This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a3a2f33322d3332203d3e20313334363337.roa File: 323430333a653338303a3a2f33322d3332203d3e20313334363337.roa (raw, json) Hash identifier: vAyuSzG3C8SpiGpFIcSs/HWsw07B00gA01NjZSkVNoY= Subject key identifier: 34:22:94:E2:03:A2:D8:B7:64:45:B1:48:12:C6:AA:3B:F5:3A:4D:A8 Certificate issuer: /CN=027DBEC91021154263BB0CF1565833705023D987 Certificate serial: 4C3C8BC8BC1FB7168FD080F35D231A0DF0CCC777 Authority key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer Subject info access: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a3a2f33322d3332203d3e20313334363337.roa Signing time: Tue 23 Dec 2025 10:03:05 +0000 ROA not before: Tue 23 Dec 2025 09:58:05 +0000 ROA not after: Tue 22 Dec 2026 10:03:05 +0000 asID: 134637 IP address blocks: 2403:e380::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 20:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:3c:8b:c8:bc:1f:b7:16:8f:d0:80:f3:5d:23:1a:0d:f0:cc:c7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027DBEC91021154263BB0CF1565833705023D987 Validity Not Before: Dec 23 09:58:05 2025 GMT Not After : Dec 22 10:03:05 2026 GMT Subject: CN=342294E203A2D8B76445B14812C6AA3BF53A4DA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c8:bc:dc:95:4c:06:3d:ac:36:57:84:1b:ba: 0f:ca:84:47:0b:f8:fd:12:34:d1:5f:16:72:8b:9b: bf:36:11:1f:fc:d4:de:f2:94:a5:ef:06:4b:12:4c: 35:d3:0d:41:b3:84:17:d6:27:5b:3c:9f:5c:23:d9: 09:06:dc:9c:5a:f9:08:d5:8c:e8:94:46:bf:4b:59: 86:9d:61:d8:f8:06:4a:b8:69:0c:0a:69:47:0a:e2: fb:b5:81:37:82:f8:47:8b:06:59:82:ab:65:88:c7: 45:4b:21:b3:82:2b:c7:db:5c:3c:48:81:9b:3d:71: 18:a4:23:0c:85:75:9d:30:64:87:56:d3:1a:11:6f: 61:6a:32:1b:ce:ac:f0:08:05:87:26:06:c6:c9:8c: f1:59:91:6f:6a:97:f3:d1:79:bf:09:d6:af:dd:a8: 4d:9a:12:4f:15:98:94:08:d9:ad:b1:a9:ff:b0:46: 5f:1e:dc:2c:a1:96:b6:2c:3b:a1:d5:ae:cd:21:f0: 99:d0:68:a6:e4:52:c4:f7:53:bb:5b:10:5e:a4:f5: ec:d1:83:56:b6:83:86:5a:40:2b:2f:e9:da:8a:8d: f2:08:79:43:75:e4:c9:68:08:52:10:ec:31:76:3e: f7:c6:e2:d7:58:1b:43:8b:10:05:8f:16:d0:62:85: e5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:22:94:E2:03:A2:D8:B7:64:45:B1:48:12:C6:AA:3B:F5:3A:4D:A8 X509v3 Authority Key Identifier: keyid:02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a3a2f33322d3332203d3e20313334363337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:e380::/32 Signature Algorithm: sha256WithRSAEncryption 2d:b0:77:89:2a:ae:23:55:b5:70:a9:f1:a3:6d:c4:6f:ad:f8: 