This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130323a3a2f34372d3437203d3e203233363739.roa File: 323430313a323930303a3130323a3a2f34372d3437203d3e203233363739.roa (raw, json) Hash identifier: Q24kL3UKKpUgjwH/W8L/gpsXrwqn/pWXSfItt5+FpGE= Subject key identifier: 14:30:95:C9:9C:26:C7:47:58:4B:FD:A1:91:74:B9:51:95:44:E9:EA Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 2648100522C4080E65861EBD978739E53997E99D Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130323a3a2f34372d3437203d3e203233363739.roa Signing time: Fri 12 Dec 2025 09:00:03 +0000 ROA not before: Fri 12 Dec 2025 08:55:03 +0000 ROA not after: Fri 11 Dec 2026 09:00:03 +0000 asID: 23679 IP address blocks: 2401:2900:102::/47 maxlen: 47 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 26:48:10:05:22:c4:08:0e:65:86:1e:bd:97:87:39:e5:39:97:e9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 12 08:55:03 2025 GMT Not After : Dec 11 09:00:03 2026 GMT Subject: CN=143095C99C26C747584BFDA19174B9519544E9EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2a:57:43:6d:15:0b:69:67:c0:aa:4c:63:b3: ad:ab:81:2c:f4:6e:1f:60:45:26:b5:90:73:f9:5b: 72:cf:88:84:71:45:7c:8e:96:3c:32:ad:32:d8:47: 38:83:6b:73:e7:36:b0:60:1b:7b:b9:5a:d4:b6:0f: 9f:0b:0e:fc:e6:48:35:4f:e6:dc:5e:a9:00:99:a7: a6:56:c0:aa:64:d7:ac:ac:20:3a:d8:f9:4f:dc:0e: f0:95:83:7d:57:52:1b:7c:39:55:7e:e1:82:d0:13: 27:ca:73:ad:ed:68:34:b9:c9:f9:d7:4e:c1:7c:53: 2e:e7:ab:7a:33:19:f0:d1:1e:7d:5f:69:8c:53:28: 76:cb:c8:bf:b4:aa:c5:c4:de:26:e3:a2:54:1a:e3: 49:00:97:8e:de:12:5e:e2:27:70:ea:e2:3c:01:27: dd:15:3f:fa:12:3b:1b:e4:f1:dc:89:47:86:fa:80: b6:63:9e:3a:4d:f4:91:44:fb:f3:79:38:bc:46:a8: 37:86:99:c2:97:09:72:0c:ac:f5:28:91:f0:95:19: 10:f8:5d:3f:0d:17:14:9c:9d:15:ee:15:85:f6:84: f3:ee:f6:82:7b:b5:2a:bf:4a:43:88:c0:06:ba:16: 87:55:00:5c:30:a4:65:ed:16:da:5e:05:ef:f8:03: 87:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:30:95:C9:9C:26:C7:47:58:4B:FD:A1:91:74:B9:51:95:44:E9:EA X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130323a3a2f34372d3437203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:102::/47 Signature Algorithm: sha256WithRSAEncryption 5a:fa:9b:1c:a0:55:9b:d7:19:ee:f5:af:4f:de:9d:ed:e8:7b: 59:3f:28:e4:77:64:68:bc:34:3c:7a:ef:3f:7c:8d:64:53:20: ba:d7:40:b2:bc:eb:07:dc:5a:0e:84:f9:f5:45:54:d5:42:aa: 12:4b:94:4d:c2:f7:20:57:c8:6b:36:c9:7c:b5:0d:3f:0e:18: 53:6e:15:ba:58:ee:e4:a5:d0:f4:74:40:39:12:98:db:aa:d0: a5:9e:d4:13:f3:01:13:f9:29:01:b4:cb:77:86:67:b8:5d:31: 2a:0b:61:24:96:3e:1f:d0:d3:48:11:42:14:70:df:e7:db:f0: f4:fe:26:75:ce:eb:36:2b:1c:16:d5:f5:39:0b:71:18:c3:fc: 6e:9b:2d:a2:ed:82:8b:d6:68:e3:43:20:c2:80:33:80:bf:a4: a0:83:4f:48:02:ba:6f:e9:38:94:a7:88:c3:61:4c:b5:5b:87: 78:f6:0e:0f:9f:7d:53:f4:d6:8f:a5:b2:c6:4d:63:b9:14:89: 5a:e7:e0:ff:61:25:f2:6f:9c:31:39:9b:76:ed:dc:9e:62:d9: 09:2c:08:0a:28:d2:e5:fb:a4:7a:02:19:a0:3d:4c:c4:72:66: 47:b9:9d:7f:c0:ce:cd:4f:58:d9:26:d4:97:95:69:6a:a9:d2: 83:24:03:ec -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUJkgQBSLECA5lhh69l4c55TmX6Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMTIwODU1MDNaFw0yNjEyMTEwOTAwMDNaMDMxMTAvBgNV BAMTKDE0MzA5NUM5OUMyNkM3NDc1ODRCRkRBMTkxNzRCOTUxOTU0NEU5RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoKldDbRULaWfAqkxjs62rgSz0 bh9gRSa1kHP5W3LPiIRxRXyOljwyrTLYRziDa3PnNrBgG3u5WtS2D58LDvzmSDVP 5txeqQCZp6ZWwKpk16ysIDrY+U/cDvCVg31XUht8OVV+4YLQEyfKc63taDS5yfnX TsF8Uy7nq3ozGfDRHn1faYxTKHbLyL+0qsXE3ibjolQa40kAl47eEl7iJ3Dq4jwB J90VP/oSOxvk8dyJR4b6gLZjnjpN9JFE+/N5OLxGqDeGmcKXCXIMrPUokfCVGRD4 XT8NFxScnRXuFYX2hPPu9oJ7tSq/SkOIwAa6FodVAFwwpGXtFtpeBe/4A4erAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUFDCVyZwmx0dYS/2hkXS5UZVE6eowHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzEzMDMyM2Ez YTJmMzQzNzJkMzQzNzIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASQBKQAB AjANBgkqhkiG9w0BAQsFAAOCAQEAWvqbHKBVm9cZ7vWvT96d7eh7WT8o5HdkaLw0 PHrvP3yNZFMgutdAsrzrB9xaDoT59UVU1UKqEkuUTcL3IFfIazbJfLUNPw4YU24V ulju5KXQ9HRAORKY26rQpZ7UE/MBE/kpAbTLd4ZnuF0xKgthJJY+H9DTSBFCFHDf 59vw9P4mdc7rNiscFtX1OQtxGMP8bpstou2Ci9Zo40MgwoAzgL+koINPSAK6b+k4 lKeIw2FMtVuHePYOD599U/TWj6Wyxk1juRSJWufg/2El8m+cMTmbdu3cnmLZCSwI CijS5fukegIZoD1MxHJmR7mdf8DOzU9Y2SbUl5VpaqnSgyQD7A== -----END CERTIFICATE-----Generated at Tue Dec 23 23:51:31 2025 by rpki-client