This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa File: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (raw, json) Hash identifier: Ou1QMOVVtAAa367JCP3byx/XbB4/rWHxtoD7UtBXQ9o= Subject key identifier: 53:1E:18:D1:EA:E5:FE:49:A1:57:5F:BD:72:3F:C1:5E:FF:6F:E8:21 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 0AF32BDC6AAA550EBA102371394E933ABA747F62 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa Signing time: Mon 29 Dec 2025 08:00:00 +0000 ROA not before: Mon 29 Dec 2025 07:55:00 +0000 ROA not after: Mon 28 Dec 2026 08:00:00 +0000 asID: 38320 IP address blocks: 2404:3900:a92::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f3:2b:dc:6a:aa:55:0e:ba:10:23:71:39:4e:93:3a:ba:74:7f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Dec 29 07:55:00 2025 GMT Not After : Dec 28 08:00:00 2026 GMT Subject: CN=531E18D1EAE5FE49A1575FBD723FC15EFF6FE821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c3:db:08:fc:de:c2:3f:cb:c9:08:f0:70:59: dd:e8:c3:37:17:5b:84:86:0d:e7:1a:83:91:95:ef: 75:8b:24:3c:e7:b7:8f:a1:ea:6f:ed:f2:a9:22:96: 4e:44:76:3d:d7:b5:56:89:8c:f7:06:59:63:99:0f: 6a:24:40:48:92:ef:1c:0f:5a:39:96:a4:b4:9b:4a: 6d:45:03:a0:f5:e1:e6:41:2d:6c:18:c5:d2:dd:77: 5c:61:43:f4:2c:cd:74:4f:88:41:ce:9a:ca:af:8e: 08:60:e6:6e:c6:4c:50:99:3c:64:65:ec:57:7b:09: fc:ed:d2:b8:e7:b3:60:47:af:3c:dc:72:c7:0d:0e: 54:3a:bb:59:5f:5a:3f:6c:10:58:4c:4a:0d:60:7e: 44:6f:ee:2c:c1:dd:9b:56:99:d6:69:dd:00:8d:07: 13:5f:2f:e4:ab:32:1f:7e:84:ef:5a:b3:bb:3b:b0: 6f:00:bd:92:ab:2a:8d:c5:3e:bc:f3:4b:a2:f0:d6: a5:60:93:92:ed:38:d4:d0:3c:b3:9f:6a:a1:fd:f7: 97:4a:60:43:b0:b2:26:cb:db:3e:a9:82:2c:7a:82: 33:03:67:94:cc:a9:b9:cc:32:15:f2:75:0b:ae:49: 51:bb:39:59:0d:9d:78:07:d1:79:23:70:55:f7:27: 20:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1E:18:D1:EA:E5:FE:49:A1:57:5F:BD:72:3F:C1:5E:FF:6F:E8:21 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:3900:a92::/48 Signature Algorithm: sha256WithRSAEncryption 96:a1:a7:fa:f0:74:19:83:f6:04:8a:e5:0a:fc:f9:8c:30:a5: 7a:f7:31:da:5b:6d:3e:0c:ec:c6:31:41:bd:12:e8:b8:17:ee: f8:fa:31:2f:3f:51:07:23:9c:8c:9e:b6:d2:62:d0:84:05:f6: 23:39:55:2a:f3:b8:ed:25:03:55:07:d8:9b:69:35:81:ba:ad: a5:98:d9:09:43:f6:79:da:25:4f:95:db:97:fe:29:e1:8a:54: 8a:c1:16:00:9d:7a:47:ff:25:43:5d:2d:22:63:ba:59:61:6b: 63:ae:f2:87:1e:8c:44:38:3e:99:b6:fb:32:c7:9e:17:d1:a3: 4c:bc:f8:4c:e5:95:af:dd:37:21:50:3d:c1:4d:49:78:19:a9: 30:ce:b5:50:24:25:0d:4d:24:91:85:e5:3f:82:ea:81:b0:b4: 7a:94:c5:4c:eb:80:01:d2:a4:0f:d0:99:e1:e3:cd:91:a0:0a: 69:f5:00:d2:f9:ba:97:9e:ee:59:57:99:49:cf:7d:a5:dd:5d: a5:c7:8f:2c:0a:c7:02:cf:6d:c9:5a:fd:86:d5:bf:21:47:c2: 80:b8:28:ca:60:9f:9c:6d:72:69:46:77:3c:7c:25:f7:76:cb: 1d:c6:65:5e:26:30:de:00:38:61:66:a4:b3:26:28:94:a4:32: 74:5c:0f:10 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUCvMr3GqqVQ66ECNxOU6TOrp0f2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTEyMjkwNzU1MDBaFw0yNjEyMjgwODAwMDBaMDMxMTAvBgNV BAMTKDUzMUUxOEQxRUFFNUZFNDlBMTU3NUZCRDcyM0ZDMTVFRkY2RkU4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZw9sI/N7CP8vJCPBwWd3owzcX W4SGDecag5GV73WLJDznt4+h6m/t8qkilk5Edj3XtVaJjPcGWWOZD2okQEiS7xwP WjmWpLSbSm1FA6D14eZBLWwYxdLdd1xhQ/QszXRPiEHOmsqvjghg5m7GTFCZPGRl 7Fd7Cfzt0rjns2BHrzzccscNDlQ6u1lfWj9sEFhMSg1gfkRv7izB3ZtWmdZp3QCN BxNfL+SrMh9+hO9as7s7sG8AvZKrKo3FPrzzS6Lw1qVgk5LtONTQPLOfaqH995dK YEOwsibL2z6pgix6gjMDZ5TMqbnMMhXydQuuSVG7OVkNnXgH0XkjcFX3JyAnAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUUx4Y0erl/kmhV1+9cj/BXv9v6CEwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMyMzQzMDM0M2EzMzM5MzAzMDNhNjEzOTMyM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQEOQAK kjANBgkqhkiG9w0BAQsFAAOCAQEAlqGn+vB0GYP2BIrlCvz5jDClevcx2lttPgzs xjFBvRLouBfu+PoxLz9RByOcjJ620mLQhAX2IzlVKvO47SUDVQfYm2k1gbqtpZjZ CUP2edolT5Xbl/4p4YpUisEWAJ16R/8lQ10tImO6WWFrY67yhx6MRDg+mbb7Msee F9GjTLz4TOWVr903IVA9wU1JeBmpMM61UCQlDU0kkYXlP4LqgbC0epTFTOuAAdKk D9CZ4ePNkaAKafUA0vm6l57uWVeZSc99pd1dpcePLArHAs9tyVr9htW/IUfCgLgo ymCfnG1yaUZ3PHwl93bLHcZlXiYw3gA4YWaksyYolKQydFwPEA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:23:27 2026 by rpki-client