This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a3a2f33322d3438203d3e20313437313337.roa File: 323430303a343661303a3a2f33322d3438203d3e20313437313337.roa (raw, json) Hash identifier: /1QktFWDIeefEIAnyvr9/LERn3oGXVO571BF9/xslaI= Subject key identifier: 19:00:40:CD:C8:16:FC:65:8D:A6:DB:92:45:2A:3E:AA:9A:29:B8:64 Certificate issuer: /CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Certificate serial: 42EA76F23CC8EF352EACF790B70A3B588637AA98 Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a3a2f33322d3438203d3e20313437313337.roa Signing time: Fri 16 Jan 2026 22:00:01 +0000 ROA not before: Fri 16 Jan 2026 21:55:01 +0000 ROA not after: Fri 15 Jan 2027 22:00:01 +0000 asID: 147137 IP address blocks: 2400:46a0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ea:76:f2:3c:c8:ef:35:2e:ac:f7:90:b7:0a:3b:58:86:37:aa:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980 Validity Not Before: Jan 16 21:55:01 2026 GMT Not After : Jan 15 22:00:01 2027 GMT Subject: CN=190040CDC816FC658DA6DB92452A3EAA9A29B864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:70:07:4f:ff:b3:18:b1:20:c0:89:bd:25: 50:13:9f:aa:26:59:5c:5e:5d:2d:0a:98:a4:d9:d3: 94:b5:57:0a:4a:19:32:da:d2:c4:a0:da:89:0c:14: 03:89:4c:c4:c0:a8:45:00:4a:28:93:36:28:d6:ef: 14:e2:12:4d:c1:f6:f9:28:9a:67:c8:22:af:93:a2: c6:d1:44:52:b6:3e:34:fb:8e:2c:ee:47:88:13:b9: 38:ab:5b:dd:bc:c6:a2:0c:8d:77:80:fc:bb:df:46: 2e:cc:9f:c9:1f:c5:a9:7d:f8:5a:39:c9:51:a4:21: 7d:7f:6f:c7:55:7c:2d:e9:82:34:58:69:7e:83:55: f7:8e:9a:a9:b7:97:3b:12:40:6f:8c:5a:0f:8e:68: 39:95:f4:1d:f0:46:1d:16:28:97:4b:01:b4:85:e0: 0e:9c:6b:bd:8a:20:6f:90:32:f6:b2:f2:0b:61:10: 14:dd:93:39:69:42:19:28:e8:8a:94:73:a7:61:53: ee:e0:b3:30:e2:b3:8c:4d:3e:cb:e6:3d:b7:f7:07: 54:6b:ef:0a:cc:06:19:fe:e4:b8:99:1d:6c:77:16: 12:d1:39:51:3d:22:09:f2:37:67:8e:58:bd:5f:b3: 95:94:9e:bf:f4:48:e4:28:19:e7:81:4a:1d:a0:9c: c9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:00:40:CD:C8:16:FC:65:8D:A6:DB:92:45:2A:3E:AA:9A:29:B8:64 X509v3 Authority Key Identifier: keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/323430303a343661303a3a2f33322d3438203d3e20313437313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:46a0::/32 Signature Algorithm: sha256WithRSAEncryption 2f:25:cf:bc:85:3c:20:6f:6f:88:94:ac:7e:06:33:35:b4:fe: 34:47:42:e5:e9:48:14:4c:fc:48:8d:57:e2:7f:e1:3c:a7:88: ea:85:77:61:ad:96:65:ca:d8:3d:f9:1c:36:20:cf:27:5c:06: