This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa File: 3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa (raw, json) Hash identifier: 6UiLpVPHAM2b/F0KpOLxDGuWn5F2zZMU2m3pD9G/52k= Subject key identifier: 57:2D:79:6F:AD:94:F2:3B:3E:F9:E9:6F:40:D3:54:D0:3A:83:AB:2C Certificate issuer: /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Certificate serial: 22E92FD4C12FCC488B8AEFE99ED63A0D9FBEB60E Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa Signing time: Thu 06 Nov 2025 04:00:00 +0000 ROA not before: Thu 06 Nov 2025 03:55:00 +0000 ROA not after: Thu 05 Nov 2026 04:00:00 +0000 asID: 153150 IP address blocks: 160.191.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e9:2f:d4:c1:2f:cc:48:8b:8a:ef:e9:9e:d6:3a:0d:9f:be:b6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4 Validity Not Before: Nov 6 03:55:00 2025 GMT Not After : Nov 5 04:00:00 2026 GMT Subject: CN=572D796FAD94F23B3EF9E96F40D354D03A83AB2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:be:f3:79:46:07:13:cb:54:6a:df:35:4d: 9b:d3:65:40:34:cd:12:85:9b:18:52:bd:81:e7:56: 96:f7:2a:c9:da:cf:29:96:a0:98:fa:e6:ed:9b:04: db:bc:32:34:f0:a2:25:a7:2c:06:41:65:15:b2:f9: 1f:25:26:d3:e1:d5:58:df:c1:94:d2:a5:6d:74:cb: 95:7e:98:88:97:3a:6c:53:b8:61:cc:e1:4b:f3:4b: a1:36:c3:28:1e:bf:17:4a:d7:ee:b1:02:cf:fd:1b: 75:5b:b2:51:c0:d4:6e:17:42:d2:68:bd:5c:a9:e4: c6:d9:8d:84:1e:21:d0:5f:59:1b:29:f9:6b:52:d5: 6d:e4:1a:5c:67:4a:3b:5d:05:8f:bb:87:e3:54:d9: b6:57:5d:ed:05:ef:14:3a:0b:de:5d:1f:dd:f5:3d: 80:16:83:0f:47:17:82:ba:6e:d1:c3:04:99:27:31: 6d:5a:a7:93:54:95:e6:61:f5:1d:d6:6e:39:d4:02: 4d:3b:91:cf:37:e2:e7:87:45:93:3f:94:9a:3f:9d: 29:83:61:87:41:66:18:09:4a:59:cd:7c:fd:b3:60: ad:c1:bf:08:39:9c:df:d3:6b:6a:60:ae:ff:7c:0d: 8c:94:64:6c:d6:28:d7:3d:4c:a1:87:e2:b1:d6:14: 60:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2D:79:6F:AD:94:F2:3B:3E:F9:E9:6F:40:D3:54:D0:3A:83:AB:2C X509v3 Authority Key Identifier: keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/3136302e3139312e3138312e302f32342d3234203d3e20313533313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.181.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:8e:38:3b:43:d0:62:89:b0:62:92:db:88:3c:59:b9:63:72: cc:03:b3:d3:65:2c:5f:54:e0:bc:93:04:ab:17:c6:dc:f0:c5: 4c:7a:ed:94:d8:03:77:d3:87:6f:fd:aa:f7:89:90:42:5e:06: 08:e3:0e:cd:79:26:22:b6:dd:54:6f:ac:5b:99:34:c5:00:4c: 43:24:97:29:0e:db:23:df:e8:10:b4:ee:b0:64:7c:ae:65:2c: 89:df:49:10:e1:7c:ac:7f:5d:3e:15:46:2f:0b:8c:60:ac:47: 95:46:1e:f9:69:c7:da:8c:fe:09:66:54:21:f9:14:d6:27:11: c1:95:1b:51:69:63:64:96:23:ae:a4:91:c6:8c:53:28:4f:4c: c2:81:e7:37:45:6c:11:58:9e:a3:bb:f7:cf:ec:e7:69:a8:cf: e8:15:c3:93:47:64:e5:4d:7b:17:13:15:8b:65:68:6e:ad:de: c4:f6:15:08:46:cb:fb:96:94:82:32:66:29:34:be:a4:d8:93: ff:3c:d2:b7:43:79:56:6e:91:a2:55:35:d1:b5:48:9e:5f:77: cd:0a:e5:5b:e2:fd:75:aa:12:37:6a:24:9b:01:b7:b7:e2:f0: 27:73:28:94:c4:c8:c5:97:4f:ef:0b:5c:2d:b7:de:69:e7:ce: 52:19:3e:ce -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIukv1MEvzEiLiu/pntY6DZ++tg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAw Qjk0RjhBNDAeFw0yNTExMDYwMzU1MDBaFw0yNjExMDUwNDAwMDBaMDMxMTAvBgNV BAMTKDU3MkQ3OTZGQUQ5NEYyM0IzRUY5RTk2RjQwRDM1NEQwM0E4M0FCMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ar7zeUYHE8tUat81TZvTZUA0 zRKFmxhSvYHnVpb3KsnazymWoJj65u2bBNu8MjTwoiWnLAZBZRWy+R8lJtPh1Vjf wZTSpW10y5V+mIiXOmxTuGHM4UvzS6E2wygevxdK1+6xAs/9G3VbslHA1G4XQtJo vVyp5MbZjYQeIdBfWRsp+WtS1W3kGlxnSjtdBY+7h+NU2bZXXe0F7xQ6C95dH931 PYAWgw9HF4K6btHDBJknMW1ap5NUleZh9R3WbjnUAk07kc834ueHRZM/lJo/nSmD YYdBZhgJSlnNfP2zYK3Bvwg5nN/Ta2pgrv98DYyUZGzWKNc9TKGH4rHWFGCLAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUVy15b62U8js++elvQNNU0DqDqywwHwYDVR0j BBgwFoAUYkfRqvOxW1DTpz5E5Z4sAAuU+KQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMC82MjQ3RDFBQUYz QjE1QjUwRDNBNzNFNDRFNTlFMkMwMDBCOTRGOEE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjI0N0QxQUFGM0IxNUI1MEQzQTczRTQ0RTU5RTJDMDAwQjk0 RjhBNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1OTYxMmEyLTQ0MzMtNDJiOS04 ZjRmLWI4NDc3NzZhY2FmZC8wLzMxMzYzMDJlMzEzOTMxMmUzMTM4MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTM1MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgv7UwDQYJ KoZIhvcNAQELBQADggEBAEqOODtD0GKJsGKS24g8WbljcswDs9NlLF9U4LyTBKsX xtzwxUx67ZTYA3fTh2/9qveJkEJeBgjjDs15JiK23VRvrFuZNMUATEMklykO2yPf 6BC07rBkfK5lLInfSRDhfKx/XT4VRi8LjGCsR5VGHvlpx9qM/glmVCH5FNYnEcGV G1FpY2SWI66kkcaMUyhPTMKB5zdFbBFYnqO798/s52moz+gVw5NHZOVNexcTFYtl aG6t3sT2FQhGy/uWlIIyZik0vqTYk/880rdDeVZukaJVNdG1SJ5fd80K5Vvi/XWq EjdqJJsBt7fi8CdzKJTEyMWXT+8LXC233mnnzlIZPs4= -----END CERTIFICATE-----Generated at Sun Dec 7 01:49:31 2025 by rpki-client