This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3332203d3e203338353236.roa File: 323430353a333734303a3a2f33322d3332203d3e203338353236.roa (raw, json) Hash identifier: Naprlx3AME6UQ7PsoNfJU06jL8GxVcKJ2d6NZxhMNgw= Subject key identifier: D4:83:8E:E8:C3:3E:0E:7C:DD:4E:3D:F6:43:2A:A0:23:16:4A:9E:39 Certificate issuer: /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Certificate serial: 7289096178A551EA227C08811B6CD2B1F4F8730B Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3332203d3e203338353236.roa Signing time: Wed 31 Dec 2025 07:00:02 +0000 ROA not before: Wed 31 Dec 2025 06:55:02 +0000 ROA not after: Wed 30 Dec 2026 07:00:02 +0000 asID: 38526 IP address blocks: 2405:3740::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:89:09:61:78:a5:51:ea:22:7c:08:81:1b:6c:d2:b1:f4:f8:73:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D Validity Not Before: Dec 31 06:55:02 2025 GMT Not After : Dec 30 07:00:02 2026 GMT Subject: CN=D4838EE8C33E0E7CDD4E3DF6432AA023164A9E39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:6c:51:72:d4:ea:48:3f:5e:f3:6d:f7:58: 87:f0:5a:68:a1:a8:8b:7e:32:96:9b:a6:23:01:02: 66:42:f4:38:42:51:2d:35:7d:cd:83:80:83:d8:92: 49:41:c5:32:c7:d5:57:71:49:cc:f4:ba:62:93:8c: d2:87:2e:3d:91:fa:b8:9c:d8:a4:c9:ae:e5:c6:ba: 1e:d3:ca:5f:91:48:34:4f:70:53:bb:79:6b:2d:85: 70:2a:40:90:78:8b:fc:08:b5:50:fb:a7:09:c8:b9: 62:21:73:ed:c0:93:95:32:f9:f7:85:45:1d:60:23: 28:e2:6f:31:c8:cb:68:f2:29:34:c6:1b:f3:19:de: f4:ff:46:59:87:59:2e:8e:ff:0d:f7:ae:6f:14:a1: 60:89:5f:28:f0:a2:1e:f7:54:0f:f4:c3:96:82:3d: b2:5a:f3:20:bd:01:96:0c:c5:00:d3:44:01:eb:56: 49:6f:86:1c:60:9a:ee:9a:d8:2c:19:44:a5:a7:24: de:ef:1a:1c:9d:b9:ba:28:f7:f6:7b:75:7e:5f:30: e6:b6:b7:25:f9:e3:1a:8f:9f:3c:0a:84:df:33:46: 7f:a2:10:c5:9c:5d:ab:7c:ca:a9:48:a2:a1:44:a8: e7:a9:05:19:66:8a:26:5d:28:15:5d:16:bf:98:fa: 59:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:83:8E:E8:C3:3E:0E:7C:DD:4E:3D:F6:43:2A:A0:23:16:4A:9E:39 X509v3 Authority Key Identifier: keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/323430353a333734303a3a2f33322d3332203d3e203338353236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:3740::/32 Signature Algorithm: sha256WithRSAEncryption b2:51:9d:a7:7c:14:f2:b5:1d:32:a7:bf:e1:16:2d:72:92:ad: 3a:cf:6e:88:01:48:69:9c:45:4a:0f:dd:97:af:76:ba:58:1b: c1:e7:8e:0a:5c:6c:83:40:23:dd:c6:57:f1:af:14:f1:12:36: 20:64:4f:20:d1:2b:2c:65:de:29:b4:18:fa:45:eb:4e:3a:35: b3:84:38:e5:49:0c:68:48:6e:de:c1:d7:87:f9:84:10:6c:0b: 4f:09:b4:e2:18:d6:7f:e6:ec:cc:66:6f:5e:dd:0c:05:ac:71: 2d:84:de:f7:36:95:19:0b:b2:fb:3c:97:40:f4:19:b6:87:9d: cc:98:11:17:98:ef:c7:43:3e:1f:a0:dd:a6:29:0a:8d:2a:90: 13:29:50:91:23:4e:50:d4:47:44:51:2f:ea:cf:07:d5:98:0e: 2a:47:2c:cd:8c:a0:7e:5a:5e:81:c5:eb:aa:6e:bb:a6:2c:77: cf:01:c8:7c:b2:6f:d0:b8:1b:90:29:b8:22:a6:9d:cb:b6:43: 10:bc:d9:a5:97:e3:26:23:88:19:13:f7:6b:42:ec:a6:37:47: 1d:b5:4d:32:f2:c2:49:8a:39:f2:ac:c3:59:a6:1e:cc:24:60: e3:19:02:6a:a1:7d:55:df:90:c2:ee:53:e2:93:b1:9c:a8:9b: ad:bd:59:46 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUcokJYXilUeoifAiBG2zSsfT4cwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx MzIyNTIwRDAeFw0yNTEyMzEwNjU1MDJaFw0yNjEyMzAwNzAwMDJaMDMxMTAvBgNV BAMTKEQ0ODM4RUU4QzMzRTBFN0NERDRFM0RGNjQzMkFBMDIzMTY0QTlFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJD2xRctTqSD9e8233WIfwWmih qIt+MpabpiMBAmZC9DhCUS01fc2DgIPYkklBxTLH1VdxScz0umKTjNKHLj2R+ric 2KTJruXGuh7Tyl+RSDRPcFO7eWsthXAqQJB4i/wItVD7pwnIuWIhc+3Ak5Uy+feF RR1gIyjibzHIy2jyKTTGG/MZ3vT/RlmHWS6O/w33rm8UoWCJXyjwoh73VA/0w5aC PbJa8yC9AZYMxQDTRAHrVklvhhxgmu6a2CwZRKWnJN7vGhyduboo9/Z7dX5fMOa2 tyX54xqPnzwKhN8zRn+iEMWcXat8yqlIoqFEqOepBRlmiiZdKBVdFr+Y+lmjAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU1IOO6MM+DnzdTj32QyqgIxZKnjkwHwYDVR0j BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy NTIwRC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04 MDM0LTQ2NTI3MzNiOGRkMi8wLzMyMzQzMDM1M2EzMzM3MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMzMzgzNTMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBTdAMA0GCSqGSIb3 DQEBCwUAA4IBAQCyUZ2nfBTytR0yp7/hFi1ykq06z26IAUhpnEVKD92Xr3a6WBvB 544KXGyDQCPdxlfxrxTxEjYgZE8g0SssZd4ptBj6RetOOjWzhDjlSQxoSG7ewdeH +YQQbAtPCbTiGNZ/5uzMZm9e3QwFrHEthN73NpUZC7L7PJdA9Bm2h53MmBEXmO/H Qz4foN2mKQqNKpATKVCRI05Q1EdEUS/qzwfVmA4qRyzNjKB+Wl6BxeuqbrumLHfP Ach8sm/QuBuQKbgipp3LtkMQvNmll+MmI4gZE/drQuymN0cdtU0y8sJJijnyrMNZ ph7MJGDjGQJqoX1V35DC7lPik7GcqJutvVlG -----END CERTIFICATE-----Generated at Sun Jan 25 20:23:12 2026 by rpki-client