This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a363a3a2f34382d3438203d3e20313339393732.roa File: 323430353a633434303a363a3a2f34382d3438203d3e20313339393732.roa (raw, json) Hash identifier: mbTIULMpDW49jAaGj5l4Q/HdCaJ2mWL8K/BtO/7oyAE= Subject key identifier: FA:49:95:52:D1:C2:ED:ED:DC:FF:01:6C:B5:B9:AD:0A:6A:18:E9:82 Certificate issuer: /CN=6969B3009665224541D322068C9E3444C78F90F9 Certificate serial: 5CFCE1276B1741E0CB8494A9BC92BF3A5DEEAB6B Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a363a3a2f34382d3438203d3e20313339393732.roa Signing time: Sun 30 Nov 2025 10:00:01 +0000 ROA not before: Sun 30 Nov 2025 09:55:01 +0000 ROA not after: Sun 29 Nov 2026 10:00:01 +0000 asID: 139972 IP address blocks: 2405:c440:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:fc:e1:27:6b:17:41:e0:cb:84:94:a9:bc:92:bf:3a:5d:ee:ab:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9 Validity Not Before: Nov 30 09:55:01 2025 GMT Not After : Nov 29 10:00:01 2026 GMT Subject: CN=FA499552D1C2EDEDDCFF016CB5B9AD0A6A18E982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:78:52:a4:c9:91:8a:8d:ad:38:a1:12:d0:f0: 02:87:2c:db:96:de:22:bc:12:42:39:1a:4f:85:10: ef:0a:42:97:bd:30:20:cd:2b:8b:05:3e:59:0a:b9: 98:87:e3:ff:20:ba:8c:2b:4f:3c:4c:6d:92:6f:9b: f5:54:be:29:bd:2e:81:02:83:96:4e:86:7a:f7:e4: cc:c3:18:73:fc:1c:f1:e6:8c:8c:bd:a0:4b:f3:2f: 79:0d:e2:ac:e4:d3:ed:53:b5:e6:6c:24:c0:06:0c: a4:a8:b0:0e:47:65:d0:fa:20:c7:7c:dc:68:41:d9: a0:ef:cb:a6:0c:e8:64:1d:50:24:0f:d2:b5:14:81: 6c:44:87:5d:b4:52:5b:17:bb:d6:f7:25:aa:bb:1a: 59:0b:4e:b8:4d:d6:54:91:f0:a0:59:97:09:01:74: 9c:72:25:41:fa:0d:69:ce:a7:ab:c9:93:f8:3f:03: 54:11:d1:5a:f2:88:bf:c5:e3:d6:83:7a:8c:74:38: d4:19:f5:f7:27:74:aa:3e:d6:f0:75:4c:37:12:41: e0:18:30:e2:ac:ee:2d:66:07:de:c1:eb:b0:b4:fb: 1a:7a:19:58:20:20:d5:2b:b9:3d:cf:d0:ad:7c:31: 4e:48:44:23:08:1e:c4:6c:86:2a:b1:c0:10:10:30: 9d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:49:95:52:D1:C2:ED:ED:DC:FF:01:6C:B5:B9:AD:0A:6A:18:E9:82 X509v3 Authority Key Identifier: keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a363a3a2f34382d3438203d3e20313339393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c440:6::/48 Signature Algorithm: sha256WithRSAEncryption 08:5c:e2:b7:fd:ed:1d:9f:20:be:c3:dd:8e:0b:14:e7:35:f7: 66:c5:43:89:9a:33:05:d2:36:46:38:15:52:8d:2f:b4:e1:22: 