f0:7c:b6:5a:cf:d3:05:fa:18:e7:4e:1d:9d:dc:a8:db:9a:ca: 3c:88:10:cf:27:6d:9f:49:fd:56:c4:fb:2f:20:73:5d:df:cd: ff:c1:ae:b4:6f:39:74:7a:eb:0e:eb:12:41:00:1f:cc:4f:2d: 36:58:1d:2a:ed:b2:ad:8f:b8:43:88:9e:a7:af:76:56:2d:b7: b8:d6:00:cb:52:0d:25:87:1f:01:ee:b0:4d:cd:de:d6:37:d2: 65:e1:8d:a2:a0:bc:62:9d:8e:90:21:fa:81:3a:44:c9:5e:4a: df:dc:e6:37:f2:b2:c8:b7:c2:0c:78:d7:e5:98:57:0e:b8:07: d0:94:e3:8a:d2:c5:2f:08:0e:10:b3:6a:f8:ec:a9:4c:9e:9b: 53:53:c9:ab:cf:23:e9:e1:54:21:ab:14:87:33:cb:60:3c:12: b0:93:19:a2:20:1f:70:be:84:e7:d9:4d:57:af:73:a0:9a:8a: f3:6d:b2:37:d0:2a:97:ff:06:b1:ca:bc:21:3b:ec:47:87:0b: c5:2e:26:85 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUQup28jzI7zUurPeQtwo7WIY3qpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0Uz NzI4Mjk4MDAeFw0yNjAxMTYyMTU1MDFaFw0yNzAxMTUyMjAwMDFaMDMxMTAvBgNV BAMTKDE5MDA0MENEQzgxNkZDNjU4REE2REI5MjQ1MkEzRUFBOUEyOUI4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtxHAHT/+zGLEgwIm9JVATn6om WVxeXS0KmKTZ05S1VwpKGTLa0sSg2okMFAOJTMTAqEUASiiTNijW7xTiEk3B9vko mmfIIq+TosbRRFK2PjT7jizuR4gTuTirW928xqIMjXeA/LvfRi7Mn8kfxal9+Fo5 yVGkIX1/b8dVfC3pgjRYaX6DVfeOmqm3lzsSQG+MWg+OaDmV9B3wRh0WKJdLAbSF 4A6ca72KIG+QMvay8gthEBTdkzlpQhko6IqUc6dhU+7gszDis4xNPsvmPbf3B1Rr 7wrMBhn+5LiZHWx3FhLROVE9IgnyN2eOWL1fs5WUnr/0SOQoGeeBSh2gnMljAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUGQBAzcgW/GWNptuSRSo+qpopuGQwHwYDVR0j BBgwFoAUmlK2QF7UBqexfER41RbfPjcoKYAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTY2NWMzMi02ZGFmLTQ3MmItYmNlNi0zMTdkNWQ2Yzc4OWUvMC85QTUyQjY0MDVF RDQwNkE3QjE3QzQ0NzhENTE2REYzRTM3MjgyOTgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1MkI2NDA1RUQ0MDZBN0IxN0M0NDc4RDUxNkRGM0UzNzI4 Mjk4MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNjY1YzMyLTZkYWYtNDcyYi1i Y2U2LTMxN2Q1ZDZjNzg5ZS8wLzMyMzQzMDMwM2EzNDM2NjEzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzQzNzMxMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQARqAwDQYJKoZI hvcNAQELBQADggEBAC8lz7yFPCBvb4iUrH4GMzW0/jRHQuXpSBRM/EiNV+J/4Tyn iOqFd2GtlmXK2D35HDYgzydcBvB8tlrP0wX6GOdOHZ3cqNuayjyIEM8nbZ9J/VbE +y8gc13fzf/BrrRvOXR66w7rEkEAH8xPLTZYHSrtsq2PuEOInqevdlYtt7jWAMtS DSWHHwHusE3N3tY30mXhjaKgvGKdjpAh+oE6RMleSt/c5jfyssi3wgx41+WYVw64 B9CU44rSxS8IDhCzavjsqUyem1NTyavPI+nhVCGrFIczy2A8ErCTGaIgH3C+hOfZ TVevc6CaivNtsjfQKpf/BrHKvCE77EeHC8UuJoU= -----END CERTIFICATE-----Generated at Sun Jan 25 23:41:22 2026 by rpki-client