This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/323430353a386363303a3a2f33322d3332203d3e20313339343530.roa File: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (raw, json) Hash identifier: BfE//xvVejg3fdCudp6ObvOH+VIRGgD97l2vlDnmK9k= Subject key identifier: 3F:62:76:A4:4C:F0:DD:35:15:9D:A8:CB:0B:2A:56:D7:F0:A9:9F:05 Certificate issuer: /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Certificate serial: 5993BEC4DE844E34216EA42F1984CFA1C0802981 Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/323430353a386363303a3a2f33322d3332203d3e20313339343530.roa Signing time: Thu 22 Jan 2026 07:00:01 +0000 ROA not before: Thu 22 Jan 2026 06:55:01 +0000 ROA not after: Thu 21 Jan 2027 07:00:01 +0000 asID: 139450 IP address blocks: 2405:8cc0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 19:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:93:be:c4:de:84:4e:34:21:6e:a4:2f:19:84:cf:a1:c0:80:29:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Validity Not Before: Jan 22 06:55:01 2026 GMT Not After : Jan 21 07:00:01 2027 GMT Subject: CN=3F6276A44CF0DD35159DA8CB0B2A56D7F0A99F05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:7f:9c:2f:56:3d:a3:06:74:2e:50:a9:01: 9a:08:ec:ce:54:c4:47:1d:53:20:6d:1d:4f:b7:e6: af:53:9b:26:73:c2:e9:e2:f9:09:e3:d1:da:32:69: 61:56:96:d6:fb:c2:f2:15:81:13:71:08:ae:3b:f2: 0d:7d:9c:26:57:5f:d7:c4:52:00:85:5e:5c:7c:56: 9a:29:bc:9a:72:f9:7a:e3:b0:8b:58:7e:95:a1:82: 21:ba:7a:6a:7f:62:6e:7e:2d:96:be:df:e8:fe:21: 98:70:8d:f9:9c:a6:a2:7d:4b:1f:39:5b:0a:b4:db: 55:b5:40:e5:94:43:03:4d:0d:19:d0:f0:91:25:ff: 01:4c:ed:78:5c:bc:06:7f:99:f6:ca:52:76:89:8f: 28:b6:1b:b4:43:65:32:f6:5c:a4:fd:88:30:0b:6a: 8a:96:5e:86:69:2f:43:00:c0:c0:b7:1f:50:55:13: 60:d6:2c:f0:9c:36:39:f1:96:c7:df:c3:ee:e4:a8: 36:6b:4a:4b:cd:5c:af:bf:f1:b6:15:31:03:c9:9e: cd:af:ae:e7:26:ac:3f:57:6a:88:ec:d5:c7:9e:c9: 7a:2e:51:b1:20:8e:c0:2f:c8:91:21:86:5e:9f:6a: 69:22:a2:64:25:f6:bf:16:de:3c:ec:f7:74:09:29: c2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:62:76:A4:4C:F0:DD:35:15:9D:A8:CB:0B:2A:56:D7:F0:A9:9F:05 X509v3 Authority Key Identifier: keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/323430353a386363303a3a2f33322d3332203d3e20313339343530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:8cc0::/32 Signature Algorithm: sha256WithRSAEncryption a5:d7:a2:a0:33:75:e2:80:85:52:2b:98:fa:c1:ad:1c:f5:75: 64:d8:46:8e:41:27:bb:38:0d:9a:42:1e:74:a3:c4:e2:a0:05: 22:ed:ba:95:36:41:7a:91:ca:7d:f2:fb:0e:d8:23:77:89:2b: 84:bc:3d:ab:53:c1:60:ff:a8:0e:b4:3e:17:07:01:e0:ca:c1: f8:cd:64:2f:54:75:c3:1f:01:5f:52:53:64:b5:b2:2b:70:72: ab:bd:c4:b7:4a:27:fc:7b:05:b8:ad:e5:67:c8:b3:6d:45:1f: 14:b6:76:8f:df:ed:9c:9d:60:a0:03:3e:c8:ee:27:70:51:e9: b2:ee:ad:b8:05:8d:75:67:29:a3:68:26:47:4f:44:6e:2c:dc: 0b:d8:e7:5f:45:e4:33:f2:d6:66:d0:a8:7d:03:47:2d:e6:3d: 76:e8:31:c1:fc:5a:81:ca:1f:ff:e9:25:88:fa:6a:da:99:8a: c5:ec:8f:19:1a:71:aa:c0:31:cd:5b:73:18:13:d2:81:74:c3: ed:09:d9:98:32:18:bf:df:9b:a7:af:35:7a:36:4b:44:67:66: 9e:17:3c:2c:49:ae:92:b7:77:db:e3:41:91:c9:8b:4d:07:b8: ad:23:5c:58:d4:ce:c9:5c:f9:37:38:04:b4:13:70:ef:a0:28: b7:67:34:c3 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUWZO+xN6ETjQhbqQvGYTPocCAKYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0Iz MjY0RkY1QzAeFw0yNjAxMjIwNjU1MDFaFw0yNzAxMjEwNzAwMDFaMDMxMTAvBgNV BAMTKDNGNjI3NkE0NENGMEREMzUxNTlEQThDQjBCMkE1NkQ3RjBBOTlGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJq3+cL1Y9owZ0LlCpAZoI7M5U xEcdUyBtHU+35q9TmyZzwuni+Qnj0doyaWFWltb7wvIVgRNxCK478g19nCZXX9fE UgCFXlx8VpopvJpy+XrjsItYfpWhgiG6emp/Ym5+LZa+3+j+IZhwjfmcpqJ9Sx85 Wwq021W1QOWUQwNNDRnQ8JEl/wFM7XhcvAZ/mfbKUnaJjyi2G7RDZTL2XKT9iDAL aoqWXoZpL0MAwMC3H1BVE2DWLPCcNjnxlsffw+7kqDZrSkvNXK+/8bYVMQPJns2v rucmrD9Xaojs1ceeyXouUbEgjsAvyJEhhl6famkiomQl9r8W3jzs93QJKcI3AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUP2J2pEzw3TUVnajLCypW1/CpnwUwHwYDVR0j BBgwFoAUeJxB+P9y1OAPNhlK8kpUOzJk/1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2YxNzA2Yi02YzE3LTQ3ODYtYWJkOS00N2EzODQ0ZGE4ZjgvMC83ODlDNDFGOEZG NzJENEUwMEYzNjE5NEFGMjRBNTQzQjMyNjRGRjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0IzMjY0 RkY1Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjZjE3MDZiLTZjMTctNDc4Ni1h YmQ5LTQ3YTM4NDRkYThmOC8wLzMyMzQzMDM1M2EzODYzNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzOTM0MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFjMAwDQYJKoZI hvcNAQELBQADggEBAKXXoqAzdeKAhVIrmPrBrRz1dWTYRo5BJ7s4DZpCHnSjxOKg BSLtupU2QXqRyn3y+w7YI3eJK4S8PatTwWD/qA60PhcHAeDKwfjNZC9UdcMfAV9S U2S1sitwcqu9xLdKJ/x7Bbit5WfIs21FHxS2do/f7ZydYKADPsjuJ3BR6bLurbgF jXVnKaNoJkdPRG4s3AvY519F5DPy1mbQqH0DRy3mPXboMcH8WoHKH//pJYj6atqZ isXsjxkacarAMc1bcxgT0oF0w+0J2ZgyGL/fm6evNXo2S0RnZp4XPCxJrpK3d9vj QZHJi00HuK0jXFjUzslc+Tc4BLQTcO+gKLdnNMM= -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:20 2026 by rpki-client