This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/323430363a613063303a3a2f33322d3332203d3e20313337333331.roa File: 323430363a613063303a3a2f33322d3332203d3e20313337333331.roa (raw, json) Hash identifier: tFWtX8RfN2Vy0+tsRYH9QMC9vNTQT9OCKTZt0DbC3q4= Subject key identifier: 15:76:F8:A4:AC:3E:45:EA:5D:6C:FC:63:70:09:00:5E:C2:31:4C:FE Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Certificate serial: 43DDCEAD6190E8918247EE8FFD4662A3CEFADF8B Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/323430363a613063303a3a2f33322d3332203d3e20313337333331.roa Signing time: Mon 15 Dec 2025 01:00:00 +0000 ROA not before: Mon 15 Dec 2025 00:55:00 +0000 ROA not after: Mon 14 Dec 2026 01:00:00 +0000 asID: 137331 IP address blocks: 2406:a0c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:dd:ce:ad:61:90:e8:91:82:47:ee:8f:fd:46:62:a3:ce:fa:df:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Validity Not Before: Dec 15 00:55:00 2025 GMT Not After : Dec 14 01:00:00 2026 GMT Subject: CN=1576F8A4AC3E45EA5D6CFC637009005EC2314CFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3b:a6:4a:79:05:87:27:b6:2f:1f:0c:ed:52: 4b:22:3a:82:15:5d:c1:a4:46:93:0e:ec:eb:03:70: 8f:cd:30:37:93:c8:6e:75:66:3a:a5:28:72:c3:a2: d8:1d:bd:8a:8e:dc:eb:af:b1:ca:0a:e0:2f:ec:61: 67:12:e0:3a:6e:ac:5d:56:53:eb:ef:f5:90:e4:2b: f6:a6:4f:07:00:4d:51:01:41:1b:4d:c4:dc:29:f3: 20:40:ff:6b:cd:68:f6:ec:7e:71:7b:ba:cf:2e:fb: eb:3b:fb:87:80:2d:8c:c7:66:f9:39:06:50:d4:30: fc:79:ee:5e:7c:bd:eb:b4:5c:a0:01:15:9c:3e:fe: cb:f8:72:ed:eb:04:5a:7f:aa:54:78:6c:03:f9:85: c6:19:c5:2b:22:17:12:4b:f3:5f:70:f1:64:d2:27: 1e:eb:54:7e:9e:6f:61:f0:de:a0:68:12:0d:f8:3c: 93:5b:ec:20:9b:70:5b:54:90:a6:57:02:ba:d6:55: f1:36:6a:40:ec:38:7a:57:8e:08:a0:21:eb:b3:b2: 9f:e8:86:53:08:44:fe:98:e9:86:fe:d1:98:c8:34: d9:bb:28:b5:83:c9:8d:e5:66:c7:4d:b9:1e:7b:77: a1:82:70:54:b2:18:2e:97:42:2b:83:2d:36:b2:28: ba:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:76:F8:A4:AC:3E:45:EA:5D:6C:FC:63:70:09:00:5E:C2:31:4C:FE X509v3 Authority Key Identifier: keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/323430363a613063303a3a2f33322d3332203d3e20313337333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:a0c0::/32 Signature Algorithm: sha256WithRSAEncryption 30:03:04:d8:61:5f:e2:a4:15:8c:73:f8:eb:06:2f:7d:c8:e0: 9a:dd:aa:73:4e:63:a8:a4:35:c5:f1:d3:a8:97:3d:7e:26:d2: