This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/323430373a366434303a3a2f33322d3438203d3e203538383230.roa File: 323430373a366434303a3a2f33322d3438203d3e203538383230.roa (raw, json) Hash identifier: HVzVEZKhesoTY020j8ak7SvbYVxGbYC4+RXUTxdFP9U= Subject key identifier: F8:8F:D1:4A:B6:C8:1A:D3:0D:47:69:E1:C3:74:98:C4:9E:48:DC:B0 Certificate issuer: /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Certificate serial: 5B727520CE9265BDC72B507CC42CF71747C04745 Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/323430373a366434303a3a2f33322d3438203d3e203538383230.roa Signing time: Thu 15 Jan 2026 17:02:34 +0000 ROA not before: Thu 15 Jan 2026 16:57:34 +0000 ROA not after: Thu 14 Jan 2027 17:02:34 +0000 asID: 58820 IP address blocks: 2407:6d40::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 10:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:72:75:20:ce:92:65:bd:c7:2b:50:7c:c4:2c:f7:17:47:c0:47:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96 Validity Not Before: Jan 15 16:57:34 2026 GMT Not After : Jan 14 17:02:34 2027 GMT Subject: CN=F88FD14AB6C81AD30D4769E1C37498C49E48DCB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0a:d9:87:0a:eb:2e:31:d3:6e:bc:54:5e:43: f9:cc:28:c4:e8:51:78:3d:cd:e7:ce:8e:5a:8f:6c: 1a:5f:53:90:60:a4:20:54:7c:df:44:af:b3:76:54: ba:f1:ea:55:cb:8a:d4:18:7c:fd:bf:4e:4f:c9:88: 1b:54:5d:94:5f:64:de:17:6d:e9:60:7c:ea:ff:56: 6f:f6:59:1b:60:b3:76:b5:c9:c9:44:92:de:06:f0: d0:cf:6a:6c:df:c7:e4:9e:ac:e3:69:c6:c7:72:e4: 12:0a:36:39:5b:c4:e7:97:b1:12:95:1f:ac:fe:9d: c0:6f:e7:81:b4:42:96:2b:0b:85:08:2d:01:9a:4f: fb:57:b5:0a:24:ac:c0:8b:b1:f1:1f:d8:cd:2c:66: bf:4f:bf:da:24:1e:1a:8f:ca:67:01:b7:82:d6:81: 98:00:b1:e5:58:03:66:ca:35:bd:a4:f9:c9:6e:69: c4:0a:c0:75:2e:8b:18:f1:dd:29:91:65:dd:40:b5: 85:80:61:b9:92:4c:f9:e5:69:4b:83:01:6c:c5:76: f9:50:bf:f0:e1:70:d0:68:78:d5:01:fe:be:64:39: f5:ac:55:75:3a:bc:1e:10:f1:df:5d:f0:d3:91:81: f5:59:4d:b2:6e:2d:06:12:92:1e:6a:60:74:3d:48: 93:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8F:D1:4A:B6:C8:1A:D3:0D:47:69:E1:C3:74:98:C4:9E:48:DC:B0 X509v3 Authority Key Identifier: keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/323430373a366434303a3a2f33322d3438203d3e203538383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:6d40::/32 Signature Algorithm: sha256WithRSAEncryption 19:e0:e0:34:a8:ff:98:24:4c:46:a1:8b:81:45:ce:89:a2:76: 85:9b:db:f4:42:f1:7f:1c:da:c6:7e:83:6f:7f:a9:8e:c5:d9: 77:e2:f2:75:3c:56:19:fb:1b:aa:04:e3:fb:20:5b:59:96:64: 48:40:29:35:05:23:23:2a:4a:d5:43:f5:68:b9:cd:d1:59:ef: f7:71:d9:c9:31:87:6e:f6:fc:bd:48:19:88:2a:3e:ff:d1:e6: c2:30:89:9c:3e:51:cf:89:31:8c:49:5c:57:c0:b1:f2:ea:bf: 18:d2:64:34:7e:63:22:df:00:e1:a8:61:3e:f2:ad:e6:75:8d: a6:58:0b:a2:b8:d5:0c:d5:70:8f:43:e3:e8:83:c4:0e:d8:41: d0:93:99:3c:00:64:c6:43:d3:2c:2e:a2:32:16:ae:eb:4a:f7: 6f:de:e1:f5:65:b4:55:81:42:5f:a9:08:93:62:41:00:db:2a: 2f:a9:54:f7:d1:92:7b:ed:d1:3a:29:23:18:5e:a5:ac:88:7d: 47:d6:bf:43:d5:41:47:fd:2e:e8:16:2c:85:46:f2:79:0a:65: 8f:49:f0:6b:48:ec:09:7e:37:d5:70:70:f1:4b:c2:28:33:37: 50:b4:9d:1c:ff:0b:65:a5:f7:a9:15:56:53:69:60:79:ce:e3: 97:aa:b7:9b -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUW3J1IM6SZb3HK1B8xCz3F0fAR0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF NjkxM0M5NjAeFw0yNjAxMTUxNjU3MzRaFw0yNzAxMTQxNzAyMzRaMDMxMTAvBgNV BAMTKEY4OEZEMTRBQjZDODFBRDMwRDQ3NjlFMUMzNzQ5OEM0OUU0OERDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSCtmHCusuMdNuvFReQ/nMKMTo UXg9zefOjlqPbBpfU5BgpCBUfN9Er7N2VLrx6lXLitQYfP2/Tk/JiBtUXZRfZN4X belgfOr/Vm/2WRtgs3a1yclEkt4G8NDPamzfx+SerONpxsdy5BIKNjlbxOeXsRKV H6z+ncBv54G0QpYrC4UILQGaT/tXtQokrMCLsfEf2M0sZr9Pv9okHhqPymcBt4LW gZgAseVYA2bKNb2k+cluacQKwHUuixjx3SmRZd1AtYWAYbmSTPnlaUuDAWzFdvlQ v/DhcNBoeNUB/r5kOfWsVXU6vB4Q8d9d8NORgfVZTbJuLQYSkh5qYHQ9SJNxAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU+I/RSrbIGtMNR2nhw3SYxJ5I3LAwHwYDVR0j BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx M0M5Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkZmIzOTkyLTFkMmYtNDZjZS04 ODZhLThlMjJhMzI2MTFmOC8wLzMyMzQzMDM3M2EzNjY0MzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM1MzgzODMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB21AMA0GCSqGSIb3 DQEBCwUAA4IBAQAZ4OA0qP+YJExGoYuBRc6JonaFm9v0QvF/HNrGfoNvf6mOxdl3 4vJ1PFYZ+xuqBOP7IFtZlmRIQCk1BSMjKkrVQ/Vouc3RWe/3cdnJMYdu9vy9SBmI Kj7/0ebCMImcPlHPiTGMSVxXwLHy6r8Y0mQ0fmMi3wDhqGE+8q3mdY2mWAuiuNUM 1XCPQ+Pog8QO2EHQk5k8AGTGQ9MsLqIyFq7rSvdv3uH1ZbRVgUJfqQiTYkEA2yov qVT30ZJ77dE6KSMYXqWsiH1H1r9D1UFH/S7oFiyFRvJ5CmWPSfBrSOwJfjfVcHDx S8IoMzdQtJ0c/wtlpfepFVZTaWB5zuOXqreb -----END CERTIFICATE-----Generated at Sun Jan 25 23:41:05 2026 by rpki-client