This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa File: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (raw, json) Hash identifier: D8V9Ti1MiqCoDzJ7ekoPuNqjW7Yshnj+Rr7KMkTOEU8= Subject key identifier: 47:E8:D1:81:EC:94:E4:27:CD:4D:AB:8A:76:29:E7:66:1C:55:AA:7A Certificate issuer: /CN=D8D82E797873C8877988A42E5C473D1919238C2A Certificate serial: 2D233C4E4D04D4DE860EAC4FEC189A0F0E5512BA Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa Signing time: Fri 12 Dec 2025 10:00:01 +0000 ROA not before: Fri 12 Dec 2025 09:55:01 +0000 ROA not after: Fri 11 Dec 2026 10:00:01 +0000 asID: 152365 IP address blocks: 157.15.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:23:3c:4e:4d:04:d4:de:86:0e:ac:4f:ec:18:9a:0f:0e:55:12:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A Validity Not Before: Dec 12 09:55:01 2025 GMT Not After : Dec 11 10:00:01 2026 GMT Subject: CN=47E8D181EC94E427CD4DAB8A7629E7661C55AA7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cb:c7:ef:02:02:47:8b:04:99:03:f2:de:89: fb:6c:c1:52:f7:38:d3:0a:f7:b8:ad:ff:87:a0:e9: 2e:f6:2b:b4:8c:88:47:c9:75:a0:f8:2c:22:2b:6a: f2:59:b1:8c:b3:e8:51:8c:80:4a:22:f9:a9:c5:bc: be:ea:62:1e:fb:f3:38:e8:6c:ca:35:63:d8:7d:83: 93:a1:75:96:5c:6d:3b:2a:5e:e7:3f:46:94:60:b5: 2b:40:52:dd:a4:4f:f8:16:7d:38:cc:c0:0c:fe:92: 16:f5:43:d3:19:94:55:25:2b:62:bf:c7:8a:7a:0c: 0e:dc:b7:b4:4d:ab:06:08:f8:e6:ec:5e:c2:2a:06: d7:48:c7:80:7f:3d:97:59:9d:b8:b0:4c:22:d7:d1: e2:92:2a:ba:1c:c9:c5:3f:0b:8f:48:fe:e2:4b:cc: 74:41:2a:41:6b:59:4e:94:7e:5f:ee:4f:83:11:de: be:71:c3:99:bf:85:4d:59:29:0e:dd:d5:d7:59:94: e0:21:e1:7a:27:10:60:72:bc:85:9b:7b:8c:a3:36: f7:cc:a6:9f:e5:e8:84:84:b9:6c:26:11:a5:53:78: 95:e6:c3:8c:e3:4e:98:7d:78:cc:e7:38:6d:2d:ad: 67:d2:94:f3:ad:cd:ba:6c:04:19:37:f0:b2:33:f6: 79:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E8:D1:81:EC:94:E4:27:CD:4D:AB:8A:76:29:E7:66:1C:55:AA:7A X509v3 Authority Key Identifier: keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.42.0/24 Signature Algorithm: sha256WithRSAEncryption 94:4c:fa:e3:4b:57:42:e8:a4:79:76:dd:b6:78:69:75:8a:3c: 9b:05:6d:58:da:44:40:25:e4:4d:24:6e:a2:3c:f8:bc:75:72: b4:88:0a:74:02:9c:d0:e0:e6:cd:20:68:19:e3:71:61:5b:86: 2e:ae:8b:e2:2c:d9:4e:73:3f:b6:50:99:b9:8c:b2:8b:6c:1a: 5f:8f:0f:9c:45:4d:98:7b:cf:b9:8f:76:69:5b:df:f2:fb:fc: 71:40:e6:28:80:77:2e:d5:76:21:41:41:b3:59:04:b2:91:26: 55:a1:ed:fa:e9:28:ac:9a:7e:c8:08:4e:f5:b7:4e:c6:e7:99: 7d:48:81:d1:1a:c6:b8:45:02:6b:b0:3a:17:73:a7:48:fd:d9: cb:60:bf:ef:cc:ed:05:75:cf:0f:5c:70:eb:74:0e:36:25:84: c9:88:fd:48:29:e6:7d:19:78:5e:d0:b4:68:5c:c9:59:b6:27: ad:b7:89:06:ed:84:4c:dc:12:b6:63:1d:7e:bd:26:f2:7b:55: 17:ff:7b:f3:4c:d8:57:33:eb:83:2a:95:37:06:c4:b4:31:55: 7d:b9:98:b5:9d:5d:b4:31:ea:64:85:33:f0:aa:6f:f5:dc:50: 22:91:da:bf:2f:b2:49:6e:14:79:7d:d8:5f:37:78:04:0e:35: 1a:01:2e:02 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULSM8Tk0E1N6GDqxP7BiaDw5VErowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkx OTIzOEMyQTAeFw0yNTEyMTIwOTU1MDFaFw0yNjEyMTExMDAwMDFaMDMxMTAvBgNV BAMTKDQ3RThEMTgxRUM5NEU0MjdDRDREQUI4QTc2MjlFNzY2MUM1NUFBN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVy8fvAgJHiwSZA/LeiftswVL3 ONMK97it/4eg6S72K7SMiEfJdaD4LCIravJZsYyz6FGMgEoi+anFvL7qYh778zjo bMo1Y9h9g5OhdZZcbTsqXuc/RpRgtStAUt2kT/gWfTjMwAz+khb1Q9MZlFUlK2K/ x4p6DA7ct7RNqwYI+ObsXsIqBtdIx4B/PZdZnbiwTCLX0eKSKrocycU/C49I/uJL zHRBKkFrWU6Ufl/uT4MR3r5xw5m/hU1ZKQ7d1ddZlOAh4XonEGByvIWbe4yjNvfM pp/l6ISEuWwmEaVTeJXmw4zjTph9eMznOG0trWfSlPOtzbpsBBk38LIz9nlxAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUR+jRgeyU5CfNTauKdinnZhxVqnowHwYDVR0j BBgwFoAU2NgueXhzyId5iKQuXEc9GRkjjCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMC9EOEQ4MkU3OTc4 NzNDODg3Nzk4OEE0MkU1QzQ3M0QxOTE5MjM4QzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkxOTIz OEMyQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1ZGU3MWFjLTdmOWYtNDdkNC05 NTMzLTlkZjgyYWZjNTk3My8wLzMxMzUzNzJlMzEzNTJlMzQzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PKjANBgkqhkiG 9w0BAQsFAAOCAQEAlEz640tXQuikeXbdtnhpdYo8mwVtWNpEQCXkTSRuojz4vHVy tIgKdAKc0ODmzSBoGeNxYVuGLq6L4izZTnM/tlCZuYyyi2waX48PnEVNmHvPuY92 aVvf8vv8cUDmKIB3LtV2IUFBs1kEspEmVaHt+ukorJp+yAhO9bdOxueZfUiB0RrG uEUCa7A6F3OnSP3Zy2C/78ztBXXPD1xw63QONiWEyYj9SCnmfRl4XtC0aFzJWbYn rbeJBu2ETNwStmMdfr0m8ntVF/9780zYVzPrgyqVNwbEtDFVfbmYtZ1dtDHqZIUz 8Kpv9dxQIpHavy+ySW4UeX3YXzd4BA41GgEuAg== -----END CERTIFICATE-----Generated at Tue Dec 23 11:01:57 2025 by rpki-client