This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a323030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: Gj15b0uJ5jxFlupufbVGiL3vjYYMcdN3H+7eSXsJ59M= Subject key identifier: 1E:D2:E9:1E:2A:A1:31:07:C0:AF:DA:73:50:F3:65:C1:E0:A3:65:16 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 054396A7A288153E04BC5CF0EE9C662C25E3F205 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 12 Dec 2025 13:00:01 +0000 ROA not before: Fri 12 Dec 2025 12:55:01 +0000 ROA not after: Fri 11 Dec 2026 13:00:01 +0000 asID: 140423 IP address blocks: 2406:20c0:2000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:43:96:a7:a2:88:15:3e:04:bc:5c:f0:ee:9c:66:2c:25:e3:f2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Dec 12 12:55:01 2025 GMT Not After : Dec 11 13:00:01 2026 GMT Subject: CN=1ED2E91E2AA13107C0AFDA7350F365C1E0A36516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:82:f8:ff:10:86:18:10:74:34:a3:a5:2c: fc:cc:8e:d9:bb:30:cc:a9:95:c7:e9:d5:d8:75:79: 9e:2d:2c:63:b4:57:6d:e3:e4:29:f0:ad:f8:27:0a: e9:fb:44:44:34:52:b1:f0:d9:30:be:b7:85:78:50: 40:17:30:c4:57:d6:25:b9:fe:a1:4c:22:38:71:74: 07:00:80:73:cf:2f:ba:b7:13:f7:50:7d:4d:0f:60: 57:03:a9:1c:0a:dc:a6:15:64:8a:8c:12:d7:b3:dd: 0f:a9:71:d8:96:32:ab:99:e0:bb:68:35:b1:18:a3: 81:d1:ea:b5:ec:8d:09:54:49:bd:74:e4:44:9a:7f: 92:da:94:5e:df:ba:59:57:be:f8:f2:cf:c9:d7:19: c8:1a:b9:d9:09:f0:07:ca:87:4c:72:5f:3e:f7:27: 06:fc:fa:93:7b:07:8b:0a:be:d6:a5:fc:d2:2d:04: 5e:bb:dc:29:9f:03:50:01:8c:e6:a5:bd:d2:31:b4: 50:9e:f9:6c:48:f0:bc:c6:a1:88:8f:43:ed:08:89: de:c6:25:fa:d3:ae:f1:e8:fd:8c:a9:27:26:b7:cf: e4:e6:d5:ba:b7:f5:8b:3b:f5:85:86:f7:40:95:31: c9:a1:47:f9:d2:ca:0a:99:a6:2e:43:b6:e4:0e:13: 14:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D2:E9:1E:2A:A1:31:07:C0:AF:DA:73:50:F3:65:C1:E0:A3:65:16 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:2000::/36 Signature Algorithm: sha256WithRSAEncryption 7b:3f:f7:ed:6b:21:d2:0e:4e:ba:c0:7b:fd:8a:48:dc:46:ab: 07:fb:1c:08:ba:2e:b4:cc:bf:d9:4c:06:9c:2c:4a:1b:e9:1e: a0:a9:5c:02:1a:29:de:46:e2:06:68:82:67:d7:d6:1b:7c:9c: d7:fa:8e:63:da:3e:60:29:2f:d5:ea:1b:a4:17:a6:1c:f3:d1: 7c:98:36:63:ab:3e:c9:e2:a8:7a:56:35:4d:16:51:e9:ac:7d: d8:79:6d:f4:d9:d5:92:de:5a:ab:51:15:76:8a:f8:4e:c9:d4: aa:90:b2:b8:f9:bd:27:2c:e8:9a:14:67:59:77:b8:cd:ca:ba: 81:cf:af:86:b4:1e:fb:fb:cd:d5:5d:8b:d2:cc:2f:72:8f:1f: 43:62:ce:33:af:4e:fe:e0:8a:97:c8:31:db:bb:6f:2f:20:7b: 87:b1:d3:f7:1e:5c:9d:28:24:70:56:d1:c9:c7:6a:23:88:2d: c8:45:6a:3f:4d:48:3e:fc:68:b7:67:05:36:6b:aa:6b:b6:ea: 2f:57:bb:5c:bd:2c:67:7e:fe:ee:80:dc:c0:f5:6c:98:4f:23: c4:76:06:90:ab:77:d5:fc:65:66:46:3a:6b:2e:48:26:ef:20: 28:51:02:7c:68:56:7b:fa:70:4a:44:dd:34:dc:26:69:74:64: b2:95:c8:7a -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUBUOWp6KIFT4EvFzw7pxmLCXj8gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTEyMTIxMjU1MDFaFw0yNjEyMTExMzAwMDFaMDMxMTAvBgNV BAMTKDFFRDJFOTFFMkFBMTMxMDdDMEFGREE3MzUwRjM2NUMxRTBBMzY1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/m4L4/xCGGBB0NKOlLPzMjtm7 MMyplcfp1dh1eZ4tLGO0V23j5CnwrfgnCun7REQ0UrHw2TC+t4V4UEAXMMRX1iW5 /qFMIjhxdAcAgHPPL7q3E/dQfU0PYFcDqRwK3KYVZIqMEtez3Q+pcdiWMquZ4Lto NbEYo4HR6rXsjQlUSb105ESaf5LalF7fullXvvjyz8nXGcgaudkJ8AfKh0xyXz73 Jwb8+pN7B4sKvtal/NItBF673CmfA1ABjOalvdIxtFCe+WxI8LzGoYiPQ+0Iid7G JfrTrvHo/YypJya3z+Tm1bq39Ys79YWG90CVMcmhR/nSygqZpi5DtuQOExRjAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUHtLpHiqhMQfAr9pzUPNlweCjZRYwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzIzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAIDANBgkqhkiG9w0BAQsFAAOCAQEAez/37Wsh0g5OusB7/YpI3EarB/scCLou tMy/2UwGnCxKG+keoKlcAhop3kbiBmiCZ9fWG3yc1/qOY9o+YCkv1eobpBemHPPR fJg2Y6s+yeKoelY1TRZR6ax92Hlt9NnVkt5aq1EVdor4TsnUqpCyuPm9JyzomhRn WXe4zcq6gc+vhrQe+/vN1V2L0swvco8fQ2LOM69O/uCKl8gx27tvLyB7h7HT9x5c nSgkcFbRycdqI4gtyEVqP01IPvxot2cFNmuqa7bqL1e7XL0sZ37+7oDcwPVsmE8j xHYGkKt31fxlZkY6ay5IJu8gKFECfGhWe/pwSkTdNNwmaXRkspXIeg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:54:05 2025 by rpki-client