This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130303a3a2f34302d3430203d3e203233363739.roa File: 323430313a323930303a3130303a3a2f34302d3430203d3e203233363739.roa (raw, json) Hash identifier: l55/7bEbF2qDaR1OG17/HcuFO4jxalc45WgQg19D/L8= Subject key identifier: 11:3A:87:DC:84:0F:9D:C6:64:2D:23:F0:74:84:2D:A6:7A:AF:84:CA Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 2BBD2338351A1028923E700440DA331F9D588D61 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130303a3a2f34302d3430203d3e203233363739.roa Signing time: Wed 21 Jan 2026 09:01:37 +0000 ROA not before: Wed 21 Jan 2026 08:56:37 +0000 ROA not after: Wed 20 Jan 2027 09:01:37 +0000 asID: 23679 IP address blocks: 2401:2900:100::/40 maxlen: 40 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:bd:23:38:35:1a:10:28:92:3e:70:04:40:da:33:1f:9d:58:8d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Jan 21 08:56:37 2026 GMT Not After : Jan 20 09:01:37 2027 GMT Subject: CN=113A87DC840F9DC6642D23F074842DA67AAF84CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:74:ac:8d:57:e0:45:c3:b0:e1:65:80:18:7d: 10:72:fd:58:5a:21:a6:ae:40:b4:82:ab:9d:7a:61: ce:4d:1e:69:c3:ce:bb:48:7c:f2:85:f0:56:f0:f6: e8:db:0d:06:0a:87:b0:5b:c0:f3:0b:d3:21:d5:87: 12:47:07:20:ef:fa:7d:5f:ad:44:7f:0c:d6:de:dc: fe:1d:1f:91:84:3a:7c:c0:3e:4e:e8:d4:b4:e2:6d: 1f:c1:d1:6c:06:e4:bd:49:ed:d4:41:e8:a8:45:67: 28:a2:48:38:cb:2d:0e:c8:c3:bf:0a:b1:5a:1a:09: 3f:18:b2:46:e1:9b:22:c1:c2:10:04:11:42:bc:af: 1c:fc:fc:87:74:b4:e3:39:57:2c:67:2d:4d:1d:a9: 80:90:d9:09:18:44:aa:02:98:cc:7c:21:10:09:c2: 5f:cb:8b:3a:03:f9:63:36:ef:8c:1f:78:9c:6d:d5: 83:5e:04:65:b4:06:12:ff:17:d1:95:93:73:0f:63: c6:8d:a4:01:09:0f:9e:5f:c5:0d:af:05:3a:74:c3: 89:c1:16:a7:7f:7f:5e:69:fc:d7:86:7c:23:84:5e: de:f2:9c:22:52:d6:f4:a5:60:09:d1:e3:ea:07:8e: 50:d7:73:fe:b1:d4:e2:66:1e:99:4e:e7:fa:aa:89: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3A:87:DC:84:0F:9D:C6:64:2D:23:F0:74:84:2D:A6:7A:AF:84:CA X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a3130303a3a2f34302d3430203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:100::/40 Signature Algorithm: sha256WithRSAEncryption 81:24:d7:c6:5e:fc:70:c6:db:bd:39:3e:d0:47:f2:5b:3d:fc: 7f:63:1f:17:31:53:d6:3e:ec:50:5a:54:2d:87:da:2a:42:2d: 9c:96:88:93:43:cd:30:e3:52:b6:ae:5d:0f:97:13:69:a5:99: 3b:7b:5e:6e:a3:9c:c4:7d:7b:fb:5a:2f:f3:22:e6:f1:11:92: c4:18:7d:73:42:6d:4a:7f:e9:24:5b:ed:49:f5:cf:5b:f4:85: 4c:0d:3a:10:1d:55:b8:4a:34:fd:8b:20:2f:9a:17:1a:03:a5: 79:45:91:47:1d:f3:ae:ae:18:81:6f:29:02:c3:a4:67:3c:82: fb:4a:eb:78:a4:b4:92:1b:7e:a1:bb:e4:e2:94:97:88:6d:18: fb:88:e8:8c:bb:6f:d7:d6:7f:f0:0b:03:04:98:60:40:5c:bb: 28:a1:3d:70:27:e5:46:07:db:86:d5:5c:33:89:27:9c:6b:db: 31:fe:dc:2e:f4:4a:f7:2d:ff:f6:94:47:d4:52:0d:9d:98:de: 8e:fd:a4:90:4d:21:d5:07:65:95:96:0d:63:a2:ef:9b:c1:1d: ed:27:14:21:9d:d3:94:db:de:5e:d8:34:06:6c:0a:8a:1a:93: 53:db:aa:c9:ed:54:a5:82:b4:ea:00:a2:e5:1a:80:1a:12:8c: 94:42:ea:06 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIUK70jODUaECiSPnAEQNozH51YjWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNjAxMjEwODU2MzdaFw0yNzAxMjAwOTAxMzdaMDMxMTAvBgNV BAMTKDExM0E4N0RDODQwRjlEQzY2NDJEMjNGMDc0ODQyREE2N0FBRjg0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdKyNV+BFw7DhZYAYfRBy/Vha IaauQLSCq516Yc5NHmnDzrtIfPKF8Fbw9ujbDQYKh7BbwPML0yHVhxJHByDv+n1f rUR/DNbe3P4dH5GEOnzAPk7o1LTibR/B0WwG5L1J7dRB6KhFZyiiSDjLLQ7Iw78K sVoaCT8YskbhmyLBwhAEEUK8rxz8/Id0tOM5VyxnLU0dqYCQ2QkYRKoCmMx8IRAJ wl/LizoD+WM274wfeJxt1YNeBGW0BhL/F9GVk3MPY8aNpAEJD55fxQ2vBTp0w4nB Fqd/f15p/NeGfCOEXt7ynCJS1vSlYAnR4+oHjlDXc/6x1OJmHplO5/qqiX3fAgMB AAGjggI6MIICNjAdBgNVHQ4EFgQUETqH3IQPncZkLSPwdIQtpnqvhMowHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzEzMDMwM2Ez YTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACQBKQAB MA0GCSqGSIb3DQEBCwUAA4IBAQCBJNfGXvxwxtu9OT7QR/JbPfx/Yx8XMVPWPuxQ WlQth9oqQi2cloiTQ80w41K2rl0PlxNppZk7e15uo5zEfXv7Wi/zIubxEZLEGH1z Qm1Kf+kkW+1J9c9b9IVMDToQHVW4SjT9iyAvmhcaA6V5RZFHHfOurhiBbykCw6Rn PIL7Sut4pLSSG36hu+TilJeIbRj7iOiMu2/X1n/wCwMEmGBAXLsooT1wJ+VGB9uG 1VwziSeca9sx/twu9Er3Lf/2lEfUUg2dmN6O/aSQTSHVB2WVlg1jou+bwR3tJxQh ndOU295e2DQGbAqKGpNT26rJ7VSlgrTqAKLlGoAaEoyUQuoG -----END CERTIFICATE-----Generated at Sun Jan 25 23:41:04 2026 by rpki-client