This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa File: 323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa (raw, json) Hash identifier: sEbVZCo79qkcyFnX0CGlwAFQduoS7RlSufx7hnC+UJA= Subject key identifier: F0:D9:D3:8B:92:B7:57:67:B4:B6:33:81:F5:C0:93:E1:4F:36:12:7E Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Certificate serial: 1F40AAA6C5216FA86955AE2B0BE7249FFD7F4DFF Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa Signing time: Fri 02 Jan 2026 12:00:02 +0000 ROA not before: Fri 02 Jan 2026 11:55:02 +0000 ROA not after: Fri 01 Jan 2027 12:00:02 +0000 asID: 9875 IP address blocks: 2001:f20:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 12:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:40:aa:a6:c5:21:6f:a8:69:55:ae:2b:0b:e7:24:9f:fd:7f:4d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Validity Not Before: Jan 2 11:55:02 2026 GMT Not After : Jan 1 12:00:02 2027 GMT Subject: CN=F0D9D38B92B75767B4B63381F5C093E14F36127E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:3c:9f:6b:88:0d:bb:11:a9:af:7c:b5:56: 1f:a6:d4:e3:fa:a9:cd:4a:08:8d:af:23:36:5c:d4: 3e:84:92:26:01:f8:96:aa:04:48:f0:3f:81:22:f7: 5b:33:bc:97:a9:6e:f1:ee:00:e5:70:22:4e:a2:44: 92:02:a1:47:c1:63:95:52:8f:6b:58:b9:84:38:1f: b2:56:c2:b0:bd:81:15:d6:aa:52:bb:d5:23:7c:4e: 9c:0d:ea:ec:73:28:cd:35:46:50:ee:e7:ed:bf:7f: b0:98:b4:c4:3e:86:be:8e:41:e4:6c:4e:9b:72:cf: 90:48:23:fc:57:e7:09:cf:62:9c:cc:0d:82:fe:13: a3:72:c2:7a:a5:e4:03:07:e8:5e:05:12:b4:fe:df: 1c:70:25:a2:ed:f9:fb:e2:8d:19:9e:69:7d:16:02: 9f:66:83:3a:c9:6f:b6:4d:bc:76:7e:4d:92:bf:c6: a5:f2:ca:f3:5d:cf:1d:65:7d:37:0a:60:c9:bd:4c: 7a:f5:4d:b5:99:e0:ad:2e:4e:6f:ba:aa:c4:57:a2: 43:40:a4:90:42:f1:31:49:b0:22:92:35:f4:8f:1e: 95:f5:2e:ed:ca:33:fe:01:cb:6b:ff:c9:93:d9:48: f8:eb:24:a0:4d:7c:fc:da:fa:67:43:e2:17:eb:95: ed:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D9:D3:8B:92:B7:57:67:B4:B6:33:81:F5:C0:93:E1:4F:36:12:7E X509v3 Authority Key Identifier: keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a343030303a3a2f33362d3438203d3e2039383735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:f20:4000::/36 Signature Algorithm: sha256WithRSAEncryption 3a:b3:69:5d:a5:da:e6:24:04:55:f2:5f:17:f1:38:ae:9c:4c: 92:1a:0a:e7:f5:af:d8:ca:26:6f:f6:ce:88:58:64:d2:ea:6c: 62:28:8e:cb:78:e3:aa:6a:7b:25:69:76:7e:5a:1a:9a:45:43: 70:58:96:ba:3b:7d:a4:f4:c8:68:9d:01:65:82:0c:10:5e:62: ec:5b:4d:3c:ad:e0:15:b3:c1:66:0b:b9:4c:88:50:ac:37:a9: 97:45:dd:0a:a4:45:34:bf:1d:2a:94:e2:da:65:3d:34:28:19: 4b:ca:a0:6d:36:a6:97:a7:fa:49:f1:9b:c2:e0:b6:2d:e7:2e: e5:03:b6:94:07:9d:1a:38:99:cc:bd:15:44:25:84:41:79:e5: da:96:14:3a:8a:a4:cc:2a:fd:b5:6b:81:25:50:55:ba:2f:26: 01:80:3c:01:2e:ce:13:79:fc:e5:dc:74:91:89:e3:98:8d:53: 23:0a:1a:00:3b:88:1e:fd:b9:6e:ff:4c:f3:22:85:f9:a5:79: 94:d8:34:b7:8c:ec:ac:69:46:1b:3b:63:04:c1:6c:c6:b1:fd: a1:78:f1:91:2f:6d:4d:cf:6d:89:67:af:ca:59:e1:74:d8:d2: f0:f5:44:35:bd:bd:86:b2:13:cf:2e:60:22:4e:0f:d8:98:9f: 9e:44:30:9c -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgIUH0CqpsUhb6hpVa4rC+ckn/1/Tf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZG MjhGODA2NjAeFw0yNjAxMDIxMTU1MDJaFw0yNzAxMDExMjAwMDJaMDMxMTAvBgNV BAMTKEYwRDlEMzhCOTJCNzU3NjdCNEI2MzM4MUY1QzA5M0UxNEYzNjEyN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCEzyfa4gNuxGpr3y1Vh+m1OP6 qc1KCI2vIzZc1D6EkiYB+JaqBEjwP4Ei91szvJepbvHuAOVwIk6iRJICoUfBY5VS j2tYuYQ4H7JWwrC9gRXWqlK71SN8TpwN6uxzKM01RlDu5+2/f7CYtMQ+hr6OQeRs Tptyz5BII/xX5wnPYpzMDYL+E6Nywnql5AMH6F4FErT+3xxwJaLt+fvijRmeaX0W Ap9mgzrJb7ZNvHZ+TZK/xqXyyvNdzx1lfTcKYMm9THr1TbWZ4K0uTm+6qsRXokNA pJBC8TFJsCKSNfSPHpX1Lu3KM/4By2v/yZPZSPjrJKBNfPza+mdD4hfrle2xAgMB AAGjggI4MIICNDAdBgNVHQ4EFgQU8NnTi5K3V2e0tjOB9cCT4U82En4wHwYDVR0j BBgwFoAU8zEnsiUkVLSRxdyf45N8VvKPgGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMC9GMzMxMjdCMjI1 MjQ1NEI0OTFDNURDOUZFMzkzN0M1NkYyOEY4MDY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZGMjhG ODA2Ni5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2LTAwYTMtNDc3Ni1i ZjNmLTUyMTE5NDYxMDFjMy8wLzMyMzAzMDMxM2E2NjMyMzAzYTM0MzAzMDMwM2Ez YTJmMzMzNjJkMzQzODIwM2QzZTIwMzkzODM3MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQgAQ8gQDAN BgkqhkiG9w0BAQsFAAOCAQEAOrNpXaXa5iQEVfJfF/E4rpxMkhoK5/Wv2Momb/bO iFhk0upsYiiOy3jjqmp7JWl2floamkVDcFiWujt9pPTIaJ0BZYIMEF5i7FtNPK3g FbPBZgu5TIhQrDepl0XdCqRFNL8dKpTi2mU9NCgZS8qgbTaml6f6SfGbwuC2Lecu 5QO2lAedGjiZzL0VRCWEQXnl2pYUOoqkzCr9tWuBJVBVui8mAYA8AS7OE3n85dx0 kYnjmI1TIwoaADuIHv25bv9M8yKF+aV5lNg0t4zsrGlGGztjBMFsxrH9oXjxkS9t Tc9tiWevylnhdNjS8PVENb29hrITzy5gIk4P2JifnkQwnA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:39:54 2026 by rpki-client