This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313037393a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313037393a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: 35RT49VcdlH2atWjsCg6L0WgE2qQ9S/7bPi9DmsolG0=
Subject key identifier: 56:4E:88:3E:B8:00:C5:6A:1C:8C:09:E2:38:B6:95:AA:9A:AF:34:BC
Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Certificate serial: 2DF5DA3A95F539CB70119E65508F597E345BE3A7
Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313037393a3a2f34382d3438203d3e203633383539.roa
Signing time: Wed 28 Jan 2026 02:38:09 +0000
ROA not before: Wed 28 Jan 2026 02:33:09 +0000
ROA not after: Wed 27 Jan 2027 02:38:09 +0000
asID: 63859
IP address blocks: 2402:8780:1079::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f5:da:3a:95:f5:39:cb:70:11:9e:65:50:8f:59:7e:34:5b:e3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Validity
Not Before: Jan 28 02:33:09 2026 GMT
Not After : Jan 27 02:38:09 2027 GMT
Subject: CN=564E883EB800C56A1C8C09E238B695AA9AAF34BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8c:65:0e:9e:b6:d7:30:f6:7b:cd:b2:ee:6a:
4f:4b:81:10:44:e4:ef:a7:21:9a:51:9c:c1:1b:f9:
0e:33:ec:9b:0e:5c:21:8c:ec:af:4d:88:67:fb:18:
af:9f:45:3d:7e:0b:77:4e:f8:20:5f:56:d1:e8:58:
2a:1c:f2:6b:68:34:40:ec:bc:5f:2b:a3:9a:7c:27:
f5:47:22:01:6d:fc:9a:98:b9:11:77:96:97:d1:6a:
46:fa:96:1e:ea:81:d6:2a:54:87:4d:ab:a4:7e:b8:
40:05:58:f8:d7:15:76:dc:9e:4c:ec:5f:ab:ee:9d:
6f:44:08:98:03:37:1e:21:0d:80:be:a9:80:01:2c:
0d:dd:e1:4c:f3:3d:95:ab:4b:c5:00:e1:49:27:49:
7a:0b:a8:37:b1:a6:88:48:45:a4:42:b9:c8:e3:a8:
9b:ce:df:3d:45:ab:8c:b1:bf:ad:f2:2e:08:73:a0:
c7:09:74:94:b5:a0:fe:05:6c:ed:44:1f:f0:13:ab:
d3:86:9b:2a:ca:78:65:97:ee:eb:37:7f:c5:ef:45:
5b:e8:de:6b:10:f9:d7:a0:6f:42:59:72:3a:81:d6:
45:45:7c:00:82:6b:27:55:52:2b:b3:5b:7a:68:53:
7e:b2:95:7f:a7:9e:e2:1d:2a:cf:44:1f:09:c5:68:
f6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4E:88:3E:B8:00:C5:6A:1C:8C:09:E2:38:B6:95:AA:9A:AF:34:BC
X509v3 Authority Key Identifier:
keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313037393a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:1079::/48
Signature Algorithm: sha256WithRSAEncryption
a1:f9:72:a4:5b:9a:6e:8f:7a:0d:41:d3:83:c6:75:9e:7a:06:
93:8e:a5:a7:91:c4:4b:57:33:cc:9d:bc:9c:8b:36:e2:e6:40:
a0:22:f4:29:41:91:77:c7:9a:a6:fe:1b:2f:8d:e8:a4:c1:0b:
7c:12:64:14:2d:ae:57:f3:4f:6f:a1:3d:52:5e:e7:9c:64:a7:
71:75:68:ff:de:34:f0:e8:69:30:c3:5a:b7:56:9d:8d:b1:0a:
54:3a:b2:fb:de:c5:93:10:cc:98:db:93:9a:19:86:e6:80:f7:
a8:25:c2:f3:ca:87:75:dc:a7:7f:fd:fd:23:39:01:19:f8:98:
3e:43:be:14:34:6d:75:a1:1f:47:29:5d:18:73:8b:d0:c7:d7:
47:1a:1d:d9:79:56:31:5e:39:67:b4:8f:94:5e:82:d0:7d:54:
89:83:89:d1:a4:55:fb:dd:78:49:ce:4d:09:24:c2:dd:fa:8d:
06:bf:b4:85:31:b6:c7:25:db:b9:66:69:39:75:1a:78:2e:26:
90:d4:d7:f9:8a:8f:10:c7:9f:f7:69:b6:aa:84:d6:94:0f:bf:
48:5f:c1:28:fe:e4:a1:a4:bf:04:fc:c7:21:d8:c5:06:b1:a3:
16:df:3c:56:82:68:9f:b9:9e:cb:b8:3d:d8:df:f2:d8:71:bb:
98:b6:d7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:42:53 2026 by rpki-client