This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa File: 323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa (raw, json) Hash identifier: 0ks7Jrq8I5HGi1Y9q/tMRilmkwLdHpbwinToV9LEMG4= Subject key identifier: 32:D2:D7:7D:54:74:A5:3F:B3:06:DF:FC:51:04:88:38:FB:E8:5C:DB Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Certificate serial: 7B58A7C5E50823575782842D5196D238835F36CC Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa Signing time: Fri 16 Jan 2026 11:00:03 +0000 ROA not before: Fri 16 Jan 2026 10:55:03 +0000 ROA not after: Fri 15 Jan 2027 11:00:03 +0000 asID: 58820 IP address blocks: 2001:df1:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:58:a7:c5:e5:08:23:57:57:82:84:2d:51:96:d2:38:83:5f:36:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Validity Not Before: Jan 16 10:55:03 2026 GMT Not After : Jan 15 11:00:03 2027 GMT Subject: CN=32D2D77D5474A53FB306DFFC51048838FBE85CDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:fa:67:ed:c4:01:5f:af:e7:48:5d:a0:5d: 27:0b:b0:ef:08:6c:f6:34:1f:97:03:d1:59:17:2e: 46:3d:b6:b9:bd:b7:cb:9e:03:67:b0:7a:e3:a7:0b: 16:15:6d:dc:c8:0d:2d:64:46:c1:c8:28:99:89:97: d2:83:16:88:c5:f0:47:3a:79:0d:2a:a8:a8:c8:c3: f6:03:d9:ea:22:9f:ed:38:85:f9:1f:87:19:0c:bb: 4a:63:dc:92:17:9f:63:b2:eb:53:d7:b8:18:6b:ce: 68:eb:8d:4c:7b:fa:a4:c9:49:23:5b:38:c7:cd:20: e0:47:51:d5:e8:20:08:ca:d5:ff:2b:84:cc:db:cd: 59:7f:d2:3f:6a:91:c4:e1:20:86:a0:e8:80:b0:d6: 26:08:e2:83:e0:a3:7d:16:27:f4:e8:c1:19:cc:fe: ba:75:a6:2e:82:4e:4e:e3:0f:11:d4:04:50:1d:d7: 17:a3:4c:fe:24:ac:ae:c8:59:68:e8:58:a5:3a:f9: 40:90:61:c3:fb:ba:20:0e:af:eb:ec:1a:ff:68:32: 37:90:7b:6b:50:09:86:f3:e6:1c:0d:0e:95:86:70: a1:dd:c7:77:80:23:4b:87:a3:75:4a:2f:e1:dd:ae: 4e:70:7e:ce:75:bd:cd:12:c1:1a:fa:de:3a:d2:ee: 79:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D2:D7:7D:54:74:A5:3F:B3:06:DF:FC:51:04:88:38:FB:E8:5C:DB X509v3 Authority Key Identifier: keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/323030313a6466313a393030303a3a2f34382d3438203d3e203538383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:9000::/48 Signature Algorithm: sha256WithRSAEncryption 7b:39:10:0e:d1:ec:0f:35:35:7b:88:95:cb:53:5a:a7:e2:8e: f6:b6:9e:d9:58:c7:0c:ce:c8:ad:29:35:19:34:35:59:2b:aa: bc:e2:9b:88:13:b9:d4:fa:0c:5b:47:28:6d:aa:3c:d9:fd:ad: 3b:9d:73:f8:12:70:2c:4c:58:a1:10:dc:44:0c:cd:84:8a:ef: 4c:73:87:dd:46:24:46:94:5a:98:d9:b3:a8:87:77:78:b8:fb: 98:3d:03:76:0e:89:47:df:a1:82:16:e1:f0:c4:57:59:99:91: 65:51:a1:4a:13:9e:5a:7a:d6:0f:3c:71:56:b6:73:d5:48:11: 69:1a:81:27:9b:dd:a1:83:d0:46:e0:90:fa:cb:27:38:17:ff: fc:96:e5:a9:99:79:04:2a:83:c2:d0:fa:df:cc:0c:1c:a6:b8: 8c:06:51:d8:ab:12:fa:85:c3:92:e9:b1:ef:4a:8b:57:aa:b2: 01:ef:66:76:0a:2f:e5:c9:68:af:00:c2:66:95:53:7d:13:9c: ee:a9:da:f3:25:ce:18:01:5a:8e:57:d6:b2:62:b5:f5:d0:bc: 32:b1:5d:bf:a1:db:86:8f:59:a4:a7:ee:f4:21:14:e9:40:63: 87:ac:00:01:58:92:b0:ba:b3:20:ba:49:5e:7c:e4:10:f3:d1: bb:cd:6d:f7 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUe1inxeUII1dXgoQtUZbSOINfNswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3 N0JFMTNDMTAeFw0yNjAxMTYxMDU1MDNaFw0yNzAxMTUxMTAwMDNaMDMxMTAvBgNV BAMTKDMyRDJENzdENTQ3NEE1M0ZCMzA2REZGQzUxMDQ4ODM4RkJFODVDREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2Ppn7cQBX6/nSF2gXScLsO8I bPY0H5cD0VkXLkY9trm9t8ueA2eweuOnCxYVbdzIDS1kRsHIKJmJl9KDFojF8Ec6 eQ0qqKjIw/YD2eoin+04hfkfhxkMu0pj3JIXn2Oy61PXuBhrzmjrjUx7+qTJSSNb OMfNIOBHUdXoIAjK1f8rhMzbzVl/0j9qkcThIIag6ICw1iYI4oPgo30WJ/TowRnM /rp1pi6CTk7jDxHUBFAd1xejTP4krK7IWWjoWKU6+UCQYcP7uiAOr+vsGv9oMjeQ e2tQCYbz5hwNDpWGcKHdx3eAI0uHo3VKL+Hdrk5wfs51vc0SwRr63jrS7nnHAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUMtLXfVR0pT+zBt/8UQSIOPvoXNswHwYDVR0j BBgwFoAU8xjRXWjmPOvkv6AmpSafOHe+E8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDAxNDM2Yi0wMjY3LTQ2NmItYTM0MC1lMjg4ZDJlOTM0YTgvMC9GMzE4RDE1RDY4 RTYzQ0VCRTRCRkEwMjZBNTI2OUYzODc3QkUxM0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3N0JF MTNDMS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E0MDE0MzZiLTAyNjctNDY2Yi1h MzQwLWUyODhkMmU5MzRhOC8wLzMyMzAzMDMxM2E2NDY2MzEzYTM5MzAzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzODM4MzIzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABDfGQ ADANBgkqhkiG9w0BAQsFAAOCAQEAezkQDtHsDzU1e4iVy1Nap+KO9rae2VjHDM7I rSk1GTQ1WSuqvOKbiBO51PoMW0cobao82f2tO51z+BJwLExYoRDcRAzNhIrvTHOH 3UYkRpRamNmzqId3eLj7mD0Ddg6JR9+hghbh8MRXWZmRZVGhShOeWnrWDzxxVrZz 1UgRaRqBJ5vdoYPQRuCQ+ssnOBf//JblqZl5BCqDwtD638wMHKa4jAZR2KsS+oXD kumx70qLV6qyAe9mdgov5clorwDCZpVTfROc7qna8yXOGAFajlfWsmK19dC8MrFd v6Hbho9ZpKfu9CEU6UBjh6wAAViSsLqzILpJXnzkEPPRu81t9w== -----END CERTIFICATE-----Generated at Sun Jan 25 20:23:20 2026 by rpki-client