This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa File: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (raw, json) Hash identifier: m7KnWwAi9Wa3iEU4N72OuT0qFvC4fal0YR1U67/6bgk= Subject key identifier: 44:C4:35:7C:5B:01:70:57:27:CB:27:9A:8D:12:F0:B2:1D:3B:DE:B5 Certificate issuer: /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Certificate serial: 786F3C5A79FF1B3229F13C5B3A6D667C5A6955EC Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa Signing time: Wed 21 Jan 2026 00:00:01 +0000 ROA not before: Tue 20 Jan 2026 23:55:01 +0000 ROA not after: Wed 20 Jan 2027 00:00:01 +0000 asID: 150245 IP address blocks: 2001:df1:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6f:3c:5a:79:ff:1b:32:29:f1:3c:5b:3a:6d:66:7c:5a:69:55:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Validity Not Before: Jan 20 23:55:01 2026 GMT Not After : Jan 20 00:00:01 2027 GMT Subject: CN=44C4357C5B01705727CB279A8D12F0B21D3BDEB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:41:a8:d3:cf:db:a4:4d:09:fd:8c:cf:5e:72: 53:c4:16:1f:a6:64:06:65:2e:ef:98:4a:82:e9:08: 16:a9:28:90:db:b1:d8:a2:bd:5c:e1:55:52:c6:ae: 5c:48:2e:05:62:2d:51:75:10:23:6f:0c:3e:a4:94: 1e:36:dd:0d:a6:8c:41:c5:9d:52:a6:bc:9e:e8:77: 5e:45:e6:48:a6:f6:33:e1:ff:7f:5f:26:e9:73:dc: fe:54:6a:53:ea:ba:a9:ba:7d:0c:2e:e8:b1:bd:c4: c7:a2:41:64:a4:df:89:f6:b0:64:e2:41:72:cf:79: 63:42:16:56:78:a9:76:e5:6a:8f:c7:40:5b:72:af: 8f:84:c1:eb:f4:91:b3:0b:8c:f9:d5:c5:e7:18:ec: aa:26:93:80:d8:6d:cc:5b:82:f2:66:43:c4:b8:5c: 51:1d:1f:ec:b8:b5:8a:cf:5f:de:b4:06:29:5b:41: 33:10:e8:da:25:91:59:ef:2d:54:5c:87:ca:73:6d: ba:b8:9f:6d:9b:e8:02:b8:e2:59:55:c3:9c:52:f8: f0:fa:dc:99:53:9f:18:a3:ac:fb:94:de:bc:b5:f4: 95:e7:c6:9c:1f:c3:85:ee:6f:b5:06:3e:d9:08:57: f0:54:78:be:2a:45:38:0d:d4:94:8d:0e:40:a9:c2: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C4:35:7C:5B:01:70:57:27:CB:27:9A:8D:12:F0:B2:1D:3B:DE:B5 X509v3 Authority Key Identifier: keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:e040::/48 Signature Algorithm: sha256WithRSAEncryption 02:d9:4b:66:62:06:15:70:ec:e3:5c:4c:2d:cf:e4:0f:d7:9e: c9:8c:e6:c6:c3:68:2b:86:a3:be:33:d8:8b:da:df:d4:e4:6a: 8d:7c:d3:84:ae:a5:56:dc:fa:99:64:ca:8c:f2:a4:97:ca:fd: 1b:f9:6e:ef:dd:87:0a:ce:c7:68:f5:5a:3a:3f:56:c6:2b:51: 35:b6:87:c5:88:4f:9c:47:28:45:9a:16:ae:89:31:d5:32:dc: 22:c6:91:ed:b5:2f:b4:1c:ea:40:f5:cb:41:cf:d5:34:93:b5: a8:0e:8e:21:4e:2d:76:de:a8:87:92:ac:00:07:6e:85:8a:48: 07:ff:dd:4d:93:b1:90:ff:99:ee:85:fc:8a:f6:e7:d6:4d:da: 0f:aa:df:7c:3a:c4:ed:45:d7:6f:38:74:71:fb:6d:86:b7:67: 44:ee:e0:0e:54:b5:01:f7:8a:d4:b9:b5:39:60:49:6b:4b:8e: e0:ad:0f:7e:1b:1c:23:e7:63:bc:cf:0a:93:4e:73:ac:50:d0: f1:a0:42:59:ed:ca:2f:db:0f:14:cf:0e:88:bc:fa:0c:ec:27: 81:cf:c3:f3:fc:af:b9:d3:44:52:de:5c:bd:c4:16:e9:5e:69: d2:b2:b3:ac:ec:67:f7:80:42:23:c5:4c:5e:3a:5d:2d:05:e9: 5f:2d:4b:c9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUeG88Wnn/GzIp8TxbOm1mfFppVewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZG RDdDMjkxOTAeFw0yNjAxMjAyMzU1MDFaFw0yNzAxMjAwMDAwMDFaMDMxMTAvBgNV BAMTKDQ0QzQzNTdDNUIwMTcwNTcyN0NCMjc5QThEMTJGMEIyMUQzQkRFQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQajTz9ukTQn9jM9eclPEFh+m ZAZlLu+YSoLpCBapKJDbsdiivVzhVVLGrlxILgViLVF1ECNvDD6klB423Q2mjEHF nVKmvJ7od15F5kim9jPh/39fJulz3P5UalPquqm6fQwu6LG9xMeiQWSk34n2sGTi QXLPeWNCFlZ4qXblao/HQFtyr4+Ewev0kbMLjPnVxecY7Komk4DYbcxbgvJmQ8S4 XFEdH+y4tYrPX960BilbQTMQ6NolkVnvLVRch8pzbbq4n22b6AK44llVw5xS+PD6 3JlTnxijrPuU3ry19JXnxpwfw4Xub7UGPtkIV/BUeL4qRTgN1JSNDkCpwkwZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQURMQ1fFsBcFcnyyeajRLwsh073rUwHwYDVR0j BBgwFoAUsrL0K/GXitCUGGSAp9oAhv18KRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODQ2ZjQyMi1jMzAyLTQ0NjItYjU4NC03MDBlOTM0NmNhMDkvMC9CMkIyRjQyQkYx OTc4QUQwOTQxODY0ODBBN0RBMDA4NkZEN0MyOTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZGRDdD MjkxOS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4NDZmNDIyLWMzMDItNDQ2Mi1i NTg0LTcwMGU5MzQ2Y2EwOS8wLzMyMzAzMDMxM2E2NDY2MzEzYTY1MzAzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMwMzIzNDM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8eBAMA0GCSqGSIb3DQEBCwUAA4IBAQAC2UtmYgYVcOzjXEwtz+QP157JjObGw2gr hqO+M9iL2t/U5GqNfNOErqVW3PqZZMqM8qSXyv0b+W7v3YcKzsdo9Vo6P1bGK1E1 tofFiE+cRyhFmhauiTHVMtwixpHttS+0HOpA9ctBz9U0k7WoDo4hTi123qiHkqwA B26FikgH/91Nk7GQ/5nuhfyK9ufWTdoPqt98OsTtRddvOHRx+22Gt2dE7uAOVLUB 94rUubU5YElrS47grQ9+Gxwj52O8zwqTTnOsUNDxoEJZ7cov2w8Uzw6IvPoM7CeB z8Pz/K+500RS3ly9xBbpXmnSsrOs7Gf3gEIjxUxeOl0tBelfLUvJ -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:57 2026 by rpki-client