This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a313030303a3a2f34382d3438203d3e20313339343137.roa File: 323430343a636163303a313030303a3a2f34382d3438203d3e20313339343137.roa (raw, json) Hash identifier: PstEcCmg8gG5vVbo9YMYrQiqRv+ddYd7Zf80KwU2EV4= Subject key identifier: 51:04:46:1F:2E:95:69:6B:CA:27:45:95:B8:6C:93:BC:73:C4:A1:69 Certificate issuer: /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Certificate serial: 4B9D6A119A875547BBEB7C84ABE03726E202EAAB Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a313030303a3a2f34382d3438203d3e20313339343137.roa Signing time: Mon 29 Dec 2025 16:00:01 +0000 ROA not before: Mon 29 Dec 2025 15:55:01 +0000 ROA not after: Mon 28 Dec 2026 16:00:01 +0000 asID: 139417 IP address blocks: 2404:cac0:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:9d:6a:11:9a:87:55:47:bb:eb:7c:84:ab:e0:37:26:e2:02:ea:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Validity Not Before: Dec 29 15:55:01 2025 GMT Not After : Dec 28 16:00:01 2026 GMT Subject: CN=5104461F2E95696BCA274595B86C93BC73C4A169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:73:8c:dd:01:20:89:19:f7:5e:91:2b:40: 2a:6d:a2:71:22:90:3c:aa:4c:fd:95:82:ab:64:81: c7:bc:5d:ba:18:d7:a7:3d:22:d0:bb:3a:83:8e:e6: 7d:d0:35:d9:b9:3d:ae:9b:6d:14:df:32:e8:5e:c8: d9:d7:54:30:75:57:06:45:fb:94:ef:10:b9:3e:98: 70:06:32:d9:7d:68:19:a8:44:55:d9:1f:8d:90:51: 88:9f:74:ea:f5:0c:f3:d9:c9:7c:10:71:0f:c3:a5: 61:b2:84:ef:e2:58:de:18:28:30:cf:3b:51:d4:50: 4c:36:2c:9b:f3:12:19:60:d0:9d:0c:e2:4b:76:a4: 93:2c:a2:76:a6:dd:28:49:d7:de:e3:0e:2e:52:74: a5:26:99:69:65:6c:84:b8:e7:3e:cc:16:d4:1d:90: ce:3a:6c:fb:8b:68:e2:21:fa:c2:89:b0:fc:64:b9: 18:ca:42:1b:ab:6f:ec:b0:b0:c3:6e:2f:29:81:36: 3b:ff:6a:44:a5:d9:b5:d2:c2:a6:20:ff:ca:57:a4: ea:d9:73:5b:9f:d0:2c:f3:9e:c8:0c:20:b7:de:f2: 89:64:5c:09:c2:ae:b1:42:c0:89:49:a9:6d:f4:a3: cf:fd:f8:66:f8:c9:90:51:5d:a4:51:2d:6d:e7:c2: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:04:46:1F:2E:95:69:6B:CA:27:45:95:B8:6C:93:BC:73:C4:A1:69 X509v3 Authority Key Identifier: keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a313030303a3a2f34382d3438203d3e20313339343137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:cac0:1000::/48 Signature Algorithm: sha256WithRSAEncryption a8:06:32:6e:df:6c:1c:9f:58:68:e5:55:89:8b:1c:d1:a7:96: b0:03:c8:e4:5b:42:c9:9a:2f:ed:6c:0e:3b:5c:d0:03:00:be: