This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313032393a3a2f34382d3438203d3e203633383539.roa File: 323430323a383738303a313032393a3a2f34382d3438203d3e203633383539.roa (raw, json) Hash identifier: Fjwx5F8zq6Bao0/JJ+bYnmsLorBjg0yTe85cwHjfkt8= Subject key identifier: C4:36:78:F6:CB:E0:20:D9:47:88:3E:51:32:8E:7B:2A:E5:E7:6D:F7 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 325C48B5CC0D986CC9693FC8CD69340C89A60E2B Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313032393a3a2f34382d3438203d3e203633383539.roa Signing time: Wed 28 Jan 2026 02:39:15 +0000 ROA not before: Wed 28 Jan 2026 02:34:15 +0000 ROA not after: Wed 27 Jan 2027 02:39:15 +0000 asID: 63859 IP address blocks: 2402:8780:1029::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:5c:48:b5:cc:0d:98:6c:c9:69:3f:c8:cd:69:34:0c:89:a6:0e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Jan 28 02:34:15 2026 GMT Not After : Jan 27 02:39:15 2027 GMT Subject: CN=C43678F6CBE020D947883E51328E7B2AE5E76DF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:8b:fc:47:8b:a0:23:8f:58:05:9f:30:9a:b0: 02:81:d7:0a:86:e2:c7:82:8f:95:f3:46:77:c8:12: 06:e9:d7:88:b5:f5:e5:f7:6d:33:8e:d8:d9:cd:57: 0c:c8:f1:0d:13:4f:af:a6:73:66:91:b2:8e:35:b7: b2:be:43:49:3d:ae:f3:6d:b5:14:4a:10:9c:f7:28: a2:fc:9f:a2:0d:61:92:34:45:b5:ec:eb:17:76:65: b1:02:0b:73:97:74:61:eb:96:da:6e:ce:68:52:75: f9:40:6d:3a:3b:96:ce:7c:c3:66:10:91:00:a1:ba: be:c9:0b:99:a8:3e:c8:46:54:fc:00:c9:46:59:44: 58:47:36:0a:5c:ba:40:57:f1:f4:b1:15:9a:94:1e: f0:32:e1:90:3d:d8:df:44:98:dd:d5:86:c3:f5:10: 10:93:13:c8:81:3d:f3:27:81:41:ed:9c:fd:4f:a5: 33:71:a8:78:cb:91:03:bf:50:5d:a6:42:7c:62:26: 1e:e9:50:0b:8c:69:7c:6c:f5:ba:34:a4:92:12:63: 9c:12:40:1f:d5:e7:f7:9e:24:5e:e4:1e:7e:c5:41: 38:42:7b:4a:19:99:7d:4e:97:53:00:e4:15:7f:97: 28:e6:54:b9:4a:d8:09:3e:5e:f9:b9:9e:07:68:ad: 6f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:36:78:F6:CB:E0:20:D9:47:88:3E:51:32:8E:7B:2A:E5:E7:6D:F7 X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313032393a3a2f34382d3438203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:8780:1029::/48 Signature Algorithm: sha256WithRSAEncryption c1:6a:73:62:ca:a4:7c:70:52:d8:61:31:82:78:1e:76:1e:03: 6c:cb:2a:d7:70:5d:3e:8a:f4:69:47:2b:81:38:dc:a2:9c:fc: 98:41:78:ea:53:8c:e8:7d:32:dd:43:51:4a:84:87:f1:89:0d: 2b:78:c3:b6:a1:3a:24:d0:d6:6e:8d:8c:a2:ee:87:e3:ad:a5: 39:b2:99:e8:31:5e:8b:34:ba:47:f3:2b:31:e1:ec:cd:2d:58: f1:06:6e:06:80:ac:7a:f7:ea:36:02:dc:21:0d:74:f1:95:ed: c0:64:16:10:9a:40:ea:7a:b8:10:7d:8c:a6:eb:7a:8c:61:5e: 63:b1:cb:2d:cb:76:1b:cf:9c:56:47:0b:73:e3:34:a0:0c:c0: 9b:67:95:e5:75:f4:90:cf:1e:04:2f:07:4a:84:26:19:f8:0f: 81:86:99:04:a0:bf:19:b2:ae:a4:67:36:8b:18:a7:b6:0a:1a: 85:88:40:9c:32:c3:a0:67:f2:3b:2f:8c:79:09:f3:75:90:97: b0:12:c8:c6:8e:e2:1c:8f:5c:ba:5e:01:09:ea:b9:30:2a:2e: a1:d7:32:49:53:2a:20:30:09:a0:4a:42:40:2a:bb:6e:a0:8b: dd:53:95:78:bf:1f:f2:48:8c:55:1b:42:a3:69:bb:0d:14:c4: be:c3:dd:c3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMlxItcwNmGzJaT/IzWk0DImmDiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNjAxMjgwMjM0MTVaFw0yNzAxMjcwMjM5MTVaMDMxMTAvBgNV BAMTKEM0MzY3OEY2Q0JFMDIwRDk0Nzg4M0U1MTMyOEU3QjJBRTVFNzZERjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+i/xHi6Ajj1gFnzCasAKB1wqG 4seCj5XzRnfIEgbp14i19eX3bTOO2NnNVwzI8Q0TT6+mc2aRso41t7K+Q0k9rvNt tRRKEJz3KKL8n6INYZI0RbXs6xd2ZbECC3OXdGHrltpuzmhSdflAbTo7ls58w2YQ kQChur7JC5moPshGVPwAyUZZRFhHNgpcukBX8fSxFZqUHvAy4ZA92N9EmN3VhsP1 EBCTE8iBPfMngUHtnP1PpTNxqHjLkQO/UF2mQnxiJh7pUAuMaXxs9bo0pJISY5wS QB/V5/eeJF7kHn7FQThCe0oZmX1Ol1MA5BV/lyjmVLlK2Ak+Xvm5ngdorW89AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUxDZ49svgINlHiD5RMo57KuXnbfcwHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDMyMzkz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH gBApMA0GCSqGSIb3DQEBCwUAA4IBAQDBanNiyqR8cFLYYTGCeB52HgNsyyrXcF0+ ivRpRyuBONyinPyYQXjqU4zofTLdQ1FKhIfxiQ0reMO2oTok0NZujYyi7ofjraU5 spnoMV6LNLpH8ysx4ezNLVjxBm4GgKx69+o2AtwhDXTxle3AZBYQmkDqergQfYym 63qMYV5jscsty3Ybz5xWRwtz4zSgDMCbZ5XldfSQzx4ELwdKhCYZ+A+BhpkEoL8Z sq6kZzaLGKe2ChqFiECcMsOgZ/I7L4x5CfN1kJewEsjGjuIcj1y6XgEJ6rkwKi6h 1zJJUyogMAmgSkJAKrtuoIvdU5V4vx/ySIxVG0KjabsNFMS+w93D -----END CERTIFICATE-----Generated at Mon Feb 2 12:42:53 2026 by rpki-client