This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa File: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (raw, json) Hash identifier: 9VVgVBP3adXECeGaUmGjEbyWL7h2Cz/v6afOABuMPOU= Subject key identifier: 73:C2:B5:45:18:6F:EF:FB:6D:47:EA:EB:05:38:F7:6C:8D:7B:82:A2 Certificate issuer: /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3 Certificate serial: 4820F09C0CCAF388A4E15B3E1F84F17CC46C8F6A Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa Signing time: Thu 22 Jan 2026 13:00:00 +0000 ROA not before: Thu 22 Jan 2026 12:55:00 +0000 ROA not after: Thu 21 Jan 2027 13:00:00 +0000 asID: 152368 IP address blocks: 2001:df1:1c40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Jan 2026 22:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:20:f0:9c:0c:ca:f3:88:a4:e1:5b:3e:1f:84:f1:7c:c4:6c:8f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3 Validity Not Before: Jan 22 12:55:00 2026 GMT Not After : Jan 21 13:00:00 2027 GMT Subject: CN=73C2B545186FEFFB6D47EAEB0538F76C8D7B82A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ba:5d:d2:e5:46:cd:6b:41:08:d9:cd:32:ad: 29:46:bd:60:74:46:b0:a4:40:a3:89:30:32:2c:d6: 4c:34:35:fe:f0:31:56:9c:4c:35:fc:b7:81:a1:46: b4:cf:ad:9c:36:91:68:99:06:d5:0e:af:ba:31:92: 7a:73:d3:cc:cb:85:fe:44:3a:00:6e:fb:16:14:c3: 08:7f:db:4d:6b:b0:40:34:36:51:61:57:7f:06:bf: 9a:4f:46:dc:49:67:9f:21:37:af:e8:45:01:b0:62: 3c:8e:af:30:31:a7:8a:d4:2c:b6:b8:5a:fc:a7:39: ea:2a:2c:15:ea:1a:a0:b5:fe:f7:4c:4c:e1:b3:e8: 40:8e:d5:1a:50:f4:13:c3:5a:91:f7:cb:7b:54:f1: 99:d5:40:a7:2b:2f:81:3e:ec:b2:11:9d:03:e0:cd: e4:a1:a9:cf:98:f5:ee:c4:37:99:87:30:15:35:73: 0c:90:1c:f2:80:e3:12:7c:f7:ff:69:69:6b:64:aa: df:8f:18:0f:24:eb:5b:05:fa:91:e9:e4:e4:3b:71: 73:61:49:3d:dc:c6:61:c1:46:e6:bf:d1:2e:31:3b: c3:15:cf:3e:39:d6:e2:98:10:70:63:c7:ea:b7:6c: b9:e9:a2:e3:da:49:81:d8:ef:77:a1:1f:21:75:b2: 1e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C2:B5:45:18:6F:EF:FB:6D:47:EA:EB:05:38:F7:6C:8D:7B:82:A2 X509v3 Authority Key Identifier: keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df1:1c40::/48 Signature Algorithm: sha256WithRSAEncryption 96:e9:3f:5c:5b:d1:07:3e:36:93:7f:1e:ac:fe:bf:d8:bd:62: 80:93:ce:28:d1:ed:00:9b:5f:d4:73:48:46:02:c8:7e:31:4f: a5:ae:fd:56:f2:be:20:3e:35:b6:7b:c5:f2:7e:6f:d7:79:2c: 0d:c7:85:96:d8:67:a5:77:83:97:06:66:f7:b6:2f:b4:2a:3f: c8:68:2d:1e:d5:35:4b:1b:84:33:42:21:6c:39:58:e5:8f:42: 2e:dd:d0:3d:51:92:ec:7b:31:98:49:58:12:1b:0e:e5:ef:8a: 81:01:bf:cc:b3:96:2c:a3:38:26:a0:41:79:e6:af:52:88:c1: 55:4e:04:59:4c:c9:08:3d:0e:76:44:25:66:44:2e:61:52:cc: d1:9f:46:9a:83:5f:14:85:63:29:e5:f3:51:ec:eb:1d:fa:21: 45:b9:8b:d1:ea:02:88:9e:54:4b:5e:01:d7:28:a0:4b:b7:84: b1:e0:d6:92:1f:4e:f3:8f:82:92:7c:fb:b8:e4:ed:71:d0:e9: 9d:ab:2e:a6:3c:94:f2:a7:fb:8e:17:a9:a6:ce:1f:d2:d2:20: 89:b5:a8:11:08:c1:94:be:2a:d7:e4:7c:d2:d3:c0:87:99:2c: 17:8d:fa:43:26:73:1e:11:cd:db:bb:ac:d5:53:48:c7:08:7a: 6a:76:27:bc -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUSCDwnAzK84ik4Vs+H4TxfMRsj2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZC MDhFRkJGMzAeFw0yNjAxMjIxMjU1MDBaFw0yNzAxMjExMzAwMDBaMDMxMTAvBgNV BAMTKDczQzJCNTQ1MTg2RkVGRkI2RDQ3RUFFQjA1MzhGNzZDOEQ3QjgyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFul3S5UbNa0EI2c0yrSlGvWB0 RrCkQKOJMDIs1kw0Nf7wMVacTDX8t4GhRrTPrZw2kWiZBtUOr7oxknpz08zLhf5E OgBu+xYUwwh/201rsEA0NlFhV38Gv5pPRtxJZ58hN6/oRQGwYjyOrzAxp4rULLa4 WvynOeoqLBXqGqC1/vdMTOGz6ECO1RpQ9BPDWpH3y3tU8ZnVQKcrL4E+7LIRnQPg zeShqc+Y9e7EN5mHMBU1cwyQHPKA4xJ89/9paWtkqt+PGA8k61sF+pHp5OQ7cXNh ST3cxmHBRua/0S4xO8MVzz451uKYEHBjx+q3bLnpouPaSYHY73ehHyF1sh5HAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUc8K1RRhv7/ttR+rrBTj3bI17gqIwHwYDVR0j BBgwFoAU27GMz1iRRSSvsRP+EzWcxrCO+/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5ZDdjYi02Y2ZiLTRkZTAtOWRhYS1kMjIyYjdhODkwNzIvMC9EQkIxOENDRjU4 OTE0NTI0QUZCMTEzRkUxMzM1OUNDNkIwOEVGQkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZCMDhF RkJGMy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlkN2NiLTZjZmItNGRlMC05 ZGFhLWQyMjJiN2E4OTA3Mi8wLzMyMzAzMDMxM2E2NDY2MzEzYTMxNjMzNDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMyMzMzNjM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8RxAMA0GCSqGSIb3DQEBCwUAA4IBAQCW6T9cW9EHPjaTfx6s/r/YvWKAk84o0e0A m1/Uc0hGAsh+MU+lrv1W8r4gPjW2e8Xyfm/XeSwNx4WW2Geld4OXBmb3ti+0Kj/I aC0e1TVLG4QzQiFsOVjlj0Iu3dA9UZLsezGYSVgSGw7l74qBAb/Ms5YsozgmoEF5 5q9SiMFVTgRZTMkIPQ52RCVmRC5hUszRn0aag18UhWMp5fNR7Osd+iFFuYvR6gKI nlRLXgHXKKBLt4Sx4NaSH07zj4KSfPu45O1x0Omdqy6mPJTyp/uOF6mmzh/S0iCJ tagRCMGUvirX5HzS08CHmSwXjfpDJnMeEc3bu6zVU0jHCHpqdie8 -----END CERTIFICATE-----Generated at Tue Jan 27 04:28:57 2026 by rpki-client