This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313030353a3a2f34382d3438203d3e203633383539.roa File: 323430323a383738303a313030353a3a2f34382d3438203d3e203633383539.roa (raw, json) Hash identifier: 9HOvzyY5uf3RSlvWhbs3K286WgpBS+cdqK+8tFA4y1E= Subject key identifier: 0D:3A:EA:5A:0F:96:C8:24:5C:3C:91:8E:7D:D7:17:BE:09:8A:89:AA Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 09D85644F18D049BADF9CDF98B6E653A38EAFDF0 Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313030353a3a2f34382d3438203d3e203633383539.roa Signing time: Wed 28 Jan 2026 02:29:22 +0000 ROA not before: Wed 28 Jan 2026 02:24:22 +0000 ROA not after: Wed 27 Jan 2027 02:29:22 +0000 asID: 63859 IP address blocks: 2402:8780:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d8:56:44:f1:8d:04:9b:ad:f9:cd:f9:8b:6e:65:3a:38:ea:fd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Jan 28 02:24:22 2026 GMT Not After : Jan 27 02:29:22 2027 GMT Subject: CN=0D3AEA5A0F96C8245C3C918E7DD717BE098A89AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:62:4c:05:9f:4a:9e:d6:46:1c:fa:e3:74:d8: 79:eb:0f:39:6f:6f:ac:48:c0:6c:c0:e5:5e:d7:49: ae:25:48:c4:8e:4f:7c:2a:5c:da:f9:6d:5e:8f:62: ba:b2:c4:de:96:22:2b:10:ff:2b:af:39:d0:7e:0d: 4f:1b:de:d7:b4:e8:8c:f3:be:f6:5d:b8:a7:e2:e1: 13:7f:8f:82:84:04:4d:0d:73:32:04:60:c1:e6:e6: 5b:49:de:c3:ec:70:d1:85:60:e4:74:df:c6:22:2a: a4:20:a8:85:97:2c:01:42:d0:f3:d9:05:c1:9d:08: 32:9e:ae:d2:3e:ff:ae:c7:50:c7:3a:d5:c8:92:e7: a0:ba:e4:d1:36:44:72:c0:b3:c3:5a:0c:d1:0a:31: f9:52:2a:fe:d2:c4:bb:ee:cf:df:de:7d:29:67:64: 8e:9b:44:dc:8b:8d:c5:77:c7:1c:af:43:e3:8c:b6: eb:85:a3:db:76:d9:b5:21:f9:d8:34:7c:ac:51:60: 25:f0:b5:55:e4:ed:a8:60:ea:8d:e4:8c:87:e3:32: 67:ca:e5:fb:d1:80:d2:6a:ce:79:39:88:c6:bc:d7: 2a:4e:34:45:e5:7c:e9:d6:95:c4:98:7f:62:93:d1: 8c:40:29:38:f8:6f:f5:48:0b:e8:93:0b:cf:21:8e: e1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3A:EA:5A:0F:96:C8:24:5C:3C:91:8E:7D:D7:17:BE:09:8A:89:AA X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313030353a3a2f34382d3438203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:8780:1005::/48 Signature Algorithm: sha256WithRSAEncryption a0:4e:03:8e:43:39:81:de:09:6a:25:76:8f:79:8b:91:91:05: 01:71:a7:39:02:2a:c3:62:3b:fe:cc:be:9b:53:57:40:17:cc: fd:b6:2c:d1:83:83:a3:55:8c:91:97:7a:0b:48:ac:a0:f2:29: dd:34:bc:48:e7:83:d4:30:7b:1d:7a:47:e1:6c:a9:1d:35:5b: 05:87:10:88:95:30:35:67:9f:31:53:41:65:85:72:ba:ab:cd: aa:5f:30:89:08:f6:9c:41:14:cf:41:69:91:8c:90:b3:7f:07: ed:d9:ea:71:83:cd:8e:9b:24:52:29:03:24:0b:79:04:be:b0: 6e:a9:d9:1c:b3:94:65:6b:f4:52:cc:31:49:b7:17:f4:79:89: 56:87:9a:b1:c2:1b:e8:78:55:aa:41:81:f0:b5:ec:8d:fe:28: b5:66:8e:3a:5a:65:c9:39:67:07:a7:11:bb:12:d7:57:82:43: 16:fc:d3:0d:a0:4d:69:93:71:2a:87:03:8f:5c:cf:28:d0:b9: 40:b5:ed:34:a0:51:38:5e:5a:55:16:10:2f:7d:a9:b6:e6:47: ba:b1:28:07:a8:a2:17:f8:69:c6:b4:f8:aa:0d:34:1f:7f:eb: 30:5e:be:a2:d0:9c:30:f8:4f:43:8c:a4:ec:f9:37:85:10:8a: 72:cd:84:c5 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUCdhWRPGNBJut+c35i25lOjjq/fAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNjAxMjgwMjI0MjJaFw0yNzAxMjcwMjI5MjJaMDMxMTAvBgNV BAMTKDBEM0FFQTVBMEY5NkM4MjQ1QzNDOTE4RTdERDcxN0JFMDk4QTg5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeYkwFn0qe1kYc+uN02HnrDzlv b6xIwGzA5V7XSa4lSMSOT3wqXNr5bV6PYrqyxN6WIisQ/yuvOdB+DU8b3te06Izz vvZduKfi4RN/j4KEBE0NczIEYMHm5ltJ3sPscNGFYOR038YiKqQgqIWXLAFC0PPZ BcGdCDKertI+/67HUMc61ciS56C65NE2RHLAs8NaDNEKMflSKv7SxLvuz9/efSln ZI6bRNyLjcV3xxyvQ+OMtuuFo9t22bUh+dg0fKxRYCXwtVXk7ahg6o3kjIfjMmfK 5fvRgNJqznk5iMa81ypONEXlfOnWlcSYf2KT0YxAKTj4b/VIC+iTC88hjuG5AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUDTrqWg+WyCRcPJGOfdcXvgmKiaowHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDMwMzUz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH gBAFMA0GCSqGSIb3DQEBCwUAA4IBAQCgTgOOQzmB3glqJXaPeYuRkQUBcac5AirD Yjv+zL6bU1dAF8z9tizRg4OjVYyRl3oLSKyg8indNLxI54PUMHsdekfhbKkdNVsF hxCIlTA1Z58xU0FlhXK6q82qXzCJCPacQRTPQWmRjJCzfwft2epxg82OmyRSKQMk C3kEvrBuqdkcs5Rla/RSzDFJtxf0eYlWh5qxwhvoeFWqQYHwteyN/ii1Zo46WmXJ OWcHpxG7EtdXgkMW/NMNoE1pk3EqhwOPXM8o0LlAte00oFE4XlpVFhAvfam25ke6 sSgHqKIX+GnGtPiqDTQff+swXr6i0Jww+E9DjKTs+TeFEIpyzYTF -----END CERTIFICATE-----Generated at Mon Feb 2 12:42:35 2026 by rpki-client