This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/323430343a653730303a3a2f33322d3438203d3e20313331373238.roa File: 323430343a653730303a3a2f33322d3438203d3e20313331373238.roa (raw, json) Hash identifier: +/N3DsGhdJUZyRGC4N9f9R2ZbeB7qPD2DAQ97WyJYBk= Subject key identifier: B2:0F:F9:AB:ED:6A:0A:A3:BB:87:30:9F:53:B3:8C:3A:B2:03:54:18 Certificate issuer: /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Certificate serial: 2C7C46EB61511723B45278273FD8753DBE188038 Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/323430343a653730303a3a2f33322d3438203d3e20313331373238.roa Signing time: Thu 18 Dec 2025 17:44:08 +0000 ROA not before: Thu 18 Dec 2025 17:39:08 +0000 ROA not after: Thu 17 Dec 2026 17:44:08 +0000 asID: 131728 IP address blocks: 2404:e700::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:7c:46:eb:61:51:17:23:b4:52:78:27:3f:d8:75:3d:be:18:80:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Validity Not Before: Dec 18 17:39:08 2025 GMT Not After : Dec 17 17:44:08 2026 GMT Subject: CN=B20FF9ABED6A0AA3BB87309F53B38C3AB2035418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6d:df:d2:c3:74:36:b6:96:4f:a1:c4:00:61: ed:e5:07:1e:7a:06:c9:23:7e:52:ab:af:37:c8:ba: 0d:2b:19:70:35:40:13:10:fc:41:19:c6:66:ce:b5: c6:31:39:ac:a7:32:c9:3e:3e:a0:81:79:f6:c1:fb: fa:5a:88:c3:a8:d7:e6:e0:bb:e3:6c:69:9c:b2:e5: a5:e5:41:c1:14:0c:df:c5:a4:7f:6e:ce:c3:8b:8b: 39:b6:47:35:7b:6d:a1:21:97:5d:3c:9a:de:df:d1: c7:04:d5:4f:06:e8:04:f8:8e:d2:0d:df:ac:ae:1b: 2e:9a:f3:7b:b3:6a:18:d3:1c:b4:3b:cb:16:9e:15: a7:86:6a:80:26:b2:56:7e:cd:7d:06:22:48:38:a4: 9d:2c:e8:5c:3a:0b:3a:00:0e:46:17:bf:be:1b:ec: 6b:ca:ad:6c:c7:cd:48:54:19:1b:69:b0:5d:e7:ee: ba:58:f1:73:4e:de:8b:a2:31:8a:5c:e5:df:66:ab: 28:22:fe:32:4f:1e:79:0f:b0:66:a7:48:8c:11:ed: 22:79:2a:d2:52:8d:fd:f4:59:c5:b7:62:99:5f:13: af:06:7c:0f:06:ea:d6:6c:3c:c5:ea:91:5e:c1:93: 75:e0:f0:63:a9:4e:79:e3:f4:9b:38:87:d2:6f:c6: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0F:F9:AB:ED:6A:0A:A3:BB:87:30:9F:53:B3:8C:3A:B2:03:54:18 X509v3 Authority Key Identifier: keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/323430343a653730303a3a2f33322d3438203d3e20313331373238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e700::/32 Signature Algorithm: sha256WithRSAEncryption 3f:89:5c:d1:8c:f1:61:fc:63:e0:ee:2c:70:b8:3c:ff:cf:5c: 2d:0f:88:35:c9:98:56:15:6e:15:46:94:48:eb:87:c2:b7:b1: 