e1:8b:d3:ca:f9:77:6a:79:9d:1f:d6:d5:1d:00:20:80:a2:98: 79:3d:0c:cb:ae:c9:30:11:1a:17:20:57:78:b4:b7:f4:ed:2d: 9e:c1:13:4e:0f:70:d8:4c:4d:2d:a2:d6:67:51:1c:1c:80:71: a4:00:3c:bf:2e:ae:0d:83:e1:99:4d:7b:86:87:0f:f4:57:9c: 4d:79:11:2a:e1:c8:b0:74:35:80:76:e1:cb:a8:a0:4b:eb:91: 64:af:41:f5:71:46:8b:3c:a5:e8:81:b6:ee:7c:f4:c1:41:c7: 6a:c5:ac:23:7c:80:8e:87:79:71:44:47:2a:b6:6f:b2:18:07: 05:88:c4:cb:bd:26:0b:90:c8:31:50:91:c5:80:d6:ce:0d:09: 85:6c:c4:fe:36:8c:06:eb:b4:ee:19:bc:bd:97:93:94:8f:e4: 88:bb:89:3a:17:66:6f:52:c4:c9:39:62:c5:45:e4:0b:13:3c: 3b:9e:bc:ca:cc:eb:00:e9:6c:9e:12:81:32:5c:64:53:49:e2: b1:69:d6:8b:1b:b3:b1:22:74:8f:86:11:95:ad:fe:14:71:8e: d5:1a:10:65 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUQ93OrWGQ6JGCR+6P/UZio87634swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1 QTNDRkEzODAeFw0yNTEyMTUwMDU1MDBaFw0yNjEyMTQwMTAwMDBaMDMxMTAvBgNV BAMTKDE1NzZGOEE0QUMzRTQ1RUE1RDZDRkM2MzcwMDkwMDVFQzIzMTRDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWO6ZKeQWHJ7YvHwztUksiOoIV XcGkRpMO7OsDcI/NMDeTyG51ZjqlKHLDotgdvYqO3OuvscoK4C/sYWcS4DpurF1W U+vv9ZDkK/amTwcATVEBQRtNxNwp8yBA/2vNaPbsfnF7us8u++s7+4eALYzHZvk5 BlDUMPx57l58veu0XKABFZw+/sv4cu3rBFp/qlR4bAP5hcYZxSsiFxJL819w8WTS Jx7rVH6eb2Hw3qBoEg34PJNb7CCbcFtUkKZXArrWVfE2akDsOHpXjgigIeuzsp/o hlMIRP6Y6Yb+0ZjINNm7KLWDyY3lZsdNuR57d6GCcFSyGC6XQiuDLTayKLoVAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUFXb4pKw+RepdbPxjcAkAXsIxTP4wHwYDVR0j BBgwFoAU+r225ERRt/A3iuksJ1Dr/lo8+jgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDA3ZTNkOC05YmZjLTQ0ODMtYTJkZC1hZmE0NTkzODExZTUvMC9GQUJEQjZFNDQ0 NTFCN0YwMzc4QUU5MkMyNzUwRUJGRTVBM0NGQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1QTND RkEzOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkMDdlM2Q4LTliZmMtNDQ4My1h MmRkLWFmYTQ1OTM4MTFlNS8wLzMyMzQzMDM2M2E2MTMwNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzNzMzMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGoMAwDQYJKoZI hvcNAQELBQADggEBADADBNhhX+KkFYxz+OsGL33I4JrdqnNOY6ikNcXx06iXPX4m 0uGL08r5d2p5nR/W1R0AIICimHk9DMuuyTARGhcgV3i0t/TtLZ7BE04PcNhMTS2i 1mdRHByAcaQAPL8urg2D4ZlNe4aHD/RXnE15ESrhyLB0NYB24cuooEvrkWSvQfVx Ros8peiBtu589MFBx2rFrCN8gI6HeXFERyq2b7IYBwWIxMu9JguQyDFQkcWA1s4N CYVsxP42jAbrtO4ZvL2Xk5SP5Ii7iToXZm9SxMk5YsVF5AsTPDuevMrM6wDpbJ4S gTJcZFNJ4rFp1osbs7EidI+GEZWt/hRxjtUaEGU= -----END CERTIFICATE-----Generated at Sat Dec 20 13:56:04 2025 by rpki-client