This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa File: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (raw, json) Hash identifier: mdfPWkwanzfVl6roK/rM6ll9riZUs320X01YsS/31ms= Subject key identifier: 1E:0F:CE:97:EE:EA:3B:40:E1:80:C7:71:C0:1D:D5:89:79:A9:35:15 Certificate issuer: /CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Certificate serial: 2A75BB87C2462CE9D75891D8D3A8CBB9253BF9FA Authority key identifier: 9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa Signing time: Fri 21 Nov 2025 03:00:03 +0000 ROA not before: Fri 21 Nov 2025 02:55:03 +0000 ROA not after: Fri 20 Nov 2026 03:00:03 +0000 asID: 153140 IP address blocks: 160.187.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:75:bb:87:c2:46:2c:e9:d7:58:91:d8:d3:a8:cb:b9:25:3b:f9:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93 Validity Not Before: Nov 21 02:55:03 2025 GMT Not After : Nov 20 03:00:03 2026 GMT Subject: CN=1E0FCE97EEEA3B40E180C771C01DD58979A93515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:a2:c5:9c:99:4d:6c:35:1f:90:22:01:c4: 76:d7:a7:ec:5c:d7:a9:62:d0:9e:fd:0b:f6:b8:57: 24:7c:41:2d:11:a6:eb:ab:c5:50:54:a2:a3:88:a0: a6:08:db:ea:f7:c2:f9:a6:2e:5d:a8:ae:ec:ff:ca: ca:34:39:c4:6b:21:3c:63:7a:da:26:f1:48:13:6b: 90:ae:fc:52:44:5a:72:d9:2c:5d:0d:fd:0a:ee:63: 1b:15:e1:ea:f8:63:c3:de:44:e5:6b:0f:38:43:2c: 74:74:06:9b:fb:04:e6:73:af:9c:4e:76:89:85:67: 12:f6:36:2b:e2:b1:ac:b6:84:db:67:d5:19:9f:76: ac:ae:09:4e:c6:78:bd:c7:c0:bf:21:95:9f:90:b0: 50:f2:c2:80:9c:ec:8e:b7:a3:fa:9a:f5:11:38:fe: 2b:a0:e3:9e:6c:c6:8d:76:c6:72:93:8c:42:5a:20: de:be:de:59:ae:77:2b:60:d0:86:3e:91:17:19:f0: ce:87:ab:3b:cc:a5:3e:23:6f:8a:7f:40:8e:92:2c: 8e:d8:c6:3c:90:f7:65:75:d2:4f:1a:73:1b:13:36: 36:df:04:12:05:9a:2b:bb:85:39:54:de:57:14:2c: 34:38:78:2e:1b:a5:4a:d1:9b:dc:78:c8:b0:aa:65: 55:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0F:CE:97:EE:EA:3B:40:E1:80:C7:71:C0:1D:D5:89:79:A9:35:15 X509v3 Authority Key Identifier: keyid:9C:0D:BD:7A:E1:93:2E:6B:9D:09:83:FC:48:E3:21:43:D8:A4:CF:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0DBD7AE1932E6B9D0983FC48E32143D8A4CF93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.231.0/24 Signature Algorithm: sha256WithRSAEncryption 23:73:8c:5b:77:22:27:e8:cf:9b:4d:9f:50:24:9b:49:0a:9e: 4e:2f:d1:33:d6:b7:70:04:ab:54:b4:9f:54:c5:5e:cb:0b:05: 