This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa File: 323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa (raw, json) Hash identifier: rPxNyJ1z70O0nMqBth9k9AL54wxNqFDgED4SxkwBthU= Subject key identifier: 1F:BC:1E:41:A8:FF:0A:91:C0:FF:C8:6C:E7:C2:DF:FE:9A:6E:6B:B1 Certificate issuer: /CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A Certificate serial: 5190C0871281E4DC78D8B6B39421EB578F6AC999 Authority key identifier: 39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa Signing time: Mon 19 Jan 2026 04:39:10 +0000 ROA not before: Mon 19 Jan 2026 04:34:10 +0000 ROA not after: Mon 18 Jan 2027 04:39:10 +0000 asID: 55695 IP address blocks: 2405:2d40:55::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:90:c0:87:12:81:e4:dc:78:d8:b6:b3:94:21:eb:57:8f:6a:c9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A Validity Not Before: Jan 19 04:34:10 2026 GMT Not After : Jan 18 04:39:10 2027 GMT Subject: CN=1FBC1E41A8FF0A91C0FFC86CE7C2DFFE9A6E6BB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:03:80:b7:55:cb:6a:cb:51:23:28:8d:ef: 29:71:33:1a:d7:cd:4f:70:ac:ed:5b:6c:6b:99:14: 2d:2b:bb:52:a1:15:36:4a:24:f3:5e:e8:04:45:c4: 24:a3:0f:1d:4d:9e:72:b9:0a:ee:4e:15:3e:99:7e: af:0a:3f:f5:ad:f5:fc:5f:7f:ea:b3:51:85:11:9e: 11:93:40:11:27:82:d3:14:2b:ef:71:19:88:38:a5: 2a:5b:5e:72:4e:3d:ff:f7:f9:2f:2a:ad:1f:36:e0: 5a:6a:c6:29:ba:71:5c:87:9e:8a:65:f5:34:f6:19: d4:7c:bd:41:da:6c:58:85:8a:03:66:56:6c:b1:cc: c0:5e:1b:f3:b6:6b:59:e2:f3:d5:b7:9b:11:46:47: df:7d:c7:96:8e:e1:70:a5:47:04:27:36:fb:7f:6c: b6:aa:9e:83:99:17:0b:af:fa:18:ef:2f:a7:f4:15: 41:bb:ea:97:4a:6e:a3:81:a8:b4:a9:7d:b1:a2:cb: 86:3a:33:56:1b:69:20:ce:93:a3:e6:e9:4b:13:b9: 40:28:a7:ef:b8:22:2d:bf:57:2b:78:24:20:18:37: 02:ee:66:e2:04:0d:98:f2:1e:e4:08:69:93:a9:75: bf:40:44:63:0e:7b:08:05:50:fe:43:a6:2a:5d:20: 23:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BC:1E:41:A8:FF:0A:91:C0:FF:C8:6C:E7:C2:DF:FE:9A:6E:6B:B1 X509v3 Authority Key Identifier: keyid:39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a35353a3a2f34382d3438203d3e203535363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:2d40:55::/48 Signature Algorithm: sha256WithRSAEncryption 1f:8e:52:e6:21:6a:40:70:6f:40:5e:3a:84:a4:b4:ec:42:d7: 18:c5:4b:03:24:36:b5:63:49:73:cc:2c:8c:3d:6b:f1:48:81: 3f:f1:32:2a:c7:31:05:20:cf:77:60:d1:c6:ba:c0:0d:80:26: 63:d8:0c:3b:03:b8:51:bc:a6:66:e8:d8:3d:06:a0:16:ae:2d: 