This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa File: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (raw, json) Hash identifier: gP6dAzMR/WXv6bwbVfa+d+Rc9Y0EVWXjuXcT3Exr1xI= Subject key identifier: A9:AA:19:FC:A2:C4:BD:EE:D0:DA:2A:EE:CB:17:B6:D6:DE:D6:13:46 Certificate issuer: /CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Certificate serial: 60F0EAA7C443A72B6CBEAC5D09FB3BBB0C9C9444 Authority key identifier: DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa Signing time: Fri 12 Dec 2025 04:01:19 +0000 ROA not before: Fri 12 Dec 2025 03:56:19 +0000 ROA not after: Fri 11 Dec 2026 04:01:19 +0000 asID: 152809 IP address blocks: 160.22.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f0:ea:a7:c4:43:a7:2b:6c:be:ac:5d:09:fb:3b:bb:0c:9c:94:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Validity Not Before: Dec 12 03:56:19 2025 GMT Not After : Dec 11 04:01:19 2026 GMT Subject: CN=A9AA19FCA2C4BDEED0DA2AEECB17B6D6DED61346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5b:b6:35:ed:15:e8:c4:8f:47:93:ba:b6:70: df:09:25:38:d2:0f:3c:69:ea:a1:b3:ce:af:7b:07: 35:0f:e7:05:c7:de:60:64:61:1d:ac:04:ec:4d:42: ab:21:02:92:3f:a9:01:82:ea:27:44:c2:21:3f:52: 78:c2:11:91:b0:74:9f:f8:2d:53:e8:24:fc:57:d1: 59:82:d8:8e:f0:d0:2a:f4:51:89:4c:67:b2:e9:0f: 5d:6f:8e:1d:21:15:d3:3a:24:8c:8f:84:76:5c:73: fd:94:b6:36:d5:91:d2:54:32:97:d8:37:cf:77:41: 4a:ab:1b:64:a1:32:6a:f3:11:78:48:44:f9:18:de: 3e:7b:07:60:2e:4b:68:fc:76:bf:1b:7d:fd:41:74: 7f:ce:e2:12:fe:9d:e8:80:7f:25:e0:bc:2e:32:2d: d7:75:0e:dd:cd:ff:c8:f0:19:9a:d5:1b:fc:33:52: 5e:05:c7:ec:e5:a2:5f:e1:d3:65:cf:c4:9a:c5:bf: 2f:a5:93:5a:7c:49:2d:04:05:b7:9e:48:44:96:87: 16:51:d5:2f:a6:1f:40:f4:9f:c7:52:bd:e3:52:6c: 40:9c:7c:d7:7a:be:1d:cf:91:b4:26:d1:21:b5:63: 53:36:6d:b0:0e:70:b6:54:49:73:da:e4:a0:2c:5d: 30:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AA:19:FC:A2:C4:BD:EE:D0:DA:2A:EE:CB:17:B6:D6:DE:D6:13:46 X509v3 Authority Key Identifier: keyid:DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.101.0/24 Signature Algorithm: sha256WithRSAEncryption c6:16:14:02:7d:1b:5c:f9:bf:b7:77:31:a7:82:67:8f:f4:13: 78:5e:01:24:bd:23:77:c8:5a:75:7e:53:1f:42:24:f2:de:1f: 2b:46:f8:1d:35:98:3a:3f:f9:90:8d:35:39:6a:cd:74:25:95: c3:cc:49:f1:54:02:da:9a:c3:da:49:fc:79:23:80:d8:fb:3b: 96:a9:48:e3:b0:a1:39:e9:9e:2c:92:7a:e0:dd:89:c7:c1:92: 36:54:8f:6c:13:63:f2:40:6c:03:6f:cf:35:ac:46:0d:ac:2c: 0c:53:0b:69:89:6c:e7:6d:d8:35:f8:50:ca:b6:81:2f:39:8c: ef:56:d8:7d:71:90:fb:0b:2b:26:81:a2:83:55:46:22:92:0b: 3c:7f:b5:b5:47:2d:7e:cc:f6:a6:89:1e:dc:01:2e:c4:7e:21: c9:eb:f7:9c:90:0d:72:7c:1f:fd:b1:f7:0b:6b:75:53:8c:4e: 02:f9:70:65:e2:f6:0b:7d:43:13:53:64:37:d7:be:84:3b:53: 9d:20:2d:03:1d:04:03:5f:45:ea:f7:71:9b:df:73:dc:b2:3d: 24:85:c4:50:61:47:98:2b:47:51:09:58:a3:97:68:d1:eb:1f: aa:c3:c8:cb:9e:90:64:84:c0:1c:c0:b9:42:11:df:42:14:b7: 85:5a:81:a5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYPDqp8RDpytsvqxdCfs7uwyclEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2 REExODBCQjAeFw0yNTEyMTIwMzU2MTlaFw0yNjEyMTEwNDAxMTlaMDMxMTAvBgNV BAMTKEE5QUExOUZDQTJDNEJERUVEMERBMkFFRUNCMTdCNkQ2REVENjEzNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqW7Y17RXoxI9Hk7q2cN8JJTjS Dzxp6qGzzq97BzUP5wXH3mBkYR2sBOxNQqshApI/qQGC6idEwiE/UnjCEZGwdJ/4 LVPoJPxX0VmC2I7w0Cr0UYlMZ7LpD11vjh0hFdM6JIyPhHZcc/2UtjbVkdJUMpfY N893QUqrG2ShMmrzEXhIRPkY3j57B2AuS2j8dr8bff1BdH/O4hL+neiAfyXgvC4y Ldd1Dt3N/8jwGZrVG/wzUl4Fx+zlol/h02XPxJrFvy+lk1p8SS0EBbeeSESWhxZR 1S+mH0D0n8dSveNSbECcfNd6vh3PkbQm0SG1Y1M2bbAOcLZUSXPa5KAsXTCFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqaoZ/KLEve7Q2iruyxe21t7WE0YwHwYDVR0j BBgwFoAU3NUgesM+EJ4xBSu7f4Edv22hgLswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMC9EQ0Q1MjA3QUMz M0UxMDlFMzEwNTJCQkI3RjgxMURCRjZEQTE4MEJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2REEx ODBCQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkOGVmMTE5LTdkZGYtNDVlNS04 NjM0LTM4Yjc3MjU4Y2JjYy8wLzMxMzYzMDJlMzIzMjJlMzEzMDMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBZlMA0GCSqG SIb3DQEBCwUAA4IBAQDGFhQCfRtc+b+3dzGngmeP9BN4XgEkvSN3yFp1flMfQiTy 3h8rRvgdNZg6P/mQjTU5as10JZXDzEnxVALamsPaSfx5I4DY+zuWqUjjsKE56Z4s knrg3YnHwZI2VI9sE2PyQGwDb881rEYNrCwMUwtpiWznbdg1+FDKtoEvOYzvVth9 cZD7CysmgaKDVUYikgs8f7W1Ry1+zPamiR7cAS7EfiHJ6/eckA1yfB/9sfcLa3VT jE4C+XBl4vYLfUMTU2Q3176EO1OdIC0DHQQDX0Xq93Gb33Pcsj0khcRQYUeYK0dR CVijl2jR6x+qw8jLnpBkhMAcwLlCEd9CFLeFWoGl -----END CERTIFICATE-----Generated at Thu Dec 25 11:05:42 2025 by rpki-client