This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/323430333a636238303a3a2f33322d3438203d3e203633353038.roa File: 323430333a636238303a3a2f33322d3438203d3e203633353038.roa (raw, json) Hash identifier: RTuAe01oZKcYw+JAnijcOaMyxK0mUgunx1L/6+eOJW8= Subject key identifier: 8F:CE:C7:96:19:6C:D3:11:47:6A:05:D8:9E:BD:77:E4:E1:D2:84:56 Certificate issuer: /CN=35526D55C5F4431129EA7CE9304705CE395693D9 Certificate serial: 5CE8A40587200A84B3F3045EB15B9F4C6DD8D774 Authority key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/323430333a636238303a3a2f33322d3438203d3e203633353038.roa Signing time: Tue 23 Dec 2025 16:00:07 +0000 ROA not before: Tue 23 Dec 2025 15:55:07 +0000 ROA not after: Tue 22 Dec 2026 16:00:07 +0000 asID: 63508 IP address blocks: 2403:cb80::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e8:a4:05:87:20:0a:84:b3:f3:04:5e:b1:5b:9f:4c:6d:d8:d7:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Validity Not Before: Dec 23 15:55:07 2025 GMT Not After : Dec 22 16:00:07 2026 GMT Subject: CN=8FCEC796196CD311476A05D89EBD77E4E1D28456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:c3:d2:2d:d5:9b:3f:be:aa:c7:58:07:56: 74:12:74:b2:cc:86:6c:4a:e9:3f:22:f6:10:ea:fb: 32:28:bc:ff:83:e9:09:e5:37:d3:f2:da:f7:c8:76: 66:e0:b1:2e:bf:ff:0b:5c:7b:f5:8f:84:df:af:17: 92:ea:73:9f:76:b1:ea:32:a7:a3:65:5a:a6:6e:f2: a0:31:95:96:cd:6e:1f:c1:4c:85:e9:ed:0a:d1:c8: ac:5b:52:ab:7e:b7:ed:f2:8d:ba:f8:4c:12:23:58: 19:aa:c6:de:e1:c3:f0:a3:50:3b:09:06:a9:39:9b: 3f:0d:4e:a4:30:a3:f5:e7:09:93:9d:93:4e:62:71: cc:25:20:e8:48:be:45:48:6f:94:01:8d:c6:b1:50: f4:ad:3a:da:bb:d0:c8:ec:08:cd:46:20:8a:35:e9: 71:df:5e:10:87:25:24:88:e8:a9:e0:a0:eb:ab:0a: 8d:83:64:27:7f:17:34:e4:e7:0f:d3:6e:72:dd:eb: 2f:6c:9e:9c:e9:0f:f5:fa:2d:fe:98:e0:44:9c:c6: 3e:b3:17:af:0b:22:5a:af:1c:29:d6:56:ed:fa:40: b1:cd:25:0f:68:5e:e8:a7:06:d8:54:6c:08:8d:f3: 16:4e:0c:cd:49:1c:d5:29:ba:b4:44:03:fe:b3:f7: b3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CE:C7:96:19:6C:D3:11:47:6A:05:D8:9E:BD:77:E4:E1:D2:84:56 X509v3 Authority Key Identifier: keyid:35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/323430333a636238303a3a2f33322d3438203d3e203633353038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:cb80::/32 Signature Algorithm: sha256WithRSAEncryption 7e:5a:94:83:cd:f7:a7:78:b9:2b:e5:63:c1:2a:2a:18:26:dd: c8:21:0a:41:92:8e:e4:db:62:62:29:75:8b:88:06:b3:42:b7: 