This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a383a3a2f34382d3438203d3e20313339393732.roa File: 323430353a633434303a383a3a2f34382d3438203d3e20313339393732.roa (raw, json) Hash identifier: fis6p5xtzergO0yqcgYbenFp5St19jT3Hlh35aVHMuY= Subject key identifier: B0:6A:74:8C:72:08:9C:52:E1:72:96:BE:AA:A1:EF:35:DD:04:71:D6 Certificate issuer: /CN=6969B3009665224541D322068C9E3444C78F90F9 Certificate serial: 432D8645A8B271B9DD571749F704BE7E0EE59C7B Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a383a3a2f34382d3438203d3e20313339393732.roa Signing time: Sun 30 Nov 2025 09:00:00 +0000 ROA not before: Sun 30 Nov 2025 08:55:00 +0000 ROA not after: Sun 29 Nov 2026 09:00:00 +0000 asID: 139972 IP address blocks: 2405:c440:8::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:2d:86:45:a8:b2:71:b9:dd:57:17:49:f7:04:be:7e:0e:e5:9c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9 Validity Not Before: Nov 30 08:55:00 2025 GMT Not After : Nov 29 09:00:00 2026 GMT Subject: CN=B06A748C72089C52E17296BEAAA1EF35DD0471D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:ab:0d:be:d3:dd:27:3b:ab:d3:21:17:c8: 3c:38:11:36:fb:a8:e0:66:11:f2:76:e1:7a:93:e0: 0a:a4:6c:b7:78:e6:dd:06:e7:8a:88:fd:0e:41:49: 34:b3:8e:25:b7:dc:cf:25:24:2a:17:30:1f:53:4b: c6:a8:de:a4:0d:f1:c0:3d:ac:0c:11:e7:93:80:09: a7:e6:2b:d7:22:7f:1f:df:bc:c7:11:6d:f6:6c:f5: 70:c9:41:c2:cf:eb:03:68:17:f5:67:41:14:61:53: ca:5e:16:dd:59:bb:b5:6f:ac:a6:a5:3a:bc:d9:a1: 7f:b4:88:3d:83:3b:90:f8:7e:96:43:e0:bd:21:d5: 5c:6f:38:76:cd:ca:80:cf:09:05:24:42:1b:ec:8d: c5:8c:0d:c2:48:8d:b0:6e:4e:28:50:e3:1a:48:cd: ef:33:1d:ec:56:0c:67:04:e1:bb:f3:8a:49:f8:a8: 9b:34:78:b0:fe:19:6f:95:48:4c:ca:d5:dc:8a:09: a3:c2:d2:c4:79:26:01:62:8f:d4:99:da:ca:37:20: d2:b1:2c:fe:08:37:23:3b:ad:94:16:e7:f9:42:c7: 24:19:af:bb:45:57:25:75:d4:da:3a:fe:9a:a9:a9: 40:7b:9d:60:3d:88:23:30:e0:88:ab:5e:85:99:b3: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6A:74:8C:72:08:9C:52:E1:72:96:BE:AA:A1:EF:35:DD:04:71:D6 X509v3 Authority Key Identifier: keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a383a3a2f34382d3438203d3e20313339393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c440:8::/48 Signature Algorithm: sha256WithRSAEncryption 6e:5c:77:99:c5:fd:c0:3b:be:e8:61:d9:e4:24:1e:79:90:7b: 4d:7c:77:c3:b9:cd:03:61:dd:c1:de:bc:f4:ca:42:1b:3b:79: 