This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a3a2f33322d3332203d3e203535363935.roa File: 323430353a326434303a3a2f33322d3332203d3e203535363935.roa (raw, json) Hash identifier: gxDcNPkVDSFdZ41agLUQg+G8pCeb+5J4nXDU0DZLJ2Q= Subject key identifier: 80:06:70:87:77:EB:03:C3:57:00:5D:C7:3E:C4:6B:89:46:0F:74:14 Certificate issuer: /CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A Certificate serial: 0B4E5FE85A25BE34561A77EE9832EDB977E406DA Authority key identifier: 39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a3a2f33322d3332203d3e203535363935.roa Signing time: Mon 19 Jan 2026 04:43:26 +0000 ROA not before: Mon 19 Jan 2026 04:38:26 +0000 ROA not after: Mon 18 Jan 2027 04:43:26 +0000 asID: 55695 IP address blocks: 2405:2d40::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 22:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4e:5f:e8:5a:25:be:34:56:1a:77:ee:98:32:ed:b9:77:e4:06:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A Validity Not Before: Jan 19 04:38:26 2026 GMT Not After : Jan 18 04:43:26 2027 GMT Subject: CN=8006708777EB03C357005DC73EC46B89460F7414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:23:02:e6:ba:48:c1:a2:00:1b:7d:5f:28: dc:55:df:cc:21:8b:fd:8c:4a:b0:13:e2:64:de:35: 26:3a:24:51:18:c5:8a:6c:55:29:f5:61:36:44:d4: 7e:01:0e:3d:46:76:69:72:dd:ab:6d:b3:15:8b:10: 54:c8:34:94:88:17:11:c2:8a:b3:da:a3:76:15:94: a5:0c:3f:d8:82:c7:34:ed:06:91:37:7e:63:98:09: e7:ea:63:69:a4:4e:28:3d:66:51:7c:f4:7b:00:9f: 41:39:56:53:5e:92:90:cc:8e:a4:c9:87:13:2b:13: f0:13:26:18:8d:07:a2:f5:7e:02:a7:1a:c4:bf:40: e7:b6:72:ec:cb:a6:e8:f8:fd:30:ab:75:a3:52:11: 3e:51:ef:fe:a9:a0:99:e8:1c:61:0a:0c:26:83:67: 17:53:bb:b3:10:eb:4e:3e:e5:1e:fe:bf:cf:47:ac: 5a:db:71:d6:70:19:02:da:32:a2:db:2c:b1:d3:f1: 28:7f:fd:8c:b2:96:79:ec:04:d4:f7:fa:da:09:c8: fe:5d:c1:35:68:2c:e3:4b:cf:79:84:db:eb:b2:f3: 4f:21:88:21:3a:e4:83:f2:8b:a3:52:22:4d:e1:a3: 1e:11:c8:65:94:2f:37:48:6a:02:31:ea:3c:6d:b9: 18:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:06:70:87:77:EB:03:C3:57:00:5D:C7:3E:C4:6B:89:46:0F:74:14 X509v3 Authority Key Identifier: keyid:39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a3a2f33322d3332203d3e203535363935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:2d40::/32 Signature Algorithm: sha256WithRSAEncryption 6a:8c:7b:04:db:5a:3f:32:74:08:fd:36:68:b6:57:65:7e:37: 5a:f1:ca:63:81:ca:1f:47:45:d2:27:f9:da:7c:8c:90:32:29: