This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa File: 3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa (raw, json) Hash identifier: qprBpEFsUmfzT7L8DfRHRiIYOBmZH2oG8ByFHZ6SCUo= Subject key identifier: BB:F4:72:D0:15:A7:99:E4:6C:F1:94:9E:1F:CD:6F:33:4B:6A:00:D1 Certificate issuer: /CN=885B7C008CE44036CA0659FD8E1379321C0AB5F2 Certificate serial: 3D42DAC993DD43F7505394ABB308D00E7B87E6D6 Authority key identifier: 88:5B:7C:00:8C:E4:40:36:CA:06:59:FD:8E:13:79:32:1C:0A:B5:F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa Signing time: Sat 03 Jan 2026 14:45:04 +0000 ROA not before: Sat 03 Jan 2026 14:40:04 +0000 ROA not after: Sat 02 Jan 2027 14:45:04 +0000 asID: 154387 IP address blocks: 138.252.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 22:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:42:da:c9:93:dd:43:f7:50:53:94:ab:b3:08:d0:0e:7b:87:e6:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885B7C008CE44036CA0659FD8E1379321C0AB5F2 Validity Not Before: Jan 3 14:40:04 2026 GMT Not After : Jan 2 14:45:04 2027 GMT Subject: CN=BBF472D015A799E46CF1949E1FCD6F334B6A00D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:ce:21:7f:3f:dc:c4:e3:e5:fa:11:87:c3: 1a:4e:08:e8:8d:a2:67:3c:d7:09:8c:b1:a0:3c:3a: ea:69:5b:99:79:d9:8d:34:46:c2:64:6d:35:9c:93: 75:a1:8f:f9:4b:29:b3:d5:11:d7:a7:e3:3b:c3:0a: cf:5c:46:8c:2d:b8:83:20:25:9c:f9:ed:ab:cb:39: f8:97:77:4c:da:c8:44:2f:1a:6d:be:fe:cc:ba:af: ea:b7:f9:4f:07:3d:e8:a5:2b:df:53:59:17:15:2c: 7c:5b:88:8e:f2:2f:ef:ec:64:b3:7c:6b:9c:c8:1b: 6d:e1:31:b5:60:d1:6f:89:ed:fa:33:66:49:0a:09: 6f:6c:cd:03:d8:48:de:c0:3e:d0:72:55:37:6b:6c: ee:fe:93:df:61:7c:b7:30:92:c4:7e:e4:37:b9:c2: ad:38:bf:e1:c0:d4:48:42:61:bd:c2:8d:40:4d:8f: aa:1f:de:e5:00:5e:38:3c:66:25:b8:b0:69:b8:4b: e6:55:98:75:73:cc:95:e1:87:82:be:01:53:43:5d: 14:25:b4:ee:99:b5:ea:10:89:1d:03:24:64:42:40: b0:81:30:03:47:5e:22:ed:ff:26:6d:0e:27:52:f5: 2c:2a:a6:e3:9d:9e:cd:d7:7f:4e:92:2b:41:25:27: 8a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F4:72:D0:15:A7:99:E4:6C:F1:94:9E:1F:CD:6F:33:4B:6A:00:D1 X509v3 Authority Key Identifier: keyid:88:5B:7C:00:8C:E4:40:36:CA:06:59:FD:8E:13:79:32:1C:0A:B5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/885B7C008CE44036CA0659FD8E1379321C0AB5F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d78b50b-449c-454b-850d-f20803789b58/1/3133382e3235322e3133392e302f32342d3234203d3e20313534333837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.252.139.