This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/323430353a353130303a3a2f33322d3438203d3e203137383236.roa File: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (raw, json) Hash identifier: VwqZQ2hYIJIpswzvgku070aTaUCXAfj4FutWWR2nxCU= Subject key identifier: 70:99:0B:83:1D:08:12:DD:A0:74:48:31:C3:07:85:3A:70:E6:F8:74 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 5972FEDE59CEB876F562ECA973D905686F6A8E81 Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/323430353a353130303a3a2f33322d3438203d3e203137383236.roa Signing time: Fri 19 Dec 2025 09:00:00 +0000 ROA not before: Fri 19 Dec 2025 08:55:00 +0000 ROA not after: Fri 18 Dec 2026 09:00:00 +0000 asID: 17826 IP address blocks: 2405:5100::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:72:fe:de:59:ce:b8:76:f5:62:ec:a9:73:d9:05:68:6f:6a:8e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Dec 19 08:55:00 2025 GMT Not After : Dec 18 09:00:00 2026 GMT Subject: CN=70990B831D0812DDA0744831C307853A70E6F874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:3b:c3:72:e6:64:6b:ca:77:e5:a7:36:a8: db:cd:65:ab:12:d4:91:05:97:f8:0d:54:31:59:43: b1:30:11:41:8e:3c:70:ff:19:5c:ce:a1:f5:7d:25: d1:36:c1:91:17:13:f3:6b:8f:da:b7:33:86:63:60: 98:4b:c1:ac:68:52:f7:7c:b0:2b:1a:f4:09:ac:bc: 0a:1e:70:d1:69:75:90:01:da:fe:a5:b7:50:62:5e: e4:aa:98:53:b0:c2:c3:2f:07:2f:12:d8:e1:52:e8: cd:6e:88:8d:98:59:fd:07:a6:bf:cf:b9:c5:c6:c4: 9a:e5:bb:10:35:41:31:ed:68:39:59:63:fd:65:71: c6:38:6f:12:8f:d8:b9:d0:e2:95:8e:6f:b1:f4:97: 2c:9a:32:95:a4:b9:cf:cd:8d:10:c5:52:fd:99:b6: 1b:e9:3e:4f:57:bf:2d:a0:88:a2:bc:dc:8e:ad:b9: 4e:09:60:49:97:10:fc:26:8d:18:a0:33:6b:c6:63: b4:17:8b:3c:8c:52:8e:6e:26:0c:ab:c2:c5:7d:8c: bd:40:38:30:49:8c:6d:0d:07:d9:21:13:1b:64:3c: 07:9a:3c:02:ee:b1:a6:3a:e8:fe:18:20:f0:73:ca: 9f:e5:17:14:f7:69:68:28:f3:0e:99:e1:16:0a:27: 7c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:99:0B:83:1D:08:12:DD:A0:74:48:31:C3:07:85:3A:70:E6:F8:74 X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/323430353a353130303a3a2f33322d3438203d3e203137383236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:5100::/32 Signature Algorithm: sha256WithRSAEncryption 5e:2c:9b:e3:52:0c:5f:2e:b5:be:b4:36:57:64:cf:ca:81:4b: 71:de:74:6d:b5:ba:84:ae:32:8b:f8:4a:f5:27:1d:6d:bc:64: 8b:2c:b7:0f:5b:7b:d0:e8:07:57:0e:92:4d:92:e3:88:f5:1b: 80:dd:00:a6:51:61:79:23:fa:a0:99:a7:d6:aa:1e:78:f0:81: 7d:6a:7f:d7:14:ad:19:a1:84:9e:87:c3:9f:9b:f6:01:cf:b6: 80:b9:95:51:d0:eb:37:a1:51:36:31:a3:ae:c5:2c:ba:5a:01: f8:9a:0f:4e:f0:ca:9d:6b:3d:69:7a:58:f0:ab:41:81:70:29: a7:90:68:73:37:78:e3:61:c8:e2:75:bd:a8:eb:06:6d:63:6f: 70:b0:be:53:30:b4:b6:56:77:4a:26:6f:5b:8c:51:2a:59:a4: 9b:63:a8:96:af:13:78:ed:6a:f8:84:02:2e:9a:14:1f:f5:17: 3c:fb:30:15:03:87:c9:52:2f:2b:d7:10:5b:fd:10:08:2e:fc: d6:5a:68:0b:ef:7b:5f:aa:a8:38:84:3b:06:33:03:40:e9:ba: ba:a3:c1:a2:c6:6f:44:73:6b:9f:98:9c:8f:56:15:58:50:27: ae:f2:e7:a7:ec:28:a7:3c:e2:34:75:d4:14:07:ff:f0:d3:f8: c0:e1:da:59 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUWXL+3lnOuHb1Yuypc9kFaG9qjoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNTEyMTkwODU1MDBaFw0yNjEyMTgwOTAwMDBaMDMxMTAvBgNV BAMTKDcwOTkwQjgzMUQwODEyRERBMDc0NDgzMUMzMDc4NTNBNzBFNkY4NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8rTvDcuZka8p35ac2qNvNZasS 1JEFl/gNVDFZQ7EwEUGOPHD/GVzOofV9JdE2wZEXE/Nrj9q3M4ZjYJhLwaxoUvd8 sCsa9AmsvAoecNFpdZAB2v6lt1BiXuSqmFOwwsMvBy8S2OFS6M1uiI2YWf0Hpr/P ucXGxJrluxA1QTHtaDlZY/1lccY4bxKP2LnQ4pWOb7H0lyyaMpWkuc/NjRDFUv2Z thvpPk9Xvy2giKK83I6tuU4JYEmXEPwmjRigM2vGY7QXizyMUo5uJgyrwsV9jL1A ODBJjG0NB9khExtkPAeaPALusaY66P4YIPBzyp/lFxT3aWgo8w6Z4RYKJ3xJAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUcJkLgx0IEt2gdEgxwweFOnDm+HQwHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkZDFlYWNkLWEwNjctNDkyNC05 Mjg0LWJjNmYxMGQ4ZDVhOC8wLzMyMzQzMDM1M2EzNTMxMzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzczODMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBVEAMA0GCSqGSIb3 DQEBCwUAA4IBAQBeLJvjUgxfLrW+tDZXZM/KgUtx3nRttbqErjKL+Er1Jx1tvGSL LLcPW3vQ6AdXDpJNkuOI9RuA3QCmUWF5I/qgmafWqh548IF9an/XFK0ZoYSeh8Of m/YBz7aAuZVR0Os3oVE2MaOuxSy6WgH4mg9O8Mqdaz1peljwq0GBcCmnkGhzN3jj Ycjidb2o6wZtY29wsL5TMLS2VndKJm9bjFEqWaSbY6iWrxN47Wr4hAIumhQf9Rc8 +zAVA4fJUi8r1xBb/RAILvzWWmgL73tfqqg4hDsGMwNA6bq6o8Gixm9Ec2ufmJyP VhVYUCeu8uen7CinPOI0ddQUB//w0/jA4dpZ -----END CERTIFICATE-----Generated at Mon Jan 26 02:42:19 2026 by rpki-client