8b:9b:0e:d6:16:85:c8:3b:c3:b1:87:34:ac:ab:b9:a6:6e:ac: d9:5b:b1:4c:f8:75:e5:33:bf:53:d5:f7:8d:83:0a:a1:9c:8c: 09:ac:4a:e5:fc:10:96:f6:f6:93:d2:20:40:63:92:c1:c1:12: 9e:35:b4:a6:45:73:d9:2b:9e:ca:09:6f:21:eb:df:02:c6:68: 34:fe:c2:b2:19:02:0c:52:40:ca:cc:39:65:bf:b4:a6:85:b4: 8c:ab:71:4a:89:79:b1:b3:0e:bf:56:ed:47:3e:8a:7e:d0:91: 3f:6c:12:57:39:59:5d:0d:cc:7c:b8:2c:43:23:81:a4:4a:69: 76:1a:c0:80:04:72:38:98:a0:9a:c0:4d:5c:83:21:dd:48:49: 2c:4d:5d:8d:23:3a:7a:d1:cf:21:8d:04:c8:b4:3f:d3:fe:bc: b3:d5:ef:f3:11:2f:4b:7d:67:17:7e:0c:54:b9:ad:47:f4:5d: 46:08:4e:6d:f9:7f:22:a4:c1:8d:f1:42:f1:3e:de:9d:68:71: a1:81:19:49:ff:d3:b9:ec:39:9b:90:1f:56:62:ff:14:77:00: 07:46:cf:8e -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUQy2GRaiycbndVxdJ9wS+fg7lnHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRD NzhGOTBGOTAeFw0yNTExMzAwODU1MDBaFw0yNjExMjkwOTAwMDBaMDMxMTAvBgNV BAMTKEIwNkE3NDhDNzIwODlDNTJFMTcyOTZCRUFBQTFFRjM1REQwNDcxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7masNvtPdJzur0yEXyDw4ETb7 qOBmEfJ24XqT4AqkbLd45t0G54qI/Q5BSTSzjiW33M8lJCoXMB9TS8ao3qQN8cA9 rAwR55OACafmK9cifx/fvMcRbfZs9XDJQcLP6wNoF/VnQRRhU8peFt1Zu7VvrKal OrzZoX+0iD2DO5D4fpZD4L0h1VxvOHbNyoDPCQUkQhvsjcWMDcJIjbBuTihQ4xpI ze8zHexWDGcE4bvzikn4qJs0eLD+GW+VSEzK1dyKCaPC0sR5JgFij9SZ2so3INKx LP4INyM7rZQW5/lCxyQZr7tFVyV11No6/pqpqUB7nWA9iCMw4IirXoWZs7H/AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUsGp0jHIInFLhcpa+qqHvNd0EcdYwHwYDVR0j BBgwFoAUaWmzAJZlIkVB0yIGjJ40RMePkPkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWVlYmY3Yy1mZTM4LTQ2YTktODMxMS1lMDUzZmNhNTBkZmQvMC82OTY5QjMwMDk2 NjUyMjQ1NDFEMzIyMDY4QzlFMzQ0NEM3OEY5MEY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRDNzhG OTBGOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04 MzExLWUwNTNmY2E1MGRmZC8wLzMyMzQzMDM1M2E2MzM0MzQzMDNhMzgzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBcRAAAgw DQYJKoZIhvcNAQELBQADggEBAG5cd5nF/cA7vuhh2eQkHnmQe018d8O5zQNh3cHe vPTKQhs7eYubDtYWhcg7w7GHNKyruaZurNlbsUz4deUzv1PV942DCqGcjAmsSuX8 EJb29pPSIEBjksHBEp41tKZFc9krnsoJbyHr3wLGaDT+wrIZAgxSQMrMOWW/tKaF tIyrcUqJebGzDr9W7Uc+in7QkT9sElc5WV0NzHy4LEMjgaRKaXYawIAEcjiYoJrA TVyDId1ISSxNXY0jOnrRzyGNBMi0P9P+vLPV7/MRL0t9Zxd+DFS5rUf0XUYITm35 fyKkwY3xQvE+3p1ocaGBGUn/07nsOZuQH1Zi/xR3AAdGz44= -----END CERTIFICATE-----Generated at Sun Dec 7 06:20:57 2025 by rpki-client