This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa File: 323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa (raw, json) Hash identifier: qQqB2dTLr4xmCPqrovkLKFh60qxbylHoj3Xk9uQwJdI= Subject key identifier: FE:89:1E:B0:A3:D7:A7:F6:5B:09:52:0A:8E:1C:F5:9E:0C:92:5C:FA Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Certificate serial: 4234B985211AA3F8E503B30E64D53CFA86BAE10F Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa Signing time: Tue 30 Dec 2025 16:10:02 +0000 ROA not before: Tue 30 Dec 2025 16:05:02 +0000 ROA not after: Tue 29 Dec 2026 16:10:02 +0000 asID: 139980 IP address blocks: 2001:df2:c680::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 07:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:34:b9:85:21:1a:a3:f8:e5:03:b3:0e:64:d5:3c:fa:86:ba:e1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Validity Not Before: Dec 30 16:05:02 2025 GMT Not After : Dec 29 16:10:02 2026 GMT Subject: CN=FE891EB0A3D7A7F65B09520A8E1CF59E0C925CFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9c:54:a6:0c:8b:77:2f:45:9a:65:51:ae:99: 7e:d0:a6:2f:0d:af:c4:48:a8:cb:5a:03:0f:e9:e6: e1:5c:be:51:91:4a:23:64:55:43:2b:4e:5a:87:49: a1:3a:12:2e:47:15:c1:cb:2d:3c:f2:fa:f5:97:5e: a9:b6:57:6e:e7:30:28:28:08:74:70:27:82:b0:d9: b9:e8:14:7e:56:07:82:ce:aa:17:a2:a4:17:99:99: 9b:46:af:ea:46:43:34:8f:1c:f8:0c:e9:de:59:84: 96:d1:4f:02:b7:1b:8a:4a:ad:a4:d8:86:b0:f8:75: 6b:16:6f:ae:84:c3:b4:16:57:68:18:f1:27:b9:08: c6:0e:30:bc:b4:ae:59:ce:f7:f7:21:6b:c7:7d:85: 59:dd:22:36:0e:7d:eb:b1:a1:15:0c:a2:e5:83:50: ba:58:d7:b3:19:05:77:b4:00:14:04:69:eb:c1:a3: c7:4c:f3:ad:22:dc:41:16:4e:16:44:0b:43:4e:01: 3a:f3:ad:46:2a:d0:ef:1a:8c:40:cd:41:00:22:d6: 79:c5:47:79:91:99:b8:73:77:e5:06:7d:9d:73:c6: c9:5d:9d:c6:9d:fd:26:db:7a:44:94:32:10:51:6f: d2:ce:0b:f0:57:a4:b8:37:42:73:90:f1:5e:2a:87: 63:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:89:1E:B0:A3:D7:A7:F6:5B:09:52:0A:8E:1C:F5:9E:0C:92:5C:FA X509v3 Authority Key Identifier: keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:c680::/48 Signature Algorithm: sha256WithRSAEncryption 03:5e:f3:f1:14:fa:c7:11:74:4e:0f:92:ae:c8:6d:27:3a:53: f7:25:37:a3:bf:80:63:1a:28:52:78:b0:a9:48:a1:68:3e:86: fa:d3:0c:b7:61:0a:d5:a8:36:0e:66:94:71:c3:26:8f:c9:a3: fa:ea:65:5b:0b:47:b2:c6:57:1a:14:f2:2f:f0:bc:4f:55:78: ab:2c:7b:f1:d1:2e:fa:9c:88:21:0a:5a:80:2a:fc:0c:15:d4: 20:09:bb:68:a8:fd:b7:b8:1f:53:4a:28:3d:39:7e:71:eb:bb: 55:2f:4a:05:80:b2:dc:ee:d7:20:7a:10:1e:f9:5d:2d:f9:bc: 05:61:11:62:f5:af:50:45:3e:56:6b:6e:cf:db:12:20:fe:47: e5:ea:9f:a4:a3:91:e4:fe:83:f0:8d:4e:f3:01:07:3d:6b:08: e6:56:52:eb:d2:fa:92:ab:c6:6d:83:98:af:79:7f:eb:97:5c: 08:66:76:95:18:93:e3:8f:2c:c4:20:51:ad:02:74:7a:bd:72: a0:6e:b1:0e:30:35:6d:5b:27:74:3d:d8:52:c8:ba:f9:e1:a0: d8:69:5a:52:36:35:d0:4d:06:1a:e7:3b:48:85:47:92:9a:70: 4a:19:e0:c8:80:22:45:c4:db:4c:85:bb:76:07:08:00:cf:e1: 7f:46:a6:2d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQjS5hSEao/jlA7MOZNU8+oa64Q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG NUU0OUUxQTAeFw0yNTEyMzAxNjA1MDJaFw0yNjEyMjkxNjEwMDJaMDMxMTAvBgNV BAMTKEZFODkxRUIwQTNEN0E3RjY1QjA5NTIwQThFMUNGNTlFMEM5MjVDRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBnFSmDIt3L0WaZVGumX7Qpi8N r8RIqMtaAw/p5uFcvlGRSiNkVUMrTlqHSaE6Ei5HFcHLLTzy+vWXXqm2V27nMCgo CHRwJ4Kw2bnoFH5WB4LOqheipBeZmZtGr+pGQzSPHPgM6d5ZhJbRTwK3G4pKraTY hrD4dWsWb66Ew7QWV2gY8Se5CMYOMLy0rlnO9/cha8d9hVndIjYOfeuxoRUMouWD ULpY17MZBXe0ABQEaevBo8dM860i3EEWThZEC0NOATrzrUYq0O8ajEDNQQAi1nnF R3mRmbhzd+UGfZ1zxsldncad/SbbekSUMhBRb9LOC/BXpLg3QnOQ8V4qh2OBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU/okesKPXp/ZbCVIKjhz1ngySXPowHwYDVR0j BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5 MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0 OUUxQS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhZTRjZDk2LWNmYzEtNDU3Ny1h ZDNmLTc5ODNjMDUyM2MxMC8wLzMyMzAzMDMxM2E2NDY2MzIzYTYzMzYzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM5MzkzODMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8saAMA0GCSqGSIb3DQEBCwUAA4IBAQADXvPxFPrHEXROD5KuyG0nOlP3JTejv4Bj GihSeLCpSKFoPob60wy3YQrVqDYOZpRxwyaPyaP66mVbC0eyxlcaFPIv8LxPVXir LHvx0S76nIghClqAKvwMFdQgCbtoqP23uB9TSig9OX5x67tVL0oFgLLc7tcgehAe +V0t+bwFYRFi9a9QRT5Wa27P2xIg/kfl6p+ko5Hk/oPwjU7zAQc9awjmVlLr0vqS q8Ztg5iveX/rl1wIZnaVGJPjjyzEIFGtAnR6vXKgbrEOMDVtWyd0PdhSyLr54aDY aVpSNjXQTQYa5ztIhUeSmnBKGeDIgCJFxNtMhbt2BwgAz+F/RqYt -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:19 2026 by rpki-client