This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3135372e31352e34362e302f32332d3234203d3e20313532333936.roa File: 3135372e31352e34362e302f32332d3234203d3e20313532333936.roa (raw, json) Hash identifier: 3+C7KNVLkkeXH4Q6aCfPacCb6QKO1RmfOhT9j4ffkS8= Subject key identifier: 07:4D:F8:09:41:74:58:D7:C3:40:2B:B6:BA:AD:ED:A2:5C:72:CC:D7 Certificate issuer: /CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Certificate serial: 1898C0FF1900258245ECC962E92CC43EB0F1F688 Authority key identifier: 30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3135372e31352e34362e302f32332d3234203d3e20313532333936.roa Signing time: Wed 24 Dec 2025 04:00:01 +0000 ROA not before: Wed 24 Dec 2025 03:55:01 +0000 ROA not after: Wed 23 Dec 2026 04:00:01 +0000 asID: 152396 IP address blocks: 157.15.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 08:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:98:c0:ff:19:00:25:82:45:ec:c9:62:e9:2c:c4:3e:b0:f1:f6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3008AF948C4742A525201F3FDA7EFB1800D52D64 Validity Not Before: Dec 24 03:55:01 2025 GMT Not After : Dec 23 04:00:01 2026 GMT Subject: CN=074DF809417458D7C3402BB6BAADEDA25C72CCD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b5:8f:1d:7c:b2:d2:80:0d:84:87:98:8c:56: ce:4d:5c:29:50:b9:fc:49:3f:b7:66:c9:d4:7b:84: f4:fb:52:89:1f:0c:08:2e:ec:c6:18:73:57:a7:24: a5:01:36:24:41:dc:5b:64:1c:ef:3a:9f:43:56:0c: f0:aa:81:d8:ff:10:6d:b2:6f:a8:0c:54:23:d4:e4: 9d:c9:83:da:14:4c:1d:af:71:fc:a6:8c:96:7b:79: 60:6d:9b:a7:ed:7c:b6:33:69:b7:bf:79:8d:98:07: 70:37:88:c1:5c:fd:59:b2:b0:36:e4:1e:28:eb:8e: 40:70:5a:23:6d:38:ae:33:09:56:07:4f:89:9e:48: d5:5f:05:a6:a3:dd:0e:68:a9:7a:a5:c4:1b:c8:38: a7:e7:00:69:ce:5a:ae:57:f8:88:c6:56:bc:76:6d: 3e:56:b2:11:c0:c2:1b:2c:62:82:95:df:ba:ca:19: ee:6b:77:23:5a:b1:0f:57:7c:b0:73:0a:42:a7:de: b5:de:16:ff:94:29:fc:01:2f:59:58:0a:1c:07:18: c5:01:56:70:ae:2c:b9:c5:23:e8:37:61:d9:3a:ee: c1:fd:1c:b4:21:f2:e6:5e:60:ec:f4:11:4e:5c:50: 5c:a2:7d:c5:b0:36:98:6f:fb:9a:56:13:d8:16:e5: 54:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4D:F8:09:41:74:58:D7:C3:40:2B:B6:BA:AD:ED:A2:5C:72:CC:D7 X509v3 Authority Key Identifier: keyid:30:08:AF:94:8C:47:42:A5:25:20:1F:3F:DA:7E:FB:18:00:D5:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3008AF948C4742A525201F3FDA7EFB1800D52D64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3008AF948C4742A525201F3FDA7EFB1800D52D64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc34eed9-187e-4f46-a5bb-0ea8f669ae90/0/3135372e31352e34362e302f32332d3234203d3e20313532333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.46.0/23 