This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313034303a3a2f34382d3438203d3e203633383539.roa File: 323430323a383738303a313034303a3a2f34382d3438203d3e203633383539.roa (raw, json) Hash identifier: LtsY6F7RWeW7yw6MfcxK4/FDMV5Uh6YfSStPg96dZtg= Subject key identifier: 4C:A7:53:EB:F4:D5:73:21:EB:3A:A4:AB:D4:71:2B:34:34:E8:04:95 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 1B83844C3D6141957C99E507F683C80AD10B90AC Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313034303a3a2f34382d3438203d3e203633383539.roa Signing time: Wed 28 Jan 2026 02:38:35 +0000 ROA not before: Wed 28 Jan 2026 02:33:35 +0000 ROA not after: Wed 27 Jan 2027 02:38:35 +0000 asID: 63859 IP address blocks: 2402:8780:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:83:84:4c:3d:61:41:95:7c:99:e5:07:f6:83:c8:0a:d1:0b:90:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Jan 28 02:33:35 2026 GMT Not After : Jan 27 02:38:35 2027 GMT Subject: CN=4CA753EBF4D57321EB3AA4ABD4712B3434E80495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:af:79:8e:b4:dc:1d:ec:79:6f:f0:9d:83:58: f4:19:38:3f:a5:56:13:2c:5b:23:c1:51:ea:1e:33: d6:57:71:85:79:c7:77:8a:3d:cb:bb:bf:d4:17:01: e2:9a:a0:3d:be:5b:de:19:ce:b3:a6:63:4f:f7:69: 59:41:46:3a:a8:93:b2:e6:8a:0c:06:a7:9d:fe:3e: 06:fa:02:d1:e1:92:af:cd:56:7e:c9:00:e7:84:ab: db:d5:ee:b1:16:df:d1:09:fa:18:db:29:a8:5f:ea: 9f:fa:3d:a7:07:03:b1:6c:d0:7b:bd:fe:b2:63:ec: 92:f0:c7:6f:35:ad:76:dc:cf:0e:e8:b0:5a:03:94: 38:e4:d8:be:8e:a6:8b:6e:d4:bf:7a:04:59:3c:69: dd:27:3c:b3:fd:57:90:56:b5:82:91:57:1c:42:84: 16:8b:05:06:e2:0b:43:f4:62:c4:bd:97:92:a4:a1: 4d:0d:13:dd:55:4d:76:f4:ed:98:4a:df:3d:3b:18: 80:15:c3:15:d7:f7:a2:a9:0a:c8:33:f2:90:7a:d3: e3:a5:de:49:fe:1b:fe:6f:ea:78:bf:d1:df:f1:da: a4:33:b1:a1:d0:b3:2c:93:7d:87:7e:a6:cb:dd:44: 2a:d8:bd:9b:b1:db:9c:7b:1d:ec:c2:56:eb:7c:d8: 4c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A7:53:EB:F4:D5:73:21:EB:3A:A4:AB:D4:71:2B:34:34:E8:04:95 X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313034303a3a2f34382d3438203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:8780:1040::/48 Signature Algorithm: sha256WithRSAEncryption 63:79:78:13:1d:b5:90:fd:18:db:30:36:c8:19:89:57:aa:10: dc:d3:6d:e3:6e:b4:d5:20:20:ae:f4:02:44:ca:ff:e3:7a:c9: 97:fe:37:2e:79:db:62:b7:5d:d7:1e:ee:fc:79:c1:11:2d:a0: cb:78:62:a6:bf:40:64:98:4e:fa:99:43:23:47:f7:12:fc:17: ac:5f:37:83:a8:80:aa:c2:ba:7b:f9:ce:14:d2:54:b5:61:1b: 9a:c4:59:a9:44:f4:e0:be:c4:a8:60:57:18:72:27:67:59:31: 26:7d:ac:14:93:de:0a:e0:95:cd:51:bb:55:92:ec:4d:3a:36: 33:59:44:51:4b:4f:ef:26:a8:5f:d0:98:8f:5a:44:9b:6d:b3: 8f:4e:42:53:ce:31:a4:08:1f:b5:54:6e:22:7a:b5:fa:34:f2: e3:72:4f:9f:39:44:c8:10:40:53:a5:21:cf:a0:81:68:77:4d: f2:f6:56:32:46:3a:b6:b9:82:cf:5a:c2:78:ac:e9:94:bc:2f: dc:51:35:2e:fc:74:58:50:da:0d:4a:59:b9:ae:ee:53:77:44: 77:71:ba:6e:58:64:d6:f4:78:d3:cc:17:44:40:b1:e6:92:ae: d5:b0:00:98:b3:64:22:64:e4:8d:d2:34:9a:b6:c2:d0:bf:13: e1:e3:f3:9d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUG4OETD1hQZV8meUH9oPICtELkKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNjAxMjgwMjMzMzVaFw0yNzAxMjcwMjM4MzVaMDMxMTAvBgNV BAMTKDRDQTc1M0VCRjRENTczMjFFQjNBQTRBQkQ0NzEyQjM0MzRFODA0OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRr3mOtNwd7Hlv8J2DWPQZOD+l VhMsWyPBUeoeM9ZXcYV5x3eKPcu7v9QXAeKaoD2+W94ZzrOmY0/3aVlBRjqok7Lm igwGp53+Pgb6AtHhkq/NVn7JAOeEq9vV7rEW39EJ+hjbKahf6p/6PacHA7Fs0Hu9 /rJj7JLwx281rXbczw7osFoDlDjk2L6Opotu1L96BFk8ad0nPLP9V5BWtYKRVxxC hBaLBQbiC0P0YsS9l5KkoU0NE91VTXb07ZhK3z07GIAVwxXX96KpCsgz8pB60+Ol 3kn+G/5v6ni/0d/x2qQzsaHQsyyTfYd+psvdRCrYvZux25x7HezCVut82Ex1AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUTKdT6/TVcyHrOqSr1HErNDToBJUwHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDM0MzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH gBBAMA0GCSqGSIb3DQEBCwUAA4IBAQBjeXgTHbWQ/RjbMDbIGYlXqhDc023jbrTV ICCu9AJEyv/jesmX/jcuedtit13XHu78ecERLaDLeGKmv0BkmE76mUMjR/cS/Bes XzeDqICqwrp7+c4U0lS1YRuaxFmpRPTgvsSoYFcYcidnWTEmfawUk94K4JXNUbtV kuxNOjYzWURRS0/vJqhf0JiPWkSbbbOPTkJTzjGkCB+1VG4ierX6NPLjck+fOUTI EEBTpSHPoIFod03y9lYyRjq2uYLPWsJ4rOmUvC/cUTUu/HRYUNoNSlm5ru5Td0R3 cbpuWGTW9HjTzBdEQLHmkq7VsACYs2QiZOSN0jSatsLQvxPh4/Od -----END CERTIFICATE-----Generated at Mon Feb 2 12:42:52 2026 by rpki-client