This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35382e302f32332d3234203d3e20313332363437.roa File: 34352e3132362e35382e302f32332d3234203d3e20313332363437.roa (raw, json) Hash identifier: MlHDGnO/Vp+hFC8do5e8cQqI6Yre7kW1RmsPeNStRS4= Subject key identifier: 4F:B4:35:C2:CE:94:91:15:AA:2B:34:AE:B0:10:0A:25:02:5A:29:58 Certificate issuer: /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Certificate serial: 2B33A511D6F148A72EE09865AB3A3EE967C4082F Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35382e302f32332d3234203d3e20313332363437.roa Signing time: Fri 12 Dec 2025 08:24:55 +0000 ROA not before: Fri 12 Dec 2025 08:19:55 +0000 ROA not after: Fri 11 Dec 2026 08:24:55 +0000 asID: 132647 IP address blocks: 45.126.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 02:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:33:a5:11:d6:f1:48:a7:2e:e0:98:65:ab:3a:3e:e9:67:c4:08:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Validity Not Before: Dec 12 08:19:55 2025 GMT Not After : Dec 11 08:24:55 2026 GMT Subject: CN=4FB435C2CE949115AA2B34AEB0100A25025A2958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:1f:c7:5c:fb:15:7b:9a:0f:e8:3c:62:9c: 91:29:76:2d:76:aa:45:7c:af:28:13:53:96:dc:aa: 88:70:53:ba:68:92:2d:0d:6a:d5:4e:0a:48:86:22: 59:8b:a9:68:a1:53:42:85:80:8e:01:43:d5:da:ab: 02:37:74:e8:34:c5:2a:e6:8c:68:58:35:5d:d1:0a: 96:90:7f:ec:3b:9c:1f:08:9b:4b:54:08:0c:e4:08: e0:69:37:1f:dd:41:f8:d3:66:e3:64:d2:f2:ff:14: 65:48:56:37:5c:88:6d:cc:25:d1:50:79:a2:0a:93: 2f:6c:0e:34:0c:04:35:fa:bc:b9:29:31:5b:19:6c: 50:48:e3:82:64:74:c8:4a:77:e0:a0:e8:7c:b9:a8: f9:84:e3:a1:d2:4e:69:68:68:2d:ed:55:cd:95:57: ad:34:ce:54:1f:1e:63:ff:53:02:96:f7:64:b7:89: 8e:db:d5:bb:82:2f:c9:13:da:98:6b:eb:02:c7:1d: b9:65:e2:4a:3f:67:86:96:af:60:cf:b0:56:2f:cd: 40:c4:f6:3f:82:b3:04:05:c9:34:24:6f:f9:9d:40: 70:ef:f0:4f:6d:c1:8f:fc:8c:b1:99:75:9b:1b:b9: 5c:c8:65:e1:11:50:0d:60:f0:2b:5a:e6:cc:db:de: cc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B4:35:C2:CE:94:91:15:AA:2B:34:AE:B0:10:0A:25:02:5A:29:58 X509v3 Authority Key Identifier: keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35382e302f32332d3234203d3e20313332363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.58.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:6a:c1:cc:c5:47:7f:0d:be:99:19:1c:0d:d1:42:01:21:81: f7:89:27:f3:f9:c6:a4:33:67:76:41:e2:60:c4:a9:42:6a:2c: f5:55:5f:b0:46:0a:58:96:81:9b:13:2e:63:ec:28:7c:bd:8e: 64:36:d9:54:b3:23:9c:8b:1d:36:0d:20:53:b8:b9:f6:3f:0d: fe:0f:62:70:a5:6f:aa:e8:56:a1:50:2e:02:91:32:06:05:e0: a5:6f:18:ac:8e:96:71:c6:72:81:4a:d4:05:ab:4e:84:d1:f7: a0:a5:cc:22:b1:f0:2e:43:a0:4c:b6:aa:9a:f7:3d:26:11:e1: 48:f7:58:76:d3:84:00:3b:89:42:e2:1c:0c:01:fd:a5:86:99: 81:6b:22:2a:5e:00:19:02:ef:d1:b6:44:50:88:c2:b2:2a:06: d4:a1:63:b7:99:f4:54:7e:ec:1f:35:b7:51:bf:f3:8c:9a:ef: 71:42:de:dc:c6:50:17:80:b9:bb:13:ee:71:e5:8b:1b:92:8b: a4:c6:71:42:d5:b5:1c:72:02:da:98:f4:e2:2e:05:83:ea:ab: fd:32:30:9e:05:35:b1:0e:e8:dc:8e:2f:bd:62:8e:61:aa:51: 27:81:17:00:ea:12:f0:a1:6d:4b:3c:b1:64:14:97:4e:5c:c7: 80:80:12:6c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKzOlEdbxSKcu4Jhlqzo+6WfECC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JE RjdEQzFENjAeFw0yNTEyMTIwODE5NTVaFw0yNjEyMTEwODI0NTVaMDMxMTAvBgNV BAMTKDRGQjQzNUMyQ0U5NDkxMTVBQTJCMzRBRUIwMTAwQTI1MDI1QTI5NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0R/HXPsVe5oP6DxinJEpdi12 qkV8rygTU5bcqohwU7poki0NatVOCkiGIlmLqWihU0KFgI4BQ9XaqwI3dOg0xSrm jGhYNV3RCpaQf+w7nB8Im0tUCAzkCOBpNx/dQfjTZuNk0vL/FGVIVjdciG3MJdFQ eaIKky9sDjQMBDX6vLkpMVsZbFBI44JkdMhKd+Cg6Hy5qPmE46HSTmloaC3tVc2V V600zlQfHmP/UwKW92S3iY7b1buCL8kT2phr6wLHHbll4ko/Z4aWr2DPsFYvzUDE 9j+CswQFyTQkb/mdQHDv8E9twY/8jLGZdZsbuVzIZeERUA1g8Cta5szb3swXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUT7Q1ws6UkRWqKzSusBAKJQJaKVgwHwYDVR0j BBgwFoAU7J2YcqcQ/nE9xiJB1YdwO999wdYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjYxN2Q4Yy1kMTU0LTQ2MWUtYmNjYS1iNjZkMjY3Y2ZmYzcvMC9FQzlEOTg3MkE3 MTBGRTcxM0RDNjIyNDFENTg3NzAzQkRGN0RDMUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JERjdE QzFENi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2NjE3ZDhjLWQxNTQtNDYxZS1i Y2NhLWI2NmQyNjdjZmZjNy8wLzM0MzUyZTMxMzIzNjJlMzUzODJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1+OjANBgkqhkiG 9w0BAQsFAAOCAQEAn2rBzMVHfw2+mRkcDdFCASGB94kn8/nGpDNndkHiYMSpQmos 9VVfsEYKWJaBmxMuY+wofL2OZDbZVLMjnIsdNg0gU7i59j8N/g9icKVvquhWoVAu ApEyBgXgpW8YrI6WccZygUrUBatOhNH3oKXMIrHwLkOgTLaqmvc9JhHhSPdYdtOE ADuJQuIcDAH9pYaZgWsiKl4AGQLv0bZEUIjCsioG1KFjt5n0VH7sHzW3Ub/zjJrv cULe3MZQF4C5uxPuceWLG5KLpMZxQtW1HHIC2pj04i4Fg+qr/TIwngU1sQ7o3I4v vWKOYapRJ4EXAOoS8KFtSzyxZBSXTlzHgIASbA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:46:40 2025 by rpki-client