f9:32:20:4b:b0:8d:61:65:92:23:5b:28:f9:fe:9c:d5:49:0c: 30:9d:ad:59:30:74:74:f2:98:ec:e4:4d:80:68:7c:64:f6:03: 29:f7:e9:9a:5e:91:36:34:07:e3:0a:ec:2e:a5:6c:18:a6:78: 56:0c:3b:ef:7a:ce:47:e6:b0:60:c7:0e:44:55:cc:e4:85:41: 67:41:f8:64:63:34:80:3a:51:85:b3:14:a8:4d:4b:b6:bf:bc: a7:86:92:da:6e:c5:de:60:29:ab:dc:c2:de:72:2b:20:04:71: 85:a4:f0:12:1d:ae:76:45:8a:ee:e7:a3:40:f2:c8:3e:15:3e: d9:4a:4e:c6:14:93:f3:3c:96:bf:65:85:c1:73:66:d9:cc:ee: d8:4e:e3:1c:0f:9f:3a:23:ee:98:48:d4:a9:05:e3:a2:29:43: a7:ae:90:de:15:d3:0f:79:c6:d9:a7:4d:cf:bb:98:18:ea:89: 9d:4e:ab:5e:7c:8c:5a:d0:d8:16:7b:d4:1c:1c:63:67:17:74: 13:5f:ef:f1:cd:42:cc:ba:20:2a:69:a5:13:e5:96:6a:69:05: cf:14:a0:93 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUC05f6FolvjRWGnfumDLtuXfkBtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlCNEFBOUIzQzdGNzgwMjYxREM0OTA2NThFNjJCRTg2 Qjg1RkYzQTAeFw0yNjAxMTkwNDM4MjZaFw0yNzAxMTgwNDQzMjZaMDMxMTAvBgNV BAMTKDgwMDY3MDg3NzdFQjAzQzM1NzAwNURDNzNFQzQ2Qjg5NDYwRjc0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9SMC5rpIwaIAG31fKNxV38wh i/2MSrAT4mTeNSY6JFEYxYpsVSn1YTZE1H4BDj1Gdmly3attsxWLEFTINJSIFxHC irPao3YVlKUMP9iCxzTtBpE3fmOYCefqY2mkTig9ZlF89HsAn0E5VlNekpDMjqTJ hxMrE/ATJhiNB6L1fgKnGsS/QOe2cuzLpuj4/TCrdaNSET5R7/6poJnoHGEKDCaD ZxdTu7MQ604+5R7+v89HrFrbcdZwGQLaMqLbLLHT8Sh//YyylnnsBNT3+toJyP5d wTVoLONLz3mE2+uy808hiCE65IPyi6NSIk3hox4RyGWULzdIagIx6jxtuRglAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUgAZwh3frA8NXAF3HPsRriUYPdBQwHwYDVR0j BBgwFoAUObSqmzx/eAJh3EkGWOYr6GuF/zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjJlMWYzYy01YTQ4LTRmMzktYWFjNy1lMDEyZWQ3MDlkNmEvMC8zOUI0QUE5QjND N0Y3ODAyNjFEQzQ5MDY1OEU2MkJFODZCODVGRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzlCNEFBOUIzQzdGNzgwMjYxREM0OTA2NThFNjJCRTg2Qjg1 RkYzQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyMmUxZjNjLTVhNDgtNGYzOS1h YWM3LWUwMTJlZDcwOWQ2YS8wLzMyMzQzMDM1M2EzMjY0MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM1MzUzNjM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBS1AMA0GCSqGSIb3 DQEBCwUAA4IBAQBqjHsE21o/MnQI/TZotldlfjda8cpjgcofR0XSJ/nafIyQMin5 MiBLsI1hZZIjWyj5/pzVSQwwna1ZMHR08pjs5E2AaHxk9gMp9+maXpE2NAfjCuwu pWwYpnhWDDvves5H5rBgxw5EVczkhUFnQfhkYzSAOlGFsxSoTUu2v7ynhpLabsXe YCmr3MLecisgBHGFpPASHa52RYru56NA8sg+FT7ZSk7GFJPzPJa/ZYXBc2bZzO7Y TuMcD586I+6YSNSpBeOiKUOnrpDeFdMPecbZp03Pu5gY6omdTqtefIxa0NgWe9Qc HGNnF3QTX+/xzULMuiAqaaUT5ZZqaQXPFKCT -----END CERTIFICATE-----Generated at Sun Jan 25 23:04:25 2026 by rpki-client