2c:10:ee:d6:6a:d1:71:41:de:0c:1f:32:6a:93:6b:9d:3e:7d: 7f:08:8c:bb:08:c2:a8:d9:e8:6e:1b:c8:84:2a:88:e7:c0:07: 91:bc:6d:3c:70:e7:5c:23:5b:02:cf:4f:9c:f7:89:de:7a:86: f2:90:8a:62:81:51:9c:4e:5d:f1:97:c9:e1:db:78:7c:30:88: 14:79:58:51:4f:41:81:ce:ab:d1:ff:aa:77:28:8c:26:8b:f5: 6e:b0:eb:a4:a3:d1:51:b6:1c:9e:e5:b1:ea:0d:76:dd:3d:4d: f9:84:a4:e3:29:cb:c3:d4:06:76:09:f6:f8:0a:26:55:2b:76: b2:95:c3:2b:27:95:4c:f2:28:64:11:6e:9c:d9:fd:4b:7d:89: d1:bc:9c:d5:d0:2b:a1:0e:1a:54:25:f4:20:04:67:b9:e7:69: b2:8a:0c:ef:cf:68:78:35:89:7c:2d:1f:cb:dd:72:c4:b0:7f: 76:f9:bb:73:e7:0e:fe:a4:25:3e:b1:6b:41:7d:ff:7e:6c:f1: ac:89:c7:cc:03:d7:48:cc:50:f2:c1:59:dc:b6:a7:18:2d:10: 0d:06:d7:f6 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIULHxG62FRFyO0UngnP9h1Pb4YgDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFC OTU4RTRDNDAeFw0yNTEyMTgxNzM5MDhaFw0yNjEyMTcxNzQ0MDhaMDMxMTAvBgNV BAMTKEIyMEZGOUFCRUQ2QTBBQTNCQjg3MzA5RjUzQjM4QzNBQjIwMzU0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSbd/Sw3Q2tpZPocQAYe3lBx56 BskjflKrrzfIug0rGXA1QBMQ/EEZxmbOtcYxOaynMsk+PqCBefbB+/paiMOo1+bg u+NsaZyy5aXlQcEUDN/FpH9uzsOLizm2RzV7baEhl108mt7f0ccE1U8G6AT4jtIN 36yuGy6a83uzahjTHLQ7yxaeFaeGaoAmslZ+zX0GIkg4pJ0s6Fw6CzoADkYXv74b 7GvKrWzHzUhUGRtpsF3n7rpY8XNO3ouiMYpc5d9mqygi/jJPHnkPsGanSIwR7SJ5 KtJSjf30WcW3YplfE68GfA8G6tZsPMXqkV7Bk3Xg8GOpTnnj9Js4h9JvxvUFAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUsg/5q+1qCqO7hzCfU7OMOrIDVBgwHwYDVR0j BBgwFoAU23JerC3R5it6AsVKYY16AblY5MQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC9EQjcyNUVBQzJE RDFFNjJCN0EwMkM1NEE2MThEN0EwMUI5NThFNEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFCOTU4 RTRDNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwMTVhODU1LWIyOWMtNDUwMi1h ZjgxLWNiYjhiNGY3ZjBmNy8wLzMyMzQzMDM0M2E2NTM3MzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzMTM3MzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQE5wAwDQYJKoZI hvcNAQELBQADggEBAD+JXNGM8WH8Y+DuLHC4PP/PXC0PiDXJmFYVbhVGlEjrh8K3 sSwQ7tZq0XFB3gwfMmqTa50+fX8IjLsIwqjZ6G4byIQqiOfAB5G8bTxw51wjWwLP T5z3id56hvKQimKBUZxOXfGXyeHbeHwwiBR5WFFPQYHOq9H/qncojCaL9W6w66Sj 0VG2HJ7lseoNdt09TfmEpOMpy8PUBnYJ9vgKJlUrdrKVwysnlUzyKGQRbpzZ/Ut9 idG8nNXQK6EOGlQl9CAEZ7nnabKKDO/PaHg1iXwtH8vdcsSwf3b5u3PnDv6kJT6x a0F9/35s8ayJx8wD10jMUPLBWdy2pxgtEA0G1/Y= -----END CERTIFICATE-----Generated at Thu Dec 25 00:47:45 2025 by rpki-client