This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa File: 323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa (raw, json) Hash identifier: s06nZ8vR0a4OcKfgZ9Rjay7aeq0mrdev7aQnhemDQBQ= Subject key identifier: 0C:B2:4B:C1:71:32:F0:5B:E7:8F:EE:99:7E:F4:B3:09:9A:D3:BA:83 Certificate issuer: /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Certificate serial: 351E8A68DD824C11521BF6410FA17A48FC2C3516 Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa Signing time: Mon 29 Dec 2025 17:00:01 +0000 ROA not before: Mon 29 Dec 2025 16:55:01 +0000 ROA not after: Mon 28 Dec 2026 17:00:01 +0000 asID: 139417 IP address blocks: 2404:cac0:db5::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1e:8a:68:dd:82:4c:11:52:1b:f6:41:0f:a1:7a:48:fc:2c:35:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6 Validity Not Before: Dec 29 16:55:01 2025 GMT Not After : Dec 28 17:00:01 2026 GMT Subject: CN=0CB24BC17132F05BE78FEE997EF4B3099AD3BA83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4d:d1:bd:2b:2c:c0:a9:55:c7:13:7a:42:60: 5b:b6:0b:ad:8a:9d:3a:d5:cb:be:00:81:b9:46:b7: 70:91:36:ce:8e:fa:21:95:6e:fc:4e:d5:14:2d:91: 95:ed:45:81:48:2c:72:2c:24:37:60:7b:50:a0:77: 36:7c:b8:8e:b6:4c:2d:c0:35:97:47:65:db:ab:4e: 80:44:c3:9b:4f:9e:96:f9:70:c3:ba:46:aa:43:a2: 98:b9:bd:04:bb:25:53:20:d7:b3:2b:29:60:54:7a: d4:36:29:df:a7:7e:25:fa:0e:fd:90:03:c7:3d:95: 95:b4:ae:4b:22:ff:9c:c2:9e:87:18:a7:f8:df:ee: 53:93:5c:33:a1:b1:f7:c4:f3:4b:83:56:a9:35:8d: 50:57:a4:c4:7d:b2:f4:fa:bc:1b:7b:cd:d6:24:02: ae:a7:86:d9:38:1d:2b:66:2e:dd:37:1c:f9:ca:e1: e1:42:c2:cb:cd:77:57:2c:61:ce:60:66:ca:1d:cf: eb:18:c1:9b:35:4b:b4:43:4e:0a:3b:c7:50:fb:46: a6:24:e7:c7:d4:f7:18:d7:a7:37:d3:16:f4:8a:bb: 1a:2b:18:04:bb:a0:a9:cd:d3:65:c4:e4:c5:c6:96: 16:e2:1e:c9:f7:5d:6a:6d:ef:32:4f:a1:b6:9b:3c: 32:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B2:4B:C1:71:32:F0:5B:E7:8F:EE:99:7E:F4:B3:09:9A:D3:BA:83 X509v3 Authority Key Identifier: keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a6462353a3a2f34382d3438203d3e20313339343137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:cac0:db5::/48 Signature Algorithm: sha256WithRSAEncryption 4f:14:f7:b1:e5:28:da:f5:ca:d7:3a:70:4f:18:0f:78:bf:e4: 5e:a4:16:48:82:3e:2c:fc:a7:f4:a3:96:09:a3:ed:84:dc:4d: 25:71:a8:f8:e4:be:4d:06:df:83:4a:f4:ab:86:35:8d:a4:70: 12:10:32:78:4e:39:15:d3:20:74:69:0b:6a:f3:4d:6f:ed:90: 