This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa File: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (raw, json) Hash identifier: e4sjRhvp6mUHQQONhwMETVFyiY5/bOpZffIZ6/yt038= Subject key identifier: 8F:50:61:B2:66:CD:94:77:08:E0:C7:14:B4:D0:86:21:71:19:FF:F9 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 3A87D96DD9C1C52B079DD69993C5E3015DCD6DFB Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa Signing time: Mon 29 Dec 2025 07:00:00 +0000 ROA not before: Mon 29 Dec 2025 06:55:00 +0000 ROA not after: Mon 28 Dec 2026 07:00:00 +0000 asID: 38320 IP address blocks: 2404:3900:1992::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:87:d9:6d:d9:c1:c5:2b:07:9d:d6:99:93:c5:e3:01:5d:cd:6d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Dec 29 06:55:00 2025 GMT Not After : Dec 28 07:00:00 2026 GMT Subject: CN=8F5061B266CD947708E0C714B4D086217119FFF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:59:b4:7b:9a:95:38:6c:e6:1f:e3:15:58:ca: d6:32:1e:08:5c:c9:c6:d6:0b:2b:de:a3:0d:3a:57: 18:c9:88:5d:b6:e9:67:ba:c7:e9:10:ee:1e:63:24: 05:5f:d1:88:b8:55:d9:d0:85:61:5b:e8:f9:a0:5e: a1:49:1d:3a:9c:d8:0a:a1:0f:b4:dc:3d:82:1a:b2: 49:04:9c:a7:8c:5e:d2:58:5b:f9:ee:ab:d4:46:5d: 73:98:12:a5:c5:d8:ea:4f:8b:b4:a0:eb:e1:9b:e8: 47:46:54:67:44:b8:13:cb:5c:1c:54:26:f0:25:5a: 80:e5:80:5d:2d:41:d7:e5:7c:34:56:b6:d0:cd:39: 4a:ae:60:d9:35:40:a7:d0:c7:9a:77:9b:54:fc:dd: aa:b2:68:f7:5a:51:37:9f:a5:19:d3:88:5e:fb:4e: 96:b7:d5:7c:0f:6d:85:14:3d:dd:1b:de:d0:4a:bc: 3c:ed:21:7f:db:e2:6b:b4:8b:90:a1:dc:6b:b9:ef: ec:fa:04:df:76:e0:20:ff:ce:cd:83:9d:b5:a5:f2: 18:88:ed:5c:fb:c2:ac:ae:91:c5:50:5f:66:72:91: 56:2e:5d:d0:46:9a:4a:a9:80:a5:7c:b2:c2:d5:05: 7f:a4:1d:aa:05:4a:ab:d1:ef:28:e2:ad:02:64:d2: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:50:61:B2:66:CD:94:77:08:E0:C7:14:B4:D0:86:21:71:19:FF:F9 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:3900:1992::/48 Signature Algorithm: sha256WithRSAEncryption 37:5a:72:a4:8b:7f:12:bd:91:77:f8:e2:15:13:af:9a:3b:5f: 1d:51:90:2d:53:f6:a3:34:28:09:6e:9f:8d:e2:36:fe:55:6d: 49:4e:23:2b:10:3d:0e:e0:98:f4:89:be:70:e5:a2:f7:4c:91: fa:8f:35:c4:2f:dc:63:d1:aa:8e:08:d5:38:ba:30:d2:3e:31: 4c:2d:bf:87:6b:8d:b4:0c:cb:91:ee:8d:ad:58:70:6b:04:61: c7:7b:a2:d1:06:10:84:49:e7:7a:b3:86:b2:18:ae:88:e4:10: 76:26:00:d7:af:71:c3:e2:b6:3e:76:a3:63:f7:52:05:ab:07: 1a:04:be:c3:ec:7e:c4:e6:e0:6f:27:53:31:99:8c:8e:88:7d: 20:54:d5:6e:cf:38:94:0b:4c:fd:da:f8:e9:a8:21:0b:e2:c6: 54:0f:d5:fb:68:0b:d7:8a:6b:b9:3a:ce:0d:14:9c:f3:91:2e: 75:02:02:96:17:73:50:55:39:65:46:fe:0f:c4:a4:4c:ba:99: 17:b3:ce:11:8b:6a:2c:c9:d1:6a:a2:40:be:be:0b:5f:f4:da: 54:c5:1e:29:c7:d9:6e:22:17:fd:fc:7f:60:4f:05:d4:48:57: 47:b7:3f:dc:01:5d:80:0c:62:d6:41:3e:96:c1:ef:8f:cb:30: 18:14:81:e7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOofZbdnBxSsHndaZk8XjAV3NbfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTEyMjkwNjU1MDBaFw0yNjEyMjgwNzAwMDBaMDMxMTAvBgNV BAMTKDhGNTA2MUIyNjZDRDk0NzcwOEUwQzcxNEI0RDA4NjIxNzExOUZGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbWbR7mpU4bOYf4xVYytYyHghc ycbWCyveow06VxjJiF226We6x+kQ7h5jJAVf0Yi4VdnQhWFb6PmgXqFJHTqc2Aqh D7TcPYIaskkEnKeMXtJYW/nuq9RGXXOYEqXF2OpPi7Sg6+Gb6EdGVGdEuBPLXBxU JvAlWoDlgF0tQdflfDRWttDNOUquYNk1QKfQx5p3m1T83aqyaPdaUTefpRnTiF77 Tpa31XwPbYUUPd0b3tBKvDztIX/b4mu0i5Ch3Gu57+z6BN924CD/zs2DnbWl8hiI 7Vz7wqyukcVQX2ZykVYuXdBGmkqpgKV8ssLVBX+kHaoFSqvR7yjirQJk0p3bAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUj1BhsmbNlHcI4McUtNCGIXEZ//kwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMyMzQzMDM0M2EzMzM5MzAzMDNhMzEzOTM5MzIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzMzMjMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAQ5 ABmSMA0GCSqGSIb3DQEBCwUAA4IBAQA3WnKki38SvZF3+OIVE6+aO18dUZAtU/aj NCgJbp+N4jb+VW1JTiMrED0O4Jj0ib5w5aL3TJH6jzXEL9xj0aqOCNU4ujDSPjFM Lb+Ha420DMuR7o2tWHBrBGHHe6LRBhCESed6s4ayGK6I5BB2JgDXr3HD4rY+dqNj 91IFqwcaBL7D7H7E5uBvJ1MxmYyOiH0gVNVuzziUC0z92vjpqCEL4sZUD9X7aAvX imu5Os4NFJzzkS51AgKWF3NQVTllRv4PxKRMupkXs84Ri2osydFqokC+vgtf9NpU xR4px9luIhf9/H9gTwXUSFdHtz/cAV2ADGLWQT6Wwe+PyzAYFIHn -----END CERTIFICATE-----Generated at Mon Jan 26 00:23:26 2026 by rpki-client