09:df:a7:9f:76:38:10:96:ef:1f:4f:82:21:db:42:9f:a9:c6: 11:b1:14:c0:cd:83:b4:5b:66:2f:b6:1e:da:6c:9a:0a:3c:22: 25:9b:cc:5c:88:89:62:e6:86:88:b6:cd:ce:5e:9b:6f:bb:51: 54:8e:2b:71:a4:44:4b:d8:60:6b:0e:36:13:5e:74:34:00:76: c3:57:a3:bd:fd:da:86:0e:1d:7e:41:d2:aa:fa:ba:5d:d9:67: 36:1e:74:21:5e:bc:88:23:03:a0:f7:73:56:77:21:fd:1f:b9: 26:b9:73:2e:05:94:37:88:0c:2a:14:d8:e8:2c:a7:10:0c:1e: b9:61:05:f5:4d:02:17:02:2d:85:c6:b1:3c:2b:54:a4:41:e2: 45:2c:5d:bc:97:ad:61:ed:45:6e:31:62:78:be:e2:7a:d5:d3: 3b:10:26:ba:e7:e0:5f:09:5c:b4:9f:1d:4a:30:da:d5:46:69: 49:0f:ea:fb:e7:8b:6d:6d:4f:41:72:52:4b:a2:9a:4d:6a:fb: 24:af:96:b5:0d:55:dc:cf:0d:99:3f:9c:ac:70:bf:ba:a6:b5: 9d:ba:20:43 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKnW7h8JGLOnXWJHY06jLuSU7+fowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNE OEE0Q0Y5MzAeFw0yNTExMjEwMjU1MDNaFw0yNjExMjAwMzAwMDNaMDMxMTAvBgNV BAMTKDFFMEZDRTk3RUVFQTNCNDBFMTgwQzc3MUMwMURENTg5NzlBOTM1MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqmqLFnJlNbDUfkCIBxHbXp+xc 16li0J79C/a4VyR8QS0RpuurxVBUoqOIoKYI2+r3wvmmLl2oruz/yso0OcRrITxj etom8UgTa5Cu/FJEWnLZLF0N/QruYxsV4er4Y8PeROVrDzhDLHR0Bpv7BOZzr5xO domFZxL2Nivisay2hNtn1RmfdqyuCU7GeL3HwL8hlZ+QsFDywoCc7I63o/qa9RE4 /iug455sxo12xnKTjEJaIN6+3lmudytg0IY+kRcZ8M6HqzvMpT4jb4p/QI6SLI7Y xjyQ92V10k8acxsTNjbfBBIFmiu7hTlU3lcULDQ4eC4bpUrRm9x4yLCqZVUfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUHg/Ol+7qO0DhgMdxwB3ViXmpNRUwHwYDVR0j BBgwFoAUnA29euGTLmudCYP8SOMhQ9ikz5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMC85QzBEQkQ3QUUx OTMyRTZCOUQwOTgzRkM0OEUzMjE0M0Q4QTRDRjkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwREJEN0FFMTkzMkU2QjlEMDk4M0ZDNDhFMzIxNDNEOEE0 Q0Y5My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhZmNiZmJiLWJhM2YtNGQ1My1h MDRmLTE0ZDZmNGJlMGNiMS8wLzMxMzYzMDJlMzEzODM3MmUzMjMzMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTM0MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgu+cwDQYJ KoZIhvcNAQELBQADggEBACNzjFt3Iifoz5tNn1Akm0kKnk4v0TPWt3AEq1S0n1TF XssLBQnfp592OBCW7x9PgiHbQp+pxhGxFMDNg7RbZi+2Htpsmgo8IiWbzFyIiWLm hoi2zc5em2+7UVSOK3GkREvYYGsONhNedDQAdsNXo7392oYOHX5B0qr6ul3ZZzYe dCFevIgjA6D3c1Z3If0fuSa5cy4FlDeIDCoU2OgspxAMHrlhBfVNAhcCLYXGsTwr VKRB4kUsXbyXrWHtRW4xYni+4nrV0zsQJrrn4F8JXLSfHUow2tVGaUkP6vvni21t T0FyUkuimk1q+ySvlrUNVdzPDZk/nKxwv7qmtZ26IEM= -----END CERTIFICATE-----Generated at Sat Dec 6 17:49:56 2025 by rpki-client