dc:86:4a:a9:e2:35:13:0a:d1:f5:09:1b:2e:fe:38:82:82:8c: 0c:89:ca:78:ea:97:ef:06:04:5b:b2:5f:4a:87:ae:76:23:ad: 8d:70:71:a5:1d:c1:4b:7e:d2:db:89:d4:3b:8b:57:6c:0a:72: 6f:59:6e:b3:b4:c5:f3:13:78:c5:b7:a4:2e:1b:36:c5:65:78: 19:f6:40:f3:02:ab:38:be:c1:6d:b7:fb:e0:8d:2b:67:66:91: 69:34:d5:37:4c:c3:c8:ce:ac:19:e7:5d:a7:01:5e:97:4c:c0: 37:9a:4c:38:a2:86:89:0d:b7:c7:22:e9:f4:0c:46:23:b2:fb: a0:de:ec:f1:95:33:a9:f6:f5:d0:60:70:b1:05:e9:6c:c6:90: d0:87:fe:9f:9b:19:33:46:f6:da:12:48:47:4b:b2:e6:78:ed: 77:9e:b9:55:a2:8b:24:6b:fb:1e:93:ce:e2:b6:fe:d5:9d:7e: 54:80:f0:16:d4:d6:ea:cd:90:f6:b4:81:d2:f8:c3:18:4b:35: 0b:f5:2f:ef:70:83:7a:74:09:d9:11:d2:55:08:14:38:a6:63: 69:97:9d:6a -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUS51qEZqHVUe763yEq+A3JuIC6qswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3 MkRBRURENjAeFw0yNTEyMjkxNTU1MDFaFw0yNjEyMjgxNjAwMDFaMDMxMTAvBgNV BAMTKDUxMDQ0NjFGMkU5NTY5NkJDQTI3NDU5NUI4NkM5M0JDNzNDNEExNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrHnOM3QEgiRn3XpErQCptonEi kDyqTP2Vgqtkgce8XboY16c9ItC7OoOO5n3QNdm5Pa6bbRTfMuheyNnXVDB1VwZF +5TvELk+mHAGMtl9aBmoRFXZH42QUYifdOr1DPPZyXwQcQ/DpWGyhO/iWN4YKDDP O1HUUEw2LJvzEhlg0J0M4kt2pJMsonam3ShJ197jDi5SdKUmmWllbIS45z7MFtQd kM46bPuLaOIh+sKJsPxkuRjKQhurb+ywsMNuLymBNjv/akSl2bXSwqYg/8pXpOrZ c1uf0CzznsgMILfe8olkXAnCrrFCwIlJqW30o8/9+Gb4yZBRXaRRLW3nwvbdAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUUQRGHy6VaWvKJ0WVuGyTvHPEoWkwHwYDVR0j BBgwFoAUj8SJnKPWEqRcHB3AKiH2M3La7dYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQxM2ZmNC0yMDJiLTQ5OTktYjQ1ZC03M2M5NzJmMTAxMTYvMC84RkM0ODk5Q0Ez RDYxMkE0NUMxQzFEQzAyQTIxRjYzMzcyREFFREQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3MkRB RURENi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NDEzZmY0LTIwMmItNDk5OS1i NDVkLTczYzk3MmYxMDExNi8wLzMyMzQzMDM0M2E2MzYxNjMzMDNhMzEzMDMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzNDMxMzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk BMrAEAAwDQYJKoZIhvcNAQELBQADggEBAKgGMm7fbByfWGjlVYmLHNGnlrADyORb QsmaL+1sDjtc0AMAvtyGSqniNRMK0fUJGy7+OIKCjAyJynjql+8GBFuyX0qHrnYj rY1wcaUdwUt+0tuJ1DuLV2wKcm9ZbrO0xfMTeMW3pC4bNsVleBn2QPMCqzi+wW23 ++CNK2dmkWk01TdMw8jOrBnnXacBXpdMwDeaTDiihokNt8ci6fQMRiOy+6De7PGV M6n29dBgcLEF6WzGkNCH/p+bGTNG9toSSEdLsuZ47XeeuVWiiyRr+x6TzuK2/tWd flSA8BbU1urNkPa0gdL4wxhLNQv1L+9wg3p0CdkR0lUIFDimY2mXnWo= -----END CERTIFICATE-----Generated at Mon Jan 26 11:11:43 2026 by rpki-client