Signature Algorithm: sha256WithRSAEncryption db:f2:00:9d:5c:ef:87:f0:e4:08:92:aa:61:e1:38:97:3b:e6: 0a:45:9c:03:4f:06:16:81:ce:25:a1:40:fb:aa:11:27:f8:f1: a9:30:48:43:f9:45:96:71:8c:6f:02:e1:61:92:2e:36:8b:33: fb:37:31:83:36:72:a3:cf:db:26:63:a9:17:86:f9:c2:66:65: 2f:ac:00:2f:8a:5b:cd:be:5d:e5:45:74:ec:66:07:2f:ac:5f: eb:a7:e5:39:88:d1:68:bb:1c:23:3d:e5:8a:d8:e4:34:80:ee: a6:46:78:f2:2a:c8:ce:dd:08:9c:67:e4:0f:d0:a4:b5:b8:6a: 47:a4:ff:65:45:59:84:9f:62:ae:21:72:82:8e:de:0c:46:25: f6:b5:b9:53:68:3d:f8:12:74:3a:a2:24:2e:46:41:cb:bb:d4: 4f:bc:47:aa:5a:87:93:71:cc:62:2c:84:02:d2:16:a1:7c:cb: 37:52:fd:9b:5e:2e:41:80:0e:e6:b2:da:cf:a3:9f:9d:46:07: 0b:35:0e:fd:10:65:91:50:00:f3:2f:ee:34:59:3d:8a:76:7f: 38:6e:6d:ae:83:de:bf:1f:81:ee:b6:e7:f7:f6:7d:9e:8e:1b: 34:4e:d9:c3:2a:72:ac:13:e3:5b:03:4b:48:97:7f:d2:9a:94: c6:0a:d7:5d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGJjA/xkAJYJF7Mli6SzEPrDx9ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgw MEQ1MkQ2NDAeFw0yNTEyMjQwMzU1MDFaFw0yNjEyMjMwNDAwMDFaMDMxMTAvBgNV BAMTKDA3NERGODA5NDE3NDU4RDdDMzQwMkJCNkJBQURFREEyNUM3MkNDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtY8dfLLSgA2Eh5iMVs5NXClQ ufxJP7dmydR7hPT7UokfDAgu7MYYc1enJKUBNiRB3FtkHO86n0NWDPCqgdj/EG2y b6gMVCPU5J3Jg9oUTB2vcfymjJZ7eWBtm6ftfLYzabe/eY2YB3A3iMFc/VmysDbk HijrjkBwWiNtOK4zCVYHT4meSNVfBaaj3Q5oqXqlxBvIOKfnAGnOWq5X+IjGVrx2 bT5WshHAwhssYoKV37rKGe5rdyNasQ9XfLBzCkKn3rXeFv+UKfwBL1lYChwHGMUB VnCuLLnFI+g3Ydk67sH9HLQh8uZeYOz0EU5cUFyifcWwNphv+5pWE9gW5VRZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUB034CUF0WNfDQCu2uq3tolxyzNcwHwYDVR0j BBgwFoAUMAivlIxHQqUlIB8/2n77GADVLWQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzM0ZWVkOS0xODdlLTRmNDYtYTViYi0wZWE4ZjY2OWFlOTAvMC8zMDA4QUY5NDhD NDc0MkE1MjUyMDFGM0ZEQTdFRkIxODAwRDUyRDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzAwOEFGOTQ4QzQ3NDJBNTI1MjAxRjNGREE3RUZCMTgwMEQ1 MkQ2NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RjMzRlZWQ5LTE4N2UtNGY0Ni1h NWJiLTBlYThmNjY5YWU5MC8wLzMxMzUzNzJlMzEzNTJlMzQzNjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0PLjANBgkqhkiG 9w0BAQsFAAOCAQEA2/IAnVzvh/DkCJKqYeE4lzvmCkWcA08GFoHOJaFA+6oRJ/jx qTBIQ/lFlnGMbwLhYZIuNosz+zcxgzZyo8/bJmOpF4b5wmZlL6wAL4pbzb5d5UV0 7GYHL6xf66flOYjRaLscIz3litjkNIDupkZ48irIzt0InGfkD9CktbhqR6T/ZUVZ hJ9iriFygo7eDEYl9rW5U2g9+BJ0OqIkLkZBy7vUT7xHqlqHk3HMYiyEAtIWoXzL N1L9m14uQYAO5rLaz6OfnUYHCzUO/RBlkVAA8y/uNFk9inZ/OG5troPevx+B7rbn 9/Z9no4bNE7ZwypyrBPjWwNLSJd/0pqUxgrXXQ== -----END CERTIFICATE-----Generated at Thu Dec 25 19:43:23 2025 by rpki-client