This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a3a2f34382d3438203d3e20313332363437.roa File: 323430323a656538303a3a2f34382d3438203d3e20313332363437.roa (raw, json) Hash identifier: Qq4mQ+yjLEssCXWmnFYkdDNfkAKVVBhzLioN96QRjDk= Subject key identifier: 1D:5E:A7:10:2B:73:E5:1E:EB:BC:A6:72:7D:11:A5:9A:E6:70:4A:6B Certificate issuer: /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Certificate serial: 5E66F33DD05B4F9C968A4AE2619E4D1A1037BF97 Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a3a2f34382d3438203d3e20313332363437.roa Signing time: Fri 12 Dec 2025 07:49:03 +0000 ROA not before: Fri 12 Dec 2025 07:44:03 +0000 ROA not after: Fri 11 Dec 2026 07:49:03 +0000 asID: 132647 IP address blocks: 2402:ee80::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 02:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:66:f3:3d:d0:5b:4f:9c:96:8a:4a:e2:61:9e:4d:1a:10:37:bf:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Validity Not Before: Dec 12 07:44:03 2025 GMT Not After : Dec 11 07:49:03 2026 GMT Subject: CN=1D5EA7102B73E51EEBBCA6727D11A59AE6704A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6b:df:d1:69:2a:f0:aa:79:de:92:1a:76:ac: aa:04:42:8d:35:a3:62:9d:bc:c7:a7:ad:19:d5:ff: 05:a8:62:b2:c2:20:8c:f6:ac:78:1d:70:3d:33:72: 2a:62:60:52:13:52:de:80:dd:d9:50:2e:c0:68:9c: 21:de:93:ea:0e:d7:31:11:94:4f:6f:c3:9c:b6:55: 75:ea:91:39:1d:3f:9e:0b:53:99:d2:c2:0b:f4:46: 93:c7:dd:7b:e7:b2:27:24:4c:58:fb:63:82:3f:4e: 48:bf:b2:da:2f:45:b9:8a:93:e1:3d:d4:bb:c0:d2: a9:d7:a0:e5:c7:a3:1e:18:7c:6d:23:6e:10:8b:50: 36:70:c2:74:1d:21:47:14:d7:d9:d5:96:56:75:03: 46:73:b6:50:cf:64:10:4a:02:29:28:fc:9b:bb:fa: bd:e1:4e:37:dc:fe:8e:92:ce:6b:8f:bc:f1:15:7a: 4e:c2:c9:6d:52:73:4b:1e:a3:4b:1b:f4:96:6f:21: bb:bf:05:19:01:9b:95:1d:30:b2:0d:58:41:7b:fd: 25:91:df:09:0c:f5:65:f7:2a:fc:d9:0e:43:35:60: 6f:50:5e:49:98:8b:0d:8f:8b:70:e1:26:db:f3:ad: fe:56:95:d6:d1:3b:2f:d6:76:0b:64:ba:b0:f4:39: c4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5E:A7:10:2B:73:E5:1E:EB:BC:A6:72:7D:11:A5:9A:E6:70:4A:6B X509v3 Authority Key Identifier: keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a3a2f34382d3438203d3e20313332363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:ee80::/48 Signature Algorithm: sha256WithRSAEncryption 29:1a:68:94:39:a9:c3:1d:b0:43:2b:cf:b2:27:c2:0f:e0:cb: 7b:ab:d8:81:aa:22:0e:69:90:dc:9b:71:3f:75:84:40:ab:10: