This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313037383a3a2f34382d3438203d3e203633383539.roa File: 323430323a383738303a313037383a3a2f34382d3438203d3e203633383539.roa (raw, json) Hash identifier: b048LjXG7Bj6FmjU04I9jx+4VjHctbpMHIoz4fjos0M= Subject key identifier: AC:DA:1B:D6:37:AD:24:AF:82:2A:26:96:CE:D8:4B:F6:68:B3:AE:C1 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 4378DD98174176238C92BF336DA80212CC8511D8 Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313037383a3a2f34382d3438203d3e203633383539.roa Signing time: Wed 28 Jan 2026 02:39:00 +0000 ROA not before: Wed 28 Jan 2026 02:34:00 +0000 ROA not after: Wed 27 Jan 2027 02:39:00 +0000 asID: 63859 IP address blocks: 2402:8780:1078::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:78:dd:98:17:41:76:23:8c:92:bf:33:6d:a8:02:12:cc:85:11:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Jan 28 02:34:00 2026 GMT Not After : Jan 27 02:39:00 2027 GMT Subject: CN=ACDA1BD637AD24AF822A2696CED84BF668B3AEC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:79:06:9b:d2:db:fe:fc:d4:75:f2:4c:71:bd: 33:19:1d:15:90:1a:a6:dc:b1:30:9a:0b:34:87:cd: cb:f2:7d:7c:0c:18:f9:26:69:0d:0e:e8:39:c0:2d: 35:5b:5e:0b:54:0f:e2:77:34:cc:62:17:51:54:f2: 69:b1:46:51:4f:51:59:b2:e5:ba:58:d6:b1:3c:97: 0f:80:ae:d8:70:65:35:18:34:25:42:79:9e:6f:5c: cf:d7:f3:31:13:8e:be:13:45:c5:d3:87:e2:3d:52: 2b:1a:1f:11:f9:80:3c:6f:66:75:de:87:6a:64:34: 4e:0a:e7:07:d5:ce:8c:f6:13:c2:5d:01:e0:c0:e3: 8d:e6:42:7b:15:8c:37:cf:f5:76:24:3d:5e:68:f8: b1:b1:a0:b8:38:f4:1c:a1:b7:68:3c:0b:cb:b5:21: 7b:1b:71:ac:1b:21:1e:c0:4b:d4:9d:af:40:51:5d: 53:50:79:a5:a6:af:5a:00:22:ba:13:e4:87:00:ff: a8:a7:0c:5e:45:bc:ab:7b:d1:39:f3:1f:ed:29:18: 21:f8:8a:b5:f6:d2:05:e3:1e:2a:36:36:37:5b:2d: 03:67:57:ce:e2:ca:c1:76:96:8f:18:94:0e:64:8f: 15:43:6c:bc:b2:36:37:c3:7e:6a:dc:f5:1e:8b:ac: 11:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DA:1B:D6:37:AD:24:AF:82:2A:26:96:CE:D8:4B:F6:68:B3:AE:C1 X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313037383a3a2f34382d3438203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:8780:1078::/48 Signature Algorithm: sha256WithRSAEncryption be:86:ca:cc:45:c0:3f:ee:04:95:d3:25:f1:77:e4:0a:e9:33: 49:43:51:4b:cd:d0:de:b0:e6:9e:0a:d1:5a:74:32:a7:ff:78: f6:03:02:07:e3:50:2e:66:ea:f4:00:7f:f3:eb:0c:2b:f2:d5: ab:dd:4a:27:cb:33:66:1d:e7:0b:a4:8b:b2:b1:ef:f9:08:49: 85:c2:57:a4:60:65:85:b2:ca:48:17:ae:8d:5e:fd:38:5c:05: 4c:31:dd:be:b8:9e:73:3e:cb:31:18:28:cf:c0:6e:44:e8:2d: df:c2:d0:14:ca:01:32:22:8c:78:2c:59:3f:b2:5b:4c:aa:df: 3b:af:00:be:57:9a:5c:04:d4:ab:32:a8:b4:53:05:46:9b:19: 5e:a1:6a:90:dc:ec:be:24:20:35:b9:69:82:b9:4d:bb:27:b6: b2:1a:d0:21:46:56:d7:65:c2:83:df:f9:6f:a6:99:22:b7:2a: 04:66:10:16:a6:3e:4f:f1:95:f1:31:ec:6c:08:d6:e6:8d:26: 91:31:14:ed:3a:dd:cb:d1:12:9d:03:4e:ce:af:fc:90:24:19: 9e:4a:42:e3:18:94:15:71:ae:be:41:cb:e1:28:64:88:1b:9c: 83:01:42:8f:b4:f1:f6:11:bc:d1:7c:52:f4:f6:86:82:e5:6e: 7e:25:92:00 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQ3jdmBdBdiOMkr8zbagCEsyFEdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNjAxMjgwMjM0MDBaFw0yNzAxMjcwMjM5MDBaMDMxMTAvBgNV BAMTKEFDREExQkQ2MzdBRDI0QUY4MjJBMjY5NkNFRDg0QkY2NjhCM0FFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOeQab0tv+/NR18kxxvTMZHRWQ GqbcsTCaCzSHzcvyfXwMGPkmaQ0O6DnALTVbXgtUD+J3NMxiF1FU8mmxRlFPUVmy 5bpY1rE8lw+ArthwZTUYNCVCeZ5vXM/X8zETjr4TRcXTh+I9UisaHxH5gDxvZnXe h2pkNE4K5wfVzoz2E8JdAeDA443mQnsVjDfP9XYkPV5o+LGxoLg49Byht2g8C8u1 IXsbcawbIR7AS9Sdr0BRXVNQeaWmr1oAIroT5IcA/6inDF5FvKt70TnzH+0pGCH4 irX20gXjHio2NjdbLQNnV87iysF2lo8YlA5kjxVDbLyyNjfDfmrc9R6LrBHFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUrNob1jetJK+CKiaWzthL9mizrsEwHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDM3Mzgz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH gBB4MA0GCSqGSIb3DQEBCwUAA4IBAQC+hsrMRcA/7gSV0yXxd+QK6TNJQ1FLzdDe sOaeCtFadDKn/3j2AwIH41AuZur0AH/z6wwr8tWr3UonyzNmHecLpIuyse/5CEmF wlekYGWFsspIF66NXv04XAVMMd2+uJ5zPssxGCjPwG5E6C3fwtAUygEyIox4LFk/ sltMqt87rwC+V5pcBNSrMqi0UwVGmxleoWqQ3Oy+JCA1uWmCuU27J7ayGtAhRlbX ZcKD3/lvppkityoEZhAWpj5P8ZXxMexsCNbmjSaRMRTtOt3L0RKdA07Or/yQJBme SkLjGJQVca6+QcvhKGSIG5yDAUKPtPH2EbzRfFL09oaC5W5+JZIA -----END CERTIFICATE-----Generated at Mon Feb 2 12:42:52 2026 by rpki-client