This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/323430373a373234303a3a2f33322d3438203d3e203538383230.roa File: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (raw, json) Hash identifier: 1wh8FEeGWVS9WrnN9jZRNRfkzt0zUBWTKFS3jSYx5Ps= Subject key identifier: 13:DD:61:03:80:54:10:CC:AC:84:41:18:4C:B5:75:7C:D8:8D:3A:8C Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 43AD3B5895B61FCC67DA7379DE80A26E3DEECD48 Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/323430373a373234303a3a2f33322d3438203d3e203538383230.roa Signing time: Thu 15 Jan 2026 17:02:34 +0000 ROA not before: Thu 15 Jan 2026 16:57:34 +0000 ROA not after: Thu 14 Jan 2027 17:02:34 +0000 asID: 58820 IP address blocks: 2407:7240::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ad:3b:58:95:b6:1f:cc:67:da:73:79:de:80:a2:6e:3d:ee:cd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Jan 15 16:57:34 2026 GMT Not After : Jan 14 17:02:34 2027 GMT Subject: CN=13DD6103805410CCAC8441184CB5757CD88D3A8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e3:4f:e1:ba:2b:f2:e4:e1:96:17:86:f1:9f: c3:e1:0f:20:d1:36:83:58:72:5d:7b:91:d2:67:58: 03:6c:fb:19:38:51:99:9f:49:40:dc:9e:44:7d:96: 05:8c:72:74:9c:7c:2b:4b:40:24:4a:c2:a6:61:dc: 98:33:64:0d:40:60:bc:b8:04:86:b3:64:bb:06:7f: 69:eb:05:17:d9:41:eb:ed:09:24:60:bd:d2:75:eb: 1c:16:39:e9:a7:eb:a1:e4:49:51:e1:af:f4:ee:5c: 4a:ec:28:cb:68:2e:f4:ba:59:0c:56:e6:e1:2b:b0: e7:92:da:c7:07:fc:c4:ef:72:84:f2:c7:1c:fe:98: 39:0c:72:a8:b0:b0:1c:e1:70:8f:5c:2d:14:e2:85: c0:bb:41:b5:10:d0:a5:76:03:0c:f6:02:83:c5:5d: 04:58:ed:2b:b7:c0:3d:0e:d2:fe:9f:fb:89:a4:b4: a2:b0:22:ea:56:3c:ce:6e:d8:10:4a:3f:c8:5a:ed: a5:11:9c:82:ae:64:b2:06:3f:7b:be:e3:1d:02:5f: 4d:fb:35:51:99:ce:00:c4:6b:d5:82:a9:b5:04:a2: 73:1b:6c:89:46:04:23:62:12:c6:c8:c2:85:6d:96: 51:b4:d2:0b:ca:80:a1:e1:76:05:f5:38:79:f2:25: 4e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DD:61:03:80:54:10:CC:AC:84:41:18:4C:B5:75:7C:D8:8D:3A:8C X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/323430373a373234303a3a2f33322d3438203d3e203538383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:7240::/32 Signature Algorithm: sha256WithRSAEncryption 27:3f:98:0a:66:d8:69:2a:30:94:35:25:36:12:b9:9b:00:a9: 9d:ed:b8:1b:f2:40:98:63:6d:a4:87:5e:d9:0c:69:de:4a:03: 04:4c:6d:41:d1:77:9f:36:af:49:1b:cb:3b:d4:a2:54:32:34: 1c:2c:8c:c8:dc:ae:de:6f:aa:f0:49:91:45:f2:11:cd:e5:86: 3e:7e:93:c9:07:4f:40:eb:5c:63:6f:9f:a7:55:b7:b7:d9:27: a3:62:1b:84:23:4d:d6:52:46:c2:ed:99:7b:51:1d:5c:92:9f: 21:78:b8:76:de:f9:11:0c:51:9f:28:be:d3:23:63:d8:61:c1: 59:94:c0:ac:cd:cf:ab:a2:a0:48:6c:0b:0f:e2:60:be:c9:9b: 83:2c:7d:57:91:b1:2a:2d:a9:b5:ad:9c:9f:f1:43:79:73:d0: 06:d3:f3:91:64:ae:7d:77:00:18:ba:ce:6c:5f:f5:dd:d6:db: 6f:fd:19:ec:d7:75:ad:bc:0e:c3:d1:16:5e:36:13:a9:01:75: ef:b1:de:c8:6a:35:59:5e:73:71:c8:ab:92:e6:79:eb:cc:2f: b8:50:4c:9e:9d:5c:88:9e:49:70:75:93:cb:6c:57:70:6e:25: 9e:a6:57:8f:0c:95:41:41:45:07:3c:98:cc:b0:8c:f1:8a:93: f3:00:93:2e -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUQ607WJW2H8xn2nN53oCibj3uzUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNjAxMTUxNjU3MzRaFw0yNzAxMTQxNzAyMzRaMDMxMTAvBgNV BAMTKDEzREQ2MTAzODA1NDEwQ0NBQzg0NDExODRDQjU3NTdDRDg4RDNBOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg40/huivy5OGWF4bxn8PhDyDR NoNYcl17kdJnWANs+xk4UZmfSUDcnkR9lgWMcnScfCtLQCRKwqZh3JgzZA1AYLy4 BIazZLsGf2nrBRfZQevtCSRgvdJ16xwWOemn66HkSVHhr/TuXErsKMtoLvS6WQxW 5uErsOeS2scH/MTvcoTyxxz+mDkMcqiwsBzhcI9cLRTihcC7QbUQ0KV2Awz2AoPF XQRY7Su3wD0O0v6f+4mktKKwIupWPM5u2BBKP8ha7aURnIKuZLIGP3u+4x0CX037 NVGZzgDEa9WCqbUEonMbbIlGBCNiEsbIwoVtllG00gvKgKHhdgX1OHnyJU71AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUE91hA4BUEMyshEEYTLV1fNiNOowwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0YmE2Nzc4LWIxNmQtNGJhOC05 ODRmLTM0ZTQxOWZjOWM0OS8wLzMyMzQzMDM3M2EzNzMyMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM1MzgzODMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB3JAMA0GCSqGSIb3 DQEBCwUAA4IBAQAnP5gKZthpKjCUNSU2ErmbAKmd7bgb8kCYY22kh17ZDGneSgME TG1B0XefNq9JG8s71KJUMjQcLIzI3K7eb6rwSZFF8hHN5YY+fpPJB09A61xjb5+n Vbe32SejYhuEI03WUkbC7Zl7UR1ckp8heLh23vkRDFGfKL7TI2PYYcFZlMCszc+r oqBIbAsP4mC+yZuDLH1XkbEqLam1rZyf8UN5c9AG0/ORZK59dwAYus5sX/Xd1ttv /Rns13WtvA7D0RZeNhOpAXXvsd7IajVZXnNxyKuS5nnrzC+4UEyenVyInklwdZPL bFdwbiWeplePDJVBQUUHPJjMsIzxipPzAJMu -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:06 2026 by rpki-client