ef:fb:06:22:69:05:f5:13:9d:2c:fd:ab:e0:d2:52:00:87:24: 99:f9:ae:0f:2f:53:ec:81:2c:80:d7:c5:77:64:de:8e:05:56: 00:75:10:48:61:b7:38:1f:b0:f9:d4:6b:12:7d:e6:e5:a4:aa: c7:cc:49:dc:b7:09:c9:91:7b:e4:3c:d2:0a:15:bd:72:dc:c3: f3:2e:51:12:62:c6:78:9e:f6:ff:14:d2:c8:2d:bf:7b:91:3c: a0:54:ed:99:52:56:59:6b:71:b8:38:f4:90:ec:d8:27:fb:e4: b7:d3:a8:94:c4:9d:fe:d0:14:d1:fd:8b:e4:42:cb:fd:66:0f: ed:6f:ba:a8:87:ad:40:b4:42:bc:44:c5:53:53:65:c2:a8:57: 3e:03:06:8c:88:75:90:ba:ea:69:0c:c0:80:45:17:9f:3a:72: f6:a8:43:2c:d9:b1:a4:4f:a9:02:4d:55:78:eb:64:2c:0e:4a: 8e:4d:6e:15:96:42:36:d6:70:41:16:bf:94:85:6b:b2:e4:8d: ab:f8:87:e4:8e:aa:a6:03:fe:2c:15:b6:fa:53:5f:99:55:c9: ea:01:f1:15 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUXmbzPdBbT5yWikriYZ5NGhA3v5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JE RjdEQzFENjAeFw0yNTEyMTIwNzQ0MDNaFw0yNjEyMTEwNzQ5MDNaMDMxMTAvBgNV BAMTKDFENUVBNzEwMkI3M0U1MUVFQkJDQTY3MjdEMTFBNTlBRTY3MDRBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDea9/RaSrwqnnekhp2rKoEQo01 o2KdvMenrRnV/wWoYrLCIIz2rHgdcD0zcipiYFITUt6A3dlQLsBonCHek+oO1zER lE9vw5y2VXXqkTkdP54LU5nSwgv0RpPH3XvnsickTFj7Y4I/Tki/stovRbmKk+E9 1LvA0qnXoOXHox4YfG0jbhCLUDZwwnQdIUcU19nVllZ1A0ZztlDPZBBKAiko/Ju7 +r3hTjfc/o6SzmuPvPEVek7CyW1Sc0seo0sb9JZvIbu/BRkBm5UdMLINWEF7/SWR 3wkM9WX3KvzZDkM1YG9QXkmYiw2Pi3DhJtvzrf5WldbROy/WdgtkurD0OcSHAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUHV6nECtz5R7rvKZyfRGlmuZwSmswHwYDVR0j BBgwFoAU7J2YcqcQ/nE9xiJB1YdwO999wdYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjYxN2Q4Yy1kMTU0LTQ2MWUtYmNjYS1iNjZkMjY3Y2ZmYzcvMC9FQzlEOTg3MkE3 MTBGRTcxM0RDNjIyNDFENTg3NzAzQkRGN0RDMUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JERjdE QzFENi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2NjE3ZDhjLWQxNTQtNDYxZS1i Y2NhLWI2NmQyNjdjZmZjNy8wLzMyMzQzMDMyM2E2NTY1MzgzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDMxMzMzMjM2MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQC7oAAADANBgkq hkiG9w0BAQsFAAOCAQEAKRpolDmpwx2wQyvPsifCD+DLe6vYgaoiDmmQ3JtxP3WE QKsQ7/sGImkF9ROdLP2r4NJSAIckmfmuDy9T7IEsgNfFd2TejgVWAHUQSGG3OB+w +dRrEn3m5aSqx8xJ3LcJyZF75DzSChW9ctzD8y5REmLGeJ72/xTSyC2/e5E8oFTt mVJWWWtxuDj0kOzYJ/vkt9OolMSd/tAU0f2L5ELL/WYP7W+6qIetQLRCvETFU1Nl wqhXPgMGjIh1kLrqaQzAgEUXnzpy9qhDLNmxpE+pAk1VeOtkLA5Kjk1uFZZCNtZw QRa/lIVrsuSNq/iH5I6qpgP+LBW2+lNfmVXJ6gHxFQ== -----END CERTIFICATE-----Generated at Fri Dec 19 12:46:42 2025 by rpki-client