This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa File: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (raw, json) Hash identifier: K1B+8ghkTLIZ5AJ6fsYXvRX9s2r1jX+7WBmIft8mUyc= Subject key identifier: E0:80:75:16:73:C6:D6:EA:86:20:6F:33:48:6C:37:5D:85:F1:59:61 Certificate issuer: /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Certificate serial: 3AB2AC674675BDB915213C1BA62FC52D1C500C5E Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa Signing time: Tue 30 Dec 2025 17:00:01 +0000 ROA not before: Tue 30 Dec 2025 16:55:01 +0000 ROA not after: Tue 29 Dec 2026 17:00:01 +0000 asID: 24429 IP address blocks: 2405:1640:6::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 11:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b2:ac:67:46:75:bd:b9:15:21:3c:1b:a6:2f:c5:2d:1c:50:0c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Validity Not Before: Dec 30 16:55:01 2025 GMT Not After : Dec 29 17:00:01 2026 GMT Subject: CN=E080751673C6D6EA86206F33486C375D85F15961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a5:05:4a:c2:b9:dc:ac:1c:8e:02:4d:63:a0: bc:bb:14:0d:21:61:c7:f2:45:91:38:5c:8a:f4:e9: de:0e:9f:fd:55:7f:6f:57:1d:11:c8:d3:a7:69:e6: 9f:74:fb:89:26:15:34:c3:80:75:6a:8e:91:40:1c: 0a:e9:4e:e2:70:79:de:16:1c:d4:51:0e:1b:d5:cd: 6e:74:b9:df:1d:01:03:49:80:1e:f0:a7:39:62:93: 24:7d:eb:cd:22:19:26:58:22:f1:60:1d:78:78:8e: 15:93:63:89:2d:32:86:93:ce:6d:6f:d9:c7:ce:94: 68:2a:f1:4f:24:0b:5e:be:7d:35:12:06:ac:02:13: 66:ed:73:10:d5:73:d8:47:3e:73:0d:57:c9:35:c6: db:cc:36:d5:40:42:fc:f2:4b:5b:50:a6:fe:48:a4: 99:a6:98:61:54:4d:d2:e6:15:cd:ba:d3:7a:68:68: f2:56:70:d5:92:ee:d9:da:ee:68:a6:4a:d5:e3:90: b6:b7:40:d9:df:5b:af:4c:d5:6b:b1:d2:eb:e7:f3: fb:34:ff:fd:e8:53:41:25:c7:de:bb:d2:23:fb:f5: 90:2a:73:61:42:11:de:d9:89:c6:00:1b:ca:22:89: 0a:c6:7b:45:7f:74:c5:43:30:24:42:c9:95:52:01: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:80:75:16:73:C6:D6:EA:86:20:6F:33:48:6C:37:5D:85:F1:59:61 X509v3 Authority Key Identifier: keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:1640:6::/48 Signature Algorithm: sha256WithRSAEncryption 97:3f:ae:d3:63:47:b5:5f:aa:40:4c:a5:33:00:a7:02:4f:96: ca:69:8e:36:53:ba:89:b1:9d:c2:34:b5:fa:4a:ed:a9:cb:66: f5:85:7e:b9:92:29:83:a5:14:ea:41:52:d6:e3:2c:a5:53:81: 66:be:2e:9d:30:8f:46:fe:57:94:b0:89:30:a1:3c:84:94:c5: 9b:6c:e2:0f:de:a5:0e:ee:26:72:d0:05:a0:33:50:c4:c1:86: 82:23:70:0d:72:3d:b3:14:14:b8:12:be:74:75:21:36:99:f0: 45:c4:fc:2c:4a:d3:6f:8f:f8:fb:97:b1:2d:4e:53:70:ed:eb: 94:e1:26:c8:1b:52:22:64:6d:0c:5c:0d:5e:47:cf:f6:4d:97: 61:61:dd:b4:48:6f:c0:52:27:17:d8:9f:61:3f:ce:d6:ec:05: 69:0c:20:9a:c9:fd:77:8f:a4:75:09:a8:49:e5:05:87:ee:46: 68:e0:7e:dc:eb:c4:c0:f6:db:f8:c3:fd:75:fc:82:41:9a:7a: fe:2a:74:d4:fa:22:e6:ad:1b:53:58:b4:3b:33:e1:c1:f2:a9: f0:cc:f9:ff:ca:3e:a6:c0:10:90:ca:13:01:3e:be:50:cf:2a: 5c:e7:fd:97:f4:6d:f1:3e:27:b4:97:30:be:7e:e6:7e:38:91: 6f:51:2b:6d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUOrKsZ0Z1vbkVITwbpi/FLRxQDF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3 QjQ1Q0IzNTAeFw0yNTEyMzAxNjU1MDFaFw0yNjEyMjkxNzAwMDFaMDMxMTAvBgNV BAMTKEUwODA3NTE2NzNDNkQ2RUE4NjIwNkYzMzQ4NkMzNzVEODVGMTU5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkpQVKwrncrByOAk1joLy7FA0h YcfyRZE4XIr06d4On/1Vf29XHRHI06dp5p90+4kmFTTDgHVqjpFAHArpTuJwed4W HNRRDhvVzW50ud8dAQNJgB7wpzlikyR9680iGSZYIvFgHXh4jhWTY4ktMoaTzm1v 2cfOlGgq8U8kC16+fTUSBqwCE2btcxDVc9hHPnMNV8k1xtvMNtVAQvzyS1tQpv5I pJmmmGFUTdLmFc2603poaPJWcNWS7tna7mimStXjkLa3QNnfW69M1Wux0uvn8/s0 //3oU0Elx9670iP79ZAqc2FCEd7ZicYAG8oiiQrGe0V/dMVDMCRCyZVSAXwPAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU4IB1FnPG1uqGIG8zSGw3XYXxWWEwHwYDVR0j BBgwFoAUFbfr+Ss1/bW8aZC7jsosKXtFyzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjU1MWFiOS04MDQxLTRhOWEtOWI1MC1jN2M2ZGVjMjE2NmYvMC8xNUI3RUJGOTJC MzVGREI1QkM2OTkwQkI4RUNBMkMyOTdCNDVDQjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3QjQ1 Q0IzNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmNTUxYWI5LTgwNDEtNGE5YS05 YjUwLWM3YzZkZWMyMTY2Zi8wLzMyMzQzMDM1M2EzMTM2MzQzMDNhMzYzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMjM0MzQzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAUWQAAGMA0G CSqGSIb3DQEBCwUAA4IBAQCXP67TY0e1X6pATKUzAKcCT5bKaY42U7qJsZ3CNLX6 Su2py2b1hX65kimDpRTqQVLW4yylU4Fmvi6dMI9G/leUsIkwoTyElMWbbOIP3qUO 7iZy0AWgM1DEwYaCI3ANcj2zFBS4Er50dSE2mfBFxPwsStNvj/j7l7EtTlNw7euU 4SbIG1IiZG0MXA1eR8/2TZdhYd20SG/AUicX2J9hP87W7AVpDCCayf13j6R1CahJ 5QWH7kZo4H7c68TA9tv4w/11/IJBmnr+KnTU+iLmrRtTWLQ7M+HB8qnwzPn/yj6m wBCQyhMBPr5Qzypc5/2X9G3xPie0lzC+fuZ+OJFvUStt -----END CERTIFICATE-----Generated at Mon Jan 26 05:38:12 2026 by rpki-client