This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39352e302f32342d3234203d3e20313533313130.roa File: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (raw, json) Hash identifier: K9djVkSLZL7Bw4K3e9tKRF4aAw6JK34iXwFmQ3sWP34= Subject key identifier: 9F:53:91:19:E1:C4:B3:69:72:A8:BD:C9:F1:81:CD:0E:C6:D1:94:E6 Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 29A7AD3A890EB9DC0A8B1DDFF5481DA2B7C6834C Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39352e302f32342d3234203d3e20313533313130.roa Signing time: Tue 18 Nov 2025 09:03:02 +0000 ROA not before: Tue 18 Nov 2025 08:58:02 +0000 ROA not after: Tue 17 Nov 2026 09:03:02 +0000 asID: 153110 IP address blocks: 160.22.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a7:ad:3a:89:0e:b9:dc:0a:8b:1d:df:f5:48:1d:a2:b7:c6:83:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: Nov 18 08:58:02 2025 GMT Not After : Nov 17 09:03:02 2026 GMT Subject: CN=9F539119E1C4B36972A8BDC9F181CD0EC6D194E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6b:52:88:80:2e:61:d2:8b:99:b3:e2:0e:dc: ac:8d:8d:5e:96:40:59:4e:2f:87:11:25:a5:55:5d: af:bb:18:cb:8d:3e:ab:79:1d:1c:5f:a1:06:83:54: b8:f5:97:ef:5f:23:a5:9f:85:85:0b:cf:3a:d9:3a: 89:75:e8:54:53:c1:a8:2e:6f:8e:15:dd:90:52:e4: b3:26:31:9d:9e:24:0e:4f:dd:08:80:fe:cb:b2:59: 66:0b:55:77:ad:fd:f5:e0:d6:2f:15:0b:35:fe:b9: 5c:60:4d:75:48:17:2c:71:b7:0a:6c:2b:7a:c0:73: 73:6f:71:03:2d:c4:19:3c:a9:fb:de:70:4e:b7:94: b1:80:71:e2:90:8d:2d:47:06:99:87:d2:42:19:7e: d7:c7:7c:15:25:43:62:89:ce:9a:50:4e:72:6f:74: d5:fc:d1:0f:4e:36:95:a7:a8:7d:04:47:a4:8e:35: e6:48:f4:45:1e:c5:ee:e0:e4:e7:5a:e7:ed:e9:c8: 7c:f9:d2:b1:9a:c9:13:56:4f:bf:c3:77:f7:43:54: a9:bf:d3:0f:ee:25:9e:ab:81:cd:d5:43:02:d0:55: 81:8a:74:f7:92:6a:64:61:95:4d:57:ae:d9:7d:72: d4:59:a0:a8:79:e9:50:a6:0e:2d:5d:68:0b:05:22: 82:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:53:91:19:E1:C4:B3:69:72:A8:BD:C9:F1:81:CD:0E:C6:D1:94:E6 X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/3136302e32322e39352e302f32342d3234203d3e20313533313130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.95.0/24 Signature Algorithm: sha256WithRSAEncryption 02:8a:4d:23:32:7c:96:8e:19:80:ca:fe:82:47:87:a7:66:cd: a7:95:98:70:04:63:8b:7e:9a:15:2c:b7:ee:18:46:a6:c9:af: 5c:89:60:4d:a0:5b:fe:bb:0d:97:8e:b1:24:41:d0:4f:30:75: 17:9b:ee:a7:45:2e:54:dc:66:fa:d6:25:18:da:a6:4e:f2:fe: bb:78:8f:70:d4:a8:0d:71:46:fb:a2:72:6d:fe:de:b9:d0:79: 7c:dc:3e:ea:05:e1:16:01:2d:75:7d:34:70:81:09:1b:54:48: 57:5e:2e:34:24:89:44:01:eb:ff:35:84:a8:49:70:82:cc:b7: 50:3c:dc:c3:b5:79:d7:64:b7:8e:b5:45:51:4a:dc:3d:92:6e: d5:ee:da:a1:bb:4d:5b:2a:10:2f:a7:19:0b:22:15:11:1b:54: 2d:8a:63:42:b7:05:ea:fb:c6:24:e5:cc:f3:9d:bc:e7:e1:0d: fd:c7:30:f8:e0:5a:d0:9f:26:4f:ed:8a:ba:1c:c3:c0:bf:9f: d2:71:86:e4:e7:99:06:a2:18:49:93:00:d2:8a:27:15:e4:9f: a2:f6:a7:ba:15:81:65:b7:14:66:52:24:ec:b6:31:0e:c5:5e: df:a8:66:4c:ff:5a:e9:9e:39:c2:25:bc:49:4d:73:3f:33:ad: 0d:c9:0b:08 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKaetOokOudwKix3f9UgdorfGg0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNTExMTgwODU4MDJaFw0yNjExMTcwOTAzMDJaMDMxMTAvBgNV BAMTKDlGNTM5MTE5RTFDNEIzNjk3MkE4QkRDOUYxODFDRDBFQzZEMTk0RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDra1KIgC5h0ouZs+IO3KyNjV6W QFlOL4cRJaVVXa+7GMuNPqt5HRxfoQaDVLj1l+9fI6WfhYULzzrZOol16FRTwagu b44V3ZBS5LMmMZ2eJA5P3QiA/suyWWYLVXet/fXg1i8VCzX+uVxgTXVIFyxxtwps K3rAc3NvcQMtxBk8qfvecE63lLGAceKQjS1HBpmH0kIZftfHfBUlQ2KJzppQTnJv dNX80Q9ONpWnqH0ER6SONeZI9EUexe7g5Oda5+3pyHz50rGayRNWT7/Dd/dDVKm/ 0w/uJZ6rgc3VQwLQVYGKdPeSamRhlU1Xrtl9ctRZoKh56VCmDi1daAsFIoJzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUn1ORGeHEs2lyqL3J8YHNDsbRlOYwHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhMDc3Mzg2LTMwMWItNGZmMS04 NzFiLTYyMzJiNWYzYmUwOS8wLzMxMzYzMDJlMzIzMjJlMzkzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMzMxMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWXzANBgkqhkiG 9w0BAQsFAAOCAQEAAopNIzJ8lo4ZgMr+gkeHp2bNp5WYcARji36aFSy37hhGpsmv XIlgTaBb/rsNl46xJEHQTzB1F5vup0UuVNxm+tYlGNqmTvL+u3iPcNSoDXFG+6Jy bf7eudB5fNw+6gXhFgEtdX00cIEJG1RIV14uNCSJRAHr/zWEqElwgsy3UDzcw7V5 12S3jrVFUUrcPZJu1e7aobtNWyoQL6cZCyIVERtULYpjQrcF6vvGJOXM85285+EN /ccw+OBa0J8mT+2KuhzDwL+f0nGG5OeZBqIYSZMA0oonFeSfovanuhWBZbcUZlIk 7LYxDsVe36hmTP9a6Z45wiW8SU1zPzOtDckLCA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:50 2025 by rpki-client