This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/33362e35302e3232352e302f32342d3234203d3e20313532303830.roa File: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (raw, json) Hash identifier: nKxO8PKUOfcfhIzcZRlVaTiwSCaRzFdd2tCF/Y3OpxE= Subject key identifier: 27:66:8A:61:0C:69:0F:CF:F9:01:96:F9:51:76:09:F9:B3:2F:17:B8 Certificate issuer: /CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Certificate serial: 47D0D56CAAF3D3CAFBB4CF3E356B4BBE29EF9192 Authority key identifier: F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/33362e35302e3232352e302f32342d3234203d3e20313532303830.roa Signing time: Mon 02 Feb 2026 06:00:00 +0000 ROA not before: Mon 02 Feb 2026 05:55:00 +0000 ROA not after: Mon 01 Feb 2027 06:00:00 +0000 asID: 152080 IP address blocks: 36.50.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d0:d5:6c:aa:f3:d3:ca:fb:b4:cf:3e:35:6b:4b:be:29:ef:91:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Validity Not Before: Feb 2 05:55:00 2026 GMT Not After : Feb 1 06:00:00 2027 GMT Subject: CN=27668A610C690FCFF90196F9517609F9B32F17B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:cc:7e:67:dd:61:06:03:97:af:f7:2c:52: 85:82:3f:6b:14:1a:8c:99:ec:1e:56:7c:df:c2:0b: 71:19:7f:83:85:6e:80:2d:1c:87:42:2c:89:09:da: f2:15:de:07:82:49:cd:6a:33:cf:0c:fd:27:aa:db: 1f:0d:5b:21:71:a4:da:56:52:72:c7:da:df:e9:48: 56:ec:a5:46:d3:5e:b1:be:c0:eb:2d:23:7b:02:24: 9e:20:35:63:88:f5:91:f5:03:1a:b5:96:4e:5f:cc: 0b:1b:16:69:78:ed:0a:61:8b:9b:c9:ac:af:a9:70: 90:f9:ae:b3:27:af:65:27:80:d3:dd:89:ca:8d:59: 4e:da:dd:3c:78:20:0f:62:89:9c:1b:bc:ba:7a:2d: 0d:94:f4:64:5e:65:c5:d6:99:22:a3:d0:2c:7b:49: ec:5b:7d:a6:9c:cf:a3:26:c9:71:a8:a0:bb:ff:de: 82:33:76:9c:59:7c:43:49:e9:b9:66:7e:e4:3c:6d: 27:4c:72:12:f0:5a:e9:c7:23:be:40:a2:b2:40:7e: 73:04:58:85:65:c4:a0:a3:80:57:08:7c:1b:38:65: 72:99:40:90:c6:8e:ec:8c:62:12:fb:31:c8:74:02: 9b:84:80:cf:81:cd:a9:1f:a4:d4:01:37:0d:d6:a5: 3b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:66:8A:61:0C:69:0F:CF:F9:01:96:F9:51:76:09:F9:B3:2F:17:B8 X509v3 Authority Key Identifier: keyid:F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/33362e35302e3232352e302f32342d3234203d3e20313532303830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.225.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:35:58:6f:55:54:9c:55:1e:55:0b:b7:a5:f0:0d:9b:1b:f8: 9f:93:7f:0e:dc:3f:10:a3:66:b8:f6:09:b4:a4:ac:4e:bf:79: 2a:c2:80:31:38:71:35:e2:8e:8e:17:bc:fe:79:e5:5e:a7:c3: 4f:45:37:78:c6:74:08:a7:8d:e2:b9:2c:df:6b:42:ef:dd:d5: 61:99:42:9f:5c:9c:d2:aa:2e:70:b2:c4:2f:85:f5:ac:4c:2e: ff:9f:bf:63:07:a2:e3:2d:a3:a0:42:29:8f:c5:6a:9d:ff:e6: a1:53:25:77:00:01:31:c3:89:7b:c4:d8:55:b6:9a:3d:3e:c8: 66:a8:b2:28:12:d5:80:f3:23:70:7f:7e:8d:06:e7:dd:cf:85: 17:bb:33:0b:69:03:96:55:26:7e:d3:7f:99:11:49:95:d5:01: cd:15:70:db:92:0a:ab:c6:3d:1a:6a:ca:5e:9d:d6:02:da:4e: 2e:8c:99:f0:9b:d0:69:60:9c:11:d6:07:ed:5c:41:0b:bb:ba: b2:d5:88:93:44:fe:fb:41:98:3f:90:6e:04:fb:30:21:da:3c: 3f:4c:3b:a7:c2:5d:df:30:99:c4:cf:79:d5:df:52:57:98:d3: be:27:97:ef:8c:15:95:66:b0:79:b7:e0:20:cb:4d:bb:f2:a3: 13:8c:56:3d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUR9DVbKrz08r7tM8+NWtLvinvkZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlC MUNEODgzMjAeFw0yNjAyMDIwNTU1MDBaFw0yNzAyMDEwNjAwMDBaMDMxMTAvBgNV BAMTKDI3NjY4QTYxMEM2OTBGQ0ZGOTAxOTZGOTUxNzYwOUY5QjMyRjE3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3p8x+Z91hBgOXr/csUoWCP2sU GoyZ7B5WfN/CC3EZf4OFboAtHIdCLIkJ2vIV3geCSc1qM88M/Seq2x8NWyFxpNpW UnLH2t/pSFbspUbTXrG+wOstI3sCJJ4gNWOI9ZH1Axq1lk5fzAsbFml47Qphi5vJ rK+pcJD5rrMnr2UngNPdicqNWU7a3Tx4IA9iiZwbvLp6LQ2U9GReZcXWmSKj0Cx7 Sexbfaacz6MmyXGooLv/3oIzdpxZfENJ6blmfuQ8bSdMchLwWunHI75AorJAfnME WIVlxKCjgFcIfBs4ZXKZQJDGjuyMYhL7Mch0ApuEgM+BzakfpNQBNw3WpTsrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUJ2aKYQxpD8/5AZb5UXYJ+bMvF7gwHwYDVR0j BBgwFoAU9dcex3kiqQgPF8Ohb75fabHNiDIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWU4MzY3My0wOTZhLTQ0MGMtYjI3YS05YmU2NGIxM2I0ZTUvMC9GNUQ3MUVDNzc5 MjJBOTA4MEYxN0MzQTE2RkJFNUY2OUIxQ0Q4ODMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlCMUNE ODgzMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhZTgzNjczLTA5NmEtNDQwYy1i MjdhLTliZTY0YjEzYjRlNS8wLzMzMzYyZTM1MzAyZTMyMzIzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACQy4TANBgkqhkiG 9w0BAQsFAAOCAQEAjDVYb1VUnFUeVQu3pfANmxv4n5N/Dtw/EKNmuPYJtKSsTr95 KsKAMThxNeKOjhe8/nnlXqfDT0U3eMZ0CKeN4rks32tC793VYZlCn1yc0qoucLLE L4X1rEwu/5+/Ywei4y2joEIpj8Vqnf/moVMldwABMcOJe8TYVbaaPT7IZqiyKBLV gPMjcH9+jQbn3c+FF7szC2kDllUmftN/mRFJldUBzRVw25IKq8Y9GmrKXp3WAtpO LoyZ8JvQaWCcEdYH7VxBC7u6stWIk0T++0GYP5BuBPswIdo8P0w7p8Jd3zCZxM95 1d9SV5jTvieX74wVlWawebfgIMtNu/KjE4xWPQ== -----END CERTIFICATE-----Generated at Mon Feb 2 14:29:59 2026 by rpki-client