This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030323a3a2f34382d3438203d3e203234333831.roa File: 323430313a323036303a623030323a3a2f34382d3438203d3e203234333831.roa (raw, json) Hash identifier: lXc0eV4FfLxr7QyLKNsbJLXUNMB04fs7kpQDovC34FM= Subject key identifier: 21:38:F9:A9:5B:84:E5:50:80:F1:61:7E:4A:C9:E7:EA:4C:EC:10:5F Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 2872E6B2A1918754262373CDE94D1B7FC63ABF88 Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030323a3a2f34382d3438203d3e203234333831.roa Signing time: Sun 21 Dec 2025 20:59:38 +0000 ROA not before: Sun 21 Dec 2025 20:54:38 +0000 ROA not after: Sun 20 Dec 2026 20:59:38 +0000 asID: 24381 IP address blocks: 2401:2060:b002::/48 maxlen: 48 Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:72:e6:b2:a1:91:87:54:26:23:73:cd:e9:4d:1b:7f:c6:3a:bf:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Dec 21 20:54:38 2025 GMT Not After : Dec 20 20:59:38 2026 GMT Subject: CN=2138F9A95B84E55080F1617E4AC9E7EA4CEC105F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a4:8c:17:94:37:c4:0c:9a:7b:80:60:16:fe: 17:9e:11:94:cd:e0:b9:3e:f0:b4:70:d8:be:e4:ef: a6:96:d4:61:4b:e1:79:c5:82:45:93:a6:42:6e:8f: 2d:f5:3a:88:8e:8e:46:27:4d:d4:f1:27:8e:38:db: f8:20:1d:a3:b3:16:67:5e:42:b8:b8:b2:e1:6a:47: c4:06:33:8d:09:21:20:8b:f9:4d:56:a9:9d:4b:81: 84:57:68:ac:64:a5:7b:4c:36:0d:60:6a:25:bf:f1: 6a:97:02:2c:e4:e7:8d:08:09:a0:59:17:86:b2:9f: ad:aa:32:a5:cc:3e:88:e1:77:3f:71:7d:b3:58:40: b0:d2:72:41:35:a9:93:7b:c7:7d:97:cb:2a:40:ef: 05:38:54:aa:b9:89:5e:2d:98:37:c2:1a:8b:89:65: 74:a1:f5:52:7a:67:c5:ea:c8:b0:0d:22:09:f3:ca: eb:19:93:cb:f1:ee:4f:71:e8:62:b0:77:8b:18:25: 16:79:d1:3f:f8:89:26:6c:d1:ab:6e:ef:6b:9b:5a: cd:13:a1:4a:43:ae:ed:d2:51:47:96:3a:20:08:0f: 71:1d:a5:85:3f:22:ff:bb:7c:1a:2e:1d:80:79:3e: 89:27:8b:8a:b9:7c:58:7a:c3:76:e3:87:8d:1c:3f: 9f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:38:F9:A9:5B:84:E5:50:80:F1:61:7E:4A:C9:E7:EA:4C:EC:10:5F X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/323430313a323036303a623030323a3a2f34382d3438203d3e203234333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2060:b002::/48 Signature Algorithm: sha256WithRSAEncryption 0d:89:69:be:ba:3d:a4:b4:63:d1:a9:25:0a:c6:57:de:3d:ab: fb:bb:34:d2:94:92:6e:f3:f4:fe:c7:ea:87:18:b9:50:51:99: d6:86:0d:c3:08:3e:e0:89:b9:54:40:14:b8:bf:55:71:a2:99: 7f:1a:aa:bd:50:bb:1b:0f:e1:31:67:d2:03:9d:a5:9c:ba:c1: e8:9e:70:c6:d2:01:ac:53:4f:f9:ea:45:dc:5b:b8:de:00:f5: d0:94:28:f6:56:3e:64:3c:ec:52:55:ef:ed:b3:c9:f1:41:b2: 41:2e:44:51:e6:55:dd:cd:8a:15:6b:ef:df:0d:f9:90:6d:f6: 56:ac:c3:81:8b:9f:21:05:d8:9f:92:e7:9c:1c:6b:6f:ab:c6: 6d:6a:79:5b:be:d7:4d:ba:96:d3:c9:bc:fe:38:64:a1:1d:d9: 67:9d:6d:e3:73:c5:51:05:66:7c:2f:a5:dd:2f:30:3a:49:36: aa:9c:03:85:0b:45:62:c5:1c:94:b4:7b:0e:58:8c:60:de:5f: fc:f1:92:58:4a:1b:f4:d9:a4:2b:eb:ac:b8:53:24:1f:8e:7b: d0:7d:0b:30:82:49:62:b5:2a:ec:e1:42:71:63:27:cf:32:13: bb:6c:1e:22:d2:bb:a7:8a:1b:54:d9:9e:18:8f:31:89:5c:5e: 3f:19:c6:f6 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUKHLmsqGRh1QmI3PN6U0bf8Y6v4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNTEyMjEyMDU0MzhaFw0yNjEyMjAyMDU5MzhaMDMxMTAvBgNV BAMTKDIxMzhGOUE5NUI4NEU1NTA4MEYxNjE3RTRBQzlFN0VBNENFQzEwNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYpIwXlDfEDJp7gGAW/heeEZTN 4Lk+8LRw2L7k76aW1GFL4XnFgkWTpkJujy31OoiOjkYnTdTxJ4442/ggHaOzFmde Qri4suFqR8QGM40JISCL+U1WqZ1LgYRXaKxkpXtMNg1gaiW/8WqXAizk540ICaBZ F4ayn62qMqXMPojhdz9xfbNYQLDSckE1qZN7x32XyypA7wU4VKq5iV4tmDfCGouJ ZXSh9VJ6Z8XqyLANIgnzyusZk8vx7k9x6GKwd4sYJRZ50T/4iSZs0atu72ubWs0T oUpDru3SUUeWOiAID3EdpYU/Iv+7fBouHYB5Pokni4q5fFh6w3bjh40cP58NAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUITj5qVuE5VCA8WF+Ssnn6kzsEF8wHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzov L2tyaWxsLnN5NS5uc3cuYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNo YW5nZS8yLzMyMzQzMDMxM2EzMjMwMzYzMDNhNjIzMDMwMzIzYTNhMmYzNDM4MmQz NDM4MjAzZDNlMjAzMjM0MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEgYLACMA0GCSqGSIb3 DQEBCwUAA4IBAQANiWm+uj2ktGPRqSUKxlfePav7uzTSlJJu8/T+x+qHGLlQUZnW hg3DCD7giblUQBS4v1Vxopl/Gqq9ULsbD+ExZ9IDnaWcusHonnDG0gGsU0/56kXc W7jeAPXQlCj2Vj5kPOxSVe/ts8nxQbJBLkRR5lXdzYoVa+/fDfmQbfZWrMOBi58h BdifkuecHGtvq8ZtanlbvtdNupbTybz+OGShHdlnnW3jc8VRBWZ8L6XdLzA6STaq nAOFC0VixRyUtHsOWIxg3l/88ZJYShv02aQr66y4UyQfjnvQfQswgklitSrs4UJx YyfPMhO7bB4i0runihtU2Z4YjzGJXF4/Gcb2 -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:18 2026 by rpki-client