This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313031363a3a2f34382d3438203d3e203633383539.roa File: 323430323a383738303a313031363a3a2f34382d3438203d3e203633383539.roa (raw, json) Hash identifier: jGsShgBdcmu1xFDvQxHLm/DzmZkaJd0+o4fg3Jrx1As= Subject key identifier: 64:E3:C4:D2:BB:F7:FA:25:95:D8:9A:B0:7B:12:B9:DA:25:A2:0A:B0 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 054F4FEB2E1A19DE6EC1D7FF4AF787FC6438B600 Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313031363a3a2f34382d3438203d3e203633383539.roa Signing time: Wed 28 Jan 2026 02:48:04 +0000 ROA not before: Wed 28 Jan 2026 02:43:04 +0000 ROA not after: Wed 27 Jan 2027 02:48:04 +0000 asID: 63859 IP address blocks: 2402:8780:1016::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4f:4f:eb:2e:1a:19:de:6e:c1:d7:ff:4a:f7:87:fc:64:38:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Jan 28 02:43:04 2026 GMT Not After : Jan 27 02:48:04 2027 GMT Subject: CN=64E3C4D2BBF7FA2595D89AB07B12B9DA25A20AB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:66:cb:a5:07:e1:74:96:44:6a:52:80:54:a0: fe:ad:c5:b6:ad:d9:1e:a6:46:68:9e:1e:9a:31:9d: cb:b9:07:6f:6a:0b:4b:89:11:6c:38:00:5c:85:ec: ca:00:d0:a0:2f:a3:80:46:bb:84:db:21:16:d9:35: 07:10:14:11:97:12:e6:d9:b0:40:2b:62:8d:b0:14: c5:c4:ad:f3:af:39:0d:41:d8:56:33:e0:f0:ca:ae: 9b:e0:15:ea:1c:90:bf:ec:50:c8:83:15:f7:7d:9b: 6f:a6:35:c9:4d:04:5d:21:9f:58:81:26:e5:f6:18: a1:39:d6:9b:bb:26:68:10:4a:45:e1:d3:5d:22:6f: f4:a8:a4:7e:55:cb:62:a0:65:6c:d0:ed:0b:b4:15: b3:77:ac:59:47:fa:88:60:4b:12:56:08:29:0b:64: f6:a7:a5:20:16:62:71:32:77:ef:1b:f8:79:2a:8e: 72:1a:30:d1:b5:a2:4a:38:20:a5:9f:b5:a6:d4:54: 0e:da:51:b4:ee:f7:84:db:f8:96:3d:a2:46:c0:95: 5d:38:58:01:2d:56:1a:98:2d:d5:d6:6c:ee:6f:93: fb:37:7c:b4:46:9f:0b:dd:e0:5d:a5:f4:97:65:7d: 30:e4:5e:58:41:c4:ac:c9:58:e8:8f:a6:c2:da:06: cd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E3:C4:D2:BB:F7:FA:25:95:D8:9A:B0:7B:12:B9:DA:25:A2:0A:B0 X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313031363a3a2f34382d3438203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:8780:1016::/48 Signature Algorithm: sha256WithRSAEncryption 48:83:ca:2b:19:6a:30:90:66:a0:af:ee:38:46:67:a3:20:f3: 41:2d:a3:6b:8b:8c:63:c0:84:4b:a3:9a:be:05:fb:6e:6d:46: 73:34:94:25:a0:9e:2f:03:88:d6:2e:e0:4c:b7:4a:87:2e:29: 4a:d9:14:05:6b:3e:31:8a:e9:ee:75:72:e9:95:0c:34:3b:8b: 48:19:f5:fe:56:6a:66:9e:39:15:85:b1:f0:f4:2b:e2:b2:57: f0:ac:ac:ab:0c:16:75:4d:32:28:9c:c9:ea:d6:de:5b:5c:45: 2c:06:7d:f0:36:44:6f:40:24:03:47:0c:9d:9c:e9:7d:97:42: f4:44:91:95:7a:d3:cc:92:9b:ba:bc:b6:cc:18:be:5d:59:4c: f7:49:2b:79:02:a8:c5:e9:86:7f:1c:e1:a6:5e:ae:f7:ec:e3: aa:69:a1:29:b9:4b:68:16:d6:85:b4:8a:74:63:36:db:6c:63: f9:82:d3:8c:f8:91:8b:8d:d1:06:f7:3a:5f:fb:a5:39:9f:5c: c0:9f:20:70:4a:2b:7a:89:87:96:1a:f3:6a:5c:ea:9c:ce:10: 23:29:3a:a9:7d:2e:06:91:41:2f:8f:23:81:a9:99:f7:54:9e: 38:77:aa:23:a3:13:5c:59:77:9d:56:88:f9:85:2b:fb:e2:da: 27:88:61:a9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUBU9P6y4aGd5uwdf/SveH/GQ4tgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNjAxMjgwMjQzMDRaFw0yNzAxMjcwMjQ4MDRaMDMxMTAvBgNV BAMTKDY0RTNDNEQyQkJGN0ZBMjU5NUQ4OUFCMDdCMTJCOURBMjVBMjBBQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZsulB+F0lkRqUoBUoP6txbat 2R6mRmieHpoxncu5B29qC0uJEWw4AFyF7MoA0KAvo4BGu4TbIRbZNQcQFBGXEubZ sEArYo2wFMXErfOvOQ1B2FYz4PDKrpvgFeockL/sUMiDFfd9m2+mNclNBF0hn1iB JuX2GKE51pu7JmgQSkXh010ib/SopH5Vy2KgZWzQ7Qu0FbN3rFlH+ohgSxJWCCkL ZPanpSAWYnEyd+8b+HkqjnIaMNG1oko4IKWftabUVA7aUbTu94Tb+JY9okbAlV04 WAEtVhqYLdXWbO5vk/s3fLRGnwvd4F2l9JdlfTDkXlhBxKzJWOiPpsLaBs0FAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUZOPE0rv3+iWV2JqwexK52iWiCrAwHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDMxMzYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH gBAWMA0GCSqGSIb3DQEBCwUAA4IBAQBIg8orGWowkGagr+44RmejIPNBLaNri4xj wIRLo5q+BftubUZzNJQloJ4vA4jWLuBMt0qHLilK2RQFaz4xiunudXLplQw0O4tI GfX+VmpmnjkVhbHw9CvislfwrKyrDBZ1TTIonMnq1t5bXEUsBn3wNkRvQCQDRwyd nOl9l0L0RJGVetPMkpu6vLbMGL5dWUz3SSt5AqjF6YZ/HOGmXq737OOqaaEpuUto FtaFtIp0YzbbbGP5gtOM+JGLjdEG9zpf+6U5n1zAnyBwSit6iYeWGvNqXOqczhAj KTqpfS4GkUEvjyOBqZn3VJ44d6ojoxNcWXedVoj5hSv74toniGGp -----END CERTIFICATE-----Generated at Mon Feb 2 12:42:50 2026 by rpki-client