This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f34382d3438203d3e203538333936.roa File: 323430303a396338303a3a2f34382d3438203d3e203538333936.roa (raw, json) Hash identifier: Cx1Yk1fd+jf+e/EyVlgVZWrup8O7YeN3MJ/TbS+BKqs= Subject key identifier: 09:F3:46:EA:B2:D4:0D:B9:AB:5D:0C:32:9E:7F:4C:A6:44:01:69:7D Certificate issuer: /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C Certificate serial: 590E2A310FF6584D0E69FA94BDC9954F7A61CC26 Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f34382d3438203d3e203538333936.roa Signing time: Wed 05 Nov 2025 10:03:04 +0000 ROA not before: Wed 05 Nov 2025 09:58:04 +0000 ROA not after: Wed 04 Nov 2026 10:03:04 +0000 asID: 58396 IP address blocks: 2400:9c80::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:0e:2a:31:0f:f6:58:4d:0e:69:fa:94:bd:c9:95:4f:7a:61:cc:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C Validity Not Before: Nov 5 09:58:04 2025 GMT Not After : Nov 4 10:03:04 2026 GMT Subject: CN=09F346EAB2D40DB9AB5D0C329E7F4CA64401697D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:05:9c:d4:6e:67:b2:d5:8b:83:ed:76:4d:53: d3:b6:8d:ec:99:fc:9b:60:40:42:e0:a9:01:15:e8: 4d:04:f6:52:8f:18:f7:23:d1:19:2d:67:cb:b5:ba: b8:bb:53:52:e8:81:ad:5b:cf:5d:7e:bd:cf:a6:58: f0:bf:6b:5a:a1:2d:31:46:c7:df:7c:21:16:88:bc: 63:24:e2:f9:06:e1:e2:94:bf:3e:90:1e:a5:c1:c6: 7a:23:0d:56:de:af:d1:21:c5:20:cc:62:09:92:0c: 6e:db:86:cb:44:2a:cd:11:31:29:25:3e:de:77:55: ef:1f:7f:db:11:00:c2:30:12:ab:bf:09:cd:67:ed: 5b:94:32:c8:fb:3e:3e:7e:fe:4e:7e:83:33:d9:3c: cb:89:12:73:52:23:74:b6:aa:0f:74:69:78:e6:1b: 5b:f6:74:af:8d:6b:34:86:ed:93:5b:5d:5e:f9:47: f9:bf:44:ae:3f:fb:21:53:4c:6a:c7:e9:0f:84:af: 65:cd:58:cd:e8:40:7b:37:9d:de:32:b6:f9:7d:53: fb:16:a1:e6:68:5f:31:7b:36:ef:21:f1:9f:16:ea: f0:00:71:1f:75:a7:19:8e:7c:5b:bc:3f:88:92:05: 9b:ca:c9:05:41:1e:d8:79:d3:1f:10:39:25:d8:e3: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F3:46:EA:B2:D4:0D:B9:AB:5D:0C:32:9E:7F:4C:A6:44:01:69:7D X509v3 Authority Key Identifier: keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/323430303a396338303a3a2f34382d3438203d3e203538333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9c80::/48 Signature Algorithm: sha256WithRSAEncryption 58:1a:03:dd:bb:82:8c:67:9d:5d:54:7d:01:28:77:48:b9:8e: f7:15:b3:c7:1d:9a:a9:2c:06:d2:b5:19:83:e6:53:76:97:be: fa:ee:53:81:99:7a:e8:10:f7:0c:10:6a:0f:82:5f:d7:f1:7a: cf:93:83:c0:ff:b2:6f:35:3b:be:3b:8c:cc:ef:89:b9:ff:07: ec:90:3e:63:fd:ca:07:5d:e9:43:d2:8b:96:3c:28:9b:fd:c2: 99:0d:48:e2:e8:90:58:5e:d6:8b:3a:80:92:62:c6:c9:df:7e: b6:9b:2f:0e:6e:13:a5:4d:df:ef:34:d9:4a:0b:9e:26:0c:77: 92:01:ed:35:52:a0:c5:2d:3e:c5:41:ce:6e:2c:64:05:73:0e: 80:42:7f:08:68:66:8d:f0:9c:71:e1:a9:51:3a:84:9b:1c:c7: cb:44:cc:ef:74:b2:2c:26:55:e0:02:1c:6b:1e:17:2d:10:3b: 79:3e:bf:92:d9:01:d7:2e:ec:76:7e:62:67:87:16:ca:6a:d7: 6f:9b:c1:ba:f8:19:5a:cc:ff:21:99:de:3c:46:15:38:55:18: fa:cf:c2:db:de:17:52:6c:35:71:66:4b:49:13:9d:ba:bf:87: d4:9c:75:fe:91:b4:a8:d8:20:d9:e3:d7:64:e1:86:db:f9:d2: 3c:31:ae:6a -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUWQ4qMQ/2WE0OafqUvcmVT3phzCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1 N0NFQUQ4QzAeFw0yNTExMDUwOTU4MDRaFw0yNjExMDQxMDAzMDRaMDMxMTAvBgNV BAMTKDA5RjM0NkVBQjJENDBEQjlBQjVEMEMzMjlFN0Y0Q0E2NDQwMTY5N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0BZzUbmey1YuD7XZNU9O2jeyZ /JtgQELgqQEV6E0E9lKPGPcj0RktZ8u1uri7U1Loga1bz11+vc+mWPC/a1qhLTFG x998IRaIvGMk4vkG4eKUvz6QHqXBxnojDVber9EhxSDMYgmSDG7bhstEKs0RMSkl Pt53Ve8ff9sRAMIwEqu/Cc1n7VuUMsj7Pj5+/k5+gzPZPMuJEnNSI3S2qg90aXjm G1v2dK+NazSG7ZNbXV75R/m/RK4/+yFTTGrH6Q+Er2XNWM3oQHs3nd4ytvl9U/sW oeZoXzF7Nu8h8Z8W6vAAcR91pxmOfFu8P4iSBZvKyQVBHth50x8QOSXY48A1AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUCfNG6rLUDbmrXQwynn9MpkQBaX0wHwYDVR0j BBgwFoAUAZxOJu7CUuph+7Cf2FbN0FfOrYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDVjNDcxNS0yODJlLTQ1N2YtYjg5ZS0wNDFiZjkxMTBhZjgvMC8wMTlDNEUyNkVF QzI1MkVBNjFGQkIwOUZEODU2Q0REMDU3Q0VBRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1N0NF QUQ4Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkNWM0NzE1LTI4MmUtNDU3Zi1i ODllLTA0MWJmOTExMGFmOC8wLzMyMzQzMDMwM2EzOTYzMzgzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDM1MzgzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAJyAAAAwDQYJKoZI hvcNAQELBQADggEBAFgaA927goxnnV1UfQEod0i5jvcVs8cdmqksBtK1GYPmU3aX vvruU4GZeugQ9wwQag+CX9fxes+Tg8D/sm81O747jMzvibn/B+yQPmP9ygdd6UPS i5Y8KJv9wpkNSOLokFhe1os6gJJixsnffrabLw5uE6VN3+802UoLniYMd5IB7TVS oMUtPsVBzm4sZAVzDoBCfwhoZo3wnHHhqVE6hJscx8tEzO90siwmVeACHGseFy0Q O3k+v5LZAdcu7HZ+YmeHFspq12+bwbr4GVrM/yGZ3jxGFThVGPrPwtveF1JsNXFm S0kTnbq/h9Scdf6RtKjYINnj12Thhtv50jwxrmo= -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:39 2025 by rpki-client