This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa File: 34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa (raw, json) Hash identifier: o8nDAJaAvWinmc3Z4YAlpvVlMtuLdAP8yAjpUiEUK14= Subject key identifier: A1:7A:37:1F:66:EB:1C:CA:68:CD:3E:CE:02:AA:77:DA:A7:3F:B8:C8 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 2C585DD78870727AC2A554909D44D7228DD80FB9 Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa Signing time: Fri 12 Dec 2025 15:00:03 +0000 ROA not before: Fri 12 Dec 2025 14:55:03 +0000 ROA not after: Fri 11 Dec 2026 15:00:03 +0000 asID: 150210 IP address blocks: 43.240.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:58:5d:d7:88:70:72:7a:c2:a5:54:90:9d:44:d7:22:8d:d8:0f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Dec 12 14:55:03 2025 GMT Not After : Dec 11 15:00:03 2026 GMT Subject: CN=A17A371F66EB1CCA68CD3ECE02AA77DAA73FB8C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0b:17:9e:48:d2:85:3c:32:26:e1:ce:6c:0e: 24:de:50:34:2c:b0:bb:bc:c1:a7:41:f6:be:99:ea: c3:53:46:c2:56:7f:08:3d:8a:0b:b0:0d:67:81:e2: 25:1d:53:b6:35:00:88:4c:8f:39:0c:fd:56:69:60: a4:6e:41:45:bb:12:6a:3c:4f:cd:fc:58:1a:ef:09: f2:77:4c:ea:40:fb:71:b5:44:a1:d5:94:71:76:8b: ff:ea:35:42:a6:e8:36:6c:25:c2:db:b7:06:22:0b: ae:db:54:29:b9:41:7f:93:40:97:9c:2c:52:d5:1f: f4:61:ea:f8:88:05:c4:24:9b:53:3c:9f:1a:13:49: 11:e6:8f:bd:65:82:06:ed:16:10:33:4a:80:0a:24: e1:5d:84:66:43:bb:b5:3e:92:4f:bd:74:7f:ca:05: 2c:64:71:0c:b3:37:d3:71:5a:32:9c:af:05:41:aa: a9:8e:55:1b:44:e1:38:b1:66:c4:1c:92:ed:83:6c: b5:70:48:aa:87:5f:0e:07:59:1e:6f:4b:87:9d:28: 55:59:65:72:e8:55:2b:ce:52:40:cb:ba:06:74:df: d5:91:f7:ae:db:96:80:00:27:c3:79:d1:0a:43:59: 87:f0:a5:2f:62:3e:7f:29:dd:0d:ad:7e:eb:fb:89: a9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7A:37:1F:66:EB:1C:CA:68:CD:3E:CE:02:AA:77:DA:A7:3F:B8:C8 X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.226.0/24 Signature Algorithm: sha256WithRSAEncryption 06:cd:df:25:34:ea:77:9a:a5:de:8d:58:e8:e8:ba:5d:46:6d: bb:87:64:e8:fc:d8:41:c0:7e:ac:62:9c:ca:29:c8:a0:c3:37: a0:98:79:69:f9:4e:0a:74:fe:d2:13:f3:5c:d9:36:aa:c3:2a: fc:76:af:9d:42:1b:3e:d3:c6:35:46:28:1b:9c:fe:5f:3d:b7: 4d:3b:83:19:94:ea:60:7d:e2:55:5b:46:86:96:a3:7f:0d:2b: 06:72:02:c5:7f:70:a3:15:5b:55:b0:a1:77:47:17:d3:08:e5: 9e:f4:97:ec:b6:1d:3d:c9:5c:be:51:29:30:cb:d0:8d:16:ea: 52:d7:9f:32:15:1a:9e:15:4f:50:26:fe:8d:04:97:e9:6b:09: 4e:4c:05:e1:c6:6a:77:87:a8:d8:78:53:2d:05:b7:49:15:f1: 4d:3a:19:15:7f:d7:9f:00:a7:88:55:f1:a2:87:10:27:06:b7: 0b:fc:2d:88:ad:2a:3a:0d:13:4b:1d:75:6d:e8:48:e1:e0:c1: 32:f2:d3:ad:ed:f9:ba:88:a6:aa:f0:44:42:f2:02:4a:95:8a: 12:f9:7f:b7:0f:41:6f:c3:41:a5:eb:b7:cb:8e:54:f0:39:12: 02:c1:0b:20:c9:68:1e:8b:be:3b:e7:ab:12:20:75:e1:b9:9f: 4f:08:7a:d0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULFhd14hwcnrCpVSQnUTXIo3YD7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNTEyMTIxNDU1MDNaFw0yNjEyMTExNTAwMDNaMDMxMTAvBgNV BAMTKEExN0EzNzFGNjZFQjFDQ0E2OENEM0VDRTAyQUE3N0RBQTczRkI4QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfCxeeSNKFPDIm4c5sDiTeUDQs sLu8wadB9r6Z6sNTRsJWfwg9iguwDWeB4iUdU7Y1AIhMjzkM/VZpYKRuQUW7Emo8 T838WBrvCfJ3TOpA+3G1RKHVlHF2i//qNUKm6DZsJcLbtwYiC67bVCm5QX+TQJec LFLVH/Rh6viIBcQkm1M8nxoTSRHmj71lggbtFhAzSoAKJOFdhGZDu7U+kk+9dH/K BSxkcQyzN9NxWjKcrwVBqqmOVRtE4TixZsQcku2DbLVwSKqHXw4HWR5vS4edKFVZ ZXLoVSvOUkDLugZ039WR967bloAAJ8N50QpDWYfwpS9iPn8p3Q2tfuv7ianTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUoXo3H2brHMpozT7OAqp32qc/uMgwHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmYWJlYzcxLTdlY2ItNGRiZC1h NDIxLTk5YjljZDIwOTAzYS8wLzM0MzMyZTMyMzQzMDJlMzIzMjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/DiMA0GCSqG SIb3DQEBCwUAA4IBAQAGzd8lNOp3mqXejVjo6LpdRm27h2To/NhBwH6sYpzKKcig wzegmHlp+U4KdP7SE/Nc2Taqwyr8dq+dQhs+08Y1RigbnP5fPbdNO4MZlOpgfeJV W0aGlqN/DSsGcgLFf3CjFVtVsKF3RxfTCOWe9Jfsth09yVy+USkwy9CNFupS158y FRqeFU9QJv6NBJfpawlOTAXhxmp3h6jYeFMtBbdJFfFNOhkVf9efAKeIVfGihxAn BrcL/C2IrSo6DRNLHXVt6Ejh4MEy8tOt7fm6iKaq8ERC8gJKlYoS+X+3D0Fvw0Gl 67fLjlTwORICwQsgyWgei74756sSIHXhuZ9PCHrQ -----END CERTIFICATE-----Generated at Wed Dec 24 04:48:58 2025 by rpki-client