This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/323430373a633663303a3a2f33322d3438203d3e20313432333634.roa File: 323430373a633663303a3a2f33322d3438203d3e20313432333634.roa (raw, json) Hash identifier: QMffE6ZO0oIBD+UPOSpX/URye6oY0aJnDmCuAJpKngs= Subject key identifier: BA:FD:8B:1A:0F:64:0A:E4:9E:4D:A0:AE:19:E7:47:ED:DB:94:A1:FA Certificate issuer: /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Certificate serial: 4AA386227C124AFF2B3B4B8124351E13E379C039 Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/323430373a633663303a3a2f33322d3438203d3e20313432333634.roa Signing time: Sun 11 Jan 2026 07:00:02 +0000 ROA not before: Sun 11 Jan 2026 06:55:02 +0000 ROA not after: Sun 10 Jan 2027 07:00:02 +0000 asID: 142364 IP address blocks: 2407:c6c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 02:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a3:86:22:7c:12:4a:ff:2b:3b:4b:81:24:35:1e:13:e3:79:c0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Validity Not Before: Jan 11 06:55:02 2026 GMT Not After : Jan 10 07:00:02 2027 GMT Subject: CN=BAFD8B1A0F640AE49E4DA0AE19E747EDDB94A1FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:92:90:75:7d:b2:56:7e:a8:5e:33:dd:aa: a5:06:4b:cb:6a:a2:62:2d:5f:39:6c:fe:94:45:20: 30:84:43:a1:9e:d3:98:28:d9:52:54:8e:40:5a:cc: a2:da:be:b9:22:3f:61:48:34:39:72:d1:11:bc:d8: c3:7d:2a:1f:77:c8:47:37:c8:11:ad:0a:2d:bf:f7: 95:95:04:1b:e6:0e:b1:e2:98:68:5d:5e:50:31:38: 43:84:91:cd:2f:e0:36:7f:82:3c:d4:cf:23:f3:06: fe:55:2e:df:55:fe:e0:08:5f:f1:14:26:ee:a8:bf: ef:03:d9:58:c1:f0:16:05:2c:d3:a6:c7:e3:e2:6e: 15:20:b1:37:dd:8b:ea:ca:aa:e6:15:ab:b4:f3:c8: 5b:9a:bf:79:c5:48:f9:09:b1:03:7a:31:eb:01:66: bf:21:50:68:01:12:58:d9:17:2b:1d:a4:c6:d4:38: 68:31:29:dd:11:47:b6:90:ab:9d:73:97:72:45:7f: a7:c1:1e:fd:86:94:94:31:41:28:fa:b9:78:d0:ed: 6f:47:c0:33:5a:04:a7:af:9d:62:1c:31:42:1a:1f: d8:85:d5:0e:d0:50:f7:f2:09:8e:06:4c:b0:ea:69: 92:9b:09:a1:8c:d8:6c:e3:7f:8d:94:54:53:d5:27: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FD:8B:1A:0F:64:0A:E4:9E:4D:A0:AE:19:E7:47:ED:DB:94:A1:FA X509v3 Authority Key Identifier: keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/323430373a633663303a3a2f33322d3438203d3e20313432333634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:c6c0::/32 Signature Algorithm: sha256WithRSAEncryption 92:a5:cf:a4:43:74:89:69:9a:b4:58:5f:e8:5b:9c:56:4e:43: eb:86:52:18:da:c6:40:4d:11:d1:28:ca:89:86:22:32:f8:ed: 7a:2b:15:0b:41:6e:b0:47:f2:e7:da:c6:76:cd:10:58:23:26: 33:13:ef:a8:9e:41:9e:a7:17:3d:4c:5c:52:6e:bd:0d:f5:15: ff:2e:a6:9f:14:52:d6:f1:5a:7e:90:db:8b:53:84:90:14:54: 0e:1b:1b:01:cf:0a:2e:2d:f5:6d:f7:04:9f:95:e2:3e:bd:40: 9c:0c:04:68:04:2b:38:6e:dd:e0:ed:57:a9:c5:98:c0:e6:08: 7b:40:cb:ac:ba:74:5a:7d:a5:3b:05:f5:87:43:10:fb:50:7d: bb:b3:5a:b9:b6:f2:ac:9f:5c:b8:0d:1c:b7:5f:2c:c2:17:33: b2:e4:22:47:ac:fc:d6:99:3e:e8:9a:fe:df:04:f6:ce:bd:5b: ba:9a:7c:c9:cc:8c:27:b4:5b:0e:05:35:3c:a2:5b:c5:5a:6b: 4d:dc:d4:e6:6b:43:bc:10:49:2b:59:5d:eb:17:31:cd:61:88: 88:1e:4f:a5:41:f2:55:1c:63:c3:ac:a2:02:87:4e:f8:b3:d6: a3:67:c9:9a:4c:b6:7c:27:62:ab:5e:43:3a:cd:fe:8f:e2:01: a5:bf:b2:5f -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUSqOGInwSSv8rO0uBJDUeE+N5wDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD MzVFMUU0RjAeFw0yNjAxMTEwNjU1MDJaFw0yNzAxMTAwNzAwMDJaMDMxMTAvBgNV BAMTKEJBRkQ4QjFBMEY2NDBBRTQ5RTREQTBBRTE5RTc0N0VEREI5NEExRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtG5KQdX2yVn6oXjPdqqUGS8tq omItXzls/pRFIDCEQ6Ge05go2VJUjkBazKLavrkiP2FINDly0RG82MN9Kh93yEc3 yBGtCi2/95WVBBvmDrHimGhdXlAxOEOEkc0v4DZ/gjzUzyPzBv5VLt9V/uAIX/EU Ju6ov+8D2VjB8BYFLNOmx+PibhUgsTfdi+rKquYVq7TzyFuav3nFSPkJsQN6MesB Zr8hUGgBEljZFysdpMbUOGgxKd0RR7aQq51zl3JFf6fBHv2GlJQxQSj6uXjQ7W9H wDNaBKevnWIcMUIaH9iF1Q7QUPfyCY4GTLDqaZKbCaGM2Gzjf42UVFPVJ7QDAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUuv2LGg9kCuSeTaCuGedH7duUofowHwYDVR0j BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF MUU0Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2MWNmNzc3LThhZGYtNGVmMS04 ZDZmLTk4NjJjNTU2MjBlYS8wLzMyMzQzMDM3M2E2MzM2NjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzQzMjMzMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQHxsAwDQYJKoZI hvcNAQELBQADggEBAJKlz6RDdIlpmrRYX+hbnFZOQ+uGUhjaxkBNEdEoyomGIjL4 7XorFQtBbrBH8ufaxnbNEFgjJjMT76ieQZ6nFz1MXFJuvQ31Ff8upp8UUtbxWn6Q 24tThJAUVA4bGwHPCi4t9W33BJ+V4j69QJwMBGgEKzhu3eDtV6nFmMDmCHtAy6y6 dFp9pTsF9YdDEPtQfbuzWrm28qyfXLgNHLdfLMIXM7LkIkes/NaZPuia/t8E9s69 W7qafMnMjCe0Ww4FNTyiW8Vaa03c1OZrQ7wQSStZXesXMc1hiIgeT6VB8lUcY8Os ogKHTviz1qNnyZpMtnwnYqteQzrN/o/iAaW/sl8= -----END CERTIFICATE-----Generated at Mon Jan 26 02:31:09 2026 by rpki-client