This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a316135623a3a2f34382d3438203d3e20313339343137.roa
File: 323430343a636163303a316135623a3a2f34382d3438203d3e20313339343137.roa (raw, json)
Hash identifier: MlXNXecpYDMt2QQpUBakOr+EIFlAaxsX2zQH4wGOi/0=
Subject key identifier: 26:85:AD:EC:D7:9C:D7:D1:0F:CB:3A:B5:C7:63:0C:F1:1A:13:F3:A4
Certificate issuer: /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
Certificate serial: 5B948D17ACCF365C88A4592F5645DFBFC0CB0754
Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a316135623a3a2f34382d3438203d3e20313339343137.roa
Signing time: Mon 29 Dec 2025 16:00:01 +0000
ROA not before: Mon 29 Dec 2025 15:55:01 +0000
ROA not after: Mon 28 Dec 2026 16:00:01 +0000
asID: 139417
IP address blocks: 2404:cac0:1a5b::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl
rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 17:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:94:8d:17:ac:cf:36:5c:88:a4:59:2f:56:45:df:bf:c0:cb:07:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
Validity
Not Before: Dec 29 15:55:01 2025 GMT
Not After : Dec 28 16:00:01 2026 GMT
Subject: CN=2685ADECD79CD7D10FCB3AB5C7630CF11A13F3A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:b8:ec:a6:e5:04:c2:9f:cc:70:92:bb:ac:
a3:61:17:b0:f5:1b:37:6b:e0:65:43:21:68:ef:5b:
3f:ff:bf:2f:75:f4:f1:aa:35:1c:56:d3:d9:4f:53:
32:2f:18:4f:d2:32:c1:de:43:f5:83:01:6a:18:60:
d9:e9:c5:81:c1:16:1f:6f:64:9f:31:0d:0c:11:41:
b9:a3:da:ed:43:eb:05:3c:a7:0f:3c:df:78:f7:b8:
c8:26:b0:77:94:4c:c4:c8:38:cc:6f:64:db:ab:76:
93:3b:c1:54:55:3b:48:23:96:6b:25:47:b6:f4:f1:
6b:ed:11:e6:17:76:4b:6e:88:56:9a:77:1e:ae:81:
97:c9:f7:75:99:e3:48:1f:bc:b3:c5:a9:4f:fa:76:
9d:3c:5b:eb:7a:a3:9e:56:8b:cb:91:be:bf:a7:de:
62:64:86:5a:18:c3:f3:07:fc:2a:a3:58:78:45:3f:
49:d1:1e:b7:fe:20:fc:06:c4:3f:d9:02:14:32:e9:
77:9d:5b:2f:b4:b6:2c:c8:83:b5:30:50:6d:8f:20:
07:ed:0d:32:f3:5f:b4:1a:81:21:fe:a4:95:dc:35:
d8:19:a4:0c:18:87:58:00:cf:74:0c:ed:5a:11:87:
24:fa:05:01:fa:11:f2:b4:f0:a5:57:21:b2:12:e0:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:85:AD:EC:D7:9C:D7:D1:0F:CB:3A:B5:C7:63:0C:F1:1A:13:F3:A4
X509v3 Authority Key Identifier:
keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a316135623a3a2f34382d3438203d3e20313339343137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:cac0:1a5b::/48
Signature Algorithm: sha256WithRSAEncryption
a5:68:e8:e3:a3:01:f0:69:1a:4e:bf:bf:40:5d:4d:a6:8a:1c:
cd:c6:ac:83:e1:02:d6:3c:cb:93:0e:f2:08:c0:f6:15:77:47:
01:82:b9:ef:b2:ba:1c:bb:13:52:3b:11:71:73:86:55:83:d9:
c9:b2:c7:1c:9a:e8:18:82:d6:9b:85:a0:56:26:07:92:c7:46:
67:ae:20:a2:3a:23:03:63:3f:3d:e8:43:bc:0e:5f:db:b2:cf:
2d:6f:28:43:01:22:7f:51:f8:07:d0:c5:da:a1:7b:c9:ba:c1:
69:2f:24:ac:a7:5f:89:02:99:8e:9f:74:00:5c:49:e4:8e:a0:
e5:5c:41:9c:05:cf:7c:77:3e:f8:76:cf:0d:86:5e:60:3e:1b:
8d:16:5a:b2:d2:49:85:9b:fd:a8:1f:0f:f9:c1:18:ec:32:3a:
88:91:a4:28:27:f5:2c:11:d5:7b:5c:2b:fe:b8:81:09:ed:b6:
45:39:09:df:1b:ba:9b:fb:4b:b4:db:5b:fe:cf:ac:01:de:55:
2e:8b:b6:68:08:09:17:26:ee:c6:fa:87:4b:cb:8d:2c:ca:8c:
14:ee:72:ae:8b:ed:dd:50:af:57:f7:4b:ee:66:3c:f1:32:df:
36:f1:ce:17:0e:0b:8d:32:77:ac:ad:a4:74:87:e5:83:50:15:
a6:10:f8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:59:45 2026 by rpki-client