This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/323430323a326134303a3a2f33322d3438203d3e20313336383733.roa File: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (raw, json) Hash identifier: uy1yr304rdbNyrp48Sp9BPHAsKJE9GKxgaii4AOju6s= Subject key identifier: E8:64:B7:AB:04:80:B6:0A:66:28:71:3E:B2:F3:4C:50:DB:49:67:1A Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 3FFE452230C983797B143633F4120E28AFAF3D3D Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/323430323a326134303a3a2f33322d3438203d3e20313336383733.roa Signing time: Tue 13 Jan 2026 06:00:02 +0000 ROA not before: Tue 13 Jan 2026 05:55:02 +0000 ROA not after: Tue 12 Jan 2027 06:00:02 +0000 asID: 136873 IP address blocks: 2402:2a40::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:fe:45:22:30:c9:83:79:7b:14:36:33:f4:12:0e:28:af:af:3d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: Jan 13 05:55:02 2026 GMT Not After : Jan 12 06:00:02 2027 GMT Subject: CN=E864B7AB0480B60A6628713EB2F34C50DB49671A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:9f:de:44:30:26:b7:94:5c:88:4e:47:00: 02:25:d7:38:a0:e6:d5:75:e7:27:c6:d6:3a:8c:1b: 2d:aa:be:db:18:be:a4:85:a8:3c:d7:be:80:32:73: 80:6e:8e:e3:26:48:c4:43:72:e4:0c:67:a8:53:39: 96:54:70:02:51:d7:db:f0:53:24:df:cf:1c:18:5d: 6b:49:11:e5:ab:25:d9:f9:fb:d9:aa:26:9f:4c:6a: 11:6c:1b:c7:d2:51:30:92:23:c4:07:0c:ce:a3:72: 04:cf:68:1b:37:62:1c:3b:3b:3b:a1:09:61:4d:fc: c9:2b:83:53:ed:7f:a9:de:d3:6e:87:4f:b1:15:57: cb:a5:b7:86:52:71:41:18:b9:a3:9b:67:92:66:e5: 2a:c5:f7:31:59:d9:7a:4e:b0:41:8d:38:a8:d0:62: 5f:f9:56:fd:67:89:92:b8:ed:43:ed:3f:6c:b8:67: 82:01:5f:9a:88:5a:49:e3:43:35:6b:d1:a1:7c:27: d4:fc:7b:87:5a:3f:39:0a:02:31:64:1e:c0:44:e9: fa:34:28:74:c3:65:48:3a:13:79:58:50:5d:56:90: 4e:11:d3:8e:fe:95:c3:49:4a:a5:b7:d0:ac:e4:3e: e2:3f:ab:b6:a8:2d:0f:1b:a7:f3:de:8c:1d:aa:6e: bd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:64:B7:AB:04:80:B6:0A:66:28:71:3E:B2:F3:4C:50:DB:49:67:1A X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/323430323a326134303a3a2f33322d3438203d3e20313336383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:2a40::/32 Signature Algorithm: sha256WithRSAEncryption 47:f2:ba:b7:44:39:d9:1e:a8:3f:bc:97:36:5b:4b:5f:de:6c: 36:88:9f:c9:ef:8d:32:5a:44:09:c7:3c:de:d1:78:01:f5:94: 25:6b:c8:36:98:0a:e5:2b:ae:fb:e2:a2:d1:75:19:7a:71:0a: 25:a9:e1:7a:99:38:85:12:f8:4f:d3:ed:73:cc:25:d7:1e:09: 0a:89:08:dc:6d:e2:b3:d8:a1:24:66:63:c2:97:80:f6:5a:59: ac:59:f0:c5:1e:4e:7c:6e:ce:82:71:95:1a:d2:4c:8f:ee:b3: c7:81:f8:43:7b:e9:1c:e3:51:79:43:0f:1e:dd:dd:62:e4:66: f5:83:ee:47:0f:8c:f9:4b:ef:51:b1:0c:2d:60:ef:bb:99:4e: 42:f4:dc:91:c3:cb:e5:08:cf:75:3e:fa:0d:dc:d4:81:97:6e: b2:06:ee:75:09:0b:fc:e0:da:32:de:bc:de:22:c4:c0:ce:cb: 01:f2:e5:84:21:6a:c3:5a:9c:a1:ef:68:f6:62:f6:d3:48:1c: 25:df:6f:95:38:f6:e9:3d:f7:b7:96:38:1d:54:89:5f:99:64: 3f:87:ce:3f:24:e5:5e:e5:07:83:2b:62:cf:c9:70:7a:3b:19: 2f:72:22:5d:59:a8:e7:0c:04:0a:1f:f4:7a:4e:b5:9a:05:56: b4:6a:9b:c2 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUP/5FIjDJg3l7FDYz9BIOKK+vPT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNjAxMTMwNTU1MDJaFw0yNzAxMTIwNjAwMDJaMDMxMTAvBgNV BAMTKEU4NjRCN0FCMDQ4MEI2MEE2NjI4NzEzRUIyRjM0QzUwREI0OTY3MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8n5/eRDAmt5RciE5HAAIl1zig 5tV15yfG1jqMGy2qvtsYvqSFqDzXvoAyc4BujuMmSMRDcuQMZ6hTOZZUcAJR19vw UyTfzxwYXWtJEeWrJdn5+9mqJp9MahFsG8fSUTCSI8QHDM6jcgTPaBs3Yhw7Ozuh CWFN/Mkrg1Ptf6ne026HT7EVV8ult4ZScUEYuaObZ5Jm5SrF9zFZ2XpOsEGNOKjQ Yl/5Vv1niZK47UPtP2y4Z4IBX5qIWknjQzVr0aF8J9T8e4daPzkKAjFkHsBE6fo0 KHTDZUg6E3lYUF1WkE4R047+lcNJSqW30KzkPuI/q7aoLQ8bp/PejB2qbr0LAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU6GS3qwSAtgpmKHE+svNMUNtJZxowHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1N2E2YmNiLTllYjYtNDlkZS1i OTk4LTBiZWQzYzVjMTI3OC8wLzMyMzQzMDMyM2EzMjYxMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzMzNjM4MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCKkAwDQYJKoZI hvcNAQELBQADggEBAEfyurdEOdkeqD+8lzZbS1/ebDaIn8nvjTJaRAnHPN7ReAH1 lCVryDaYCuUrrvviotF1GXpxCiWp4XqZOIUS+E/T7XPMJdceCQqJCNxt4rPYoSRm Y8KXgPZaWaxZ8MUeTnxuzoJxlRrSTI/us8eB+EN76RzjUXlDDx7d3WLkZvWD7kcP jPlL71GxDC1g77uZTkL03JHDy+UIz3U++g3c1IGXbrIG7nUJC/zg2jLevN4ixMDO ywHy5YQhasNanKHvaPZi9tNIHCXfb5U49uk997eWOB1UiV+ZZD+Hzj8k5V7lB4Mr Ys/JcHo7GS9yIl1ZqOcMBAof9HpOtZoFVrRqm8I= -----END CERTIFICATE-----Generated at Sun Jan 25 20:23:03 2026 by rpki-client