8f:71:80:87:b2:e1:08:b4:8f:55:25:ed:99:8e:41:a7:51:1b: b3:e5:35:c1:4a:c6:d5:4d:d2:4a:4a:5f:44:cd:ea:1b:cd:43: c2:3c:6d:73:71:85:23:bd:9f:7f:98:23:d5:81:74:85:43:72: 3a:b2:48:47:a1:2f:66:84:ec:46:b4:16:15:2c:da:08:56:d8: da:e8:61:a2:9c:09:1d:ac:0d:49:8e:0d:53:d5:4a:b6:9d:18: 5d:76:d3:33:aa:84:70:8b:0b:f3:58:9f:b0:05:6c:62:45:ca: 9c:46:46:ca:1d:c0:50:45:67:e1:a9:b0:f9:66:06:7f:e8:31: 25:fe:2a:fa:2c:76:0c:71:b0:11:40:ee:98:fa:93:84:1d:02: 02:ad:a1:26:73:76:f3:ed:8d:67:83:6d:18:32:25:a3:34:ba: fa:8c:1f:38:8e:e3:61:e6:c1:5d:01:58:66:20:82:98:f0:a7: 65:0a:c0:ed -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUUZDAhxKB5Nx42LazlCHrV49qyZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlCNEFBOUIzQzdGNzgwMjYxREM0OTA2NThFNjJCRTg2 Qjg1RkYzQTAeFw0yNjAxMTkwNDM0MTBaFw0yNzAxMTgwNDM5MTBaMDMxMTAvBgNV BAMTKDFGQkMxRTQxQThGRjBBOTFDMEZGQzg2Q0U3QzJERkZFOUE2RTZCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHgOAt1XLastRIyiN7ylxMxrX zU9wrO1bbGuZFC0ru1KhFTZKJPNe6ARFxCSjDx1NnnK5Cu5OFT6Zfq8KP/Wt9fxf f+qzUYURnhGTQBEngtMUK+9xGYg4pSpbXnJOPf/3+S8qrR824Fpqxim6cVyHnopl 9TT2GdR8vUHabFiFigNmVmyxzMBeG/O2a1ni89W3mxFGR999x5aO4XClRwQnNvt/ bLaqnoOZFwuv+hjvL6f0FUG76pdKbqOBqLSpfbGiy4Y6M1YbaSDOk6Pm6UsTuUAo p++4Ii2/Vyt4JCAYNwLuZuIEDZjyHuQIaZOpdb9ARGMOewgFUP5DpipdICMHAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUH7weQaj/CpHA/8hs58Lf/ppua7EwHwYDVR0j BBgwFoAUObSqmzx/eAJh3EkGWOYr6GuF/zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjJlMWYzYy01YTQ4LTRmMzktYWFjNy1lMDEyZWQ3MDlkNmEvMC8zOUI0QUE5QjND N0Y3ODAyNjFEQzQ5MDY1OEU2MkJFODZCODVGRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzlCNEFBOUIzQzdGNzgwMjYxREM0OTA2NThFNjJCRTg2Qjg1 RkYzQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyMmUxZjNjLTVhNDgtNGYzOS1h YWM3LWUwMTJlZDcwOWQ2YS8wLzMyMzQzMDM1M2EzMjY0MzQzMDNhMzUzNTNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzUzNjM5MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBS1AAFUw DQYJKoZIhvcNAQELBQADggEBAB+OUuYhakBwb0BeOoSktOxC1xjFSwMkNrVjSXPM LIw9a/FIgT/xMirHMQUgz3dg0ca6wA2AJmPYDDsDuFG8pmbo2D0GoBauLY9xgIey 4Qi0j1Ul7ZmOQadRG7PlNcFKxtVN0kpKX0TN6hvNQ8I8bXNxhSO9n3+YI9WBdIVD cjqySEehL2aE7Ea0FhUs2ghW2NroYaKcCR2sDUmODVPVSradGF120zOqhHCLC/NY n7AFbGJFypxGRsodwFBFZ+GpsPlmBn/oMSX+KvosdgxxsBFA7pj6k4QdAgKtoSZz dvPtjWeDbRgyJaM0uvqMHziO42HmwV0BWGYggpjwp2UKwO0= -----END CERTIFICATE-----Generated at Sun Jan 25 23:04:33 2026 by rpki-client