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:f7:55:78:b8:e0:7f:63:a2:ab:5d:af:0d:de:1a:15:52:3c: 56:e7:50:0d:56:09:3a:6c:c0:db:a3:2b:f4:dc:0f:e3:f0:97: f9:4a:86:d2:6f:c6:54:8b:cb:d6:93:15:92:e9:96:8a:5d:18: 2d:d7:1a:04:74:5f:2a:51:97:41:bb:9e:8b:db:7f:4a:36:cf: 43:99:17:4c:8b:f0:0f:c5:35:c7:a7:52:57:43:ae:d2:20:98: 5b:eb:0b:09:e2:7d:b3:0d:3e:10:b4:2a:9d:36:81:ed:e9:7e: 3a:fb:07:10:c9:74:9b:fa:65:b9:01:53:94:04:a8:f3:d6:d4: 49:dc:46:44:71:9f:fd:54:71:2a:cb:16:cf:44:6f:85:16:65: 19:e5:d9:e9:b2:41:25:3f:85:60:b2:94:40:72:77:51:b3:a6: a2:ff:a2:09:05:8c:8f:52:dd:1a:07:bd:b3:00:17:b1:ec:f8: 9b:6e:63:92:33:5b:24:0b:4d:ed:2c:7a:3a:e2:27:db:3e:0c: c8:17:b2:7c:a0:36:a6:6c:45:37:b1:5c:4f:ab:92:b5:ec:76: 27:ec:75:3b:e8:bb:71:10:0c:a8:c4:ef:17:d8:6d:30:78:d4: 03:8c:0f:ff:8b:46:9a:83:62:86:cb:22:43:a6:55:f1:65:8e: 9c:ff:63:60 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPULayZPdQ/dQU5SrswjQDnuH5tYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5MzIx QzBBQjVGMjAeFw0yNjAxMDMxNDQwMDRaFw0yNzAxMDIxNDQ1MDRaMDMxMTAvBgNV BAMTKEJCRjQ3MkQwMTVBNzk5RTQ2Q0YxOTQ5RTFGQ0Q2RjMzNEI2QTAwRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIJc4hfz/cxOPl+hGHwxpOCOiN omc81wmMsaA8OuppW5l52Y00RsJkbTWck3Whj/lLKbPVEden4zvDCs9cRowtuIMg JZz57avLOfiXd0zayEQvGm2+/sy6r+q3+U8HPeilK99TWRcVLHxbiI7yL+/sZLN8 a5zIG23hMbVg0W+J7fozZkkKCW9szQPYSN7APtByVTdrbO7+k99hfLcwksR+5De5 wq04v+HA1EhCYb3CjUBNj6of3uUAXjg8ZiW4sGm4S+ZVmHVzzJXhh4K+AVNDXRQl tO6ZteoQiR0DJGRCQLCBMANHXiLt/yZtDidS9SwqpuOdns3Xf06SK0ElJ4p3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUu/Ry0BWnmeRs8ZSeH81vM0tqANEwHwYDVR0j BBgwFoAUiFt8AIzkQDbKBln9jhN5MhwKtfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDc4YjUwYi00NDljLTQ1NGItODUwZC1mMjA4MDM3ODliNTgvMS84ODVCN0MwMDhD RTQ0MDM2Q0EwNjU5RkQ4RTEzNzkzMjFDMEFCNUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODg1QjdDMDA4Q0U0NDAzNkNBMDY1OUZEOEUxMzc5MzIxQzBB QjVGMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkNzhiNTBiLTQ0OWMtNDU0Yi04 NTBkLWYyMDgwMzc4OWI1OC8xLzMxMzMzODJlMzIzNTMyMmUzMTMzMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzQzMzM4Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACK/IswDQYJ KoZIhvcNAQELBQADggEBACv3VXi44H9joqtdrw3eGhVSPFbnUA1WCTpswNujK/Tc D+Pwl/lKhtJvxlSLy9aTFZLplopdGC3XGgR0XypRl0G7novbf0o2z0OZF0yL8A/F NcenUldDrtIgmFvrCwnifbMNPhC0Kp02ge3pfjr7BxDJdJv6ZbkBU5QEqPPW1Enc RkRxn/1UcSrLFs9Eb4UWZRnl2emyQSU/hWCylEByd1GzpqL/ogkFjI9S3RoHvbMA F7Hs+JtuY5IzWyQLTe0sejriJ9s+DMgXsnygNqZsRTexXE+rkrXsdifsdTvou3EQ DKjE7xfYbTB41AOMD/+LRpqDYobLIkOmVfFljpz/Y2A= -----END CERTIFICATE-----Generated at Wed Jan 21 13:19:23 2026 by rpki-client