This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/323430343a663630303a3a2f33322d3438203d3e203234323037.roa File: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (raw, json) Hash identifier: E0CjFn5U/9BTQeO2HTeXnXZQvzamSjcjllnOK42R05A= Subject key identifier: E0:E5:81:CF:A7:EB:DA:9E:16:32:0D:5A:6E:CF:0C:75:FF:65:BB:08 Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Certificate serial: 4D1E471B24D4F4C66718BFC79B211053151191C9 Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/323430343a663630303a3a2f33322d3438203d3e203234323037.roa Signing time: Wed 14 Jan 2026 05:04:04 +0000 ROA not before: Wed 14 Jan 2026 04:59:04 +0000 ROA not after: Wed 13 Jan 2027 05:04:04 +0000 asID: 24207 IP address blocks: 2404:f600::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:1e:47:1b:24:d4:f4:c6:67:18:bf:c7:9b:21:10:53:15:11:91:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Validity Not Before: Jan 14 04:59:04 2026 GMT Not After : Jan 13 05:04:04 2027 GMT Subject: CN=E0E581CFA7EBDA9E16320D5A6ECF0C75FF65BB08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:29:a1:0f:0d:b5:ce:8f:aa:f5:e1:5f:94:9c: c5:03:b0:68:87:7e:8e:6f:b8:2f:23:2d:e1:00:96: 57:c2:c4:cc:7d:37:2f:e3:41:18:d2:24:48:0b:38: 30:57:24:be:d2:a4:2b:d0:be:e4:17:f3:dd:e0:e4: ef:a2:dd:95:69:3b:7c:86:1f:ae:85:cb:80:d0:4d: c1:26:5f:48:41:58:b6:e2:91:3e:d5:74:13:dd:02: 20:40:85:fd:37:c4:ff:1f:49:5a:5a:11:07:8b:1e: 1e:34:b8:e7:ab:a3:1f:ad:62:ad:f4:3a:90:24:fe: ae:cd:86:6c:2e:ae:a2:ad:53:f1:bb:2b:d9:bc:21: ba:5c:a8:81:23:36:36:cf:5d:e1:0c:b0:5d:91:7b: c6:2b:8e:17:cc:ef:af:89:74:c8:23:53:9b:ed:0a: 66:a8:d8:8f:4f:5a:a2:d4:03:25:c8:87:30:38:93: b4:15:91:37:ab:60:df:28:9f:12:70:21:cd:9a:74: 57:d9:8e:50:fa:24:94:3e:cb:74:0d:50:8b:58:70: 4e:a1:fd:3c:1a:8a:98:0c:3c:25:44:b3:76:8b:57: 4e:74:c8:a5:ef:3f:79:57:73:42:6e:7a:0c:0e:7c: 01:0e:c8:21:73:42:94:ab:5d:5b:9a:e4:96:9f:32: 86:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E5:81:CF:A7:EB:DA:9E:16:32:0D:5A:6E:CF:0C:75:FF:65:BB:08 X509v3 Authority Key Identifier: keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/323430343a663630303a3a2f33322d3438203d3e203234323037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:f600::/32 Signature Algorithm: sha256WithRSAEncryption 65:72:42:8d:75:1a:a2:1a:1c:a1:5b:c7:45:59:55:84:1e:0f: cf:a9:55:95:38:d6:d3:b9:31:d6:53:3d:08:68:c7:df:7c:aa: e7:54:41:ba:30:49:df:aa:18:f7:aa:d9:53:66:4a:b0:a4:ad: b3:80:d4:ad:35:91:71:5f:12:8e:6a:df:37:04:ed:28:03:cb: 8e:34:88:3e:e1:29:fe:e7:9d:75:55:f3:4b:a0:c0:73:66:5a: 5e:0b:9d:3a:9a:7a:22:e2:15:c8:6e:5b:5d:05:98:43:11:ab: c0:0b:e2:2e:d6:1b:c5:9e:44:b2:63:1f:ce:d2:16:98:52:28: 9a:f2:89:bf:31:60:b3:f8:16:a8:69:b4:9e:29:9b:6e:82:8a: 2a:3d:7f:2a:f9:05:2a:a0:86:e6:ff:38:2c:f6:68:b6:f7:14: eb:b9:fb:ce:66:46:9a:06:85:c8:3a:81:7f:7a:58:1c:aa:13: 5b:67:ea:85:12:94:07:4e:5a:45:a9:e2:62:1c:df:31:0e:0a: 78:1b:b7:fc:bb:07:04:33:8b:81:df:85:14:23:78:d9:8e:02: d0:a2:e8:cc:f0:32:33:75:b1:16:06:f3:6d:c7:c8:06:a6:46: 47:00:43:93:36:0d:1f:03:d9:ba:a3:fc:7c:ea:bf:51:d0:e0: ef:a3:35:38 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUTR5HGyTU9MZnGL/HmyEQUxURkckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC RjBBRkIwRjAeFw0yNjAxMTQwNDU5MDRaFw0yNzAxMTMwNTA0MDRaMDMxMTAvBgNV BAMTKEUwRTU4MUNGQTdFQkRBOUUxNjMyMEQ1QTZFQ0YwQzc1RkY2NUJCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrKaEPDbXOj6r14V+UnMUDsGiH fo5vuC8jLeEAllfCxMx9Ny/jQRjSJEgLODBXJL7SpCvQvuQX893g5O+i3ZVpO3yG H66Fy4DQTcEmX0hBWLbikT7VdBPdAiBAhf03xP8fSVpaEQeLHh40uOerox+tYq30 OpAk/q7NhmwurqKtU/G7K9m8IbpcqIEjNjbPXeEMsF2Re8YrjhfM76+JdMgjU5vt Cmao2I9PWqLUAyXIhzA4k7QVkTerYN8onxJwIc2adFfZjlD6JJQ+y3QNUItYcE6h /TwaipgMPCVEs3aLV050yKXvP3lXc0JuegwOfAEOyCFzQpSrXVua5JafMoZTAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU4OWBz6fr2p4WMg1abs8Mdf9luwgwHwYDVR0j BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB RkIwRi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjN2U4MDgxLTYzYWYtNDllNy05 NjQ2LTc2YzI1YTVlOTdjYS8wLzMyMzQzMDM0M2E2NjM2MzAzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMyMzQzMjMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBPYAMA0GCSqGSIb3 DQEBCwUAA4IBAQBlckKNdRqiGhyhW8dFWVWEHg/PqVWVONbTuTHWUz0IaMfffKrn VEG6MEnfqhj3qtlTZkqwpK2zgNStNZFxXxKOat83BO0oA8uONIg+4Sn+5511VfNL oMBzZlpeC506mnoi4hXIbltdBZhDEavAC+Iu1hvFnkSyYx/O0haYUiia8om/MWCz +BaoabSeKZtugooqPX8q+QUqoIbm/zgs9mi29xTrufvOZkaaBoXIOoF/elgcqhNb Z+qFEpQHTlpFqeJiHN8xDgp4G7f8uwcEM4uB34UUI3jZjgLQoujM8DIzdbEWBvNt x8gGpkZHAEOTNg0fA9m6o/x86r9R0ODvozU4 -----END CERTIFICATE-----Generated at Mon Jan 26 06:08:24 2026 by rpki-client