This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/323430343a663930303a3a2f33322d3438203d3e203538343832.roa File: 323430343a663930303a3a2f33322d3438203d3e203538343832.roa (raw, json) Hash identifier: 253PIIaf2Tfe4dVA8SfkSeenzrn1yLojxg1BjltDWcI= Subject key identifier: B1:0C:69:CC:58:44:0D:99:43:0F:76:2D:0D:85:20:45:95:BE:17:6E Certificate issuer: /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Certificate serial: 2246BBD9183303950437A57385B271ACCB2F3E1F Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/323430343a663930303a3a2f33322d3438203d3e203538343832.roa Signing time: Thu 01 Jan 2026 00:00:00 +0000 ROA not before: Wed 31 Dec 2025 23:55:00 +0000 ROA not after: Thu 31 Dec 2026 00:00:00 +0000 asID: 58482 IP address blocks: 2404:f900::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:46:bb:d9:18:33:03:95:04:37:a5:73:85:b2:71:ac:cb:2f:3e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA Validity Not Before: Dec 31 23:55:00 2025 GMT Not After : Dec 31 00:00:00 2026 GMT Subject: CN=B10C69CC58440D99430F762D0D85204595BE176E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4f:22:d0:a1:4e:c4:d0:68:94:ea:a4:0a:75: 54:27:b8:de:fe:1c:f5:80:36:e7:f9:23:b5:82:70: 42:7e:99:75:9b:d3:73:fc:15:bd:ec:a3:4f:07:2a: d9:3d:90:47:b7:0d:c8:c7:f5:8e:80:ca:3e:a1:1e: e4:24:7a:21:cd:13:8c:fa:d8:39:7a:95:e4:9e:0f: 04:89:ad:8a:aa:6f:78:35:f2:55:14:93:93:39:aa: 83:d0:29:ed:cd:88:18:a8:b1:c8:16:33:ab:9a:65: 83:16:d5:10:83:91:b9:ff:8b:4d:5b:8c:79:9b:24: 3a:fc:c0:19:3f:8a:18:b4:b9:79:34:17:be:fc:99: 6e:82:f0:a3:74:1b:6c:0b:00:2b:88:09:0f:62:73: 20:9e:9f:fc:01:44:a3:48:2a:a2:d0:ce:0f:e6:f1: 8e:49:ff:76:94:5a:81:e0:b6:e7:3e:65:c0:ff:8d: e6:65:8c:9a:b0:9f:c5:e6:47:39:35:6b:b9:f8:6b: f3:6e:23:f6:ed:ea:43:10:9a:f0:30:a9:fd:40:22: 71:d2:dd:3d:1c:48:7e:77:23:23:19:ad:10:df:a9: 96:04:fe:bd:b9:e6:b4:4b:92:b3:16:b8:34:03:e5: 45:1f:cf:d0:8f:25:8c:c4:a1:ef:6d:0a:47:af:24: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0C:69:CC:58:44:0D:99:43:0F:76:2D:0D:85:20:45:95:BE:17:6E X509v3 Authority Key Identifier: keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/323430343a663930303a3a2f33322d3438203d3e203538343832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:f900::/32 Signature Algorithm: sha256WithRSAEncryption 4b:3a:51:8e:94:db:c4:7f:7a:3d:ed:f8:e8:35:07:3a:26:23: ca:47:09:ff:f2:a0:96:f5:29:cc:91:c6:0b:7d:a7:e3:ab:fa: f4:2d:02:7c:9c:24:a7:26:08:4c:09:fa:7b:e3:dc:cc:81:bd: 