This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa File: 3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa (raw, json) Hash identifier: sRqaXQTTqwZ0Sl52wT2hj8cdENXDNpu+PJ+NuR920js= Subject key identifier: 9D:EE:49:2A:4F:3E:D8:45:DD:36:98:BB:E6:E5:09:2E:2C:B5:E9:D2 Certificate issuer: /CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B Certificate serial: 0CB20C6F4EA70EDE7A72B38914759360EB7BBC47 Authority key identifier: 77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa Signing time: Wed 10 Dec 2025 11:00:20 +0000 ROA not before: Wed 10 Dec 2025 10:55:20 +0000 ROA not after: Wed 09 Dec 2026 11:00:20 +0000 asID: 152419 IP address blocks: 157.20.204.0/23 maxlen: 24 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b2:0c:6f:4e:a7:0e:de:7a:72:b3:89:14:75:93:60:eb:7b:bc:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B Validity Not Before: Dec 10 10:55:20 2025 GMT Not After : Dec 9 11:00:20 2026 GMT Subject: CN=9DEE492A4F3ED845DD3698BBE6E5092E2CB5E9D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7d:8c:69:8a:5a:bc:07:3f:de:70:bb:a6:3b: fa:a4:91:d5:d8:a1:42:9d:64:42:43:f5:3d:51:66: 9e:aa:ce:58:57:d5:af:9e:22:2a:18:58:eb:fa:82: 1b:85:7e:45:34:d9:1f:9c:c1:b7:5f:e7:da:d7:d7: a5:e8:be:89:c9:11:fe:05:f1:fe:9c:c3:b0:d6:d4: eb:b9:f4:ce:ac:b9:e9:4e:c1:51:e4:21:ef:1c:49: 33:42:5a:7a:3c:54:c9:00:88:26:17:6b:9f:0d:15: 1e:d9:4f:65:a2:7f:86:88:e3:29:32:83:68:31:b5: a4:23:ba:d6:35:c1:0b:a7:6c:57:d2:0b:49:93:e8: 6a:e5:80:b2:77:77:d1:98:26:09:2a:62:47:b2:fe: cb:c0:b3:94:60:a1:4e:15:66:43:a9:e7:9a:f2:6f: 2b:9b:c7:a3:7b:62:cb:e4:dc:56:e4:4d:16:14:20: 4a:b1:54:ef:a5:63:94:11:82:57:e0:ce:85:8a:dc: 9a:a9:20:87:94:2e:40:69:fb:77:95:15:f3:58:16: 43:41:73:c6:8f:be:03:dc:58:cb:fb:84:c7:f2:64: b9:29:78:0b:8c:d6:df:37:71:be:e2:09:8f:b5:31: ed:b8:b7:ff:89:95:de:57:e7:0b:ea:ec:59:4c:42: 4a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EE:49:2A:4F:3E:D8:45:DD:36:98:BB:E6:E5:09:2E:2C:B5:E9:D2 X509v3 Authority Key Identifier: keyid:77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/3135372e32302e3230342e302f32332d3234203d3e20313532343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.204.0/23 Signature Algorithm: sha256WithRSAEncryption 91:58:4f:3c:33:5b:86:bf:4d:0c:12:32:22:22:15:54:aa:fe: a7:25:71:aa:ee:57:4a:77:ff:2f:2b:94:1e:d8:e1:21:fd:10: b1:b4:13:8f:fa:78:25:31:9f:60:b3:c1:60:b5:4f:55:a4:26: 3b:09:92:30:5e:ff:38:ae:55:32:41:a3:67:bd:48:10:2e:b7: 5c:63:16:29:e7:c3:1e:be:65:79:8d:6e:ca:66:3e:13:b4:95: 58:7b:32:3a:2c:77:a5:32:0d:3c:c7:b8:a4:79:c3:35:ac:88: 4a:c5:b3:92:1d:08:c7:4e:cc:e8:61:c7:0a:cc:fa:7d:c1:47: e2:4e:68:0e:0e:47:d3:62:57:9e:59:fb:4b:ac:be:75:4f:ec: 77:d6:7e:0d:d5:f4:dd:b7:cc:0b:cd:96:e2:91:b2:ea:17:d1: f4:9d:cc:f8:a9:ad:71:e4:2d:18:b8:bd:11:dd:e7:75:80:75: c7:9f:e8:d3:e7:5f:4d:71:b3:d6:46:11:a8:e9:bf:d0:98:43: b1:53:b1:74:d4:9e:1a:3d:9d:df:01:25:17:f3:6e:69:a8:b1: 95:76:bd:42:92:6f:98:8d:a0:55:3c:e0:d4:2c:15:33:97:23: 84:5e:bc:c7:1b:af:53:ec:4f:b7:d4:eb:ba:96:89:3e:89:4b: 09:6d:54:c0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDLIMb06nDt56crOJFHWTYOt7vEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIyMzIz NEZBMkQ4QjAeFw0yNTEyMTAxMDU1MjBaFw0yNjEyMDkxMTAwMjBaMDMxMTAvBgNV BAMTKDlERUU0OTJBNEYzRUQ4NDVERDM2OThCQkU2RTUwOTJFMkNCNUU5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOfYxpilq8Bz/ecLumO/qkkdXY oUKdZEJD9T1RZp6qzlhX1a+eIioYWOv6ghuFfkU02R+cwbdf59rX16XovonJEf4F 8f6cw7DW1Ou59M6suelOwVHkIe8cSTNCWno8VMkAiCYXa58NFR7ZT2Wif4aI4yky g2gxtaQjutY1wQunbFfSC0mT6GrlgLJ3d9GYJgkqYkey/svAs5RgoU4VZkOp55ry byubx6N7Ysvk3FbkTRYUIEqxVO+lY5QRglfgzoWK3JqpIIeULkBp+3eVFfNYFkNB c8aPvgPcWMv7hMfyZLkpeAuM1t83cb7iCY+1Me24t/+Jld5X5wvq7FlMQkoRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUne5JKk8+2EXdNpi75uUJLiy16dIwHwYDVR0j BBgwFoAUd6zxj1MX56IC5YPDxZwiMjT6LYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMC83N0FDRjE4RjUz MTdFN0EyMDJFNTgzQzNDNTlDMjIzMjM0RkEyRDhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzdBQ0YxOEY1MzE3RTdBMjAyRTU4M0MzQzU5QzIyMzIzNEZB MkQ4Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkODIzYmIzLTVhMDEtNDY1OC1h NzgzLWY4ZTg5ZmFkY2Y0NS8wLzMxMzUzNzJlMzIzMDJlMzIzMDM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnRTMMA0GCSqG SIb3DQEBCwUAA4IBAQCRWE88M1uGv00MEjIiIhVUqv6nJXGq7ldKd/8vK5Qe2OEh /RCxtBOP+nglMZ9gs8FgtU9VpCY7CZIwXv84rlUyQaNnvUgQLrdcYxYp58MevmV5 jW7KZj4TtJVYezI6LHelMg08x7ikecM1rIhKxbOSHQjHTszoYccKzPp9wUfiTmgO DkfTYleeWftLrL51T+x31n4N1fTdt8wLzZbikbLqF9H0ncz4qa1x5C0YuL0R3ed1 gHXHn+jT519NcbPWRhGo6b/QmEOxU7F01J4aPZ3fASUX825pqLGVdr1Ckm+YjaBV PODULBUzlyOEXrzHG69T7E+31Ou6lok+iUsJbVTA -----END CERTIFICATE-----Generated at Tue Dec 23 18:53:10 2025 by rpki-client