11:8c:9d:51:ac:4f:5e:91:51:44:ac:47:82:60:11:f1:63:3e: 3d:ac:49:a4:fb:98:d4:e0:ef:b1:b1:12:38:00:de:60:e0:f7: 94:86:c0:cb:13:40:1c:bd:57:ca:83:30:06:7f:6c:09:70:a5: 36:6d:0f:29:6d:8a:de:94:d1:85:49:b5:91:59:72:a8:5f:4c: a8:2c:a7:27:fa:3c:ea:0a:fe:03:9a:c0:d7:2f:36:17:23:ad: e5:ce:25:7d:d7:90:00:e6:c6:b5:44:7b:26:39:90:4a:26:f6: 0c:43:1d:e9:03:cc:ff:e9:c3:e8:86:73:c4:e5:5d:3d:3e:5f: 6b:23:c4:18:a1:b5:9a:98:e5:5d:85:6f:38:de:80:b8:51:4a: 31:8b:b3:0c:dc:63:29:ec:1f:ec:e5:59:61:df:9a:88:c4:1c: 97:47:9b:9b:fd:c8:d7:31:91:2f:1f:8a:7d:21:93:33:f9:01: 6f:29:8c:55:40:f6:2f:36:65:c1:1f:00:56:f0:8d:46:2d:c8: bc:8e:f7:83:db:e6:2a:03:51:f8:f1:82:0a:33:64:3c:1e:d7: a9:8e:11:72 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUXOikBYcgCoSz8wResVufTG3Y13QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0Uz OTU2OTNEOTAeFw0yNTEyMjMxNTU1MDdaFw0yNjEyMjIxNjAwMDdaMDMxMTAvBgNV BAMTKDhGQ0VDNzk2MTk2Q0QzMTE0NzZBMDVEODlFQkQ3N0U0RTFEMjg0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9q8PSLdWbP76qx1gHVnQSdLLM hmxK6T8i9hDq+zIovP+D6QnlN9Py2vfIdmbgsS6//wtce/WPhN+vF5Lqc592seoy p6NlWqZu8qAxlZbNbh/BTIXp7QrRyKxbUqt+t+3yjbr4TBIjWBmqxt7hw/CjUDsJ Bqk5mz8NTqQwo/XnCZOdk05iccwlIOhIvkVIb5QBjcaxUPStOtq70MjsCM1GIIo1 6XHfXhCHJSSI6KngoOurCo2DZCd/FzTk5w/TbnLd6y9snpzpD/X6Lf6Y4EScxj6z F68LIlqvHCnWVu36QLHNJQ9oXuinBthUbAiN8xZODM1JHNUpurREA/6z97OVAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUj87Hlhls0xFHagXYnr135OHShFYwHwYDVR0j BBgwFoAUNVJtVcX0QxEp6nzpMEcFzjlWk9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMC8zNTUyNkQ1NUM1 RjQ0MzExMjlFQTdDRTkzMDQ3MDVDRTM5NTY5M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU1MjZENTVDNUY0NDMxMTI5RUE3Q0U5MzA0NzA1Q0UzOTU2 OTNEOS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0YjBiZjViLTQ1NmQtNGU2Mi05 ZjQ4LTYxOTIxNDlkNTJjMi8wLzMyMzQzMDMzM2E2MzYyMzgzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM2MzMzNTMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA8uAMA0GCSqGSIb3 DQEBCwUAA4IBAQB+WpSDzfeneLkr5WPBKioYJt3IIQpBko7k22JiKXWLiAazQrcR jJ1RrE9ekVFErEeCYBHxYz49rEmk+5jU4O+xsRI4AN5g4PeUhsDLE0AcvVfKgzAG f2wJcKU2bQ8pbYrelNGFSbWRWXKoX0yoLKcn+jzqCv4DmsDXLzYXI63lziV915AA 5sa1RHsmOZBKJvYMQx3pA8z/6cPohnPE5V09Pl9rI8QYobWamOVdhW843oC4UUox i7MM3GMp7B/s5Vlh35qIxByXR5ub/cjXMZEvH4p9IZMz+QFvKYxVQPYvNmXBHwBW 8I1GLci8jveD2+YqA1H48YIKM2Q8HtepjhFy -----END CERTIFICATE-----Generated at Sun Jan 25 20:19:32 2026 by rpki-client