This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/323430373a373234303a3a2f33322d3332203d3e203538383230.roa File: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (raw, json) Hash identifier: HLX3aFGkhTTF59aMcv9G2ZkMKwAOSmi1mZ83DZAbPPc= Subject key identifier: C4:72:7D:DB:A6:FB:FB:DF:56:32:F7:C9:AB:CF:03:D2:49:91:5D:A1 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 189AA9C41FBB3A991B2B6446ED007D97B1E488F5 Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/323430373a373234303a3a2f33322d3332203d3e203538383230.roa Signing time: Thu 15 Jan 2026 17:02:34 +0000 ROA not before: Thu 15 Jan 2026 16:57:34 +0000 ROA not after: Thu 14 Jan 2027 17:02:34 +0000 asID: 58820 IP address blocks: 2407:7240::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:9a:a9:c4:1f:bb:3a:99:1b:2b:64:46:ed:00:7d:97:b1:e4:88:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Jan 15 16:57:34 2026 GMT Not After : Jan 14 17:02:34 2027 GMT Subject: CN=C4727DDBA6FBFBDF5632F7C9ABCF03D249915DA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:f5:62:a1:db:e5:ac:1f:31:80:d0:59:e4: 03:e9:c2:e1:97:04:83:68:b2:a1:60:11:99:15:4e: 9c:e7:a4:2c:f2:35:5b:d4:73:d4:4f:fa:02:a8:d0: 4e:dd:ed:25:3e:b1:80:41:b7:d5:40:fc:ab:32:51: 0a:92:e5:bd:02:81:04:93:bc:3a:7b:19:e8:e2:df: c2:b6:08:68:aa:12:23:4f:d8:80:85:c7:17:26:30: c3:6f:a8:94:77:88:ef:6a:77:35:ac:90:85:75:1a: d5:23:f5:05:5f:a0:71:39:40:9b:dc:d6:23:62:86: 2f:2a:40:fe:49:d0:87:06:df:b1:b4:ec:5f:00:59: fe:a6:f5:0e:07:bc:a0:e4:42:d3:01:90:4e:22:5c: d8:70:6a:04:16:35:c6:c6:8b:05:3c:36:68:6a:24: 00:0d:30:bc:a3:56:3d:1c:ad:9c:4a:b0:69:c8:01: 49:89:0c:2a:1d:d8:cf:89:69:48:bf:6a:b1:3c:93: 09:c2:08:07:58:c6:8b:84:14:fa:80:fd:29:f9:bf: fa:58:f5:12:55:d9:c6:8d:33:eb:97:b4:43:f2:ea: 00:ea:37:92:17:07:72:c2:2e:63:93:b9:16:f3:78: 4d:3c:89:af:bf:59:43:22:1a:d8:1a:fc:5c:a0:23: a8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:72:7D:DB:A6:FB:FB:DF:56:32:F7:C9:AB:CF:03:D2:49:91:5D:A1 X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/323430373a373234303a3a2f33322d3332203d3e203538383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:7240::/32 Signature Algorithm: sha256WithRSAEncryption ad:95:a3:b3:58:22:12:68:f6:b1:66:4e:9a:48:4c:9b:34:09: f8:01:a0:54:dc:08:4f:e0:fb:91:bd:ed:f3:3e:4a:e8:37:3e: 9c:d8:ed:dd:23:ce:e3:b8:31:e5:2c:fc:98:c3:da:1c:d1:f3: ec:fb:95:da:d5:da:a8:23:b2:a1:01:5b:26:a2:a9:72:3c:e2: 16:30:37:36:fe:36:cf:5b:f2:db:12:cd:cd:e1:0a:eb:67:4a: cd:b3:ea:3b:9d:0e:ca:5a:9c:d0:11:b2:50:32:1b:5e:cb:61: 05:3e:ca:16:cc:31:a0:63:b7:c4:27:28:ab:07:1b:68:4a:36: 71:0a:cd:93:18:8d:4c:4c:34:89:0e:9c:35:1a:eb:8b:00:ef: b5:f0:fb:f3:eb:03:f8:a2:a2:d4:7c:9a:1e:96:98:f9:4a:a9: ab:d4:d9:99:d7:18:49:08:33:2f:72:e8:74:52:a6:6b:e0:fa: ee:14:56:34:ab:ae:bc:bf:c6:ab:14:0a:2e:9c:73:0b:49:05: 68:b1:c0:df:fe:a6:f9:77:81:00:53:09:be:ac:e2:4d:c1:44: 76:1d:17:fa:4b:de:45:8a:92:22:8f:a9:4b:ed:36:9b:24:bb: 11:00:5e:24:b8:30:39:87:07:80:aa:d5:da:89:c6:79:c7:1f: 26:79:41:52 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUGJqpxB+7OpkbK2RG7QB9l7HkiPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNjAxMTUxNjU3MzRaFw0yNzAxMTQxNzAyMzRaMDMxMTAvBgNV BAMTKEM0NzI3RERCQTZGQkZCREY1NjMyRjdDOUFCQ0YwM0QyNDk5MTVEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzvViodvlrB8xgNBZ5APpwuGX BINosqFgEZkVTpznpCzyNVvUc9RP+gKo0E7d7SU+sYBBt9VA/KsyUQqS5b0CgQST vDp7Geji38K2CGiqEiNP2ICFxxcmMMNvqJR3iO9qdzWskIV1GtUj9QVfoHE5QJvc 1iNihi8qQP5J0IcG37G07F8AWf6m9Q4HvKDkQtMBkE4iXNhwagQWNcbGiwU8Nmhq JAANMLyjVj0crZxKsGnIAUmJDCod2M+JaUi/arE8kwnCCAdYxouEFPqA/Sn5v/pY 9RJV2caNM+uXtEPy6gDqN5IXB3LCLmOTuRbzeE08ia+/WUMiGtga/FygI6gVAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUxHJ926b7+99WMvfJq88D0kmRXaEwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0YmE2Nzc4LWIxNmQtNGJhOC05 ODRmLTM0ZTQxOWZjOWM0OS8wLzMyMzQzMDM3M2EzNzMyMzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM1MzgzODMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB3JAMA0GCSqGSIb3 DQEBCwUAA4IBAQCtlaOzWCISaPaxZk6aSEybNAn4AaBU3AhP4PuRve3zPkroNz6c 2O3dI87juDHlLPyYw9oc0fPs+5Xa1dqoI7KhAVsmoqlyPOIWMDc2/jbPW/LbEs3N 4QrrZ0rNs+o7nQ7KWpzQEbJQMhtey2EFPsoWzDGgY7fEJyirBxtoSjZxCs2TGI1M TDSJDpw1GuuLAO+18Pvz6wP4oqLUfJoelpj5Sqmr1NmZ1xhJCDMvcuh0UqZr4Pru FFY0q668v8arFAounHMLSQVoscDf/qb5d4EAUwm+rOJNwUR2HRf6S95FipIij6lL 7TabJLsRAF4kuDA5hweAqtXaicZ5xx8meUFS -----END CERTIFICATE-----Generated at Mon Jan 26 04:01:04 2026 by rpki-client