This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130343a3a2f34372d3437203d3e203233363739.roa File: 323430313a323930303a3130343a3a2f34372d3437203d3e203233363739.roa (raw, json) Hash identifier: eOHgMHfxYdW1tqwLLnwytD9GZ/SqKyoaoqiFZ5WlKjM= Subject key identifier: 0C:1B:90:0A:4A:F5:CD:EA:3E:8C:FF:14:95:4E:00:4F:DB:F1:31:79 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 6ECCA6FD0939C885BF07CE23599BE5BE12B048AE Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130343a3a2f34372d3437203d3e203233363739.roa Signing time: Fri 12 Dec 2025 09:00:02 +0000 ROA not before: Fri 12 Dec 2025 08:55:02 +0000 ROA not after: Fri 11 Dec 2026 09:00:02 +0000 asID: 23679 IP address blocks: 2401:2900:104::/47 maxlen: 47 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 6e:cc:a6:fd:09:39:c8:85:bf:07:ce:23:59:9b:e5:be:12:b0:48:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 12 08:55:02 2025 GMT Not After : Dec 11 09:00:02 2026 GMT Subject: CN=0C1B900A4AF5CDEA3E8CFF14954E004FDBF13179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9d:f8:5a:21:ec:a9:23:eb:45:0b:30:d7:ae: 96:e0:97:0d:b7:8b:cf:d5:bc:d6:f7:4b:6e:df:58: d6:93:4f:44:49:ca:89:6f:58:80:28:45:b1:19:ac: 08:a0:0e:f7:89:9c:c1:a6:9c:c0:15:fb:b2:3d:2f: 74:c9:c3:d6:f4:37:e4:bd:d1:ba:4d:4d:fa:db:44: 5c:f7:0a:99:3a:02:2e:c0:5b:e5:5c:c7:2d:61:05: f2:ab:86:ba:05:5c:c1:8d:66:e1:11:a1:eb:db:a9: 98:cc:08:99:13:78:b8:42:34:fc:27:bc:a7:dc:0f: c0:6f:48:d5:bb:27:a4:5c:4d:83:2d:53:ab:f8:e4: 49:7a:14:88:ed:35:e9:7f:ee:5a:94:6f:a6:e5:29: 0e:f1:94:34:2f:3c:59:d1:33:cc:3f:f8:23:03:69: 38:03:f6:17:b3:48:c2:09:c8:bc:65:74:54:da:2c: cf:57:4e:4a:9e:aa:9e:49:6c:c4:4d:d4:fc:37:62: f0:9d:59:f1:58:cb:6f:80:db:ce:05:65:5c:58:3d: 7d:89:29:f8:39:f5:cf:43:0a:a5:88:c5:31:fa:7e: 0d:22:57:0c:2d:73:0c:5f:90:1f:45:72:d0:d7:00: ae:2c:76:63:44:20:9c:c1:c0:ba:82:19:87:ef:bb: d7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1B:90:0A:4A:F5:CD:EA:3E:8C:FF:14:95:4E:00:4F:DB:F1:31:79 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130343a3a2f34372d3437203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:104::/47 Signature Algorithm: sha256WithRSAEncryption 14:da:28:bf:92:88:98:f8:59:f8:fa:ed:dc:4b:74:81:28:46: 50:2f:7b:d4:ca:fd:cd:19:cd:c0:57:11:59:42:ee:f4:86:be: 75:68:73:82:d4:5e:9b:81:91:3e:40:16:de:d1:95:00:b8:b9: c2:a4:77:85:e3:4d:dc:9c:30:37:67:5e:eb:90:38:45:ad:85: de:f6:af:02:f4:6d:22:ee:a3:fd:9c:c4:c1:d7:bf:73:29:3b: 88:ca:e4:ea:b8:14:35:10:65:bb:65:f1:77:dd:8b:54:90:43: 66:16:88:9a:6f:84:78:02:db:da:cf:5e:86:e1:78:10:b5:83: 50:bf:ea:2a:d9:22:35:2d:94:38:3b:b2:93:c8:f3:c5:e1:21: b7:de:58:7f:1f:b3:32:80:4e:e3:62:ff:7c:b9:4c:8a:31:9c: a1:d6:d8:f0:f4:0c:55:a4:eb:ce:d9:91:92:3e:0b:6f:d3:5c: 1a:0d:97:e1:ba:99:c0:56:cd:66:61:e9:e3:93:17:1a:8f:d7: a6:b5:75:14:9f:df:30:4f:d7:0e:fd:16:db:9d:6f:a9:81:06: 70:23:5c:36:95:9c:8f:a5:46:df:1a:6e:92:99:e0:98:e6:95: 0c:1e:a4:fe:66:ac:c7:de:82:fe:0b:d4:3b:0b:61:a4:ca:e0: da:ac:5a:ab -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUbsym/Qk5yIW/B84jWZvlvhKwSK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMTIwODU1MDJaFw0yNjEyMTEwOTAwMDJaMDMxMTAvBgNV BAMTKDBDMUI5MDBBNEFGNUNERUEzRThDRkYxNDk1NEUwMDRGREJGMTMxNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqnfhaIeypI+tFCzDXrpbglw23 i8/VvNb3S27fWNaTT0RJyolvWIAoRbEZrAigDveJnMGmnMAV+7I9L3TJw9b0N+S9 0bpNTfrbRFz3Cpk6Ai7AW+Vcxy1hBfKrhroFXMGNZuERoevbqZjMCJkTeLhCNPwn vKfcD8BvSNW7J6RcTYMtU6v45El6FIjtNel/7lqUb6blKQ7xlDQvPFnRM8w/+CMD aTgD9hezSMIJyLxldFTaLM9XTkqeqp5JbMRN1Pw3YvCdWfFYy2+A284FZVxYPX2J Kfg59c9DCqWIxTH6fg0iVwwtcwxfkB9FctDXAK4sdmNEIJzBwLqCGYfvu9ejAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUDBuQCkr1zeo+jP8UlU4AT9vxMXkwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzEzMDM0M2Ez YTJmMzQzNzJkMzQzNzIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASQBKQAB BDANBgkqhkiG9w0BAQsFAAOCAQEAFNoov5KImPhZ+Prt3Et0gShGUC971Mr9zRnN wFcRWULu9Ia+dWhzgtRem4GRPkAW3tGVALi5wqR3heNN3JwwN2de65A4Ra2F3vav AvRtIu6j/ZzEwde/cyk7iMrk6rgUNRBlu2Xxd92LVJBDZhaImm+EeALb2s9ehuF4 ELWDUL/qKtkiNS2UODuyk8jzxeEht95Yfx+zMoBO42L/fLlMijGcodbY8PQMVaTr ztmRkj4Lb9NcGg2X4bqZwFbNZmHp45MXGo/XprV1FJ/fME/XDv0W251vqYEGcCNc NpWcj6VG3xpukpngmOaVDB6k/masx96C/gvUOwthpMrg2qxaqw== -----END CERTIFICATE-----Generated at Tue Dec 23 23:51:31 2025 by rpki-client