This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/323430363a376163303a3a2f33322d3332203d3e20313431303738.roa File: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (raw, json) Hash identifier: L7IP9MHf9lzBvSIuS3oASd3QVP2r70B7eN+5QUqcHUk= Subject key identifier: E5:78:4B:91:48:C6:60:E4:A2:CA:DD:56:7E:7E:01:FE:11:21:B8:2E Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 5CE6D81D43A8D1D116FA7AE0E1222485C1AC947A Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/323430363a376163303a3a2f33322d3332203d3e20313431303738.roa Signing time: Fri 09 Jan 2026 03:00:02 +0000 ROA not before: Fri 09 Jan 2026 02:55:02 +0000 ROA not after: Fri 08 Jan 2027 03:00:02 +0000 asID: 141078 IP address blocks: 2406:7ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 02:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e6:d8:1d:43:a8:d1:d1:16:fa:7a:e0:e1:22:24:85:c1:ac:94:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: Jan 9 02:55:02 2026 GMT Not After : Jan 8 03:00:02 2027 GMT Subject: CN=E5784B9148C660E4A2CADD567E7E01FE1121B82E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:89:a3:81:bf:68:a6:dd:62:b2:98:52:67:69: 9d:79:ad:e4:7d:27:c5:94:41:b4:5e:89:ad:8a:d5: 0d:42:c3:57:f5:08:f3:4e:e1:b9:b3:67:f4:91:fd: 49:39:a2:ba:9a:66:dd:80:0e:e0:4a:16:ac:63:85: 76:c0:9d:5c:4d:62:ed:fc:0e:ba:de:7d:9a:94:0c: 7c:5b:fd:a0:cf:c8:6e:50:9c:35:c4:ea:f4:41:4a: 04:4b:8b:7d:5c:4e:b0:4b:41:8d:27:35:65:ed:e1: 65:9b:6e:f9:03:b5:27:6f:cb:b4:47:57:e5:2f:bb: 3d:32:47:b5:d4:23:1b:2c:d2:70:65:8f:20:89:de: 5f:35:4c:47:73:96:be:87:0c:cb:3f:2e:20:86:cb: 2c:41:dd:07:fe:5c:41:4c:3d:8b:24:7c:9b:04:9f: b2:ce:18:d2:06:41:55:f2:bd:3b:85:1e:00:5c:85: ad:a5:c5:8a:a8:19:8e:4a:88:f9:f4:21:fa:a9:f2: 6b:66:5e:3f:10:1c:e1:0a:aa:80:b1:96:b9:4d:17: 2b:6c:e2:e1:be:c5:51:96:e7:0f:91:4b:9d:7e:88: f8:b7:b3:ae:38:81:7a:6c:81:a8:07:e0:d3:87:8d: 70:21:46:1b:4c:83:78:c7:f5:21:d6:e1:19:dc:bc: 48:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:78:4B:91:48:C6:60:E4:A2:CA:DD:56:7E:7E:01:FE:11:21:B8:2E X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/323430363a376163303a3a2f33322d3332203d3e20313431303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:7ac0::/32 Signature Algorithm: sha256WithRSAEncryption 56:8f:72:b9:5d:08:b2:34:45:66:7d:0d:4e:fd:8d:83:bc:f0: d8:4c:1e:fa:d7:6a:29:6b:e4:bf:0c:76:6c:6b:66:61:a3:b8: ce:88:67:6a:c8:3a:45:e6:c0:be:77:46:57:d1:6e:b3:43:47: 2f:5a:00:cd:4a:de:47:47:bc:ed:c5:dc:55:53:39:a3:58:12: 96:4f:d4:2b:3b:66:be:5c:4f:8b:36:0c:eb:e2:0a:cb:3e:4e: 59:ae:81:55:3c:a3:7a:7a:81:71:28:0b:dc:e1:76:6d:1a:f5: 40:ed:91:a9:51:f4:be:d0:fc:bd:ad:56:43:cd:46:7c:62:85: 57:56:31:42:18:1a:db:72:27:f0:a8:19:9a:b3:16:11:44:49: dd:50:e7:2e:15:8e:31:a4:61:8c:5a:d8:cb:f7:75:9a:7f:90: 27:b7:35:0a:9b:ae:6f:35:f3:b4:7d:c5:2b:de:65:e6:e7:2e: 85:5a:d8:86:91:4f:8e:75:ca:aa:5c:b7:78:56:02:a1:3b:da: 33:1c:bb:1c:36:07:54:75:89:44:f7:fb:6c:70:45:e5:ff:19: 01:4f:38:61:6e:88:1d:84:c7:e5:9c:aa:f0:d3:b7:de:44:ac: e5:2e:b9:de:74:96:5b:f5:fd:60:eb:15:a9:52:4d:cc:99:e8: d1:07:3b:71 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUXObYHUOo0dEW+nrg4SIkhcGslHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNjAxMDkwMjU1MDJaFw0yNzAxMDgwMzAwMDJaMDMxMTAvBgNV BAMTKEU1Nzg0QjkxNDhDNjYwRTRBMkNBREQ1NjdFN0UwMUZFMTEyMUI4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhiaOBv2im3WKymFJnaZ15reR9 J8WUQbReia2K1Q1Cw1f1CPNO4bmzZ/SR/Uk5orqaZt2ADuBKFqxjhXbAnVxNYu38 DrrefZqUDHxb/aDPyG5QnDXE6vRBSgRLi31cTrBLQY0nNWXt4WWbbvkDtSdvy7RH V+Uvuz0yR7XUIxss0nBljyCJ3l81TEdzlr6HDMs/LiCGyyxB3Qf+XEFMPYskfJsE n7LOGNIGQVXyvTuFHgBcha2lxYqoGY5KiPn0Ifqp8mtmXj8QHOEKqoCxlrlNFyts 4uG+xVGW5w+RS51+iPi3s644gXpsgagH4NOHjXAhRhtMg3jH9SHW4RncvEgBAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU5XhLkUjGYOSiyt1Wfn4B/hEhuC4wHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRjN2QzY2JmLTI0ZDYtNGIxYy04 NmNiLTFkNDg4NzZmM2M2Yi8wLzMyMzQzMDM2M2EzNzYxNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMTMwMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGesAwDQYJKoZI hvcNAQELBQADggEBAFaPcrldCLI0RWZ9DU79jYO88NhMHvrXailr5L8MdmxrZmGj uM6IZ2rIOkXmwL53RlfRbrNDRy9aAM1K3kdHvO3F3FVTOaNYEpZP1Cs7Zr5cT4s2 DOviCss+TlmugVU8o3p6gXEoC9zhdm0a9UDtkalR9L7Q/L2tVkPNRnxihVdWMUIY GttyJ/CoGZqzFhFESd1Q5y4VjjGkYYxa2Mv3dZp/kCe3NQqbrm8187R9xSveZebn LoVa2IaRT451yqpct3hWAqE72jMcuxw2B1R1iUT3+2xwReX/GQFPOGFuiB2Ex+Wc qvDTt95ErOUuud50llv1/WDrFalSTcyZ6NEHO3E= -----END CERTIFICATE-----Generated at Mon Feb 2 14:29:20 2026 by rpki-client