This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/323430373a373263303a3a2f33322d3438203d3e203538383230.roa File: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (raw, json) Hash identifier: 1MWdh9/G7GKdCjppGSd2ji+0mFINmD1XWOxoK1Yj1iA= Subject key identifier: F0:4C:0F:18:C4:8B:EF:34:C9:DC:76:6C:2F:78:F7:E7:84:C5:29:C1 Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 2D13B1FC0BF31E1187E91D80CBA157AA677B51FC Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/323430373a373263303a3a2f33322d3438203d3e203538383230.roa Signing time: Thu 15 Jan 2026 17:02:35 +0000 ROA not before: Thu 15 Jan 2026 16:57:35 +0000 ROA not after: Thu 14 Jan 2027 17:02:35 +0000 asID: 58820 IP address blocks: 2407:72c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 08:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:13:b1:fc:0b:f3:1e:11:87:e9:1d:80:cb:a1:57:aa:67:7b:51:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Jan 15 16:57:35 2026 GMT Not After : Jan 14 17:02:35 2027 GMT Subject: CN=F04C0F18C48BEF34C9DC766C2F78F7E784C529C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5f:4f:c3:4d:97:7a:9b:40:d3:35:fe:4f:98: 85:37:ee:09:f1:ac:eb:7a:b9:b9:98:e3:2f:c1:f1: 07:fa:2a:e3:30:23:b3:1d:f9:89:92:1e:30:ae:86: 06:85:b8:5a:68:b2:30:aa:a0:1f:91:d3:df:45:13: dc:95:90:48:b3:23:4e:0a:e4:4e:86:bf:b8:bc:89: 66:bc:95:53:09:6e:ac:2c:80:c3:ec:6c:d3:73:d0: 68:d5:46:00:c7:eb:cc:59:69:0d:4a:78:f7:17:ab: e9:24:d1:b8:82:bd:fc:3b:51:00:00:86:cd:a9:5b: c7:fe:0d:ea:a0:00:b2:bc:58:03:5a:83:eb:6a:5b: 9c:d8:51:ab:4e:ae:3c:89:81:67:34:5c:fe:1b:0f: da:43:98:8d:ca:57:b6:64:50:a4:93:ad:ab:d5:91: a5:35:bd:e6:e1:c4:22:41:b1:71:04:e4:3c:a0:95: c5:23:f3:db:35:7a:65:ec:36:b0:7a:26:31:db:fe: ae:44:b4:50:fb:3e:32:21:44:7b:f1:18:42:93:38: ce:11:12:2a:1f:75:9f:f1:4a:c0:52:07:c8:43:89: 65:43:d5:6a:66:a6:05:57:78:ee:3e:d5:be:27:c7: d2:09:92:e2:d0:08:94:d2:3e:a2:69:ae:5c:8d:43: a0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4C:0F:18:C4:8B:EF:34:C9:DC:76:6C:2F:78:F7:E7:84:C5:29:C1 X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/323430373a373263303a3a2f33322d3438203d3e203538383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:72c0::/32 Signature Algorithm: sha256WithRSAEncryption 16:a3:9a:7c:aa:8e:9e:84:d9:01:85:5a:b3:ea:1a:3b:12:f5: 0c:76:28:3f:4f:fb:eb:d4:02:6c:0c:0d:84:64:9e:0d:12:7c: 98:05:42:2b:67:7b:df:f2:37:17:05:5c:21:f3:08:6b:e3:2b: ed:80:af:0b:1f:f1:67:fc:75:74:36:34:b1:c7:c4:83:cf:bb: a5:20:96:c5:fd:d1:18:43:1b:f7:4e:e3:49:9f:b2:5f:66:7a: 9d:64:a6:5d:61:45:b6:9d:f1:e2:92:1a:1f:2b:c1:21:b7:6d: 4a:3f:8d:6a:3a:ba:02:af:4c:b6:2c:cf:c6:5f:d2:03:45:00: 18:59:ed:46:4f:a7:f6:aa:e5:c7:00:47:fa:ee:e6:47:c9:33: d3:97:53:46:87:ea:92:54:72:58:da:37:a9:ad:4b:c2:ae:16: 4c:7b:ee:e6:4d:f5:c5:60:10:e1:cd:c5:28:f6:48:70:51:eb: 4a:27:42:de:db:1e:3f:b5:db:67:50:99:aa:51:be:bd:4d:e9: e7:6e:ae:12:fc:9b:36:10:c3:31:99:bf:63:8a:55:44:fe:49: 4e:44:77:51:b8:88:64:fd:53:07:29:70:73:96:47:80:a6:76: b4:67:65:f1:a3:ca:8f:c2:8f:a0:ba:6f:17:24:2c:5a:79:da: 41:02:76:4c -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIULROx/AvzHhGH6R2Ay6FXqmd7UfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNjAxMTUxNjU3MzVaFw0yNzAxMTQxNzAyMzVaMDMxMTAvBgNV BAMTKEYwNEMwRjE4QzQ4QkVGMzRDOURDNzY2QzJGNzhGN0U3ODRDNTI5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeX0/DTZd6m0DTNf5PmIU37gnx rOt6ubmY4y/B8Qf6KuMwI7Md+YmSHjCuhgaFuFposjCqoB+R099FE9yVkEizI04K 5E6Gv7i8iWa8lVMJbqwsgMPsbNNz0GjVRgDH68xZaQ1KePcXq+kk0biCvfw7UQAA hs2pW8f+DeqgALK8WANag+tqW5zYUatOrjyJgWc0XP4bD9pDmI3KV7ZkUKSTravV kaU1vebhxCJBsXEE5DyglcUj89s1emXsNrB6JjHb/q5EtFD7PjIhRHvxGEKTOM4R EiofdZ/xSsBSB8hDiWVD1WpmpgVXeO4+1b4nx9IJkuLQCJTSPqJprlyNQ6A1AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU8EwPGMSL7zTJ3HZsL3j354TFKcEwHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4YzljMjUyLWY3Y2EtNGRkNS04 OGY2LTIyYWRkYzg5MzRiMy8wLzMyMzQzMDM3M2EzNzMyNjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM1MzgzODMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB3LAMA0GCSqGSIb3 DQEBCwUAA4IBAQAWo5p8qo6ehNkBhVqz6ho7EvUMdig/T/vr1AJsDA2EZJ4NEnyY BUIrZ3vf8jcXBVwh8whr4yvtgK8LH/Fn/HV0NjSxx8SDz7ulIJbF/dEYQxv3TuNJ n7JfZnqdZKZdYUW2nfHikhofK8Eht21KP41qOroCr0y2LM/GX9IDRQAYWe1GT6f2 quXHAEf67uZHyTPTl1NGh+qSVHJY2jeprUvCrhZMe+7mTfXFYBDhzcUo9khwUetK J0Le2x4/tdtnUJmqUb69Tennbq4S/Js2EMMxmb9jilVE/klORHdRuIhk/VMHKXBz lkeApna0Z2Xxo8qPwo+gum8XJCxaedpBAnZM -----END CERTIFICATE-----Generated at Sun Jan 25 20:41:18 2026 by rpki-client