This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a653030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: C4NfNMKEsQWtmuHoZ58Y/ze8FqI+9TbCR7J3W4JbaPI= Subject key identifier: 7C:2D:0C:B1:DB:D0:D6:EE:BD:75:08:26:8C:62:CA:FB:81:C4:5D:75 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 08E5E99E00C570F0062A60117BC33362E4C41FB2 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 12 Dec 2025 13:00:00 +0000 ROA not before: Fri 12 Dec 2025 12:55:00 +0000 ROA not after: Fri 11 Dec 2026 13:00:00 +0000 asID: 140423 IP address blocks: 2406:20c0:e000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e5:e9:9e:00:c5:70:f0:06:2a:60:11:7b:c3:33:62:e4:c4:1f:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Dec 12 12:55:00 2025 GMT Not After : Dec 11 13:00:00 2026 GMT Subject: CN=7C2D0CB1DBD0D6EEBD7508268C62CAFB81C45D75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ae:3f:0f:c1:79:13:eb:d6:27:07:f9:5e:c4: 59:d7:19:4d:52:fa:b3:96:ff:01:26:d6:90:8e:9d: 57:ad:9b:1d:65:65:d1:e5:85:76:64:fc:88:06:d9: a9:6b:9b:fe:0c:6d:be:b8:7f:c1:4f:e9:44:47:f9: 4d:97:a1:d5:e0:9f:87:0d:6c:b5:5e:78:5d:13:5a: fc:29:81:8a:76:2b:58:c1:57:f3:f3:0e:41:28:df: 2d:a4:7b:f4:34:5f:f7:1a:73:b8:94:bb:2e:e4:3c: 78:39:59:1f:0e:b7:55:5a:3b:8b:0e:90:e6:8a:05: 3b:b9:4f:fc:cc:c8:0f:7c:26:f5:ff:84:7e:ed:45: c9:4a:54:ff:80:b1:06:6e:64:2e:b1:27:02:29:a3: 5f:43:6c:91:df:67:7b:c9:56:1a:86:77:58:86:8c: a0:bf:34:a8:13:58:55:a6:0a:16:15:ca:32:2f:2a: 49:7c:18:d7:a4:4d:9b:07:95:ef:d2:15:77:5f:79: 91:d7:f0:4f:72:6d:0a:eb:7a:ca:96:6f:b9:ae:44: 16:f2:67:05:9f:7b:c2:3f:b7:7b:5f:4d:51:fd:85: 37:16:dd:4e:e6:e3:51:aa:6d:cc:4f:95:2b:25:fd: 9e:c6:df:85:72:21:5d:ed:b8:b7:2d:dd:44:85:a0: ce:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2D:0C:B1:DB:D0:D6:EE:BD:75:08:26:8C:62:CA:FB:81:C4:5D:75 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:e000::/36 Signature Algorithm: sha256WithRSAEncryption 22:3b:74:ee:1f:ec:11:63:6e:ab:4e:56:d2:35:53:93:25:48: c4:b9:a5:40:ec:08:5e:c0:05:d8:01:88:18:ac:22:6c:0c:ad: 96:ab:fd:31:76:a4:35:6a:1c:a2:4c:1f:b3:a5:91:ec:f3:c4: 74:d4:23:2a:55:3c:3d:ad:85:51:0a:8b:5a:84:4f:68:af:03: 22:d3:66:cd:dc:58:16:07:3e:18:da:76:8b:20:cd:57:62:ff: 1e:b6:b2:ee:e4:b9:e6:74:a6:83:6c:7d:30:67:59:5f:e0:1d: 80:1f:8a:fe:ad:fd:89:07:36:55:e9:11:8d:8f:6e:31:d2:6f: 81:02:bc:95:93:7a:42:47:b3:b6:35:45:e7:27:19:e4:25:d0: 98:ac:82:ef:d7:78:fe:55:d0:79:ef:08:9c:95:d3:27:ed:bb: 9e:bf:f3:dd:70:1c:37:76:0f:4d:e0:07:a9:f0:6d:60:99:f7: d2:cb:b4:74:1a:74:04:e8:23:93:c0:84:37:c7:0a:62:8d:5c: 86:a3:aa:b7:54:e0:22:29:8d:c9:1c:ea:40:c5:4a:d3:64:c6: 7b:2f:29:be:25:e7:57:a3:e8:92:5f:b1:18:8a:b1:7f:91:72: 82:c2:2b:15:71:d5:a3:f7:64:fa:ac:fd:3b:46:38:a9:e9:b8: b8:a9:c8:fc -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUCOXpngDFcPAGKmARe8MzYuTEH7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTEyMTIxMjU1MDBaFw0yNjEyMTExMzAwMDBaMDMxMTAvBgNV BAMTKDdDMkQwQ0IxREJEMEQ2RUVCRDc1MDgyNjhDNjJDQUZCODFDNDVENzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXrj8PwXkT69YnB/lexFnXGU1S +rOW/wEm1pCOnVetmx1lZdHlhXZk/IgG2alrm/4Mbb64f8FP6URH+U2XodXgn4cN bLVeeF0TWvwpgYp2K1jBV/PzDkEo3y2ke/Q0X/cac7iUuy7kPHg5WR8Ot1VaO4sO kOaKBTu5T/zMyA98JvX/hH7tRclKVP+AsQZuZC6xJwIpo19DbJHfZ3vJVhqGd1iG jKC/NKgTWFWmChYVyjIvKkl8GNekTZsHle/SFXdfeZHX8E9ybQrresqWb7muRBby ZwWfe8I/t3tfTVH9hTcW3U7m41GqbcxPlSsl/Z7G34VyIV3tuLct3USFoM69AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUfC0MsdvQ1u69dQgmjGLK+4HEXXUwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhNjUzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDA4DANBgkqhkiG9w0BAQsFAAOCAQEAIjt07h/sEWNuq05W0jVTkyVIxLmlQOwI XsAF2AGIGKwibAytlqv9MXakNWocokwfs6WR7PPEdNQjKlU8Pa2FUQqLWoRPaK8D ItNmzdxYFgc+GNp2iyDNV2L/Hray7uS55nSmg2x9MGdZX+AdgB+K/q39iQc2VekR jY9uMdJvgQK8lZN6QkeztjVF5ycZ5CXQmKyC79d4/lXQee8InJXTJ+27nr/z3XAc N3YPTeAHqfBtYJn30su0dBp0BOgjk8CEN8cKYo1chqOqt1TgIimNyRzqQMVK02TG ey8pviXnV6Pokl+xGIqxf5FygsIrFXHVo/dk+qz9O0Y4qem4uKnI/A== -----END CERTIFICATE-----Generated at Sun Dec 21 03:26:01 2025 by rpki-client