This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36332e302f32342d3234203d3e20313532333733.roa File: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (raw, json) Hash identifier: VPkKq5pW4icrUWwOkyNSfwGvVjdptRStLH0drWvxYBA= Subject key identifier: 5F:A4:F3:56:0F:CF:46:3D:6B:1D:15:84:2D:50:FD:99:EF:76:39:E9 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 558515EE42CE0016AA6EAEE31ABCC6C0B3F24713 Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36332e302f32342d3234203d3e20313532333733.roa Signing time: Thu 22 Jan 2026 20:00:01 +0000 ROA not before: Thu 22 Jan 2026 19:55:01 +0000 ROA not after: Thu 21 Jan 2027 20:00:01 +0000 asID: 152373 IP address blocks: 157.15.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 03:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:85:15:ee:42:ce:00:16:aa:6e:ae:e3:1a:bc:c6:c0:b3:f2:47:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Jan 22 19:55:01 2026 GMT Not After : Jan 21 20:00:01 2027 GMT Subject: CN=5FA4F3560FCF463D6B1D15842D50FD99EF7639E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c2:20:30:7d:85:0c:8a:47:4a:9f:1c:03:c7: 0e:29:76:26:06:c7:79:5b:e8:22:65:20:d2:78:cd: d8:3d:bd:90:96:89:5a:5d:1a:fa:12:17:2f:2d:af: b8:5a:6a:ec:a0:14:21:8d:2d:e2:bf:45:b7:24:b3: 99:89:50:73:a2:73:c0:90:01:5f:59:d0:13:06:af: 87:01:eb:45:29:b5:5a:90:0f:7b:ca:76:38:7e:63: 93:32:63:14:22:b5:02:38:56:e5:47:80:27:5f:7d: 15:67:71:fa:de:f7:b3:72:be:e3:0a:24:54:d6:f5: c0:0f:35:17:30:8e:f1:8d:99:e4:58:f5:e1:6b:43: 37:1a:77:25:ff:f3:f2:b0:7b:5d:11:9c:68:00:88: 65:d9:30:5c:07:0c:d2:46:fc:ab:ff:38:a7:2e:11: 1c:43:e8:8e:2a:13:c9:89:4a:3b:79:96:17:ca:31: 6e:10:8a:e2:5b:8f:0f:68:8e:a1:3a:da:20:0e:06: 2a:f7:f5:06:5c:30:6c:2a:78:07:55:10:1b:79:68: af:6a:4d:1e:84:22:d9:3d:e9:98:4b:59:58:61:16: df:5a:f5:69:3d:62:67:64:c3:0c:bf:35:4a:b6:96: e1:1f:b1:c3:50:f9:a6:98:0d:1c:d3:c8:4e:78:ed: 9b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A4:F3:56:0F:CF:46:3D:6B:1D:15:84:2D:50:FD:99:EF:76:39:E9 X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36332e302f32342d3234203d3e20313532333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.63.0/24 Signature Algorithm: sha256WithRSAEncryption 34:19:65:cb:09:e9:e4:96:70:d6:a2:3e:4c:33:f3:ed:23:9a: 97:a3:7e:d0:cd:97:b0:84:a6:e4:cd:80:32:78:0c:8c:93:88: b5:ca:b3:ce:07:45:46:77:15:db:be:30:6a:59:7d:cc:8d:7f: b3:60:27:96:e7:f2:14:19:15:da:f3:c3:c3:ee:bc:57:80:96: cb:3c:2f:f0:3b:80:e4:66:f2:0e:7f:8f:67:41:0e:18:3a:4e: b5:df:5c:8e:e7:1c:aa:5f:70:76:2f:75:16:37:a6:3f:86:95: a7:d0:4f:d9:46:fa:fe:bc:34:bb:07:ca:c8:db:bf:9c:72:7c: 2f:5a:d4:e5:57:57:db:ef:f0:ba:51:bc:15:57:d4:81:a9:1e: a8:fc:65:32:0c:38:83:89:75:0e:b9:68:8d:e0:86:0f:93:6a: 80:b5:f7:b2:b3:4c:8b:38:ef:e3:a3:c1:3a:38:ac:c2:70:30: 02:cb:b1:d6:b0:91:0a:0a:e8:48:73:49:c6:1e:89:87:55:2e: 71:2c:19:83:cd:80:e7:41:13:4a:30:8c:4d:af:a7:77:3d:ef: 83:a0:9c:51:35:93:90:14:33:64:cd:19:3f:bf:35:52:39:9e: a3:a1:9d:ef:90:82:ef:a2:b4:9b:43:67:15:5c:7a:8b:39:71: 0f:ca:7d:f7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVYUV7kLOABaqbq7jGrzGwLPyRxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNjAxMjIxOTU1MDFaFw0yNzAxMjEyMDAwMDFaMDMxMTAvBgNV BAMTKDVGQTRGMzU2MEZDRjQ2M0Q2QjFEMTU4NDJENTBGRDk5RUY3NjM5RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbwiAwfYUMikdKnxwDxw4pdiYG x3lb6CJlINJ4zdg9vZCWiVpdGvoSFy8tr7haauygFCGNLeK/Rbcks5mJUHOic8CQ AV9Z0BMGr4cB60UptVqQD3vKdjh+Y5MyYxQitQI4VuVHgCdffRVncfre97NyvuMK JFTW9cAPNRcwjvGNmeRY9eFrQzcadyX/8/Kwe10RnGgAiGXZMFwHDNJG/Kv/OKcu ERxD6I4qE8mJSjt5lhfKMW4QiuJbjw9ojqE62iAOBir39QZcMGwqeAdVEBt5aK9q TR6EItk96ZhLWVhhFt9a9Wk9Ymdkwwy/NUq2luEfscNQ+aaYDRzTyE547ZsfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUX6TzVg/PRj1rHRWELVD9me92OekwHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxMjM0YzRhLWE4ZmYtNDAzNi04 NDIwLWRhODE2MjExMTgwNi8wLzMxMzUzNzJlMzEzNTJlMzYzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PPzANBgkqhkiG 9w0BAQsFAAOCAQEANBllywnp5JZw1qI+TDPz7SOal6N+0M2XsISm5M2AMngMjJOI tcqzzgdFRncV274wall9zI1/s2AnlufyFBkV2vPDw+68V4CWyzwv8DuA5GbyDn+P Z0EOGDpOtd9cjuccql9wdi91FjemP4aVp9BP2Ub6/rw0uwfKyNu/nHJ8L1rU5VdX 2+/wulG8FVfUgakeqPxlMgw4g4l1DrlojeCGD5NqgLX3srNMizjv46PBOjiswnAw Asux1rCRCgroSHNJxh6Jh1UucSwZg82A50ETSjCMTa+ndz3vg6CcUTWTkBQzZM0Z P781Ujmeo6Gd75CC76K0m0NnFVx6izlxD8p99w== -----END CERTIFICATE-----Generated at Mon Jan 26 06:41:29 2026 by rpki-client