This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/323430373a366434303a3a2f33322d3332203d3e203538383230.roa File: 323430373a366434303a3a2f33322d3332203d3e203538383230.roa (raw, json) Hash identifier: oqNdF4uJU42w94bKSytVgmfGCQbpEC2b6KNqL//ouqg= Subject key identifier: 2E:1C:41:F0:C4:05:3B:DE:32:8B:5C:53:8F:09:C5:60:42:58:16:8F Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 7E8E7B495C5602B28E33BBF6A2FB3CEC2B931BBA Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/323430373a366434303a3a2f33322d3332203d3e203538383230.roa Signing time: Thu 15 Jan 2026 17:02:33 +0000 ROA not before: Thu 15 Jan 2026 16:57:33 +0000 ROA not after: Thu 14 Jan 2027 17:02:33 +0000 asID: 58820 IP address blocks: 2407:6d40::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 10:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:8e:7b:49:5c:56:02:b2:8e:33:bb:f6:a2:fb:3c:ec:2b:93:1b:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Jan 15 16:57:33 2026 GMT Not After : Jan 14 17:02:33 2027 GMT Subject: CN=2E1C41F0C4053BDE328B5C538F09C5604258168F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:f4:09:7f:ea:c2:17:13:d1:0b:74:33:10: 83:a8:79:b3:34:7d:01:35:bb:e0:dd:d5:68:7b:a5: d9:fe:91:9c:fb:40:d9:1e:dc:08:fc:c7:33:eb:9d: 99:cd:b3:08:c3:20:f3:ec:f5:f1:95:3c:d6:6d:24: 04:4c:b0:5f:8f:4e:e5:15:f5:41:3a:9a:88:a6:a6: e4:c6:2c:75:54:e7:75:0a:18:33:d6:01:78:ef:65: cf:82:1b:0d:9f:cb:14:24:f3:7c:10:b5:3f:74:be: 0c:79:1e:5c:23:49:b1:50:71:fe:cc:ea:78:a7:a1: ce:ae:73:71:b0:5f:1f:96:19:f4:90:48:b5:aa:f2: 44:26:eb:da:74:3f:c3:a8:e6:8d:2f:a3:8d:5c:42: d7:6e:66:0b:78:20:2f:c5:9b:2c:bd:11:12:70:a1: e4:01:cd:07:d6:02:11:23:98:6d:50:ea:e1:e8:0c: b4:a5:0e:bb:28:e0:f3:42:95:42:78:18:e6:04:ea: c5:fd:8a:12:0f:38:6f:9b:c6:cb:30:d5:9a:bd:05: 66:68:aa:c3:19:01:ff:83:7f:08:1b:c1:e8:aa:0e: 4b:84:c1:2b:97:fb:b3:c8:41:ff:66:43:4a:d5:31: aa:4f:d8:e3:0b:c1:77:b8:1f:16:2b:43:b1:eb:64: 45:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1C:41:F0:C4:05:3B:DE:32:8B:5C:53:8F:09:C5:60:42:58:16:8F X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/323430373a366434303a3a2f33322d3332203d3e203538383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:6d40::/32 Signature Algorithm: sha256WithRSAEncryption 19:aa:71:e4:4a:01:24:a1:37:9a:f9:fb:3d:46:c3:f6:84:9a: 0c:b2:88:51:72:84:a7:d1:df:e6:86:02:bd:9c:30:04:c5:8f: ae:e5:e2:cb:b1:f9:0e:28:f0:9b:c9:5d:da:09:55:f1:98:e1: f7:72:d2:e8:fb:8d:4a:07:2d:bd:16:1c:74:8a:f9:63:5d:31: 7e:35:24:45:95:cb:79:d6:0c:7c:87:e6:17:f2:b9:16:bc:a6: 47:86:23:cc:e7:b1:9f:25:01:ed:3b:e1:35:52:47:c9:7f:44: 00:5d:12:20:c3:01:a4:5c:eb:5e:64:09:6e:31:1d:20:64:cf: 94:07:d6:30:0f:11:15:02:5a:fc:4c:ce:19:e8:ae:57:a1:70: 5e:21:6e:94:51:3f:d2:78:3f:2e:a5:6e:05:a3:a8:93:02:d3: 76:23:56:17:8f:23:96:a4:78:a9:21:97:74:dc:23:3d:06:c0: a6:72:0f:22:89:54:bf:06:59:03:bb:79:7e:4f:bb:f8:94:80: 22:f2:3a:2c:08:b1:7a:93:7f:85:22:04:37:61:25:8e:95:12: 6a:f1:54:a7:77:fd:58:61:98:b4:72:dc:5b:7b:a7:60:2f:1d: a6:47:b3:70:a6:5a:be:8b:de:c1:2e:ee:e3:e7:b0:a9:85:35: a1:2e:00:10 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUfo57SVxWArKOM7v2ovs87CuTG7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNjAxMTUxNjU3MzNaFw0yNzAxMTQxNzAyMzNaMDMxMTAvBgNV BAMTKDJFMUM0MUYwQzQwNTNCREUzMjhCNUM1MzhGMDlDNTYwNDI1ODE2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/x/QJf+rCFxPRC3QzEIOoebM0 fQE1u+Dd1Wh7pdn+kZz7QNke3Aj8xzPrnZnNswjDIPPs9fGVPNZtJARMsF+PTuUV 9UE6moimpuTGLHVU53UKGDPWAXjvZc+CGw2fyxQk83wQtT90vgx5HlwjSbFQcf7M 6ninoc6uc3GwXx+WGfSQSLWq8kQm69p0P8Oo5o0vo41cQtduZgt4IC/Fmyy9ERJw oeQBzQfWAhEjmG1Q6uHoDLSlDrso4PNClUJ4GOYE6sX9ihIPOG+bxssw1Zq9BWZo qsMZAf+DfwgbweiqDkuEwSuX+7PIQf9mQ0rVMapP2OMLwXe4HxYrQ7HrZEVXAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQULhxB8MQFO94yi1xTjwnFYEJYFo8wHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkZmIzOTkyLTFkMmYtNDZjZS04 ODZhLThlMjJhMzI2MTFmOC8wLzMyMzQzMDM3M2EzNjY0MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDM1MzgzODMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB21AMA0GCSqGSIb3 DQEBCwUAA4IBAQAZqnHkSgEkoTea+fs9RsP2hJoMsohRcoSn0d/mhgK9nDAExY+u 5eLLsfkOKPCbyV3aCVXxmOH3ctLo+41KBy29Fhx0ivljXTF+NSRFlct51gx8h+YX 8rkWvKZHhiPM57GfJQHtO+E1UkfJf0QAXRIgwwGkXOteZAluMR0gZM+UB9YwDxEV Alr8TM4Z6K5XoXBeIW6UUT/SeD8upW4Fo6iTAtN2I1YXjyOWpHipIZd03CM9BsCm cg8iiVS/BlkDu3l+T7v4lIAi8josCLF6k3+FIgQ3YSWOlRJq8VSnd/1YYZi0ctxb e6dgLx2mR7Nwplq+i97BLu7j57CphTWhLgAQ -----END CERTIFICATE-----Generated at Mon Jan 26 10:58:22 2026 by rpki-client