This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/323430373a373263303a3a2f33322d3332203d3e203538383230.roa File: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (raw, json) Hash identifier: Uxuob34lJgOCFn3rUm77IOpVd7DaLceyCMpWeS74nuM= Subject key identifier: 61:F3:EB:21:F8:23:14:7D:DA:F0:B2:A2:AD:9D:90:20:A3:BC:FC:B4 Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 03D8ABECB9D8675A1232075C45CF2CAE41A0B9D1 Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/323430373a373263303a3a2f33322d3332203d3e203538383230.roa Signing time: Thu 15 Jan 2026 17:02:35 +0000 ROA not before: Thu 15 Jan 2026 16:57:35 +0000 ROA not after: Thu 14 Jan 2027 17:02:35 +0000 asID: 58820 IP address blocks: 2407:72c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 08:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d8:ab:ec:b9:d8:67:5a:12:32:07:5c:45:cf:2c:ae:41:a0:b9:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Jan 15 16:57:35 2026 GMT Not After : Jan 14 17:02:35 2027 GMT Subject: CN=61F3EB21F823147DDAF0B2A2AD9D9020A3BCFCB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:89:12:aa:2d:d5:89:0e:fc:93:65:8c:b6:c4: 58:a4:a9:b3:07:14:20:fe:ee:51:3a:5d:db:bf:b5: 56:7b:82:5a:6d:dd:6d:12:da:25:ce:c2:5c:8a:94: 16:ca:51:25:76:96:45:eb:49:a0:da:52:80:26:6b: 46:b4:6f:a5:0b:53:0e:ec:33:56:9f:f3:30:21:25: 7e:2b:3e:58:aa:39:d9:3d:d0:83:6e:74:7c:16:dd: 59:bc:44:1a:b8:bf:7b:8f:a6:3d:65:e1:b6:0e:04: 13:e6:eb:ef:ed:ed:01:a9:66:74:97:55:3f:9d:91: 18:ce:b1:b7:84:34:78:c3:b3:ec:9c:de:32:ec:7e: 51:a0:76:30:c7:b8:2b:a0:10:7d:5b:0e:ef:db:cb: 13:34:ab:c0:97:fe:a4:82:cd:cc:5d:e3:8e:c0:0b: 5e:6f:75:56:34:22:93:76:de:5e:50:34:13:73:c9: ce:c3:f7:51:70:61:e1:a3:92:45:7b:86:e5:a2:98: 84:12:5d:44:f1:39:07:e0:4e:71:57:3a:62:b3:59: ce:1b:8b:a2:ab:66:cc:05:cd:8e:05:eb:49:56:a9: 45:16:77:26:b7:4f:87:d5:6b:ec:b1:d0:71:ed:12: 5c:e3:03:d4:56:49:de:e6:4d:4f:48:63:a7:3e:a9: 67:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F3:EB:21:F8:23:14:7D:DA:F0:B2:A2:AD:9D:90:20:A3:BC:FC:B4 X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/323430373a373263303a3a2f33322d3332203d3e203538383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:72c0::/32 Signature Algorithm: sha256WithRSAEncryption 97:69:c4:fa:75:41:0b:cc:b4:04:e2:57:fe:d7:20:09:8a:5a: 5d:af:8e:08:fe:bd:78:76:0c:fb:9e:ba:52:9e:6c:a8:ea:0a: a6:75:20:d9:40:e4:31:60:a3:7d:e4:7c:dd:2d:50:ee:80:e3: 3b:b2:32:40:28:3a:95:23:21:e8:95:04:fe:52:66:0e:3f:6e: e4:1f:47:b4:92:33:e6:c4:5e:65:2b:86:7b:55:77:f9:cc:d4: 9c:a8:45:2e:65:ac:04:f5:bc:0e:65:41:24:7a:d0:11:06:17: 7b:aa:14:6b:4e:02:a6:ea:1c:d4:05:87:8f:85:cc:a4:2d:7b: e9:5f:76:8e:cc:ab:6f:bc:4b:e1:3b:9c:7f:59:4d:61:15:4a: 1b:7c:c7:df:9f:86:16:83:d2:ea:48:42:57:0b:8c:18:7d:7a: 4e:c9:24:6c:6e:25:d4:3f:e7:11:02:67:6c:9a:c4:0f:fd:c5: e7:01:a4:ad:26:26:24:03:bd:e5:98:f3:eb:2a:db:65:c0:4b: 39:f2:2e:f1:87:e3:3d:34:a2:56:bb:31:ae:58:4e:dc:a7:c6: d0:50:18:45:21:10:08:20:39:de:94:ba:b3:66:f4:9d:49:e3: 38:b2:f3:83:c7:d6:48:41:11:fc:2e:c9:b8:17:d5:1b:9a:70: f2:ce:33:3d -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUA9ir7LnYZ1oSMgdcRc8srkGgudEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNjAxMTUxNjU3MzVaFw0yNzAxMTQxNzAyMzVaMDMxMTAvBgNV BAMTKDYxRjNFQjIxRjgyMzE0N0REQUYwQjJBMkFEOUQ5MDIwQTNCQ0ZDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDciRKqLdWJDvyTZYy2xFikqbMH FCD+7lE6Xdu/tVZ7glpt3W0S2iXOwlyKlBbKUSV2lkXrSaDaUoAma0a0b6ULUw7s M1af8zAhJX4rPliqOdk90INudHwW3Vm8RBq4v3uPpj1l4bYOBBPm6+/t7QGpZnSX VT+dkRjOsbeENHjDs+yc3jLsflGgdjDHuCugEH1bDu/byxM0q8CX/qSCzcxd447A C15vdVY0IpN23l5QNBNzyc7D91FwYeGjkkV7huWimIQSXUTxOQfgTnFXOmKzWc4b i6KrZswFzY4F60lWqUUWdya3T4fVa+yx0HHtElzjA9RWSd7mTU9IY6c+qWcnAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUYfPrIfgjFH3a8LKirZ2QIKO8/LQwHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4YzljMjUyLWY3Y2EtNGRkNS04 OGY2LTIyYWRkYzg5MzRiMy8wLzMyMzQzMDM3M2EzNzMyNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM1MzgzODMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB3LAMA0GCSqGSIb3 DQEBCwUAA4IBAQCXacT6dUELzLQE4lf+1yAJilpdr44I/r14dgz7nrpSnmyo6gqm dSDZQOQxYKN95HzdLVDugOM7sjJAKDqVIyHolQT+UmYOP27kH0e0kjPmxF5lK4Z7 VXf5zNScqEUuZawE9bwOZUEketARBhd7qhRrTgKm6hzUBYePhcykLXvpX3aOzKtv vEvhO5x/WU1hFUobfMffn4YWg9LqSEJXC4wYfXpOySRsbiXUP+cRAmdsmsQP/cXn AaStJiYkA73lmPPrKttlwEs58i7xh+M9NKJWuzGuWE7cp8bQUBhFIRAIIDnelLqz ZvSdSeM4svODx9ZIQRH8Lsm4F9UbmnDyzjM9 -----END CERTIFICATE-----Generated at Sun Jan 25 20:42:46 2026 by rpki-client