This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa
File: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (raw, json)
Hash identifier: GA6rUIyaqIB58eM6Y3Tv2tAamvlNcofAYPow7jpjhqA=
Subject key identifier: 63:86:D1:B5:92:8D:97:21:3A:75:8B:9B:28:99:3B:BC:42:04:90:18
Certificate issuer: /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
Certificate serial: 4E25FD53FC72546844DF5D0F7ECAD167C6B09FD0
Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa
Signing time: Tue 20 Jan 2026 08:01:16 +0000
ROA not before: Tue 20 Jan 2026 07:56:16 +0000
ROA not after: Tue 19 Jan 2027 08:01:16 +0000
asID: 139365
IP address blocks: 2001:df1:1d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl
rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 10:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:25:fd:53:fc:72:54:68:44:df:5d:0f:7e:ca:d1:67:c6:b0:9f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
Validity
Not Before: Jan 20 07:56:16 2026 GMT
Not After : Jan 19 08:01:16 2027 GMT
Subject: CN=6386D1B5928D97213A758B9B28993BBC42049018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7b:01:1e:d8:3d:6b:83:c0:9b:db:56:cc:ca:
5e:9e:6c:5b:39:19:d2:72:5c:37:f4:e4:d7:4a:b3:
0c:f5:0d:17:c3:5b:4c:c4:ad:dc:91:2f:c5:c6:4d:
ef:b3:72:72:d0:a9:39:7f:82:d3:e4:fc:ce:ad:e1:
78:12:79:70:d9:aa:8e:59:2f:03:12:58:6a:99:89:
6b:f1:53:6e:f6:d5:e6:85:ad:a8:6c:e6:75:a5:f4:
15:01:92:df:12:94:06:f6:f0:26:b0:2c:d1:6b:12:
60:6f:55:2c:22:3d:69:40:7e:6e:46:73:3a:0d:95:
ce:19:4b:c4:cf:30:99:62:ba:00:9c:f0:68:41:88:
7e:1b:87:5a:36:e1:bc:88:86:ce:2d:50:d9:3f:23:
77:f2:6c:fb:cb:59:83:9b:aa:b4:5c:59:ce:57:ba:
2b:32:18:ca:87:8d:13:95:aa:17:df:5c:0d:90:30:
db:24:f8:3e:c4:7f:75:14:64:92:f3:2f:07:4c:4d:
e8:45:b9:8e:7c:7f:e8:1f:ce:b6:d8:d2:d3:fb:9b:
52:d8:0d:b9:1d:2e:f7:62:d4:85:d3:92:56:a1:2b:
f0:be:45:18:bf:df:cd:d8:11:44:52:e4:b9:27:c0:
e1:67:84:b2:5a:7e:18:d2:7b:73:3d:04:63:dd:9b:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:86:D1:B5:92:8D:97:21:3A:75:8B:9B:28:99:3B:BC:42:04:90:18
X509v3 Authority Key Identifier:
keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df1:1d80::/48
Signature Algorithm: sha256WithRSAEncryption
13:2a:23:a8:91:89:25:93:d7:e2:c1:47:fc:42:64:39:1c:ff:
d0:57:38:cf:43:dc:a2:a8:9d:d5:30:0e:4e:30:4d:ed:97:06:
a2:2e:33:52:63:b5:66:35:5b:e7:58:a6:e6:d3:5f:fe:a0:b7:
28:09:e5:3c:a3:d7:7e:c7:e1:ab:6f:71:ad:f4:b5:b7:7c:b7:
d2:26:c4:12:37:8b:4c:75:a5:8c:cc:7e:a1:c6:97:ad:cb:ae:
b6:96:f3:f5:7e:02:bb:0e:fb:c0:7a:56:1f:6c:54:38:89:26:
40:7f:c0:17:58:fc:4c:19:41:3e:54:bf:9e:99:3f:f6:80:46:
be:2a:b9:4b:e3:83:79:39:32:b7:11:dd:b5:d6:10:48:60:cb:
c3:b0:79:9b:45:ce:64:05:f8:1d:00:98:1d:10:12:17:40:bf:
c9:9d:59:31:7e:cd:6f:87:5b:a0:b3:ff:8b:91:04:63:57:7d:
c2:ca:f3:89:92:eb:05:43:30:22:57:ef:eb:d6:29:97:73:7e:
9a:99:52:28:a7:bc:e4:28:01:20:eb:fd:57:84:e7:21:77:d1:
60:75:74:5e:07:8a:35:6c:a9:75:94:61:b9:a9:22:d9:3b:ef:
4e:e6:b1:b3:c3:d9:2d:84:ff:31:c2:37:db:37:9a:59:08:89:
69:b0:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:24:45 2026 by rpki-client