This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32332d3233203d3e20313533313130.roa File: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (raw, json) Hash identifier: B9dkfAuQSGFkOUPXQNcOnfZc9f5rLPsJ947+ZcqQIGc= Subject key identifier: E3:89:59:D8:77:7B:1C:ED:E7:DA:C9:26:95:37:51:64:75:48:3F:05 Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 7AE711F7F4D27040C9E071AABAD16A003AD5E6FB Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32332d3233203d3e20313533313130.roa Signing time: Tue 18 Nov 2025 09:03:01 +0000 ROA not before: Tue 18 Nov 2025 08:58:01 +0000 ROA not after: Tue 17 Nov 2026 09:03:01 +0000 asID: 153110 IP address blocks: 160.22.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e7:11:f7:f4:d2:70:40:c9:e0:71:aa:ba:d1:6a:00:3a:d5:e6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: Nov 18 08:58:01 2025 GMT Not After : Nov 17 09:03:01 2026 GMT Subject: CN=E38959D8777B1CEDE7DAC9269537516475483F05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:45:bc:6c:0b:64:4a:37:a0:ed:c3:ab:fd:4c: da:61:a7:10:0b:96:b2:8f:2a:53:28:df:8a:b0:eb: db:65:b1:53:11:56:dd:5b:24:c2:b0:8b:3f:db:1e: 7c:79:fa:db:7f:3c:ef:66:ab:e2:76:f6:eb:79:55: cd:e9:a8:e2:58:44:82:98:d4:59:09:9d:3b:ca:ff: 89:39:ba:cb:50:f9:36:ca:43:e6:59:9b:3e:c8:6b: 6e:ee:0b:53:73:3d:1e:37:1b:97:fb:6d:dc:1f:f5: a5:7d:02:af:58:60:58:0c:1b:26:43:a7:cd:80:da: 33:ad:e3:d3:50:ae:b1:8f:3e:f1:f1:72:ef:5f:e2: a6:66:aa:da:cd:11:19:41:61:f4:20:2a:eb:dd:6f: 00:0f:a1:06:b2:cb:09:0c:20:bb:cd:0e:b3:99:6e: da:5e:ab:0f:0e:3c:0e:14:46:fa:7e:3f:95:97:f9: 3c:05:b1:ab:ac:bb:c5:5a:e1:ee:09:d5:9a:55:b0: 3b:39:19:d4:89:84:d5:01:c8:e8:13:08:1a:58:20: ca:d8:8f:42:38:e5:fc:48:42:12:17:e9:36:60:2c: 37:d1:8b:bf:bd:3d:4b:c4:ef:2f:dc:7e:3d:9b:03: fe:69:08:eb:a4:87:93:b4:8a:bd:49:6d:05:5d:45: 26:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:89:59:D8:77:7B:1C:ED:E7:DA:C9:26:95:37:51:64:75:48:3F:05 X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32332d3233203d3e20313533313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.94.0/23 Signature Algorithm: sha256WithRSAEncryption 44:d7:0f:a5:ff:f3:e9:79:98:83:f7:57:37:02:ad:8a:5f:79: 9a:fa:a4:79:c8:c3:83:1d:3f:4b:c9:38:e0:b0:7c:ae:22:76: 19:82:12:78:c8:0e:8d:ea:c0:8f:2b:5d:63:79:41:0f:f6:7e: 21:50:08:b1:81:3d:c8:91:4b:80:ca:70:8f:0c:e6:89:1c:56: a1:45:4f:01:b1:f8:98:71:3e:c2:9c:3f:48:b1:fb:8c:10:77: 00:91:b1:7c:45:05:be:c7:eb:95:68:e2:7b:1e:06:38:6c:cc: b3:39:62:c8:ff:8c:e8:e2:cb:92:56:41:7c:08:f9:37:c0:3d: a5:7c:d6:18:ba:dd:4f:90:2e:78:c2:e3:74:47:b9:78:64:3f: 3f:f6:9c:ed:cc:02:c6:e4:29:0e:d1:93:05:fe:57:38:ca:3d: 20:f2:e4:91:32:82:62:6f:2c:09:f5:7f:80:d7:fd:b7:8c:62: 70:42:4e:e3:5a:da:a5:ba:86:e9:85:5b:b2:09:81:13:46:02: 97:d1:85:50:4e:14:e3:92:8a:ec:dc:2f:f8:85:7f:d0:b9:0e: 9f:9a:b1:49:24:64:92:2e:28:49:a5:73:c1:8a:8b:ee:e2:fb: ff:50:d1:39:01:4a:3e:9b:03:b1:bc:ea:21:b7:50:d4:8a:e2: 85:94:b6:0d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUeucR9/TScEDJ4HGqutFqADrV5vswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNTExMTgwODU4MDFaFw0yNjExMTcwOTAzMDFaMDMxMTAvBgNV BAMTKEUzODk1OUQ4Nzc3QjFDRURFN0RBQzkyNjk1Mzc1MTY0NzU0ODNGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtRbxsC2RKN6Dtw6v9TNphpxAL lrKPKlMo34qw69tlsVMRVt1bJMKwiz/bHnx5+tt/PO9mq+J29ut5Vc3pqOJYRIKY 1FkJnTvK/4k5ustQ+TbKQ+ZZmz7Ia27uC1NzPR43G5f7bdwf9aV9Aq9YYFgMGyZD p82A2jOt49NQrrGPPvHxcu9f4qZmqtrNERlBYfQgKuvdbwAPoQayywkMILvNDrOZ btpeqw8OPA4URvp+P5WX+TwFsausu8Va4e4J1ZpVsDs5GdSJhNUByOgTCBpYIMrY j0I45fxIQhIX6TZgLDfRi7+9PUvE7y/cfj2bA/5pCOukh5O0ir1JbQVdRSYPAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU44lZ2Hd7HO3n2skmlTdRZHVIPwUwHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhMDc3Mzg2LTMwMWItNGZmMS04 NzFiLTYyMzJiNWYzYmUwOS8wLzMxMzYzMDJlMzIzMjJlMzkzNDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMzMxMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAWXjANBgkqhkiG 9w0BAQsFAAOCAQEARNcPpf/z6XmYg/dXNwKtil95mvqkecjDgx0/S8k44LB8riJ2 GYISeMgOjerAjytdY3lBD/Z+IVAIsYE9yJFLgMpwjwzmiRxWoUVPAbH4mHE+wpw/ SLH7jBB3AJGxfEUFvsfrlWjiex4GOGzMszliyP+M6OLLklZBfAj5N8A9pXzWGLrd T5AueMLjdEe5eGQ/P/ac7cwCxuQpDtGTBf5XOMo9IPLkkTKCYm8sCfV/gNf9t4xi cEJO41rapbqG6YVbsgmBE0YCl9GFUE4U45KK7Nwv+IV/0LkOn5qxSSRkki4oSaVz wYqL7uL7/1DROQFKPpsDsbzqIbdQ1IrihZS2DQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:54:20 2025 by rpki-client