This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32332d3234203d3e20313532333635.roa File: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (raw, json) Hash identifier: qbymQcWrHfUJL/+zfay4GCgmn2N2MJnny8eN/n0IMAk= Subject key identifier: CC:3D:56:04:5B:42:4E:32:5F:37:E7:11:52:6A:63:2E:FC:0D:56:07 Certificate issuer: /CN=D8D82E797873C8877988A42E5C473D1919238C2A Certificate serial: 4AC686B3403F4D80C684B86AD75A1FCACC1B5FED Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32332d3234203d3e20313532333635.roa Signing time: Fri 12 Dec 2025 10:00:01 +0000 ROA not before: Fri 12 Dec 2025 09:55:01 +0000 ROA not after: Fri 11 Dec 2026 10:00:01 +0000 asID: 152365 IP address blocks: 157.15.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c6:86:b3:40:3f:4d:80:c6:84:b8:6a:d7:5a:1f:ca:cc:1b:5f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A Validity Not Before: Dec 12 09:55:01 2025 GMT Not After : Dec 11 10:00:01 2026 GMT Subject: CN=CC3D56045B424E325F37E711526A632EFC0D5607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:51:14:e4:7f:0a:26:2a:30:36:1b:9a:45:69: 60:a6:71:cf:a0:77:83:d1:fa:ce:81:50:57:a5:e6: 1c:3f:06:8b:d8:e9:8a:c6:9c:55:63:52:27:e8:0f: af:bd:9b:b9:de:d5:65:f0:7d:bc:ca:7f:91:14:2e: 7f:ee:23:e0:1f:e6:74:25:44:78:c5:ac:8c:8f:5a: b3:54:e9:25:9e:7a:06:74:42:77:35:3c:ea:57:39: 5c:44:8c:fe:a5:14:86:49:b5:89:21:4a:d1:9c:4e: 5b:3f:a2:b6:0b:36:00:8b:79:68:d4:1b:4b:36:e5: 9c:42:c9:d3:51:4c:9c:c5:1c:23:97:ac:ca:d1:a3: d5:a0:02:d0:8a:37:c5:5b:96:b2:ab:9a:59:2b:d7: ea:39:0a:bf:53:51:cb:77:8a:18:2b:bf:90:39:3b: c6:a3:0b:f2:5a:52:18:c5:6b:1d:79:47:33:db:c6: 4a:99:c3:00:bf:8c:f4:e4:2c:42:ee:3b:7e:51:71: 42:86:4e:27:16:9d:79:74:06:20:de:47:45:b0:7c: 9f:a8:85:6c:68:83:68:a7:bb:1c:80:a4:b3:54:15: 02:5a:cf:19:7a:06:59:33:e2:d2:1d:0e:c8:96:1e: 96:f8:09:cd:50:44:83:ac:d2:5c:dc:71:7c:dc:b7: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3D:56:04:5B:42:4E:32:5F:37:E7:11:52:6A:63:2E:FC:0D:56:07 X509v3 Authority Key Identifier: keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32332d3234203d3e20313532333635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.42.0/23 Signature Algorithm: sha256WithRSAEncryption 85:a8:af:69:44:e3:7b:c4:23:b2:4c:d5:fd:d6:4b:bc:7b:33: 84:cb:85:22:e1:79:63:89:20:fd:b8:45:89:bb:93:35:32:27: 94:0f:d4:2f:34:2c:04:c2:98:16:03:85:cc:b0:01:2f:dc:96: 95:6e:2e:bc:5f:3d:48:65:d8:1e:f9:40:72:a9:43:0d:19:88: d8:a6:4c:65:98:8a:65:10:20:9d:7c:c0:e3:eb:96:57:34:4c: fe:89:4d:f3:0a:b0:80:12:c9:e2:ac:93:ac:0c:3f:67:73:9f: 87:66:b8:65:bc:0d:b3:0d:6a:16:cc:f1:7f:23:72:2d:34:81: 0c:4e:9b:a0:85:f7:b7:20:be:a7:1b:17:9d:37:16:f3:0f:45: 48:b1:20:34:7a:b1:47:89:88:f8:b2:83:0e:f5:85:f3:71:c1: 23:51:a3:9b:8e:e0:bb:b5:46:90:b6:10:cf:b5:44:48:29:3a: 89:8d:b1:b0:3a:be:70:f3:38:1c:35:6a:69:0e:39:6a:a1:4f: 89:76:b6:2f:58:0a:8f:30:9b:c4:ac:3f:24:66:8d:cc:94:7a: 4f:82:ab:23:04:40:da:36:ef:03:0a:b4:2c:5e:a2:cb:d7:41: c2:99:b3:1f:9b:58:e3:9a:6a:0d:b2:97:d4:7e:36:a0:91:18: 3c:75:b6:52 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSsaGs0A/TYDGhLhq11ofyswbX+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkx OTIzOEMyQTAeFw0yNTEyMTIwOTU1MDFaFw0yNjEyMTExMDAwMDFaMDMxMTAvBgNV BAMTKENDM0Q1NjA0NUI0MjRFMzI1RjM3RTcxMTUyNkE2MzJFRkMwRDU2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuURTkfwomKjA2G5pFaWCmcc+g d4PR+s6BUFel5hw/BovY6YrGnFVjUifoD6+9m7ne1WXwfbzKf5EULn/uI+Af5nQl RHjFrIyPWrNU6SWeegZ0Qnc1POpXOVxEjP6lFIZJtYkhStGcTls/orYLNgCLeWjU G0s25ZxCydNRTJzFHCOXrMrRo9WgAtCKN8VblrKrmlkr1+o5Cr9TUct3ihgrv5A5 O8ajC/JaUhjFax15RzPbxkqZwwC/jPTkLELuO35RcUKGTicWnXl0BiDeR0WwfJ+o hWxog2inuxyApLNUFQJazxl6Blkz4tIdDsiWHpb4Cc1QRIOs0lzccXzctxOtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUzD1WBFtCTjJfN+cRUmpjLvwNVgcwHwYDVR0j BBgwFoAU2NgueXhzyId5iKQuXEc9GRkjjCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMC9EOEQ4MkU3OTc4 NzNDODg3Nzk4OEE0MkU1QzQ3M0QxOTE5MjM4QzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkxOTIz OEMyQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1ZGU3MWFjLTdmOWYtNDdkNC05 NTMzLTlkZjgyYWZjNTk3My8wLzMxMzUzNzJlMzEzNTJlMzQzMjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0PKjANBgkqhkiG 9w0BAQsFAAOCAQEAhaivaUTje8QjskzV/dZLvHszhMuFIuF5Y4kg/bhFibuTNTIn lA/ULzQsBMKYFgOFzLABL9yWlW4uvF89SGXYHvlAcqlDDRmI2KZMZZiKZRAgnXzA 4+uWVzRM/olN8wqwgBLJ4qyTrAw/Z3Ofh2a4ZbwNsw1qFszxfyNyLTSBDE6boIX3 tyC+pxsXnTcW8w9FSLEgNHqxR4mI+LKDDvWF83HBI1Gjm47gu7VGkLYQz7VESCk6 iY2xsDq+cPM4HDVqaQ45aqFPiXa2L1gKjzCbxKw/JGaNzJR6T4KrIwRA2jbvAwq0 LF6iy9dBwpmzH5tY45pqDbKX1H42oJEYPHW2Ug== -----END CERTIFICATE-----Generated at Tue Dec 23 11:01:55 2025 by rpki-client