This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313034383a3a2f34382d3438203d3e203633383539.roa File: 323430323a383738303a313034383a3a2f34382d3438203d3e203633383539.roa (raw, json) Hash identifier: asRSm/iZTgBSaWKZf/851/YblFfjUE7kb+XhnDf2GjA= Subject key identifier: CE:30:D2:CB:32:00:CD:3A:53:9B:C4:DE:2E:A8:A9:0C:B7:C4:B2:F5 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 2413952D747812895F0BE5501DBD6219628A814B Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313034383a3a2f34382d3438203d3e203633383539.roa Signing time: Wed 28 Jan 2026 03:53:11 +0000 ROA not before: Wed 28 Jan 2026 03:48:11 +0000 ROA not after: Wed 27 Jan 2027 03:53:11 +0000 asID: 63859 IP address blocks: 2402:8780:1048::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:13:95:2d:74:78:12:89:5f:0b:e5:50:1d:bd:62:19:62:8a:81:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Jan 28 03:48:11 2026 GMT Not After : Jan 27 03:53:11 2027 GMT Subject: CN=CE30D2CB3200CD3A539BC4DE2EA8A90CB7C4B2F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1d:e3:05:63:83:a9:d8:5a:93:13:4d:85:6c: 9d:fd:26:f6:c6:ec:1d:68:1d:89:c3:8d:13:38:6b: 52:fb:c9:97:ad:c8:6d:c7:73:ec:9d:3d:28:6e:d1: c3:55:91:b4:b3:97:57:1d:42:e0:b6:4e:94:55:94: 59:16:f2:28:d5:97:94:a3:3b:1e:ea:76:8e:8f:c6: 7d:e1:f2:75:f6:73:20:86:18:3a:2b:4e:ec:ba:04: 27:bf:eb:be:99:fd:02:9b:d5:9f:27:9b:86:df:8c: f0:f5:7d:30:49:67:60:a6:08:f1:ed:88:0e:98:77: bd:de:52:6a:68:17:db:1b:51:ae:a9:0c:2a:70:41: b5:eb:15:9a:e0:38:71:4e:98:e9:47:63:f7:0f:ca: 34:5b:0b:aa:18:ce:c8:cf:09:52:3c:bb:63:fa:12: bb:a9:f5:cd:43:81:3c:84:79:1c:97:cd:5a:41:ec: 66:eb:5c:58:0d:3f:f6:a4:cc:6c:93:2c:2a:6e:5c: 58:e3:14:d7:f0:50:ae:b4:7f:90:90:d4:df:16:ec: 16:5a:f2:35:db:38:fa:53:94:cc:50:e1:0a:d8:e8: e5:8d:3e:08:25:9f:07:f3:89:97:0c:57:6d:ad:ad: ab:5c:d9:2b:cb:13:41:37:2e:2f:67:96:17:a3:94: bf:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:30:D2:CB:32:00:CD:3A:53:9B:C4:DE:2E:A8:A9:0C:B7:C4:B2:F5 X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313034383a3a2f34382d3438203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:8780:1048::/48 Signature Algorithm: sha256WithRSAEncryption d7:13:ce:e1:f5:e5:07:0d:60:17:1e:a5:d2:83:87:f1:bb:8d: 84:c1:34:07:19:3d:24:09:a8:97:02:e8:16:25:34:b7:f8:fc: 44:7f:73:39:e9:75:20:aa:9c:a9:cf:9e:78:13:f7:71:dc:1a: 8f:6a:12:36:a7:cd:25:0a:c8:cc:ca:17:f7:0e:54:ac:89:30: 13:c6:2c:64:4a:eb:66:06:9d:75:d4:94:5c:1a:a1:8f:88:05: e2:e3:bf:e4:99:d0:3f:4b:8c:d4:ae:cd:ab:7c:59:9f:13:86: 05:e1:f5:bc:fa:cf:f1:fd:eb:0e:d2:6f:41:bd:6e:ba:20:15: c7:81:9e:bf:26:39:1d:3b:3f:81:50:72:94:87:25:88:85:dc: 82:cf:c1:f9:c0:14:82:1b:71:45:e1:ff:9b:3f:18:4c:e5:bd: f6:04:20:19:78:f7:b8:d3:3a:bd:80:bb:5d:28:3b:4f:80:f0: 20:c8:f4:bb:5c:34:71:4e:25:f3:a8:04:b1:08:a1:db:5e:9f: 68:60:25:ad:ea:ed:59:4a:69:7d:09:12:8b:81:84:b1:01:82: 3b:60:63:cf:c9:3b:1f:fd:dd:8d:7d:e0:59:7a:b1:10:1f:50: cb:ba:18:72:af:07:3f:15:b1:76:e8:20:ac:25:35:3c:42:c0: 97:64:f2:d9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJBOVLXR4EolfC+VQHb1iGWKKgUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNjAxMjgwMzQ4MTFaFw0yNzAxMjcwMzUzMTFaMDMxMTAvBgNV BAMTKENFMzBEMkNCMzIwMENEM0E1MzlCQzRERTJFQThBOTBDQjdDNEIyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmHeMFY4Op2FqTE02FbJ39JvbG 7B1oHYnDjRM4a1L7yZetyG3Hc+ydPShu0cNVkbSzl1cdQuC2TpRVlFkW8ijVl5Sj Ox7qdo6Pxn3h8nX2cyCGGDorTuy6BCe/676Z/QKb1Z8nm4bfjPD1fTBJZ2CmCPHt iA6Yd73eUmpoF9sbUa6pDCpwQbXrFZrgOHFOmOlHY/cPyjRbC6oYzsjPCVI8u2P6 Erup9c1DgTyEeRyXzVpB7GbrXFgNP/akzGyTLCpuXFjjFNfwUK60f5CQ1N8W7BZa 8jXbOPpTlMxQ4QrY6OWNPgglnwfziZcMV22tratc2SvLE0E3Li9nlhejlL9FAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUzjDSyzIAzTpTm8TeLqipDLfEsvUwHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDM0Mzgz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH gBBIMA0GCSqGSIb3DQEBCwUAA4IBAQDXE87h9eUHDWAXHqXSg4fxu42EwTQHGT0k CaiXAugWJTS3+PxEf3M56XUgqpypz554E/dx3BqPahI2p80lCsjMyhf3DlSsiTAT xixkSutmBp111JRcGqGPiAXi47/kmdA/S4zUrs2rfFmfE4YF4fW8+s/x/esO0m9B vW66IBXHgZ6/JjkdOz+BUHKUhyWIhdyCz8H5wBSCG3FF4f+bPxhM5b32BCAZePe4 0zq9gLtdKDtPgPAgyPS7XDRxTiXzqASxCKHbXp9oYCWt6u1ZSml9CRKLgYSxAYI7 YGPPyTsf/d2NfeBZerEQH1DLuhhyrwc/FbF26CCsJTU8QsCXZPLZ -----END CERTIFICATE-----Generated at Mon Feb 2 12:42:34 2026 by rpki-client