This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313031623a3a2f34382d3438203d3e203633383639.roa
File: 323430323a383738303a313031623a3a2f34382d3438203d3e203633383639.roa (raw, json)
Hash identifier: 8AGJuasHzMx2A0Z5FMrDF0ItFI5j8FsNffDHrANNPzk=
Subject key identifier: 74:03:A6:05:F0:E4:4E:7C:F7:44:8F:5A:A0:FC:0C:C8:40:AF:8B:BC
Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Certificate serial: 1C833D1F6DFB659DE0B1A400A3285C36464FE662
Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313031623a3a2f34382d3438203d3e203633383639.roa
Signing time: Wed 28 Jan 2026 03:52:48 +0000
ROA not before: Wed 28 Jan 2026 03:47:48 +0000
ROA not after: Wed 27 Jan 2027 03:52:48 +0000
asID: 63869
IP address blocks: 2402:8780:101b::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:83:3d:1f:6d:fb:65:9d:e0:b1:a4:00:a3:28:5c:36:46:4f:e6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Validity
Not Before: Jan 28 03:47:48 2026 GMT
Not After : Jan 27 03:52:48 2027 GMT
Subject: CN=7403A605F0E44E7CF7448F5AA0FC0CC840AF8BBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:b7:d6:b3:79:e4:20:24:1b:4a:ea:1a:fe:
15:e0:55:d0:b6:be:01:9c:5e:6f:bb:35:6c:9f:a9:
9c:63:fe:fc:ef:da:3d:f8:16:bf:87:18:19:52:c5:
1b:18:c4:e5:5c:88:80:1c:95:96:8c:0c:7a:1d:f0:
dd:83:fb:18:c3:04:13:ce:bf:6e:ef:45:ae:10:e9:
21:33:15:f2:09:c8:8e:e0:f7:8c:af:7e:90:11:b1:
69:50:34:8f:90:5b:0b:aa:e9:71:e5:22:98:b1:66:
05:86:1e:2e:6b:47:8e:8e:3f:c6:5a:53:96:9f:6f:
4e:9d:8e:cf:3b:99:82:51:14:5b:7f:c6:6a:82:16:
5c:f9:89:f6:68:35:cf:92:b7:e0:ff:65:b9:bc:2d:
f9:7b:1a:77:f0:33:d1:4d:b6:08:b4:61:aa:b4:d7:
56:78:b1:a3:49:c6:0d:af:ad:2f:b3:b9:57:d6:13:
70:9d:73:51:43:72:e0:dd:7e:80:a0:99:86:1e:6d:
10:c0:88:88:d2:41:dd:26:16:2e:69:8e:d0:22:46:
75:67:8a:e9:06:7e:b5:14:2d:fa:aa:79:51:a9:81:
b1:71:4c:5a:8c:df:19:ab:c6:d2:7c:17:4c:52:a3:
a8:03:eb:7a:24:dc:43:f4:70:1f:27:ab:56:df:68:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:03:A6:05:F0:E4:4E:7C:F7:44:8F:5A:A0:FC:0C:C8:40:AF:8B:BC
X509v3 Authority Key Identifier:
keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313031623a3a2f34382d3438203d3e203633383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:101b::/48
Signature Algorithm: sha256WithRSAEncryption
dc:e9:39:44:c2:1d:9c:4f:e1:ac:c2:c3:57:2f:62:2a:fa:29:
ec:d6:a8:0b:5d:43:ea:4b:c0:b8:f2:43:f7:81:86:d0:58:47:
11:d0:4e:8a:28:f4:7b:ef:e5:7b:88:f4:f0:ed:0a:37:e5:1d:
27:02:6c:ad:9e:cc:51:d2:00:87:64:c2:46:44:ee:ff:71:41:
6e:5a:d4:f4:1e:ea:b8:eb:f2:b5:bc:ff:24:f0:3b:b0:10:e2:
26:5c:75:ba:c2:eb:32:8c:a8:93:71:94:9c:37:d3:c6:46:63:
b9:fa:8c:36:57:a9:91:2b:56:48:0d:04:69:49:95:f7:54:9f:
d9:22:80:20:5b:1f:9f:65:75:c9:8f:8e:ff:fd:40:cf:ef:d4:
3e:b9:0f:db:8f:e6:f4:a7:f7:af:5d:94:de:52:51:ec:c1:11:
84:07:e6:08:48:0b:eb:23:ea:1d:aa:ad:06:52:8f:cd:e4:05:
02:b1:78:5e:ec:6c:b3:25:77:f7:1c:4f:a9:17:9e:0b:8e:fd:
9f:c3:51:ad:7c:7d:ea:48:53:75:a5:bb:17:7e:08:d1:7a:a9:
97:e1:5d:43:e4:6d:0c:c7:2d:83:c9:4e:28:63:86:07:17:6d:
78:c4:ef:2f:9c:20:25:31:19:16:f2:26:19:f9:ff:e3:b6:e0:
03:42:9d:7c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUHIM9H237ZZ3gsaQAoyhcNkZP5mIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky
N0E3NDRFNDAeFw0yNjAxMjgwMzQ3NDhaFw0yNzAxMjcwMzUyNDhaMDMxMTAvBgNV
BAMTKDc0MDNBNjA1RjBFNDRFN0NGNzQ0OEY1QUEwRkMwQ0M4NDBBRjhCQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxd7fWs3nkICQbSuoa/hXgVdC2
vgGcXm+7NWyfqZxj/vzv2j34Fr+HGBlSxRsYxOVciIAclZaMDHod8N2D+xjDBBPO
v27vRa4Q6SEzFfIJyI7g94yvfpARsWlQNI+QWwuq6XHlIpixZgWGHi5rR46OP8Za
U5afb06djs87mYJRFFt/xmqCFlz5ifZoNc+St+D/Zbm8Lfl7GnfwM9FNtgi0Yaq0
11Z4saNJxg2vrS+zuVfWE3Cdc1FDcuDdfoCgmYYebRDAiIjSQd0mFi5pjtAiRnVn
iukGfrUULfqqeVGpgbFxTFqM3xmrxtJ8F0xSo6gD63ok3EP0cB8nq1bfaHkTAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUdAOmBfDkTnz3RI9aoPwMyECvi7wwHwYDVR0j
BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE
NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3
NDRFNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04
NTk4LWI3Y2QxMDEzNDNjYS8wLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDMxNjIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH
gBAbMA0GCSqGSIb3DQEBCwUAA4IBAQDc6TlEwh2cT+GswsNXL2Iq+ins1qgLXUPq
S8C48kP3gYbQWEcR0E6KKPR77+V7iPTw7Qo35R0nAmytnsxR0gCHZMJGRO7/cUFu
WtT0Huq46/K1vP8k8DuwEOImXHW6wusyjKiTcZScN9PGRmO5+ow2V6mRK1ZIDQRp
SZX3VJ/ZIoAgWx+fZXXJj47//UDP79Q+uQ/bj+b0p/evXZTeUlHswRGEB+YISAvr
I+odqq0GUo/N5AUCsXhe7GyzJXf3HE+pF54Ljv2fw1GtfH3qSFN1pbsXfgjReqmX
4V1D5G0Mxy2DyU4oY4YHF214xO8vnCAlMRkW8iYZ+f/jtuADQp18
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:42:54 2026 by rpki-client