This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/323430313a313363303a3a2f33322d3336203d3e20313332363532.roa File: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (raw, json) Hash identifier: Zp5MkPoy+mcmuZyHWWPJeYcS5LhdUDlPA4O7bCCb+jQ= Subject key identifier: 02:77:0A:80:59:5F:22:2F:FD:9B:FC:E7:39:52:99:C0:4B:D6:BF:DF Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 108EE9B33F12F189876F6E47AD0A1A9387812D5D Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/323430313a313363303a3a2f33322d3336203d3e20313332363532.roa Signing time: Tue 16 Dec 2025 05:00:02 +0000 ROA not before: Tue 16 Dec 2025 04:55:02 +0000 ROA not after: Tue 15 Dec 2026 05:00:02 +0000 asID: 132652 IP address blocks: 2401:13c0::/32 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 16:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:8e:e9:b3:3f:12:f1:89:87:6f:6e:47:ad:0a:1a:93:87:81:2d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: Dec 16 04:55:02 2025 GMT Not After : Dec 15 05:00:02 2026 GMT Subject: CN=02770A80595F222FFD9BFCE7395299C04BD6BFDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f3:4a:1e:6c:07:52:0f:94:05:eb:79:45:d9: c9:e5:8d:dd:65:32:29:19:98:29:64:6c:9a:8a:ee: 4b:41:4d:5d:1c:1c:92:e7:bd:1e:59:f5:9e:33:1f: f8:3c:79:d9:45:db:ef:71:18:ae:bf:fe:4a:9e:f0: 16:52:c9:72:20:f1:cb:2b:c1:1c:b7:6e:e9:00:cc: e0:76:de:0e:8e:6a:54:97:1e:e6:44:3e:e0:04:63: ea:ea:e3:9e:65:0a:d5:6d:df:25:6e:d3:83:77:0e: b0:7a:cf:5c:44:df:2b:86:0b:40:5e:80:36:38:59: ca:ee:df:97:7e:12:ab:25:65:a9:30:a3:cc:69:fa: 00:35:e3:76:4a:c6:70:34:4c:b8:3f:df:f0:1a:3a: 44:3c:e4:a2:3a:cc:37:a7:77:8e:c8:d5:b7:35:ef: e2:50:56:f3:ff:1e:38:89:e8:1a:f1:51:56:3b:e6: 9b:cd:46:46:68:d7:43:a4:e1:49:35:03:3f:8f:e9: fe:b4:56:05:13:f6:95:c8:bb:2b:d0:30:ec:99:12: b5:53:ba:fc:d7:c1:2d:04:91:02:67:74:07:a4:0a: f1:02:23:97:f6:db:4f:70:59:c3:e9:40:fe:01:27: 2d:f5:09:86:ad:f3:9a:bb:31:c6:e8:93:a8:91:dd: 22:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:77:0A:80:59:5F:22:2F:FD:9B:FC:E7:39:52:99:C0:4B:D6:BF:DF X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/323430313a313363303a3a2f33322d3336203d3e20313332363532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:13c0::/32 Signature Algorithm: sha256WithRSAEncryption 83:90:93:2e:a8:03:43:02:c2:a8:01:80:49:a0:5d:0e:77:b8: db:5f:c2:71:8a:58:2c:87:dc:91:65:db:42:27:bb:12:60:ee: 88:0b:d5:cb:7a:0b:9f:da:cc:d9:86:75:ae:53:81:79:c7:47: 13:eb:76:1c:df:64:a6:12:43:ae:eb:33:be:01:6c:39:f2:fd: ef:27:5f:d1:31:c5:e2:f9:1b:fd:0a:82:1b:b8:d7:5d:1b:9f: 58:78:90:68:dd:d9:19:ae:8c:ba:d8:2c:25:a0:56:8c:38:b5: 4e:21:c5:e2:8e:45:98:74:5c:04:d0:12:3a:9d:fe:41:14:97: 8a:76:31:e0:5c:82:b4:11:d6:63:1a:a0:76:d7:1f:78:5c:ad: 06:0b:a6:d2:12:7a:ee:7a:8e:c7:cd:45:9a:74:5b:49:25:16: d3:ab:18:29:a2:ce:c5:c2:23:5b:bc:02:94:fb:d8:54:fe:c3: af:c6:79:ce:c7:fa:d6:a7:aa:aa:ac:46:2b:9c:7b:28:86:0c: e7:c8:08:ca:5b:15:c6:45:1c:ad:44:aa:de:77:95:dc:e3:f6: 9d:33:aa:9f:66:7f:d6:34:2e:9f:95:5f:3e:3c:c5:d2:eb:e4: 30:78:ad:82:1f:c3:39:ab:8e:a1:e4:6b:d3:5e:96:0a:8d:af: 9e:d6:39:56 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUEI7psz8S8YmHb25HrQoak4eBLV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNTEyMTYwNDU1MDJaFw0yNjEyMTUwNTAwMDJaMDMxMTAvBgNV BAMTKDAyNzcwQTgwNTk1RjIyMkZGRDlCRkNFNzM5NTI5OUMwNEJENkJGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK80oebAdSD5QF63lF2cnljd1l MikZmClkbJqK7ktBTV0cHJLnvR5Z9Z4zH/g8edlF2+9xGK6//kqe8BZSyXIg8csr wRy3bukAzOB23g6OalSXHuZEPuAEY+rq455lCtVt3yVu04N3DrB6z1xE3yuGC0Be gDY4Wcru35d+EqslZakwo8xp+gA143ZKxnA0TLg/3/AaOkQ85KI6zDend47I1bc1 7+JQVvP/HjiJ6BrxUVY75pvNRkZo10Ok4Uk1Az+P6f60VgUT9pXIuyvQMOyZErVT uvzXwS0EkQJndAekCvECI5f2209wWcPpQP4BJy31CYat85q7Mcbok6iR3SKDAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUAncKgFlfIi/9m/znOVKZwEvWv98wHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiNjMyYTJjLTQwNmUtNDVkNy1h MDI4LTI2MDQ3NGM3NzAzOC8wLzMyMzQzMDMxM2EzMTMzNjMzMDNhM2EyZjMzMzIy ZDMzMzYyMDNkM2UyMDMxMzMzMjM2MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBE8AwDQYJKoZI hvcNAQELBQADggEBAIOQky6oA0MCwqgBgEmgXQ53uNtfwnGKWCyH3JFl20InuxJg 7ogL1ct6C5/azNmGda5TgXnHRxPrdhzfZKYSQ67rM74BbDny/e8nX9ExxeL5G/0K ghu4110bn1h4kGjd2RmujLrYLCWgVow4tU4hxeKORZh0XATQEjqd/kEUl4p2MeBc grQR1mMaoHbXH3hcrQYLptISeu56jsfNRZp0W0klFtOrGCmizsXCI1u8ApT72FT+ w6/Gec7H+tanqqqsRiuceyiGDOfICMpbFcZFHK1Eqt53ldzj9p0zqp9mf9Y0Lp+V Xz48xdLr5DB4rYIfwzmrjqHka9NelgqNr57WOVY= -----END CERTIFICATE-----Generated at Fri Dec 19 21:15:15 2025 by rpki-client