This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32342d3234203d3e20313533313130.roa File: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (raw, json) Hash identifier: 5+7EpoRHiM1GiIon48eKxVuE1jLZPngRC9OVhAPzb0k= Subject key identifier: 41:36:41:2E:1A:D6:1D:FC:A7:75:2A:F8:50:49:A8:E3:DA:99:63:3D Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 4A864B871C9AF19A2054B33B85BDACDBCAD3EF03 Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32342d3234203d3e20313533313130.roa Signing time: Tue 18 Nov 2025 09:03:02 +0000 ROA not before: Tue 18 Nov 2025 08:58:02 +0000 ROA not after: Tue 17 Nov 2026 09:03:02 +0000 asID: 153110 IP address blocks: 160.22.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:86:4b:87:1c:9a:f1:9a:20:54:b3:3b:85:bd:ac:db:ca:d3:ef:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: Nov 18 08:58:02 2025 GMT Not After : Nov 17 09:03:02 2026 GMT Subject: CN=4136412E1AD61DFCA7752AF85049A8E3DA99633D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:ce:75:35:03:b4:b8:10:5a:50:48:c3:5c: 6f:93:8e:4d:0a:7d:4f:65:7e:cd:01:5e:e8:fe:10: 27:88:7f:35:50:5a:2d:1c:92:f8:53:54:5b:5d:c0: 5a:9a:97:37:c6:7e:23:e5:1d:f4:ae:1c:b2:17:74: b6:09:ab:d7:ed:37:8c:e2:89:90:aa:e1:3d:da:bc: 86:fe:d6:27:46:64:1e:90:c8:5e:e3:d9:98:e1:02: bf:b6:5e:17:31:e7:5a:be:72:88:35:d0:a0:50:ca: f7:20:6a:af:67:1d:73:1a:5b:fc:37:1a:58:51:6d: 96:1f:53:de:9e:90:38:b7:85:1b:9f:29:c1:5c:4b: e5:56:42:ba:2d:d2:e3:85:b3:84:6b:c9:a5:5e:e2: 07:8f:66:e8:a8:b5:0d:bd:83:07:8a:88:97:e1:06: 75:61:26:a4:63:ba:17:14:06:6c:8b:4b:ce:8d:bc: 05:86:53:48:a5:35:77:5e:da:56:12:f1:6c:aa:fa: 65:be:19:d5:6e:fb:fb:06:e8:c3:c6:1a:58:01:75: dc:73:86:24:30:13:44:78:21:10:45:e1:b4:f5:4b: 44:67:3b:7f:48:a2:c4:dc:6b:20:b6:ef:3f:54:27: 8b:ea:b4:0e:a5:a4:db:a2:f2:d1:41:63:9b:b9:51: 57:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:36:41:2E:1A:D6:1D:FC:A7:75:2A:F8:50:49:A8:E3:DA:99:63:3D X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39342e302f32342d3234203d3e20313533313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.94.0/24 Signature Algorithm: sha256WithRSAEncryption 36:94:72:36:df:d1:8c:41:96:db:5e:99:f5:12:b5:a9:a3:76: f0:a0:49:0a:77:09:d0:35:e5:cf:f0:b1:71:03:a5:19:0f:44: ba:d7:52:f1:22:e3:34:80:77:f1:4d:bb:53:71:75:3a:62:0d: 43:bb:fb:6c:00:b0:ff:eb:5d:f9:fa:01:6b:55:b7:62:b3:5f: a1:74:0d:ae:5a:6f:71:c0:09:ad:8c:6b:33:bd:51:3b:bc:f0: fd:5b:4c:05:bb:d1:39:e9:cb:31:44:0e:f6:8f:d0:e4:88:e3: 1e:49:1e:9f:29:ad:94:d9:ab:66:e6:0f:cf:ed:68:c8:ab:22: 77:46:cb:b5:32:31:cb:dd:1a:48:0f:bd:3d:d6:a4:e6:fe:cc: 90:f9:f0:9c:f7:f8:60:e3:02:d5:ff:1e:bd:41:e8:75:dc:34: bf:f7:20:90:a6:08:47:3b:76:20:23:2e:7e:87:a0:94:b9:c0: 36:73:fe:cf:14:c2:35:b6:ac:1b:67:bc:70:0f:b7:0b:e9:94: f2:fa:d3:f2:55:9c:07:21:89:dc:96:2c:68:a0:c2:23:1a:14: ab:71:b7:65:da:2d:a9:be:22:5c:ff:e8:64:16:4d:06:7d:ca: 01:da:7d:c0:70:51:19:8e:9c:41:27:14:f1:be:c2:8c:85:6e: da:be:9b:b4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSoZLhxya8ZogVLM7hb2s28rT7wMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNTExMTgwODU4MDJaFw0yNjExMTcwOTAzMDJaMDMxMTAvBgNV BAMTKDQxMzY0MTJFMUFENjFERkNBNzc1MkFGODUwNDlBOEUzREE5OTYzM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPHs51NQO0uBBaUEjDXG+Tjk0K fU9lfs0BXuj+ECeIfzVQWi0ckvhTVFtdwFqalzfGfiPlHfSuHLIXdLYJq9ftN4zi iZCq4T3avIb+1idGZB6QyF7j2ZjhAr+2Xhcx51q+cog10KBQyvcgaq9nHXMaW/w3 GlhRbZYfU96ekDi3hRufKcFcS+VWQrot0uOFs4RryaVe4gePZuiotQ29gweKiJfh BnVhJqRjuhcUBmyLS86NvAWGU0ilNXde2lYS8Wyq+mW+GdVu+/sG6MPGGlgBddxz hiQwE0R4IRBF4bT1S0RnO39IosTcayC27z9UJ4vqtA6lpNui8tFBY5u5UVehAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUQTZBLhrWHfyndSr4UEmo49qZYz0wHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhMDc3Mzg2LTMwMWItNGZmMS04 NzFiLTYyMzJiNWYzYmUwOS8wLzMxMzYzMDJlMzIzMjJlMzkzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMzMxMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWXjANBgkqhkiG 9w0BAQsFAAOCAQEANpRyNt/RjEGW216Z9RK1qaN28KBJCncJ0DXlz/CxcQOlGQ9E utdS8SLjNIB38U27U3F1OmINQ7v7bACw/+td+foBa1W3YrNfoXQNrlpvccAJrYxr M71RO7zw/VtMBbvROenLMUQO9o/Q5IjjHkkenymtlNmrZuYPz+1oyKsid0bLtTIx y90aSA+9Pdak5v7MkPnwnPf4YOMC1f8evUHoddw0v/cgkKYIRzt2ICMufoeglLnA NnP+zxTCNbasG2e8cA+3C+mU8vrT8lWcByGJ3JYsaKDCIxoUq3G3Zdotqb4iXP/o ZBZNBn3KAdp9wHBRGY6cQScU8b7CjIVu2r6btA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:44 2025 by rpki-client