50:21:08:3e:81:2c:18:41:13:76:2c:fe:63:ed:eb:9a:c3:7f: 37:3e:8b:ca:e1:56:a4:aa:87:c3:44:12:06:62:06:2a:dd:25: 11:3e:9a:ab:37:6b:5f:01:0d:48:bb:59:c7:ad:e4:5e:c1:dd: c5:a5:4f:3a:ca:2f:a8:08:6c:33:e8:92:65:ce:f3:87:74:0e: b3:4c:1c:9a:ea:79:ae:f6:22:5a:66:f7:54:ff:15:fa:a7:14: 5d:73:d4:0a:65:3c:f8:82:86:4b:1d:53:75:7e:7f:18:6f:a9: 61:10:90:1f:47:3b:b3:f9:f6:43:98:14:ce:38:63:c2:b2:ef: 11:06:a7:20:89:e3:93:1c:bd:a9:57:5e:dc:a9:96:bd:43:33: 80:91:7d:c7:34:0a:b3:c7:47:76:3b:8f:01:95:45:7f:61:08: 8c:a3:f7:e5:50:39:74:89:97:3a:0a:51:9c:47:c5:21:41:b4: e8:ff:11:be -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUNR6KaN2CTBFSG/ZBD6F6SPwsNRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3 MkRBRURENjAeFw0yNTEyMjkxNjU1MDFaFw0yNjEyMjgxNzAwMDFaMDMxMTAvBgNV BAMTKDBDQjI0QkMxNzEzMkYwNUJFNzhGRUU5OTdFRjRCMzA5OUFEM0JBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpTdG9KyzAqVXHE3pCYFu2C62K nTrVy74AgblGt3CRNs6O+iGVbvxO1RQtkZXtRYFILHIsJDdge1CgdzZ8uI62TC3A NZdHZdurToBEw5tPnpb5cMO6RqpDopi5vQS7JVMg17MrKWBUetQ2Kd+nfiX6Dv2Q A8c9lZW0rksi/5zCnocYp/jf7lOTXDOhsffE80uDVqk1jVBXpMR9svT6vBt7zdYk Aq6nhtk4HStmLt03HPnK4eFCwsvNd1csYc5gZsodz+sYwZs1S7RDTgo7x1D7RqYk 58fU9xjXpzfTFvSKuxorGAS7oKnN02XE5MXGlhbiHsn3XWpt7zJPobabPDJlAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUDLJLwXEy8Fvnj+6ZfvSzCZrTuoMwHwYDVR0j BBgwFoAUj8SJnKPWEqRcHB3AKiH2M3La7dYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQxM2ZmNC0yMDJiLTQ5OTktYjQ1ZC03M2M5NzJmMTAxMTYvMC84RkM0ODk5Q0Ez RDYxMkE0NUMxQzFEQzAyQTIxRjYzMzcyREFFREQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZDNDg5OUNBM0Q2MTJBNDVDMUMxREMwMkEyMUY2MzM3MkRB RURENi5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NDEzZmY0LTIwMmItNDk5OS1i NDVkLTczYzk3MmYxMDExNi8wLzMyMzQzMDM0M2E2MzYxNjMzMDNhNjQ2MjM1M2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzQzMTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATK wA21MA0GCSqGSIb3DQEBCwUAA4IBAQBPFPex5Sja9crXOnBPGA94v+RepBZIgj4s /Kf0o5YJo+2E3E0lcaj45L5NBt+DSvSrhjWNpHASEDJ4TjkV0yB0aQtq801v7ZBQ IQg+gSwYQRN2LP5j7euaw383PovK4VakqofDRBIGYgYq3SURPpqrN2tfAQ1Iu1nH reRewd3FpU86yi+oCGwz6JJlzvOHdA6zTBya6nmu9iJaZvdU/xX6pxRdc9QKZTz4 goZLHVN1fn8Yb6lhEJAfRzuz+fZDmBTOOGPCsu8RBqcgieOTHL2pV17cqZa9QzOA kX3HNAqzx0d2O48BlUV/YQiMo/flUDl0iZc6ClGcR8UhQbTo/xG+ -----END CERTIFICATE-----Generated at Mon Jan 26 11:11:46 2026 by rpki-client