocks: 223.25.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e8:23:59:50:63:67:b1:0e:55:53:12:af:e0:08:4f:34:b9:8f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Jan 6 07:55:02 2026 GMT Not After : Jan 5 08:00:02 2027 GMT Subject: CN=388B544C6E651346267C7E3B140F227E29D4A457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:34:4c:29:71:54:65:73:5e:5e:e8:05:3d:73: f8:b6:07:35:6e:5a:51:76:7a:7d:69:aa:cc:56:da: 91:d5:b9:7e:ad:ba:c2:b8:76:35:bb:67:e6:49:4a: 4c:54:1a:13:98:6b:40:a7:33:c2:d7:ea:f7:37:c5: 75:31:f7:8b:ac:e1:cc:0f:1a:85:94:90:2d:18:5a: c0:d0:35:61:09:4d:b7:d3:62:79:bb:78:1f:15:67: 9b:62:b6:1e:d9:0c:68:65:4d:a9:e3:67:da:6b:50: 4a:98:e5:33:ab:52:89:48:cd:f7:ff:10:9e:64:81: 30:10:ce:13:31:46:fa:a6:28:26:62:dd:a3:4d:d5: 08:5d:74:80:62:c1:79:48:d3:3e:74:7a:dc:13:76: b2:4b:28:fc:05:01:c1:00:5a:37:fa:c4:4a:77:a9: 9b:8f:7a:4a:e2:e2:07:34:11:6a:52:57:56:ff:1d: 20:37:27:5b:16:47:16:2b:ef:42:21:1b:f3:23:c9: bd:1c:d1:00:52:e9:7b:2e:cc:6a:24:ca:c5:40:82: bd:ed:80:43:71:7d:09:25:73:7d:c8:b0:6a:6b:c6: b7:66:a6:42:eb:23:cf:43:87:ae:7a:5c:f0:66:f6: ce:c6:14:11:8a:b8:ed:be:65:a3:49:e2:85:cb:2f: 8f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8B:54:4C:6E:65:13:46:26:7C:7E:3B:14:0F:22:7E:29:D4:A4:57 X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.25.111.0/24 Signature Algorithm: sha256WithRSAEncryption 23:f3:b2:b3:aa:18:8e:c2:15:ed:72:17:dc:bd:5e:90:ab:d1: 16:cd:f5:95:0a:f0:8e:a3:c2:ec:42:29:ce:54:49:2f:75:a4: 87:aa:d1:13:08:3e:ff:da:ef:f1:9d:b2:a0:4a:b3:75:ee:d4: 8d:bb:08:76:49:69:c7:59:dd:7e:8d:ab:39:ed:41:88:e3:35: 25:ac:74:de:6c:67:2a:e4:dc:d8:1c:5e:b9:4c:33:fd:50:74: e4:bc:62:67:92:99:03:1a:89:19:2b:05:f8:ac:eb:70:2d:7e: 94:9d:31:76:04:93:d9:fc:bd:86:6d:8b:2b:8c:1e:4d:d0:52: f3:77:8d:09:14:bb:27:c2:dd:9e:19:bc:f4:a8:b5:a2:a1:5d: 0f:15:7e:c2:f3:9f:6c:3d:52:da:2d:df:ff:8c:b6:75:48:f3: 75:28:d5:58:ea:d6:f4:58:db:40:23:61:9a:54:5e:16:28:8d: 9a:83:e2:36:89:16:9c:5c:11:67:eb:de:8c:2e:cd:a1:94:ec: 59:59:c9:71:bb:61:d3:f8:3f:52:e7:c5:4f:56:d2:38:95:ad: 81:b2:c0:71:a1:5b:87:b9:5a:f8:a2:79:b7:c5:97:cf:f3:dd: c3:3a:1b:3b:62:94:bd:24:c2:41:61:5d:67:b0:ce:d2:1b:1b: 57:5d:52:42 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXOgjWVBjZ7EOVVMSr+AITzS5jwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yNjAxMDYwNzU1MDJaFw0yNzAxMDUwODAwMDJaMDMxMTAvBgNV BAMTKDM4OEI1NDRDNkU2NTEzNDYyNjdDN0UzQjE0MEYyMjdFMjlENEE0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlNEwpcVRlc15e6AU9c/i2BzVu WlF2en1pqsxW2pHVuX6tusK4djW7Z+ZJSkxUGhOYa0CnM8LX6vc3xXUx94us4cwP GoWUkC0YWsDQNWEJTbfTYnm7eB8VZ5tith7ZDGhlTanjZ9prUEqY5TOrUolIzff/ EJ5kgTAQzhMxRvqmKCZi3aNN1QhddIBiwXlI0z50etwTdrJLKPwFAcEAWjf6xEp3 qZuPekri4gc0EWpSV1b/HSA3J1sWRxYr70IhG/Mjyb0c0QBS6XsuzGokysVAgr3t gENxfQklc33IsGprxrdmpkLrI89Dh656XPBm9s7GFBGKuO2+ZaNJ4oXLL48zAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOItUTG5lE0YmfH47FA8ifinUpFcwHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjU0NDE5LTUzYmUtNGFkNC1i ZjdmLTI5Zjg5MTI1MjNkMC8wLzMyMzIzMzJlMzIzNTJlMzEzMTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3xlvMA0GCSqG SIb3DQEBCwUAA4IBAQAj87KzqhiOwhXtchfcvV6Qq9EWzfWVCvCOo8LsQinOVEkv daSHqtETCD7/2u/xnbKgSrN17tSNuwh2SWnHWd1+jas57UGI4zUlrHTebGcq5NzY HF65TDP9UHTkvGJnkpkDGokZKwX4rOtwLX6UnTF2BJPZ/L2GbYsrjB5N0FLzd40J FLsnwt2eGbz0qLWioV0PFX7C859sPVLaLd//jLZ1SPN1KNVY6tb0WNtAI2GaVF4W KI2ag+I2iRacXBFn696MLs2hlOxZWclxu2HT+D9S58VPVtI4la2BssBxoVuHuVr4 onm3xZfP893DOhs7YpS9JMJBYV1nsM7SGxtXXVJC -----END CERTIFICATE-----Generated at Sun Jan 25 14:03:07 2026 by rpki-client