This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a3a2f33322d3438203d3e20313338303839.roa File: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (raw, json) Hash identifier: 6q6G3WlaBoWOxOrDz9l3FTN6AH7AT8Eijh6MTkRhXls= Subject key identifier: 64:48:04:29:18:4F:84:CF:1C:DE:F6:0E:A3:18:6B:CB:99:64:82:DF Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Certificate serial: 17266C7052083FD73B446AC2377F5632D9366164 Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a3a2f33322d3438203d3e20313338303839.roa Signing time: Sat 10 Jan 2026 10:00:00 +0000 ROA not before: Sat 10 Jan 2026 09:55:00 +0000 ROA not after: Sat 09 Jan 2027 10:00:00 +0000 asID: 138089 IP address blocks: 2403:e0c0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:26:6c:70:52:08:3f:d7:3b:44:6a:c2:37:7f:56:32:d9:36:61:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Validity Not Before: Jan 10 09:55:00 2026 GMT Not After : Jan 9 10:00:00 2027 GMT Subject: CN=64480429184F84CF1CDEF60EA3186BCB996482DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:97:96:9d:8e:b8:6f:7a:69:80:fe:94:82: aa:45:59:20:54:ae:62:52:da:62:4e:3c:d6:b6:af: 48:d2:71:8a:2c:74:d2:6f:e2:27:f3:4a:b9:36:18: 22:dd:1b:d8:9c:46:0d:d5:a8:12:3d:02:4b:18:72: d3:96:4e:22:2f:8c:93:42:97:af:5f:77:11:5f:65: d5:3b:2e:d1:3b:38:6e:7e:69:45:e7:2b:9a:a5:ac: c4:bc:17:1e:df:fe:87:03:d9:ec:8b:22:a6:62:2f: d0:e3:a2:a8:c2:fe:d7:d9:13:04:dc:8c:10:24:de: 59:78:56:db:dd:02:d7:b3:be:2d:f6:6f:fc:30:79: aa:e5:9b:65:e7:93:ac:f5:bf:50:62:99:cd:86:dd: 88:47:ec:77:b2:f9:6a:54:1b:e4:52:93:81:f2:9c: eb:ac:ce:3c:95:e8:72:d8:a9:66:97:b2:e5:85:f5: fc:a3:8f:28:37:bc:4b:75:0a:d0:12:9e:18:c8:a9: b7:43:c7:29:1a:0d:75:27:10:c9:42:c4:aa:07:19: 99:2a:fb:9f:5e:59:9f:51:64:f3:ee:d8:32:f9:62: 62:53:20:8a:c6:66:2d:1d:a6:ea:5a:7c:cf:f9:98: e7:e5:04:dc:67:68:6b:fc:1d:93:c3:51:4e:19:81: ea:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:48:04:29:18:4F:84:CF:1C:DE:F6:0E:A3:18:6B:CB:99:64:82:DF X509v3 Authority Key Identifier: keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/323430333a653063303a3a2f33322d3438203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:e0c0::/32 Signature Algorithm: sha256WithRSAEncryption 8c:54:ab:f4:67:68:5a:68:28:cd:5f:3e:73:96:95:6b:7c:af: 8d:08:b7:0e:67:75:ab:3f:db:2b:54:e2:bd:9b:8d:3e:19:3a: 53:0a:f6:02:28:79:88:5d:2a:89:2c:78:78:2c:2d:69:53:3e: 13:80:2c:d1:cf:14:8f:9c:38:53:40:b6:56:0d:04:5e:24:87: a1:29:a9:0c:9a:33:4e:20:8c:ea:c5:47:83:82:63:27:b3:b7: 90:c4:51:5f:7d:aa:16:0e:5b:af:44:30:d6:1e:63:93:e0:1f: c6:a1:15:25:c4:b4:20:60:2d:e8:ab:d1:d6:d3:f1:3d:12:a9: d1:42:55:a0:27:8c:07:1e:08:9b:e3:5b:20:c0:3a:58:cb:45: 40:f4:89:15:ad:0d:67:33:30:f1:02:60:5a:00:41:c6:5c:40: 16:62:1d:af:02:50:aa:1e:9d:9d:a9:ee:15:37:ae:5f:cb:d9: 5e:6d:cc:6c:13:0d:14:2a:8c:51:34:8f:58:a4:74:27:f9:a4: 64:4f:d1:01:c7:7a:3f:fa:76:75:b2:e6:3e:14:90:03:69:42: e8:50:15:12:94:8c:8b:ee:e2:8f:14:a0:db:3b:90:d1:09:96: ad:e1:d7:ff:a6:b0:58:ff:e2:47:cb:7d:13:0c:48:cb:5f:0b: d2:6f:3e:6c -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUFyZscFIIP9c7RGrCN39WMtk2YWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB RjcwRTczMzAeFw0yNjAxMTAwOTU1MDBaFw0yNzAxMDkxMDAwMDBaMDMxMTAvBgNV BAMTKDY0NDgwNDI5MTg0Rjg0Q0YxQ0RFRjYwRUEzMTg2QkNCOTk2NDgyREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCigpeWnY64b3ppgP6UgqpFWSBU rmJS2mJOPNa2r0jScYosdNJv4ifzSrk2GCLdG9icRg3VqBI9AksYctOWTiIvjJNC l69fdxFfZdU7LtE7OG5+aUXnK5qlrMS8Fx7f/ocD2eyLIqZiL9DjoqjC/tfZEwTc jBAk3ll4VtvdAtezvi32b/wwearlm2Xnk6z1v1Bimc2G3YhH7Hey+WpUG+RSk4Hy nOuszjyV6HLYqWaXsuWF9fyjjyg3vEt1CtASnhjIqbdDxykaDXUnEMlCxKoHGZkq +59eWZ9RZPPu2DL5YmJTIIrGZi0dpupafM/5mOflBNxnaGv8HZPDUU4ZgephAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUZEgEKRhPhM8c3vYOoxhry5lkgt8wHwYDVR0j BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw RTczMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhYmE0ZTU5LWZiMzEtNDFiNS04 OGU3LTBiMmNlZDFmMjAxYy8wLzMyMzQzMDMzM2E2NTMwNjMzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzODMwMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQD4MAwDQYJKoZI hvcNAQELBQADggEBAIxUq/RnaFpoKM1fPnOWlWt8r40Itw5ndas/2ytU4r2bjT4Z OlMK9gIoeYhdKokseHgsLWlTPhOALNHPFI+cOFNAtlYNBF4kh6EpqQyaM04gjOrF R4OCYyezt5DEUV99qhYOW69EMNYeY5PgH8ahFSXEtCBgLeir0dbT8T0SqdFCVaAn jAceCJvjWyDAOljLRUD0iRWtDWczMPECYFoAQcZcQBZiHa8CUKoenZ2p7hU3rl/L 2V5tzGwTDRQqjFE0j1ikdCf5pGRP0QHHej/6dnWy5j4UkANpQuhQFRKUjIvu4o8U oNs7kNEJlq3h1/+msFj/4kfLfRMMSMtfC9JvPmw= -----END CERTIFICATE-----Generated at Sun Jan 25 16:47:32 2026 by rpki-client