This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313030333a3a2f34382d3438203d3e203633383539.roa File: 323430323a383738303a313030333a3a2f34382d3438203d3e203633383539.roa (raw, json) Hash identifier: RKKEsjHh5z97kVU5mU+p8a2FB1mdxlEpk6vbiTV6FSg= Subject key identifier: B6:E5:D7:73:78:B7:58:6C:B3:D6:50:27:8A:A1:BC:67:FD:B8:0E:9D Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 3C13807323B8B48D7839EEE32A847D4B0B93EFC0 Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313030333a3a2f34382d3438203d3e203633383539.roa Signing time: Wed 28 Jan 2026 02:37:36 +0000 ROA not before: Wed 28 Jan 2026 02:32:36 +0000 ROA not after: Wed 27 Jan 2027 02:37:36 +0000 asID: 63859 IP address blocks: 2402:8780:1003::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:13:80:73:23:b8:b4:8d:78:39:ee:e3:2a:84:7d:4b:0b:93:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Jan 28 02:32:36 2026 GMT Not After : Jan 27 02:37:36 2027 GMT Subject: CN=B6E5D77378B7586CB3D650278AA1BC67FDB80E9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:6b:ce:d3:9e:a1:9b:37:7e:53:0b:44:cb: bd:0c:33:d9:30:7b:ed:73:1f:39:64:93:ea:b3:21: 79:d3:4c:2f:bd:94:ed:d3:cd:71:25:b6:d1:f7:ed: 0e:c6:7f:d1:57:28:11:ee:98:ba:a6:64:46:c9:a0: 26:06:47:8f:dc:b4:38:bd:19:c1:51:b9:bd:54:33: 43:cd:49:44:15:54:3b:c2:d8:8e:f6:8c:42:de:01: f7:25:2d:ef:db:ea:f6:d8:fc:0c:21:31:b3:7c:06: 01:fd:a9:92:12:47:be:18:cd:26:fd:c0:9c:52:ab: 66:8e:b7:5e:b1:f4:12:db:a5:db:18:d8:1d:42:3f: a0:ca:1d:59:1c:72:16:fc:bd:da:82:d3:94:2e:29: 14:f9:ab:82:06:7f:63:7e:22:70:bf:ce:d5:bc:a7: fd:99:05:53:e5:8b:59:17:da:98:d2:63:85:f0:22: b7:7e:f0:97:69:4d:14:e8:c9:14:da:55:1f:77:26: 25:8a:1f:3f:de:5d:5f:86:10:0a:5d:f7:3a:b5:d0: bb:9d:98:98:37:ae:3f:3c:2b:ca:31:2f:42:34:8a: 1f:5c:d6:d0:14:c7:e7:11:58:bc:e9:90:83:e5:4d: c7:93:5d:9f:34:10:06:1c:be:c3:4c:55:cb:79:79: a0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E5:D7:73:78:B7:58:6C:B3:D6:50:27:8A:A1:BC:67:FD:B8:0E:9D X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313030333a3a2f34382d3438203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:8780:1003::/48 Signature Algorithm: sha256WithRSAEncryption 98:14:85:e3:5c:de:cd:ee:b0:4c:a3:ef:32:ac:c6:af:4a:22: 81:da:ce:ef:49:f5:bf:0a:63:c8:1c:ff:3d:e8:52:82:fc:08: e1:f3:12:1b:41:96:f9:4e:f3:6c:e8:87:88:83:40:fb:4e:ce: 95:77:b8:cb:0a:88:24:9d:73:77:0c:27:8f:e1:4f:72:88:6e: c3:1b:47:df:89:cb:54:48:81:44:47:9b:0c:89:e8:a1:89:59: c1:0f:38:f6:3c:9b:e9:05:13:a3:78:cb:2d:1d:c6:2c:f5:6d: bb:f2:1f:8e:39:59:7d:ee:a1:7d:69:6f:3d:51:52:fa:8c:a1: 12:10:f0:e4:e5:89:3b:fd:67:23:7f:ff:a8:a6:31:13:be:e9: 85:dc:eb:7a:02:3a:48:43:b4:50:8a:cc:17:c1:db:2c:ae:ac: a7:e7:4e:87:9a:fd:50:4e:ff:29:34:a0:5a:29:8d:17:07:d9: 68:3d:7c:00:3b:86:2f:b0:f6:3e:f3:46:b4:bb:1d:aa:24:6a: 7f:8c:5c:eb:6a:b7:c6:9c:03:a9:bb:31:62:91:57:56:11:15: 9c:20:c6:7f:a1:3a:07:f5:4d:eb:39:89:52:65:9d:24:91:66: 1f:b7:22:de:43:25:ea:de:ec:ef:75:c5:20:4f:d7:f9:d3:27: bc:df:3b:61 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUPBOAcyO4tI14Oe7jKoR9SwuT78AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNjAxMjgwMjMyMzZaFw0yNzAxMjcwMjM3MzZaMDMxMTAvBgNV BAMTKEI2RTVENzczNzhCNzU4NkNCM0Q2NTAyNzhBQTFCQzY3RkRCODBFOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/AmvO056hmzd+UwtEy70MM9kw e+1zHzlkk+qzIXnTTC+9lO3TzXElttH37Q7Gf9FXKBHumLqmZEbJoCYGR4/ctDi9 GcFRub1UM0PNSUQVVDvC2I72jELeAfclLe/b6vbY/AwhMbN8BgH9qZISR74YzSb9 wJxSq2aOt16x9BLbpdsY2B1CP6DKHVkcchb8vdqC05QuKRT5q4IGf2N+InC/ztW8 p/2ZBVPli1kX2pjSY4XwIrd+8JdpTRToyRTaVR93JiWKHz/eXV+GEApd9zq10Lud mJg3rj88K8oxL0I0ih9c1tAUx+cRWLzpkIPlTceTXZ80EAYcvsNMVct5eaCPAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUtuXXc3i3WGyz1lAniqG8Z/24Dp0wHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDMwMzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH gBADMA0GCSqGSIb3DQEBCwUAA4IBAQCYFIXjXN7N7rBMo+8yrMavSiKB2s7vSfW/ CmPIHP896FKC/Ajh8xIbQZb5TvNs6IeIg0D7Ts6Vd7jLCogknXN3DCeP4U9yiG7D G0ffictUSIFER5sMieihiVnBDzj2PJvpBROjeMstHcYs9W278h+OOVl97qF9aW89 UVL6jKESEPDk5Yk7/Wcjf/+opjETvumF3Ot6AjpIQ7RQiswXwdssrqyn506Hmv1Q Tv8pNKBaKY0XB9loPXwAO4YvsPY+80a0ux2qJGp/jFzrarfGnAOpuzFikVdWERWc IMZ/oToH9U3rOYlSZZ0kkWYftyLeQyXq3uzvdcUgT9f50ye83zth -----END CERTIFICATE-----Generated at Mon Feb 2 12:42:33 2026 by rpki-client