5d:89:74:86:82:a1:66:df:a6:86:8b:56:90:26:3c:08:0b:9f: 12:81:7f:42:61:76:15:36:67:e2:9a:a5:53:4e:a7:8a:70:13: 4e:64:49:91:25:3f:94:c5:54:82:e6:12:9a:22:07:a4:c3:b2: e7:78:11:6f:86:34:9c:0d:83:d5:4b:26:6f:96:b1:2e:ab:2e: 4d:a7:8a:35:cf:e8:2a:1b:a3:22:39:4a:84:20:0a:e8:47:8e: 95:49:27:27:38:81:11:ef:fe:ad:69:e7:31:f0:08:b5:2e:5d: e9:84:20:6c:3a:55:0e:09:96:3f:91:5a:cb:5b:93:7a:1c:6c: cd:e4:a9:9c:c0:ee:61:29:31:38:0c:7c:81:8c:32:30:be:dc: b6:12:18:ba:00:00:fd:b2:1c:71:74:02:7c:f4:a6:78:bc:8c: 53:90:24:4b:aa:a6:06:01:aa:68:41:5f:d6:a5:ec:34:81:36: 7d:f2:07:27:04:4b:ba:3f:bf:73:d5:02:a4:92:d2:84:ee:75: a9:ea:cc:ce:1e:e5:7a:9d:62:31:34:eb:70:22:dd:17:b9:7f: 94:52:2c:04:b1:94:ee:c8:6d:cc:0f:b5:63:6c:79:a0:b1:37: cb:30:81:02 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUTDyLyLwftxaP0IDzXSMaDfDMx3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1 MDIzRDk4NzAeFw0yNTEyMjMwOTU4MDVaFw0yNjEyMjIxMDAzMDVaMDMxMTAvBgNV BAMTKDM0MjI5NEUyMDNBMkQ4Qjc2NDQ1QjE0ODEyQzZBQTNCRjUzQTREQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDyLzclUwGPaw2V4Qbug/KhEcL +P0SNNFfFnKLm782ER/81N7ylKXvBksSTDXTDUGzhBfWJ1s8n1wj2QkG3Jxa+QjV jOiURr9LWYadYdj4Bkq4aQwKaUcK4vu1gTeC+EeLBlmCq2WIx0VLIbOCK8fbXDxI gZs9cRikIwyFdZ0wZIdW0xoRb2FqMhvOrPAIBYcmBsbJjPFZkW9ql/PReb8J1q/d qE2aEk8VmJQI2a2xqf+wRl8e3CyhlrYsO6HVrs0h8JnQaKbkUsT3U7tbEF6k9ezR g1a2g4ZaQCsv6dqKjfIIeUN15MloCFIQ7DF2PvfG4tdYG0OLEAWPFtBiheWhAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUNCKU4gOi2LdkRbFIEsaqO/U6TagwHwYDVR0j BBgwFoAUAn2+yRAhFUJjuwzxVlgzcFAj2YcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzRmMjE0YS1iZjU1LTQwNDgtODQ1ZC0yMDY3NWZiNWYyYTQvMC8wMjdEQkVDOTEw MjExNTQyNjNCQjBDRjE1NjU4MzM3MDUwMjNEOTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI3REJFQzkxMDIxMTU0MjYzQkIwQ0YxNTY1ODMzNzA1MDIz RDk4Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3NGYyMTRhLWJmNTUtNDA0OC04 NDVkLTIwNjc1ZmI1ZjJhNC8wLzMyMzQzMDMzM2E2NTMzMzgzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNDM2MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQD44AwDQYJKoZI hvcNAQELBQADggEBAC2wd4kqriNVtXCp8aNtxG+t+F2JdIaCoWbfpoaLVpAmPAgL nxKBf0JhdhU2Z+KapVNOp4pwE05kSZElP5TFVILmEpoiB6TDsud4EW+GNJwNg9VL Jm+WsS6rLk2nijXP6CoboyI5SoQgCuhHjpVJJyc4gRHv/q1p5zHwCLUuXemEIGw6 VQ4Jlj+RWstbk3ocbM3kqZzA7mEpMTgMfIGMMjC+3LYSGLoAAP2yHHF0Anz0pni8 jFOQJEuqpgYBqmhBX9al7DSBNn3yBycES7o/v3PVAqSS0oTudanqzM4e5XqdYjE0 63Ai3Re5f5RSLASxlO7IbcwPtWNseaCxN8swgQI= -----END CERTIFICATE-----Generated at Fri Dec 26 05:12:19 2025 by rpki-client