This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030303a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a383030303a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: OaGnUhjeVoQFC5PXMkC9CTsJTBXpxCv4+tSvay7Jzfs= Subject key identifier: 31:39:2D:BE:50:71:11:8A:86:F6:E7:C0:55:EE:4F:35:CC:F1:04:4A Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 2C5703E4F207856D138A86E9504F5B483CFF492D Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030303a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 31 Dec 2025 05:02:39 +0000 ROA not before: Wed 31 Dec 2025 04:57:39 +0000 ROA not after: Wed 30 Dec 2026 05:02:39 +0000 asID: 38526 IP address blocks: 2405:3740:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:57:03:e4:f2:07:85:6d:13:8a:86:e9:50:4f:5b:48:3c:ff:49:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Dec 31 04:57:39 2025 GMT Not After : Dec 30 05:02:39 2026 GMT Subject: CN=31392DBE5071118A86F6E7C055EE4F35CCF1044A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:2a:06:ca:54:ef:24:bb:fc:fa:78:ac:0e: f0:28:be:ec:8c:d0:49:3c:ab:56:42:92:2f:db:8f: d8:4e:6d:29:66:6d:60:3d:40:5c:0e:12:19:33:80: ee:03:17:e5:ba:ca:98:9c:81:40:6a:e1:7e:5e:37: cc:dd:c4:57:63:23:e3:c4:0e:2f:83:cf:b4:71:ea: c5:aa:c4:93:f1:1c:0d:80:35:68:67:32:df:1e:0f: 33:53:df:08:89:75:2d:47:77:b0:e8:ff:cb:d8:22: 26:0e:3a:c0:78:03:bc:c4:68:b5:be:7c:20:98:e4: 68:22:af:61:30:fc:4d:0f:9a:cb:42:42:79:10:18: 68:91:46:87:1e:12:c4:d5:e2:a5:43:71:b1:4b:14: 22:78:89:0e:ae:6f:d5:b6:26:88:fe:bf:c9:92:2a: 6c:94:df:68:a8:1b:9f:60:a5:97:a9:4d:14:d8:03: 5e:d7:ab:ea:f1:7c:bc:ab:62:c9:2f:7c:cc:c9:ec: 7c:95:f3:af:b4:b0:50:02:11:e3:7a:24:9e:3f:fc: 2b:18:01:a4:e2:11:1b:88:d2:68:8e:9b:b5:46:b2: 54:8e:25:5f:f0:2e:f2:c8:97:8a:42:57:b0:5f:43: fe:30:27:06:12:c0:71:10:3f:53:2c:42:dd:4d:5d: 60:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:39:2D:BE:50:71:11:8A:86:F6:E7:C0:55:EE:4F:35:CC:F1:04:4A X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030303a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:8000::/48 Signature Algorithm: sha256WithRSAEncryption 28:24:f9:bc:4e:e9:56:1d:5c:56:bc:ce:3b:24:b7:7c:b5:fd: 10:ae:fa:67:11:45:0c:51:80:f0:21:a7:b7:d2:38:17:14:85: ea:73:66:33:71:95:3d:82:58:b1:c0:ba:ec:ac:23:4f:b3:98: f1:22:a7:1a:89:7e:c4:9b:cf:3e:32:e6:de:5f:eb:e4:72:af: b8:17:9a:83:85:49:12:ed:8f:dd:01:ad:36:0c:16:88:d8:23: 5b:0b:c8:3a:35:7e:04:0b:d7:d0:16:3d:d4:95:b3:28:97:0d: 45:37:c9:b8:e6:45:7f:8c:bb:19:c5:24:a5:dc:30:6f:46:d0: 6f:9e:a8:9a:43:72:19:05:88:77:85:71:fc:7b:fb:0f:f6:d8: a1:f0:d4:67:f2:07:84:aa:ff:a0:58:04:d9:15:59:4e:b0:4b: 7a:d1:b2:28:04:cb:dd:51:51:e4:17:e0:a2:0e:b0:8d:5c:60: ad:11:d4:0d:c3:ad:16:d4:c0:86:57:93:29:7a:42:db:42:7a: 58:11:b7:9b:fb:61:a3:b5:6a:d8:5e:62:49:6c:d7:4b:04:f0: 51:f1:1e:bb:22:55:b5:2c:27:d9:ff:b1:53:f7:24:b9:02:6a: 9f:89:13:ef:d0:e5:1d:79:07:ff:4e:a4:28:ac:af:71:46:f9: d0:81:80:09 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIULFcD5PIHhW0TiobpUE9bSDz/SS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNTEyMzEwNDU3MzlaFw0yNjEyMzAwNTAyMzlaMDMxMTAvBgNV BAMTKDMxMzkyREJFNTA3MTExOEE4NkY2RTdDMDU1RUU0RjM1Q0NGMTA0NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRyoGylTvJLv8+nisDvAovuyM 0Ek8q1ZCki/bj9hObSlmbWA9QFwOEhkzgO4DF+W6ypicgUBq4X5eN8zdxFdjI+PE Di+Dz7Rx6sWqxJPxHA2ANWhnMt8eDzNT3wiJdS1Hd7Do/8vYIiYOOsB4A7zEaLW+ fCCY5Ggir2Ew/E0PmstCQnkQGGiRRoceEsTV4qVDcbFLFCJ4iQ6ub9W2Joj+v8mS KmyU32ioG59gpZepTRTYA17Xq+rxfLyrYskvfMzJ7HyV86+0sFACEeN6JJ4//CsY AaTiERuI0miOm7VGslSOJV/wLvLIl4pCV7BfQ/4wJwYSwHEQP1MsQt1NXWDZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUMTktvlBxEYqG9ufAVe5PNczxBEowHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzgzMDMwMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QIAAMA0GCSqGSIb3DQEBCwUAA4IBAQAoJPm8TulWHVxWvM47JLd8tf0QrvpnEUUM UYDwIae30jgXFIXqc2YzcZU9glixwLrsrCNPs5jxIqcaiX7Em88+MubeX+vkcq+4 F5qDhUkS7Y/dAa02DBaI2CNbC8g6NX4EC9fQFj3UlbMolw1FN8m45kV/jLsZxSSl 3DBvRtBvnqiaQ3IZBYh3hXH8e/sP9tih8NRn8geEqv+gWATZFVlOsEt60bIoBMvd UVHkF+CiDrCNXGCtEdQNw60W1MCGV5MpekLbQnpYEbeb+2GjtWrYXmJJbNdLBPBR 8R67IlW1LCfZ/7FT9yS5AmqfiRPv0OUdeQf/TqQorK9xRvnQgYAJ -----END CERTIFICATE-----Generated at Sun Jan 25 20:22:59 2026 by rpki-client