This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33332e302f32342d3234203d3e203338333230.roa File: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (raw, json) Hash identifier: KzgLs/LHXiYp6dca8nzIUvPjUz6brhBBX/CAtP5nMik= Subject key identifier: E4:61:DB:7D:4B:79:D4:5E:8A:90:48:F2:E6:AC:A0:6E:3F:C7:C5:78 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 1901EFEFED7F094128AD2CDA6F3F14AF44ABB516 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33332e302f32342d3234203d3e203338333230.roa Signing time: Mon 29 Dec 2025 08:00:00 +0000 ROA not before: Mon 29 Dec 2025 07:55:00 +0000 ROA not after: Mon 28 Dec 2026 08:00:00 +0000 asID: 38320 IP address blocks: 175.103.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:01:ef:ef:ed:7f:09:41:28:ad:2c:da:6f:3f:14:af:44:ab:b5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Dec 29 07:55:00 2025 GMT Not After : Dec 28 08:00:00 2026 GMT Subject: CN=E461DB7D4B79D45E8A9048F2E6ACA06E3FC7C578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6e:9e:cc:62:46:25:f6:e8:9e:64:c4:cc:21: 7f:30:64:7e:e8:8c:f8:2f:fb:6c:51:27:ab:9e:c3: 59:26:bb:68:59:a2:0c:f5:ac:e5:50:c9:6c:02:69: 5b:80:d9:e4:4b:41:d4:6d:7c:57:a7:04:e7:03:d0: 87:d8:0e:7a:49:73:89:59:1b:f1:85:82:e3:9b:2d: d6:12:5b:dd:0f:f0:ec:7c:c3:70:64:36:d1:a3:8a: c1:95:62:e5:c4:2a:75:75:2b:5b:17:d7:52:6a:1f: ed:1f:98:a9:95:e9:4f:b2:cc:c0:28:fd:9b:34:95: 90:55:a2:4b:64:c4:78:f8:27:87:69:2b:49:69:2d: 4f:3c:66:fc:56:50:64:b3:88:b4:16:62:9f:bd:7b: 2e:31:b6:b5:df:6a:8e:12:f3:aa:90:ea:5c:9b:51: f3:7b:be:cc:c8:6c:85:2c:03:c9:2b:48:66:ff:62: f3:58:a7:db:10:d9:4e:7f:28:af:81:3c:7e:53:b2: 13:34:71:28:d3:91:6a:8c:68:08:11:48:1d:9b:7c: ae:c5:c4:1c:a9:51:eb:66:17:92:ff:b1:f8:82:22: 07:99:2e:f5:e4:9a:36:c7:d3:b9:ed:2a:32:e5:c3: 0c:f8:b7:3d:a4:7a:98:f0:11:bc:51:a8:68:f5:67: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:61:DB:7D:4B:79:D4:5E:8A:90:48:F2:E6:AC:A0:6E:3F:C7:C5:78 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33332e302f32342d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.103.33.0/24 Signature Algorithm: sha256WithRSAEncryption 48:67:7d:dd:92:08:53:17:91:6d:1f:86:ad:f4:4d:99:49:2d: f2:b2:96:4c:d3:63:d4:30:d8:ab:71:77:74:c2:89:9c:74:49: 63:25:ae:93:80:ed:73:c8:77:3c:1b:45:36:9c:58:8e:50:6d: 32:36:82:2c:54:ed:91:ca:7b:7c:5b:37:c1:09:18:ed:54:e5: e9:bd:a8:4b:2b:c8:81:92:d3:ed:5b:c7:a3:ab:aa:8e:02:6e: a6:0c:b4:07:64:e5:ba:14:28:09:93:50:03:a0:a9:47:dc:b3: 13:1a:be:2a:6e:a3:d1:a7:2e:ba:f3:88:de:c8:af:56:6f:40: e1:6c:9b:00:78:0e:94:ed:33:3d:a5:70:9f:e5:67:7c:24:e8: 71:28:32:7b:e0:37:ab:4b:ec:f4:7c:b3:bb:59:2a:d6:05:c1: b9:59:56:82:6c:ae:78:a4:38:e9:9a:de:68:6c:5b:bb:41:67: ee:dd:8d:0e:a9:95:0c:78:4f:cc:42:77:6f:2f:f8:bf:13:fd: 7d:b1:5c:6f:93:79:ec:dd:e1:1f:92:60:54:c3:d8:eb:d2:d3: f3:b0:f3:1f:5e:2b:27:8c:15:20:54:bf:97:e5:90:ec:99:b7: 03:69:6b:95:bb:02:fa:22:af:54:9e:09:fa:1a:06:19:96:7b: 8e:59:84:44 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGQHv7+1/CUEorSzabz8Ur0SrtRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTEyMjkwNzU1MDBaFw0yNjEyMjgwODAwMDBaMDMxMTAvBgNV BAMTKEU0NjFEQjdENEI3OUQ0NUU4QTkwNDhGMkU2QUNBMDZFM0ZDN0M1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtbp7MYkYl9uieZMTMIX8wZH7o jPgv+2xRJ6uew1kmu2hZogz1rOVQyWwCaVuA2eRLQdRtfFenBOcD0IfYDnpJc4lZ G/GFguObLdYSW90P8Ox8w3BkNtGjisGVYuXEKnV1K1sX11JqH+0fmKmV6U+yzMAo /Zs0lZBVoktkxHj4J4dpK0lpLU88ZvxWUGSziLQWYp+9ey4xtrXfao4S86qQ6lyb UfN7vszIbIUsA8krSGb/YvNYp9sQ2U5/KK+BPH5TshM0cSjTkWqMaAgRSB2bfK7F xBypUetmF5L/sfiCIgeZLvXkmjbH07ntKjLlwwz4tz2kepjwEbxRqGj1Zz+PAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU5GHbfUt51F6KkEjy5qygbj/HxXgwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzczNTJlMzEzMDMzMmUzMzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK9nITANBgkqhkiG 9w0BAQsFAAOCAQEASGd93ZIIUxeRbR+GrfRNmUkt8rKWTNNj1DDYq3F3dMKJnHRJ YyWuk4Dtc8h3PBtFNpxYjlBtMjaCLFTtkcp7fFs3wQkY7VTl6b2oSyvIgZLT7VvH o6uqjgJupgy0B2TluhQoCZNQA6CpR9yzExq+Km6j0acuuvOI3sivVm9A4WybAHgO lO0zPaVwn+VnfCTocSgye+A3q0vs9Hyzu1kq1gXBuVlWgmyueKQ46ZreaGxbu0Fn 7t2NDqmVDHhPzEJ3by/4vxP9fbFcb5N57N3hH5JgVMPY69LT87DzH14rJ4wVIFS/ l+WQ7Jm3A2lrlbsC+iKvVJ4J+hoGGZZ7jlmERA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:21:19 2026 by rpki-client