This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030343a3a2f34382d3438203d3e20313333383430.roa File: 323430343a653130303a333030343a3a2f34382d3438203d3e20313333383430.roa (raw, json) Hash identifier: sEAgZnHySyLBR5HKTToheZeUdf7ELL2bFul5NUXLDSc= Subject key identifier: 7A:57:A4:26:64:10:D0:AE:76:16:74:97:BE:3F:D3:69:21:DF:FA:0F Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 1A95250F3E2D63560D023861F295408AF36C122E Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030343a3a2f34382d3438203d3e20313333383430.roa Signing time: Fri 05 Dec 2025 02:00:02 +0000 ROA not before: Fri 05 Dec 2025 01:55:02 +0000 ROA not after: Fri 04 Dec 2026 02:00:02 +0000 asID: 133840 IP address blocks: 2404:e100:3004::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 12:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:95:25:0f:3e:2d:63:56:0d:02:38:61:f2:95:40:8a:f3:6c:12:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Dec 5 01:55:02 2025 GMT Not After : Dec 4 02:00:02 2026 GMT Subject: CN=7A57A4266410D0AE76167497BE3FD36921DFFA0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:1e:49:c6:bb:b7:52:fd:31:cf:bd:e2:6b: e7:e5:60:d3:8d:4b:5a:7f:82:e5:71:20:3f:d8:e6: 61:40:d2:cf:b1:a2:30:83:2d:69:bc:32:b2:87:2c: f9:6f:de:59:10:e8:dc:51:18:c8:66:39:91:e5:c8: 4b:88:aa:0d:a3:5b:09:33:44:88:8e:88:f2:51:d0: 99:96:35:72:f4:7b:2c:aa:6d:a3:a1:a3:12:f4:84: 73:65:16:94:b7:15:46:85:16:3a:4a:5e:bf:c6:ef: 37:77:6d:2a:10:92:1d:04:04:de:80:f6:58:72:b5: 7c:3f:ea:f1:8b:c8:28:6a:01:50:cc:e7:fb:ae:1a: eb:38:44:fa:91:17:fc:d1:6f:65:82:72:0c:a1:1c: de:af:0a:58:56:9a:4e:2e:1b:ca:60:13:0f:ce:3e: 3e:5c:1e:e3:0b:34:1c:e7:e5:3a:75:eb:e9:45:8c: 6f:cd:2d:4f:d1:a2:54:5b:18:06:ce:f7:0a:53:2c: b4:e1:ce:72:0a:e2:01:60:09:76:b8:8a:72:98:7c: 38:18:f4:d6:f0:4b:f6:d3:d5:a2:78:42:a3:52:35: 7e:fa:74:f2:00:be:14:9a:41:91:ff:a9:5c:8a:24: 3a:55:3b:6f:a5:bc:48:69:c9:5c:a0:83:b9:e5:7e: d1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:57:A4:26:64:10:D0:AE:76:16:74:97:BE:3F:D3:69:21:DF:FA:0F X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/323430343a653130303a333030343a3a2f34382d3438203d3e20313333383430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e100:3004::/48 Signature Algorithm: sha256WithRSAEncryption 07:31:70:3a:95:88:5b:d6:b9:82:c5:65:84:cd:25:eb:20:7c: da:8f:5b:c8:ed:5a:94:a9:91:ee:b4:0e:5c:eb:7a:53:f6:9e: 4b:e6:84:21:5c:2b:f5:db:e0:3d:a4:56:cc:68:1b:e0:da:98: 96:6d:68:92:f2:44:aa:5b:be:84:22:5f:1c:60:1e:93:3c:60: ff:c6:ad:42:e0:a5:61:2c:f3:a8:94:64:72:1b:35:47:60:e5: fe:55:9b:87:be:39:78:53:98:51:84:28:ff:8a:1b:12:d0:8d: 27:8c:fa:99:91:61:44:c5:05:b6:03:09:c6:5f:ff:f7:15:23: f0:6b:f3:91:37:ba:a8:40:bb:b0:09:77:4e:e9:d7:c4:44:27: 4b:c0:27:b7:72:b5:0d:92:10:2d:d5:f9:ec:96:89:1b:d3:4e: 6d:b8:ef:d1:17:8b:15:ad:8e:0a:9e:66:c4:59:58:e3:45:71: 6c:40:3c:22:0f:bd:25:79:88:f9:30:05:07:82:ad:1a:f6:1d: 7a:ed:89:ab:2e:35:08:32:13:72:57:48:b3:9c:5b:87:b4:8e: e1:af:b3:37:6e:74:a2:e5:10:01:8f:4a:42:dc:8d:d5:ea:bc: 9a:cb:90:bc:b8:c0:89:f2:80:76:fb:91:bf:0f:5d:fb:1e:f0: f4:b2:aa:d0 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUGpUlDz4tY1YNAjhh8pVAivNsEi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNTEyMDUwMTU1MDJaFw0yNjEyMDQwMjAwMDJaMDMxMTAvBgNV BAMTKDdBNTdBNDI2NjQxMEQwQUU3NjE2NzQ5N0JFM0ZEMzY5MjFERkZBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDrR5Jxru3Uv0xz73ia+flYNON S1p/guVxID/Y5mFA0s+xojCDLWm8MrKHLPlv3lkQ6NxRGMhmOZHlyEuIqg2jWwkz RIiOiPJR0JmWNXL0eyyqbaOhoxL0hHNlFpS3FUaFFjpKXr/G7zd3bSoQkh0EBN6A 9lhytXw/6vGLyChqAVDM5/uuGus4RPqRF/zRb2WCcgyhHN6vClhWmk4uG8pgEw/O Pj5cHuMLNBzn5Tp16+lFjG/NLU/RolRbGAbO9wpTLLThznIK4gFgCXa4inKYfDgY 9NbwS/bT1aJ4QqNSNX76dPIAvhSaQZH/qVyKJDpVO2+lvEhpyVygg7nlftG1AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUelekJmQQ0K52FnSXvj/TaSHf+g8wHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzQzMDM0M2E2NTMxMzAzMDNhMzMzMDMwMzQz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzMzODM0MzAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BOEAMAQwDQYJKoZIhvcNAQELBQADggEBAAcxcDqViFvWuYLFZYTNJesgfNqPW8jt WpSpke60DlzrelP2nkvmhCFcK/Xb4D2kVsxoG+DamJZtaJLyRKpbvoQiXxxgHpM8 YP/GrULgpWEs86iUZHIbNUdg5f5Vm4e+OXhTmFGEKP+KGxLQjSeM+pmRYUTFBbYD CcZf//cVI/Br85E3uqhAu7AJd07p18REJ0vAJ7dytQ2SEC3V+eyWiRvTTm2479EX ixWtjgqeZsRZWONFcWxAPCIPvSV5iPkwBQeCrRr2HXrtiasuNQgyE3JXSLOcW4e0 juGvszdudKLlEAGPSkLcjdXqvJrLkLy4wInygHb7kb8PXfse8PSyqtA= -----END CERTIFICATE-----Generated at Sat Dec 20 18:47:46 2025 by rpki-client