This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa File: 323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa (raw, json) Hash identifier: 3IuUvfgQ/fSDFjAbV/bWpFSL1cWNQrNqsIN58CdOTAo= Subject key identifier: FA:44:D3:BC:3B:35:AA:01:E8:29:CD:74:D7:55:04:E1:B0:9D:93:76 Certificate issuer: /CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Certificate serial: 0372E2C17601F4ECEE624574906A6E79A6966287 Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa Signing time: Tue 30 Dec 2025 05:02:33 +0000 ROA not before: Tue 30 Dec 2025 04:57:33 +0000 ROA not after: Tue 29 Dec 2026 05:02:33 +0000 asID: 141937 IP address blocks: 2001:df2:22c0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 06:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:72:e2:c1:76:01:f4:ec:ee:62:45:74:90:6a:6e:79:a6:96:62:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3 Validity Not Before: Dec 30 04:57:33 2025 GMT Not After : Dec 29 05:02:33 2026 GMT Subject: CN=FA44D3BC3B35AA01E829CD74D75504E1B09D9376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cd:75:e6:c4:02:b0:0d:41:00:b4:03:98:5b: 7e:ff:a6:b3:64:84:37:64:ba:f5:6d:cf:a3:67:19: 44:54:c3:d9:b0:ef:e2:ee:d9:28:1c:d2:0f:ac:e7: 64:8e:88:e3:d9:b3:2e:40:24:da:8e:5e:ad:1a:c6: ca:50:a5:a0:72:f7:01:78:a7:77:cd:ee:c8:c8:61: 02:2f:b6:6d:da:e7:c1:0c:41:ee:d5:08:c0:78:55: 9d:63:38:c1:05:2f:03:1a:6c:d6:e2:4d:56:dc:95: 39:45:bb:e3:93:3f:cd:6b:48:8b:b3:e4:ff:74:0a: b0:89:dc:83:9f:fa:4c:3f:2f:73:ef:21:d8:92:79: 74:24:39:34:bb:8a:4f:34:ce:46:87:f6:1f:71:aa: 0f:11:e7:79:07:45:f0:d9:50:91:00:17:5b:cc:10: 81:56:57:02:ce:03:83:29:97:c5:9a:a8:08:27:a8: ef:20:ed:f7:d1:af:c2:ad:b7:74:b6:62:6d:b3:d3: 65:d4:28:27:33:2c:61:b1:39:27:b7:3c:2c:5a:bc: 41:fa:90:2a:4d:40:81:c0:0d:43:3b:18:73:90:df: 6e:6d:5d:ce:82:0f:09:58:9d:61:1d:e4:57:16:59: 42:de:fd:4f:d1:20:ed:f9:0e:ce:e7:1b:36:2f:e4: 77:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:44:D3:BC:3B:35:AA:01:E8:29:CD:74:D7:55:04:E1:B0:9D:93:76 X509v3 Authority Key Identifier: keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/323030313a6466323a323263303a3a2f34382d3438203d3e20313431393337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:22c0::/48 Signature Algorithm: sha256WithRSAEncryption 9e:ca:6e:2c:01:56:0d:50:79:b8:b7:48:f0:9d:51:86:8b:37: 40:d5:72:df:9b:51:37:2f:59:3d:99:fc:62:26:06:27:a2:ab: a1:a0:36:1f:40:45:c7:8e:7b:81:90:2f:8b:d6:26:e8:39:69: ec:b5:94:57:cf:6c:7d:8b:ae:8e:f6:05:db:bf:89:cf:13:30: af:0b:24:17:d4:58:fd:90:02:62:95:0c:3d:47:bc:08:62:ec: 20:34:69:0d:94:cb:e3:b5:e2:cb:d0:a2:8b:9f:b8:38:78:c8: c7:ff:9f:a6:f9:b9:d3:a5:37:02:69:7b:d7:fe:90:4d:1e:54: f1:6f:ed:5a:ff:25:71:c1:04:1a:e5:b4:0b:97:ba:57:78:a1: 42:2d:2b:0b:d1:a4:48:f4:25:70:6c:35:31:0d:35:e2:62:21: fc:e8:e5:bc:44:c5:b3:0d:e2:76:5d:c2:fc:f9:98:fc:ee:2c: 12:16:ee:51:23:8e:13:93:38:de:5b:96:a1:02:4d:bb:93:da: 3a:f6:92:d9:d6:f0:32:ab:32:17:bd:55:c7:82:be:93:6e:46: ef:a5:d2:1d:3f:92:40:ea:f3:a6:0f:7b:fb:a2:73:ac:57:87: 06:08:19:a7:83:9f:b6:c9:cc:ac:30:18:94:3a:26:53:2d:83: e1:41:77:a7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUA3LiwXYB9OzuYkV0kGpueaaWYocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2 OTFCODhGMzAeFw0yNTEyMzAwNDU3MzNaFw0yNjEyMjkwNTAyMzNaMDMxMTAvBgNV BAMTKEZBNDREM0JDM0IzNUFBMDFFODI5Q0Q3NEQ3NTUwNEUxQjA5RDkzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRzXXmxAKwDUEAtAOYW37/prNk hDdkuvVtz6NnGURUw9mw7+Lu2Sgc0g+s52SOiOPZsy5AJNqOXq0axspQpaBy9wF4 p3fN7sjIYQIvtm3a58EMQe7VCMB4VZ1jOMEFLwMabNbiTVbclTlFu+OTP81rSIuz 5P90CrCJ3IOf+kw/L3PvIdiSeXQkOTS7ik80zkaH9h9xqg8R53kHRfDZUJEAF1vM EIFWVwLOA4Mpl8WaqAgnqO8g7ffRr8Ktt3S2Ym2z02XUKCczLGGxOSe3PCxavEH6 kCpNQIHADUM7GHOQ325tXc6CDwlYnWEd5FcWWULe/U/RIO35Ds7nGzYv5HdXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU+kTTvDs1qgHoKc1011UE4bCdk3YwHwYDVR0j BBgwFoAUYB0SNDDa+SiKff1ij4kttWkbiPMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGFhZTNmMC05YzcwLTQyZmMtYWUzZS1iYjU5MDA0NmIwZmUvMC82MDFEMTIzNDMw REFGOTI4OEE3REZENjI4Rjg5MkRCNTY5MUI4OEYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjAxRDEyMzQzMERBRjkyODhBN0RGRDYyOEY4OTJEQjU2OTFC ODhGMy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0YWFlM2YwLTljNzAtNDJmYy1h ZTNlLWJiNTkwMDQ2YjBmZS8wLzMyMzAzMDMxM2E2NDY2MzIzYTMyMzI2MzMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMxMzkzMzM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8iLAMA0GCSqGSIb3DQEBCwUAA4IBAQCeym4sAVYNUHm4t0jwnVGGizdA1XLfm1E3 L1k9mfxiJgYnoquhoDYfQEXHjnuBkC+L1iboOWnstZRXz2x9i66O9gXbv4nPEzCv CyQX1Fj9kAJilQw9R7wIYuwgNGkNlMvjteLL0KKLn7g4eMjH/5+m+bnTpTcCaXvX /pBNHlTxb+1a/yVxwQQa5bQLl7pXeKFCLSsL0aRI9CVwbDUxDTXiYiH86OW8RMWz DeJ2XcL8+Zj87iwSFu5RI44TkzjeW5ahAk27k9o69pLZ1vAyqzIXvVXHgr6Tbkbv pdIdP5JA6vOmD3v7onOsV4cGCBmng5+2ycysMBiUOiZTLYPhQXen -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:16 2026 by rpki-client