This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/3135372e31302e3136302e302f32332d3234203d3e20313336303532.roa File: 3135372e31302e3136302e302f32332d3234203d3e20313336303532.roa (raw, json) Hash identifier: xTPoIlaNmn7dCA4oz4xbGajx7u9U25QUsQJawDHmNA8= Subject key identifier: 82:1B:CB:A9:BA:89:45:08:75:F0:B2:FB:07:04:F8:3C:3A:D5:94:CB Certificate issuer: /CN=432AE9E2B00941EF8925409E82CA40508A4688B1 Certificate serial: 3F52E65988895C6FA8F4C1157AB5582C50D1E786 Authority key identifier: 43:2A:E9:E2:B0:09:41:EF:89:25:40:9E:82:CA:40:50:8A:46:88:B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/432AE9E2B00941EF8925409E82CA40508A4688B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/3135372e31302e3136302e302f32332d3234203d3e20313336303532.roa Signing time: Fri 14 Nov 2025 03:04:07 +0000 ROA not before: Fri 14 Nov 2025 02:59:07 +0000 ROA not after: Fri 13 Nov 2026 03:04:07 +0000 asID: 136052 IP address blocks: 157.10.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/432AE9E2B00941EF8925409E82CA40508A4688B1.crl rsync://repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/432AE9E2B00941EF8925409E82CA40508A4688B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/432AE9E2B00941EF8925409E82CA40508A4688B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:52:e6:59:88:89:5c:6f:a8:f4:c1:15:7a:b5:58:2c:50:d1:e7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432AE9E2B00941EF8925409E82CA40508A4688B1 Validity Not Before: Nov 14 02:59:07 2025 GMT Not After : Nov 13 03:04:07 2026 GMT Subject: CN=821BCBA9BA89450875F0B2FB0704F83C3AD594CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c9:c1:65:07:43:aa:fa:4e:a8:59:a5:0d:ca: c8:0d:9b:18:fd:7e:7d:44:97:89:e2:b7:0f:81:35: 92:f5:77:ad:26:a2:b7:8d:56:fe:96:c4:2e:a0:31: 96:20:35:4b:55:2e:1c:35:b9:61:dc:58:35:79:29: dc:f7:60:25:98:9b:b8:c2:9a:ae:6f:aa:6b:8a:98: cb:cc:2b:fd:41:03:c8:d9:d5:4e:b6:42:bf:17:5b: 91:a2:ad:27:70:c1:9f:ea:8b:57:ff:fb:53:29:aa: 0b:42:c1:19:d2:d6:47:b7:41:9c:d2:6c:fb:6c:5f: 16:0e:bc:b6:1f:9a:5f:db:54:a1:a2:fe:44:a5:8e: d8:06:20:be:90:2c:6f:72:62:56:11:d9:97:7d:fa: 7b:04:c1:31:c2:6e:55:62:8a:64:9f:5e:69:66:e6: a4:b5:33:6d:20:2e:43:b2:c6:66:61:51:c4:83:5e: 6a:3f:4f:f5:76:55:b2:36:e4:3a:6f:38:e7:4b:4e: ae:ec:04:54:eb:2b:78:1d:44:94:ad:98:56:22:a9: f4:79:8c:69:1f:a3:63:39:6d:90:47:10:ba:70:06: 8f:42:8f:40:94:c8:4f:3a:c8:c7:63:00:7e:a5:d4: 45:6b:75:32:25:2c:2b:29:4b:32:f6:35:02:dd:d4: 81:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1B:CB:A9:BA:89:45:08:75:F0:B2:FB:07:04:F8:3C:3A:D5:94:CB X509v3 Authority Key Identifier: keyid:43:2A:E9:E2:B0:09:41:EF:89:25:40:9E:82:CA:40:50:8A:46:88:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/432AE9E2B00941EF8925409E82CA40508A4688B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/432AE9E2B00941EF8925409E82CA40508A4688B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec2fc1d4-37a6-4943-b4c6-6d8e9b4e5591/0/3135372e31302e3136302e302f32332d3234203d3e20313336303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.160.0/23 Signature Algorithm: sha256WithRSAEncryption bd:e3:eb:40:8e:9f:70:fc:ea:5a:33:42:e7:6a:2d:b6:9a:5e: 49:c0:67:0d:51:82:c0:fe:d5:6a:d9:53:98:68:11:45:8c:b3: 62:1b:5b:89:64:d3:c9:c0:b2:dd:1c:e1:6b:c4:0a:c5:f9:08: 1c:37:1a:c4:35:b8:6b:30:af:ff:9e:61:43:14:30:ad:95:e2: ab:9a:50:b2:54:72:40:92:0a:ce:60:76:7b:31:0a:67:88:8b: 17:cb:d4:c7:61:c4:32:f1:25:d3:cb:e2:19:20:f3:65:90:42: c9:27:47:1c:c1:aa:ee:c2:74:e9:e6:65:3c:60:bb:8a:47:13: b1:be:cd:12:28:ff:98:2a:03:15:43:00:33:6e:78:bb:f7:8f: 06:0c:e6:54:42:51:7a:89:7b:ba:7e:75:24:e4:61:5b:82:87: 36:21:38:6b:ca:81:0a:53:29:24:47:e9:5f:d4:06:ee:48:54: 53:a4:67:30:83:7a:8e:57:39:af:ae:07:de:d5:f8:9b:b8:22: c3:8e:d3:19:f4:68:1c:c4:7f:61:6a:2d:5b:9b:61:ec:67:a6: 89:a4:3a:f2:d7:ce:8a:04:5c:09:05:fb:42:19:d8:0b:1e:a2: ed:aa:f9:83:0b:3e:76:7c:28:53:d5:36:f0:0a:c9:15:f3:40: 1c:be:e8:c7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUP1LmWYiJXG+o9MEVerVYLFDR54YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyQUU5RTJCMDA5NDFFRjg5MjU0MDlFODJDQTQwNTA4 QTQ2ODhCMTAeFw0yNTExMTQwMjU5MDdaFw0yNjExMTMwMzA0MDdaMDMxMTAvBgNV BAMTKDgyMUJDQkE5QkE4OTQ1MDg3NUYwQjJGQjA3MDRGODNDM0FENTk0Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfycFlB0Oq+k6oWaUNysgNmxj9 fn1El4nitw+BNZL1d60moreNVv6WxC6gMZYgNUtVLhw1uWHcWDV5Kdz3YCWYm7jC mq5vqmuKmMvMK/1BA8jZ1U62Qr8XW5GirSdwwZ/qi1f/+1MpqgtCwRnS1ke3QZzS bPtsXxYOvLYfml/bVKGi/kSljtgGIL6QLG9yYlYR2Zd9+nsEwTHCblViimSfXmlm 5qS1M20gLkOyxmZhUcSDXmo/T/V2VbI25DpvOOdLTq7sBFTrK3gdRJStmFYiqfR5 jGkfo2M5bZBHELpwBo9Cj0CUyE86yMdjAH6l1EVrdTIlLCspSzL2NQLd1IGBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUghvLqbqJRQh18LL7BwT4PDrVlMswHwYDVR0j BBgwFoAUQyrp4rAJQe+JJUCegspAUIpGiLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzJmYzFkNC0zN2E2LTQ5NDMtYjRjNi02ZDhlOWI0ZTU1OTEvMC80MzJBRTlFMkIw MDk0MUVGODkyNTQwOUU4MkNBNDA1MDhBNDY4OEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDMyQUU5RTJCMDA5NDFFRjg5MjU0MDlFODJDQTQwNTA4QTQ2 ODhCMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjMmZjMWQ0LTM3YTYtNDk0My1i NGM2LTZkOGU5YjRlNTU5MS8wLzMxMzUzNzJlMzEzMDJlMzEzNjMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQqgMA0GCSqG SIb3DQEBCwUAA4IBAQC94+tAjp9w/OpaM0Lnai22ml5JwGcNUYLA/tVq2VOYaBFF jLNiG1uJZNPJwLLdHOFrxArF+QgcNxrENbhrMK//nmFDFDCtleKrmlCyVHJAkgrO YHZ7MQpniIsXy9THYcQy8SXTy+IZIPNlkELJJ0ccwaruwnTp5mU8YLuKRxOxvs0S KP+YKgMVQwAzbni7948GDOZUQlF6iXu6fnUk5GFbgoc2IThryoEKUykkR+lf1Abu SFRTpGcwg3qOVzmvrgfe1fibuCLDjtMZ9GgcxH9hai1bm2HsZ6aJpDry186KBFwJ BftCGdgLHqLtqvmDCz52fChT1TbwCskV80AcvujH -----END CERTIFICATE-----Generated at Sat Dec 6 17:38:04 2025 by rpki-client