3c:cc:6c:b5:db:5c:af:4f:47:95:d9:d0:97:76:38:6d:54:30: 1e:e1:0d:34:1f:71:e6:f7:fd:ae:5a:44:b0:4c:ac:1d:7e:1b: 58:22:c8:ab:a7:02:e4:eb:f9:a6:25:c6:52:a3:71:55:c4:da: e1:aa:da:2d:46:3b:ea:55:3a:cb:f5:55:a0:89:82:85:5a:c5: e6:eb:4c:47:53:56:f0:c9:82:d4:c1:7b:79:9d:ca:fd:1a:42: 56:b9:20:bf:63:a7:10:7f:0d:7d:d6:57:08:23:28:19:aa:fd: de:6a:04:f1:dc:01:65:1e:33:0c:71:31:3d:39:b8:f6:e3:d1: 1b:aa:67:bf:63:29:9c:c4:08:a7:0d:17:39:dc:4d:ce:1b:43: 53:4e:78:a8:98:93:13:e7:7e:50:b4:aa:7d:50:98:d0:5b:f6: a9:60:7d:4d:c1:5a:55:56:0c:c5:24:7e:d2:d1:36:a8:30:fd: 18:8b:a2:c2:f0:1a:9e:6c:2e:58:77:4b:b1:21:b2:9c:c0:03: 43:1a:f4:ec -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUIka72RgzA5UEN6VzhbJxrMsvPh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5 RUM1QjZCQTAeFw0yNTEyMzEyMzU1MDBaFw0yNjEyMzEwMDAwMDBaMDMxMTAvBgNV BAMTKEIxMEM2OUNDNTg0NDBEOTk0MzBGNzYyRDBEODUyMDQ1OTVCRTE3NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhTyLQoU7E0GiU6qQKdVQnuN7+ HPWANuf5I7WCcEJ+mXWb03P8Fb3so08HKtk9kEe3DcjH9Y6Ayj6hHuQkeiHNE4z6 2Dl6leSeDwSJrYqqb3g18lUUk5M5qoPQKe3NiBioscgWM6uaZYMW1RCDkbn/i01b jHmbJDr8wBk/ihi0uXk0F778mW6C8KN0G2wLACuICQ9icyCen/wBRKNIKqLQzg/m 8Y5J/3aUWoHgtuc+ZcD/jeZljJqwn8XmRzk1a7n4a/NuI/bt6kMQmvAwqf1AInHS 3T0cSH53IyMZrRDfqZYE/r255rRLkrMWuDQD5UUfz9CPJYzEoe9tCkevJGx7AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUsQxpzFhEDZlDD3YtDYUgRZW+F24wHwYDVR0j BBgwFoAUzchnQyYji+NVMpAS4c/duZ7FtrowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWUyZjNiZC1kNGVjLTQyY2ItYWFjZi1hZGMyODI1YzE4NGIvMC9DREM4Njc0MzI2 MjM4QkUzNTUzMjkwMTJFMUNGRERCOTlFQzVCNkJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDODY3NDMyNjIzOEJFMzU1MzI5MDEyRTFDRkREQjk5RUM1 QjZCQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5ZTJmM2JkLWQ0ZWMtNDJjYi1h YWNmLWFkYzI4MjVjMTg0Yi8wLzMyMzQzMDM0M2E2NjM5MzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM1MzgzNDM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBPkAMA0GCSqGSIb3 DQEBCwUAA4IBAQBLOlGOlNvEf3o97fjoNQc6JiPKRwn/8qCW9SnMkcYLfafjq/r0 LQJ8nCSnJghMCfp749zMgb08zGy121yvT0eV2dCXdjhtVDAe4Q00H3Hm9/2uWkSw TKwdfhtYIsirpwLk6/mmJcZSo3FVxNrhqtotRjvqVTrL9VWgiYKFWsXm60xHU1bw yYLUwXt5ncr9GkJWuSC/Y6cQfw191lcIIygZqv3eagTx3AFlHjMMcTE9Obj249Eb qme/YymcxAinDRc53E3OG0NTTniomJMT535QtKp9UJjQW/apYH1NwVpVVgzFJH7S 0TaoMP0Yi6LC8BqebC5Yd0uxIbKcwANDGvTs -----END CERTIFICATE-----Generated at Mon Jan 26 13:13:21 2026 by rpki-client