This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130303a3a2f34372d3437203d3e203233363739.roa File: 323430313a323930303a3130303a3a2f34372d3437203d3e203233363739.roa (raw, json) Hash identifier: ICr1J/vFfci8L9aimZUCmADE5SKPzl/uDm6KGFCF/Gg= Subject key identifier: 8A:97:DE:0C:4D:35:82:93:37:14:DE:B2:A1:94:FE:23:E0:4C:9A:94 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 78231F73A268F3179D9D79EA977EB728FD712B73 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130303a3a2f34372d3437203d3e203233363739.roa Signing time: Fri 12 Dec 2025 09:00:02 +0000 ROA not before: Fri 12 Dec 2025 08:55:02 +0000 ROA not after: Fri 11 Dec 2026 09:00:02 +0000 asID: 23679 IP address blocks: 2401:2900:100::/47 maxlen: 47 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:23:1f:73:a2:68:f3:17:9d:9d:79:ea:97:7e:b7:28:fd:71:2b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 12 08:55:02 2025 GMT Not After : Dec 11 09:00:02 2026 GMT Subject: CN=8A97DE0C4D3582933714DEB2A194FE23E04C9A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ff:40:f1:1e:ed:8d:67:a6:b5:fe:2e:90:ea: d9:73:65:c2:38:0c:e2:ca:84:d0:c3:5c:25:22:b8: 22:f9:1b:7e:7c:53:05:c4:5e:af:04:5d:9f:2e:c0: de:70:fb:e2:5c:3a:9a:41:7c:72:c6:12:a0:4a:8b: 5a:2d:64:06:7b:34:9b:13:2d:4a:d6:da:35:97:01: 93:b7:a5:3c:08:1a:9f:e6:60:6a:24:0e:55:2f:88: 84:62:ef:61:bc:07:5e:b0:e7:9b:5b:6c:a9:dd:fa: f0:d2:da:cc:3f:f6:3b:9b:84:a1:40:1a:72:2e:69: f8:da:1e:05:b2:1e:e2:5a:f2:d0:55:56:65:da:b9: 8b:40:26:24:16:5b:bb:51:20:b1:52:a3:97:5f:52: 95:72:fb:40:4c:dd:b1:2e:04:42:11:82:35:7d:b4: 21:32:73:06:6e:8f:2d:c8:fe:2e:9f:14:d2:a4:78: c8:14:4f:68:eb:02:70:dd:93:20:19:6c:80:7e:8a: 0c:dc:a7:7d:12:28:a1:9d:f2:f3:54:96:b7:58:dc: 52:10:1c:6d:7a:9d:93:f0:d6:b9:0c:e6:ff:bd:76: 65:1a:36:67:df:91:67:4d:55:89:66:08:04:a8:fd: 65:e2:50:a8:cf:6f:78:87:ff:1b:dd:24:ef:87:7f: d4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:97:DE:0C:4D:35:82:93:37:14:DE:B2:A1:94:FE:23:E0:4C:9A:94 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130303a3a2f34372d3437203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:100::/47 Signature Algorithm: sha256WithRSAEncryption b9:33:30:be:da:f8:73:38:1b:a2:67:87:08:f9:45:f7:33:96: 0e:94:e9:21:ba:e7:85:be:4f:f5:16:3d:58:a7:29:f3:41:2a: 4d:79:d5:f8:8d:7d:1f:1f:85:59:9b:c7:1e:1f:41:c5:ca:30: df:35:bf:c6:01:8a:c8:b0:3c:26:5f:3f:18:78:f2:7e:00:a9: 61:76:e9:f6:65:52:eb:87:6b:48:73:a8:41:34:df:63:e4:de: 08:a7:f5:da:f5:1a:69:f3:db:b9:bb:10:1e:8b:5d:ff:1d:87: a4:5f:5d:f2:96:77:a4:fb:20:c2:f1:53:48:e1:6b:b4:21:e7: b4:e8:84:e4:fa:ab:90:a3:94:17:ff:9c:57:39:43:a4:7f:79: b3:b6:7c:7f:28:5f:f5:aa:69:c2:12:3d:cd:75:c8:6d:ad:9b: 3f:78:5f:ed:9a:41:27:db:7b:f7:bc:38:54:b0:56:f5:3f:b6: f3:62:23:f6:38:6c:e4:91:f3:d7:f9:bc:28:67:22:c6:43:9b: 5f:72:05:e7:c9:89:7d:f5:b5:15:3c:27:f0:80:16:6b:a0:e0: 0b:41:88:45:06:8d:0c:ce:e6:05:69:e1:4e:a9:fa:a6:7c:1d: 38:ed:2c:da:02:f0:fa:e8:84:9f:69:d8:53:cd:f4:0a:29:d7: 69:33:8c:ce -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUeCMfc6Jo8xednXnql363KP1xK3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMTIwODU1MDJaFw0yNjEyMTEwOTAwMDJaMDMxMTAvBgNV BAMTKDhBOTdERTBDNEQzNTgyOTMzNzE0REVCMkExOTRGRTIzRTA0QzlBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/0DxHu2NZ6a1/i6Q6tlzZcI4 DOLKhNDDXCUiuCL5G358UwXEXq8EXZ8uwN5w++JcOppBfHLGEqBKi1otZAZ7NJsT LUrW2jWXAZO3pTwIGp/mYGokDlUviIRi72G8B16w55tbbKnd+vDS2sw/9jubhKFA GnIuafjaHgWyHuJa8tBVVmXauYtAJiQWW7tRILFSo5dfUpVy+0BM3bEuBEIRgjV9 tCEycwZujy3I/i6fFNKkeMgUT2jrAnDdkyAZbIB+igzcp30SKKGd8vNUlrdY3FIQ HG16nZPw1rkM5v+9dmUaNmffkWdNVYlmCASo/WXiUKjPb3iH/xvdJO+Hf9RRAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUipfeDE01gpM3FN6yoZT+I+BMmpQwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzEzMDMwM2Ez YTJmMzQzNzJkMzQzNzIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASQBKQAB ADANBgkqhkiG9w0BAQsFAAOCAQEAuTMwvtr4czgbomeHCPlF9zOWDpTpIbrnhb5P 9RY9WKcp80EqTXnV+I19Hx+FWZvHHh9Bxcow3zW/xgGKyLA8Jl8/GHjyfgCpYXbp 9mVS64drSHOoQTTfY+TeCKf12vUaafPbubsQHotd/x2HpF9d8pZ3pPsgwvFTSOFr tCHntOiE5PqrkKOUF/+cVzlDpH95s7Z8fyhf9appwhI9zXXIba2bP3hf7ZpBJ9t7 97w4VLBW9T+282Ij9jhs5JHz1/m8KGcixkObX3IF58mJffW1FTwn8IAWa6DgC0GI RQaNDM7mBWnhTqn6pnwdOO0s2gLw+uiEn2nYU830CinXaTOMzg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:26:09 2025 by rpki-client