This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030313a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a383030313a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: sr/VyQx+NEh117i8VQRHRbxu/Bq0iWHeqbsGuMu5ibk= Subject key identifier: 49:D5:E5:2E:AD:58:CB:6C:79:CE:1F:36:9D:B7:09:F3:B0:E9:40:44 Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 2B14F70A8FA753770E99D40C511A84B0110BA818 Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030313a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 31 Dec 2025 07:00:02 +0000 ROA not before: Wed 31 Dec 2025 06:55:02 +0000 ROA not after: Wed 30 Dec 2026 07:00:02 +0000 asID: 38526 IP address blocks: 2405:3740:8001::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:14:f7:0a:8f:a7:53:77:0e:99:d4:0c:51:1a:84:b0:11:0b:a8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Dec 31 06:55:02 2025 GMT Not After : Dec 30 07:00:02 2026 GMT Subject: CN=49D5E52EAD58CB6C79CE1F369DB709F3B0E94044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:58:82:af:a7:5b:4e:78:7f:fa:77:59:29:16: ac:07:16:82:0c:a6:45:c2:76:69:d6:95:35:c3:8f: 72:cc:14:06:bb:c7:16:03:ca:ce:8d:24:85:da:71: 0d:5f:77:fa:7e:44:53:95:d5:02:06:60:e3:44:59: 90:8d:44:d3:4d:31:13:8c:23:35:f7:65:5b:e9:f1: 1b:2e:98:fa:01:e4:e2:71:40:cc:c8:1f:11:2e:d0: 21:a7:34:5a:e1:0f:7d:7f:f1:be:4b:97:52:d6:0d: 52:8e:84:c8:09:2c:42:76:08:a9:b2:52:eb:45:98: f1:14:81:55:5a:42:12:75:8a:46:7b:b0:cc:2d:a1: 29:36:78:fa:f4:ab:18:ba:21:0e:0f:3d:1d:ae:e5: a8:36:66:4f:5e:69:16:d5:86:bd:31:81:83:85:33: de:c8:e1:75:84:8f:3d:49:6e:61:03:b7:7f:12:69: 8b:4a:53:09:bd:b1:2a:a4:d1:0b:37:69:27:ee:03: 42:65:ce:22:23:72:cd:98:7d:67:1e:af:6d:9c:51: 0c:fa:8a:2f:ce:cc:91:22:45:8c:55:0e:d5:08:af: 85:0c:3f:83:9d:b7:33:75:1d:64:44:64:43:4a:7d: c8:2d:3b:06:39:c2:df:3a:a5:72:3f:80:33:9c:99: e8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D5:E5:2E:AD:58:CB:6C:79:CE:1F:36:9D:B7:09:F3:B0:E9:40:44 X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030313a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:8001::/48 Signature Algorithm: sha256WithRSAEncryption 5c:e4:7d:2a:18:2a:12:37:59:23:f6:b0:6a:49:a1:74:71:b4: 12:33:7d:ba:51:27:02:f3:43:b7:fb:00:de:32:5a:47:73:f0: 4d:47:c8:4d:17:a7:58:33:9d:50:ba:4e:bf:e5:59:a4:46:42: 5d:2d:63:df:41:b0:c8:33:0d:e7:eb:06:d8:bb:a4:4b:6b:ad: ca:dd:a7:ce:f3:30:22:32:3f:60:fd:4a:b7:ac:7e:a4:ae:88: ff:4d:87:67:4e:75:c4:7a:0b:50:15:ed:39:7c:9b:3d:6b:93: dc:c1:a1:59:cc:ed:d0:58:fa:8b:82:8a:cc:60:96:60:e6:02: be:63:25:7d:46:9a:52:6f:63:1a:d8:ef:94:63:b2:74:58:c8: 1d:10:01:33:29:12:ad:65:89:ab:73:af:74:e3:89:27:f8:7b: a2:a4:1e:fc:3a:b7:70:0c:5f:a1:fb:01:3c:3a:c0:2a:02:7a: 65:c4:b9:58:65:14:ca:b4:67:15:61:43:68:e7:de:dd:dd:fb: ec:80:1a:18:53:5e:cc:af:e6:0e:65:11:23:3e:da:99:5b:a8: d2:c6:70:b7:54:07:63:43:ef:e2:e2:8b:2a:34:da:93:cb:15: 69:09:53:2e:69:46:31:70:c2:a6:4a:c8:79:fa:6e:4f:89:7c: f0:4e:3f:6a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUKxT3Co+nU3cOmdQMURqEsBELqBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNTEyMzEwNjU1MDJaFw0yNjEyMzAwNzAwMDJaMDMxMTAvBgNV BAMTKDQ5RDVFNTJFQUQ1OENCNkM3OUNFMUYzNjlEQjcwOUYzQjBFOTQwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWIKvp1tOeH/6d1kpFqwHFoIM pkXCdmnWlTXDj3LMFAa7xxYDys6NJIXacQ1fd/p+RFOV1QIGYONEWZCNRNNNMROM IzX3ZVvp8RsumPoB5OJxQMzIHxEu0CGnNFrhD31/8b5Ll1LWDVKOhMgJLEJ2CKmy UutFmPEUgVVaQhJ1ikZ7sMwtoSk2ePr0qxi6IQ4PPR2u5ag2Zk9eaRbVhr0xgYOF M97I4XWEjz1JbmEDt38SaYtKUwm9sSqk0Qs3aSfuA0JlziIjcs2YfWcer22cUQz6 ii/OzJEiRYxVDtUIr4UMP4OdtzN1HWREZENKfcgtOwY5wt86pXI/gDOcmeinAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUSdXlLq1Yy2x5zh82nbcJ87DpQEQwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzgzMDMwMzEz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QIABMA0GCSqGSIb3DQEBCwUAA4IBAQBc5H0qGCoSN1kj9rBqSaF0cbQSM326UScC 80O3+wDeMlpHc/BNR8hNF6dYM51Quk6/5VmkRkJdLWPfQbDIMw3n6wbYu6RLa63K 3afO8zAiMj9g/Uq3rH6kroj/TYdnTnXEegtQFe05fJs9a5PcwaFZzO3QWPqLgorM YJZg5gK+YyV9RppSb2Ma2O+UY7J0WMgdEAEzKRKtZYmrc69044kn+HuipB78Ordw DF+h+wE8OsAqAnplxLlYZRTKtGcVYUNo597d3fvsgBoYU17Mr+YOZREjPtqZW6jS xnC3VAdjQ+/i4osqNNqTyxVpCVMuaUYxcMKmSsh5+m5PiXzwTj9q -----END CERTIFICATE-----Generated at Sun Jan 25 20:22:54 2026 by rpki-client