2d:b9:54:8a:4b:99:fe:75:1f:63:96:cc:46:1d:59:e0:f1:c3: 1f:b0:bc:87:9a:db:94:00:d7:17:73:0a:a8:fc:69:2c:7e:e1: 29:bb:c5:e3:14:e9:73:48:67:37:3d:c4:33:22:4f:1d:58:f1: 01:f6:1f:b2:24:a7:cb:5e:c9:af:90:90:76:10:db:b1:61:4d: 1d:30:00:39:a4:b1:e3:97:b1:56:d9:79:40:7e:f7:aa:2a:4b: 31:f9:fc:d7:68:78:8f:a6:fe:c2:7d:17:a7:1e:ef:7c:ab:e0: e2:29:51:b2:35:4c:19:e0:6d:a1:2d:7d:b9:ed:6d:cc:e3:63: d8:75:c0:6c:14:c6:71:ff:67:b2:e2:e3:aa:7a:83:85:23:a0: 1c:42:32:cc:4a:60:02:d9:99:f2:71:10:f6:71:04:65:45:1f: 40:c0:01:43:10:8e:7e:1f:e8:5f:87:42:af:f9:62:1f:0f:52: d5:16:38:16:4d:ed:af:78:09:57:1f:94:7c:aa:01:da:c3:f3: 30:ca:0c:02:68:81:f1:42:3f:88:c2:79:f3:d0:9c:5f:1d:52: df:dd:b0:b8 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUXPzhJ2sXQeDLhJSpvJK/Ol3uq2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRD NzhGOTBGOTAeFw0yNTExMzAwOTU1MDFaFw0yNjExMjkxMDAwMDFaMDMxMTAvBgNV BAMTKEZBNDk5NTUyRDFDMkVERUREQ0ZGMDE2Q0I1QjlBRDBBNkExOEU5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDceFKkyZGKja04oRLQ8AKHLNuW 3iK8EkI5Gk+FEO8KQpe9MCDNK4sFPlkKuZiH4/8guowrTzxMbZJvm/VUvim9LoEC g5ZOhnr35MzDGHP8HPHmjIy9oEvzL3kN4qzk0+1TteZsJMAGDKSosA5HZdD6IMd8 3GhB2aDvy6YM6GQdUCQP0rUUgWxEh120UlsXu9b3Jaq7GlkLTrhN1lSR8KBZlwkB dJxyJUH6DWnOp6vJk/g/A1QR0VryiL/F49aDeox0ONQZ9fcndKo+1vB1TDcSQeAY MOKs7i1mB97B67C0+xp6GVggINUruT3P0K18MU5IRCMIHsRshiqxwBAQMJ3rAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU+kmVUtHC7e3c/wFstbmtCmoY6YIwHwYDVR0j BBgwFoAUaWmzAJZlIkVB0yIGjJ40RMePkPkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWVlYmY3Yy1mZTM4LTQ2YTktODMxMS1lMDUzZmNhNTBkZmQvMC82OTY5QjMwMDk2 NjUyMjQ1NDFEMzIyMDY4QzlFMzQ0NEM3OEY5MEY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRDNzhG OTBGOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04 MzExLWUwNTNmY2E1MGRmZC8wLzMyMzQzMDM1M2E2MzM0MzQzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBcRAAAYw DQYJKoZIhvcNAQELBQADggEBAAhc4rf97R2fIL7D3Y4LFOc192bFQ4maMwXSNkY4 FVKNL7ThIi25VIpLmf51H2OWzEYdWeDxwx+wvIea25QA1xdzCqj8aSx+4Sm7xeMU 6XNIZzc9xDMiTx1Y8QH2H7Ikp8teya+QkHYQ27FhTR0wADmkseOXsVbZeUB+96oq SzH5/NdoeI+m/sJ9F6ce73yr4OIpUbI1TBngbaEtfbntbczjY9h1wGwUxnH/Z7Li 46p6g4UjoBxCMsxKYALZmfJxEPZxBGVFH0DAAUMQjn4f6F+HQq/5Yh8PUtUWOBZN 7a94CVcflHyqAdrD8zDKDAJogfFCP4jCefPQnF8dUt/dsLg= -----END CERTIFICATE-----Generated at Sun Dec 7 07:09:00 2025 by rpki-client