This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030383a3a2f34382d3438203d3e203338353236.roa File: 323430353a333734303a383030383a3a2f34382d3438203d3e203338353236.roa (raw, json) Hash identifier: HqLRaQnQA9SmiHB2xhWkJU6xdK+tbRpAcncaG4hhffc= Subject key identifier: BD:96:E0:ED:E0:CE:A6:52:72:69:04:DE:BD:47:25:EB:44:9F:AC:AC Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 7D7EFEEA762A75A3E1EF69364AF4D6403A447159 Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030383a3a2f34382d3438203d3e203338353236.roa Signing time: Wed 31 Dec 2025 07:00:02 +0000 ROA not before: Wed 31 Dec 2025 06:55:02 +0000 ROA not after: Wed 30 Dec 2026 07:00:02 +0000 asID: 38526 IP address blocks: 2405:3740:8008::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7e:fe:ea:76:2a:75:a3:e1:ef:69:36:4a:f4:d6:40:3a:44:71:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Dec 31 06:55:02 2025 GMT Not After : Dec 30 07:00:02 2026 GMT Subject: CN=BD96E0EDE0CEA652726904DEBD4725EB449FACAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:02:05:1b:d3:f8:f0:d1:d5:fb:28:d9:b6:03: 6e:6d:c2:48:9f:e2:a4:d1:12:6e:c8:f4:0c:22:09: e4:22:cb:79:72:ed:8b:e4:48:92:ff:fa:92:99:7b: 57:56:f1:2f:bb:6d:2b:2c:5e:aa:71:dd:18:d8:28: 63:37:84:3c:97:df:03:dd:6b:02:76:e8:e7:09:6c: 87:a0:1e:cd:f6:7e:eb:d1:93:c4:d7:93:46:e0:a5: 71:6c:9f:52:a4:97:b1:2b:8b:4f:c8:26:96:fb:12: f6:67:07:03:f3:bc:28:42:1a:77:46:92:66:1c:a8: 56:7f:b6:d0:65:b7:1e:5b:ac:b7:1d:ce:de:1f:d7: 33:0a:fe:1c:9d:74:a8:60:82:b4:31:f7:1a:8f:ec: 90:8f:70:3b:1b:12:4d:8c:4a:b1:32:c4:c8:0e:a3: cd:dc:03:b9:09:1a:88:54:14:a4:fc:3b:d9:af:25: 22:42:ad:fd:79:cf:93:24:60:82:85:46:0a:f7:03: f4:4b:f0:57:eb:20:47:3b:9a:03:8c:62:ce:71:04: 7a:21:f6:b2:b4:57:14:fe:e2:37:6f:80:e1:3e:28: 48:f5:3c:7a:92:c0:b8:f2:ec:71:b4:b3:f0:a3:8a: a0:d3:0e:42:0a:e0:92:d0:08:92:7b:c3:aa:93:11: 85:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:96:E0:ED:E0:CE:A6:52:72:69:04:DE:BD:47:25:EB:44:9F:AC:AC X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a383030383a3a2f34382d3438203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740:8008::/48 Signature Algorithm: sha256WithRSAEncryption 97:6c:4f:06:5e:1a:14:09:24:3d:ab:b8:6f:19:1e:77:da:8b: 6a:3f:87:67:b5:68:5e:ea:03:c1:63:06:ee:7b:b4:00:55:42: dd:f2:91:ad:27:4e:5e:89:65:81:29:a6:79:1e:fa:fb:fe:6a: 09:a3:9b:5d:cf:a1:6a:b9:22:8b:b6:fa:97:6a:39:31:43:f1: 2d:a9:5c:12:b8:2c:ec:ed:06:84:c0:2b:b1:7d:9c:99:8f:7c: aa:b6:8a:f0:45:3a:63:c3:30:19:30:9b:b4:2f:1d:18:c9:5e: 32:27:5d:27:af:6c:8b:b9:c3:8a:cc:6f:ca:bb:ce:19:13:08: 1e:fb:d5:5b:79:62:67:ca:37:46:2a:57:85:39:8d:f4:5a:35: af:e9:2a:54:ce:2c:25:19:eb:64:ff:2b:9c:20:85:07:6e:6c: 40:57:ae:6b:6b:fb:cf:3e:89:9e:d4:d7:5c:80:58:a1:ff:25: fa:30:fc:62:22:b9:82:fd:99:52:57:3c:4a:f7:9b:0b:4e:52: 50:12:ed:95:7c:c9:b3:c6:92:fe:9f:b8:33:a2:35:f8:c4:fd: a2:52:38:0e:f1:fc:61:05:d9:f9:18:3c:d3:2b:b4:18:ca:fd: b1:ea:9f:bb:32:7f:10:8b:46:1a:27:a9:99:d4:07:92:d8:47: c6:16:56:4b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUfX7+6nYqdaPh72k2SvTWQDpEcVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNTEyMzEwNjU1MDJaFw0yNjEyMzAwNzAwMDJaMDMxMTAvBgNV BAMTKEJEOTZFMEVERTBDRUE2NTI3MjY5MDRERUJENDcyNUVCNDQ5RkFDQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEAgUb0/jw0dX7KNm2A25twkif 4qTREm7I9AwiCeQiy3ly7YvkSJL/+pKZe1dW8S+7bSssXqpx3RjYKGM3hDyX3wPd awJ26OcJbIegHs32fuvRk8TXk0bgpXFsn1Kkl7Eri0/IJpb7EvZnBwPzvChCGndG kmYcqFZ/ttBltx5brLcdzt4f1zMK/hyddKhggrQx9xqP7JCPcDsbEk2MSrEyxMgO o83cA7kJGohUFKT8O9mvJSJCrf15z5MkYIKFRgr3A/RL8FfrIEc7mgOMYs5xBHoh 9rK0VxT+4jdvgOE+KEj1PHqSwLjy7HG0s/CjiqDTDkIK4JLQCJJ7w6qTEYVnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUvZbg7eDOplJyaQTevUcl60SfrKwwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhMzgzMDMwMzgz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAU3 QIAIMA0GCSqGSIb3DQEBCwUAA4IBAQCXbE8GXhoUCSQ9q7hvGR532otqP4dntWhe 6gPBYwbue7QAVULd8pGtJ05eiWWBKaZ5Hvr7/moJo5tdz6FquSKLtvqXajkxQ/Et qVwSuCzs7QaEwCuxfZyZj3yqtorwRTpjwzAZMJu0Lx0YyV4yJ10nr2yLucOKzG/K u84ZEwge+9VbeWJnyjdGKleFOY30WjWv6SpUziwlGetk/yucIIUHbmxAV65ra/vP Pome1NdcgFih/yX6MPxiIrmC/ZlSVzxK95sLTlJQEu2VfMmzxpL+n7gzojX4xP2i UjgO8fxhBdn5GDzTK7QYyv2x6p+7Mn8Qi0YaJ6mZ1AeS2EfGFlZL -----END CERTIFICATE-----Generated at Sun Jan 25 20:23:02 2026 by rpki-client