This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a3a2f33322d3438203d3e20313431303538.roa File: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (raw, json) Hash identifier: Ys/Ac2N5+uLGmk3R0LquRKwlaYjjmhHi3Oz1JgWuapk= Subject key identifier: 79:50:C2:8C:9B:36:BB:72:8E:3F:79:3D:F2:A8:67:DF:CD:99:10:BB Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Certificate serial: 3E0A07DDB856498274826329442C5CC0CA932442 Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a3a2f33322d3438203d3e20313431303538.roa Signing time: Fri 05 Dec 2025 16:03:56 +0000 ROA not before: Fri 05 Dec 2025 15:58:56 +0000 ROA not after: Fri 04 Dec 2026 16:03:56 +0000 asID: 141058 IP address blocks: 2401:c420::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0a:07:dd:b8:56:49:82:74:82:63:29:44:2c:5c:c0:ca:93:24:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Validity Not Before: Dec 5 15:58:56 2025 GMT Not After : Dec 4 16:03:56 2026 GMT Subject: CN=7950C28C9B36BB728E3F793DF2A867DFCD9910BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:d4:e9:c2:9e:94:68:09:07:e6:7d:52:6a: fa:06:ef:e6:59:00:af:4e:e6:0c:11:2b:aa:42:30: ed:ee:de:3d:8b:08:8f:12:c2:46:05:de:d7:e4:1c: 1b:f1:ac:c2:76:3a:97:6d:28:7e:cc:ee:52:d1:e5: 89:00:ba:77:dc:1f:ae:d5:ed:53:29:59:05:f8:58: f0:72:af:74:42:83:d8:b6:e3:da:29:ff:1c:42:9b: 6b:d7:47:84:c9:01:9f:bf:cf:97:e4:04:d0:0e:74: 9d:f8:d8:c0:f4:49:9e:06:23:45:40:cb:07:11:f0: 88:46:94:7d:c2:b9:d7:e5:19:a4:c1:a6:3d:1c:cb: 59:c8:d3:22:89:14:23:55:ea:55:12:b3:78:5d:fe: a2:54:72:7f:2c:39:42:d2:ea:3a:8a:75:40:78:c0: 32:a2:20:a2:e7:5d:bd:05:03:66:5b:a0:3c:b4:26: 8d:99:8c:56:12:93:b3:e5:9a:9a:f4:ba:7b:8c:70: 2c:05:be:31:c6:07:84:83:6a:16:a6:5b:88:2b:58: 26:4b:eb:16:f8:17:ff:83:5e:98:cb:50:f9:04:9d: 24:43:0e:16:90:36:6a:18:38:96:92:9f:8e:d1:d5: b2:fc:99:bf:a4:3f:fe:f9:06:e0:ce:bc:1e:b1:92: e2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:50:C2:8C:9B:36:BB:72:8E:3F:79:3D:F2:A8:67:DF:CD:99:10:BB X509v3 Authority Key Identifier: keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a3a2f33322d3438203d3e20313431303538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:c420::/32 Signature Algorithm: sha256WithRSAEncryption 37:b6:72:6c:97:0e:17:5c:ec:b2:65:9f:10:cf:4f:85:13:30: 24:ba:db:81:f8:b6:9b:4f:6a:19:39:7f:9b:1b:c2:e8:d1:5f: 60:48:68:e9:8c:6d:c0:a8:df:97:ae:fa:c7:01:1f:8b:41:37: d1:b2:a8:11:2b:14:33:8c:64:01:2d:93:52:d6:54:50:69:48: 08:f5:05:0f:c2:41:3a:54:02:28:35:71:21:92:ab:3f:7a:57: a3:3b:d4:9a:5c:7c:65:3c:05:96:32:92:36:29:0b:20:45:23: eb:3a:fc:ae:d2:65:0d:ca:b8:15:e1:12:7f:84:b2:41:90:70: 40:83:f2:e2:be:75:11:0b:46:64:f4:05:78:fe:3a:48:f6:66: 9d:7d:7a:75:ea:42:d1:7a:ce:32:eb:b8:1b:6b:06:1a:43:0e: 48:ca:e9:8c:95:e8:43:df:8f:6b:04:58:8a:2d:cb:64:0b:4c: 0e:0c:51:de:64:0f:0f:b2:b7:d9:ab:60:dc:95:1a:0b:da:ef: a2:9d:64:ce:56:5b:c9:63:17:05:9a:a1:5d:7b:06:cb:99:69: a7:ea:4d:00:47:e8:61:6d:eb:fd:7b:64:09:d4:4a:7b:08:7e: 3b:0a:6a:dd:cf:ea:d3:54:77:8c:4d:45:fe:24:32:ba:10:ed: d2:32:46:6f -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUPgoH3bhWSYJ0gmMpRCxcwMqTJEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2 MEY3OEZDQTAeFw0yNTEyMDUxNTU4NTZaFw0yNjEyMDQxNjAzNTZaMDMxMTAvBgNV BAMTKDc5NTBDMjhDOUIzNkJCNzI4RTNGNzkzREYyQTg2N0RGQ0Q5OTEwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxK9Tpwp6UaAkH5n1SavoG7+ZZ AK9O5gwRK6pCMO3u3j2LCI8SwkYF3tfkHBvxrMJ2OpdtKH7M7lLR5YkAunfcH67V 7VMpWQX4WPByr3RCg9i249op/xxCm2vXR4TJAZ+/z5fkBNAOdJ342MD0SZ4GI0VA ywcR8IhGlH3CudflGaTBpj0cy1nI0yKJFCNV6lUSs3hd/qJUcn8sOULS6jqKdUB4 wDKiIKLnXb0FA2ZboDy0Jo2ZjFYSk7Plmpr0unuMcCwFvjHGB4SDahamW4grWCZL 6xb4F/+DXpjLUPkEnSRDDhaQNmoYOJaSn47R1bL8mb+kP/75BuDOvB6xkuKVAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUeVDCjJs2u3KOP3k98qhn382ZELswHwYDVR0j BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3 OEZDQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzYjg1OGY2LWRlMjAtNDEyMS1i Y2VhLTkwNzZlZGNjYzA5Ny8wLzMyMzQzMDMxM2E2MzM0MzIzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzQzMTMwMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQBxCAwDQYJKoZI hvcNAQELBQADggEBADe2cmyXDhdc7LJlnxDPT4UTMCS624H4tptPahk5f5sbwujR X2BIaOmMbcCo35eu+scBH4tBN9GyqBErFDOMZAEtk1LWVFBpSAj1BQ/CQTpUAig1 cSGSqz96V6M71JpcfGU8BZYykjYpCyBFI+s6/K7SZQ3KuBXhEn+EskGQcECD8uK+ dRELRmT0BXj+Okj2Zp19enXqQtF6zjLruBtrBhpDDkjK6YyV6EPfj2sEWIoty2QL TA4MUd5kDw+yt9mrYNyVGgva76KdZM5WW8ljFwWaoV17BsuZaafqTQBH6GFt6/17 ZAnUSnsIfjsKat3P6tNUd4xNRf4kMroQ7dIyRm8= -----END CERTIFICATE-----Generated at Fri Dec 19 22:51:34 2025 by rpki-client