This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/323430353a3730303a3a2f33322d3332203d3e2039323531.roa File: 323430353a3730303a3a2f33322d3332203d3e2039323531.roa (raw, json) Hash identifier: zJMU7QEPzt1Do0d3+Mn+WDUWKKEjrLl9f5m3udavO0Q= Subject key identifier: D5:FC:3F:1F:78:26:15:FF:9E:35:BF:98:7E:40:68:36:5E:C7:A7:C1 Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 0F6DEBA26B2044414678380839C9E2EC840EA160 Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/323430353a3730303a3a2f33322d3332203d3e2039323531.roa Signing time: Fri 30 Jan 2026 06:21:27 +0000 ROA not before: Fri 30 Jan 2026 06:16:27 +0000 ROA not after: Fri 29 Jan 2027 06:21:27 +0000 asID: 9251 IP address blocks: 2405:700::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 03:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:6d:eb:a2:6b:20:44:41:46:78:38:08:39:c9:e2:ec:84:0e:a1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Jan 30 06:16:27 2026 GMT Not After : Jan 29 06:21:27 2027 GMT Subject: CN=D5FC3F1F782615FF9E35BF987E4068365EC7A7C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b8:95:dc:01:88:b1:43:aa:be:d0:5e:e7:50: 80:54:8e:e5:9d:8b:6f:8f:ae:0c:db:13:83:f0:6f: e4:f2:63:87:08:c2:dc:48:8a:03:b6:89:db:43:14: b9:89:f4:7d:38:ad:45:f8:7b:47:39:79:68:91:dc: a2:e9:bc:21:3b:3d:a4:8e:f9:9d:03:53:23:d5:b6: 61:90:a8:12:3d:ce:f3:6f:85:45:d8:09:2d:eb:8d: f2:eb:58:75:0b:5a:97:e6:57:e5:69:89:2d:bd:e3: 55:39:78:96:d1:4a:91:a4:4f:ef:a1:57:9d:cb:43: be:b1:5b:5a:64:5c:d4:10:2a:d4:a8:d1:73:1b:a9: a9:3b:01:2f:c8:23:72:13:f1:6f:b9:7d:0c:91:d3: ff:72:f6:1f:9f:af:54:a1:ad:22:e5:d0:6a:54:ba: 0c:9e:6e:3c:60:5d:bd:f2:bc:3c:17:8c:2c:08:9f: 5d:b5:ef:02:6f:d9:30:f1:7c:eb:96:dd:2c:ad:c4: 6e:6d:e9:70:80:09:03:5b:29:43:97:7a:72:82:d2: f0:80:1f:42:87:3d:ad:cc:15:0b:f0:d8:ad:c8:55: 96:3b:a7:17:a5:a4:f6:bb:62:9a:18:f6:05:50:c5: 63:86:fd:67:88:6a:61:ed:c6:f3:d9:d7:b6:cf:15: 16:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FC:3F:1F:78:26:15:FF:9E:35:BF:98:7E:40:68:36:5E:C7:A7:C1 X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/323430353a3730303a3a2f33322d3332203d3e2039323531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:700::/32 Signature Algorithm: sha256WithRSAEncryption 54:99:53:ee:7d:58:92:62:be:fd:5a:69:38:c9:1f:9d:28:bf: 23:69:69:90:cc:4a:a7:53:71:f5:2f:ca:20:10:d9:ae:35:1e: 1a:1f:58:85:a7:70:3d:e8:a2:38:61:b9:24:f1:63:1e:50:47: 90:be:1f:6d:60:70:52:df:8f:b2:7e:05:19:42:29:eb:88:16: f6:30:c4:25:8f:32:6d:3b:df:ac:3c:01:0e:38:dd:e5:3a:64: 81:6e:b8:66:ef:73:e3:16:64:c4:03:34:67:28:3b:6b:ba:86: 02:41:3a:f3:20:50:3d:e0:72:ac:9b:b0:43:8f:47:c6:54:eb: b0:fe:15:65:8d:bb:6f:ac:ca:15:e5:81:0a:20:6a:b8:ef:e2: 58:6a:c0:f7:0e:15:f1:72:d4:b1:4c:13:f9:9b:3b:a6:c6:55: a6:d3:9e:c3:0f:7d:36:6b:02:ee:da:7e:e2:85:03:6d:b7:b9: 76:d4:55:23:ce:24:c6:60:bf:fb:1e:9f:5c:f6:88:d0:35:b9: ee:eb:f9:c2:38:ea:76:9a:b2:0c:f2:bd:6b:2d:c9:fe:30:f8: 50:3c:0e:83:b7:dd:69:5e:1e:d9:62:d2:a2:08:6a:d0:86:11: 2c:33:19:79:6b:ac:8e:9e:12:43:e1:1c:40:30:3f:de:dc:ee: 99:26:ca:38 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUD23romsgREFGeDgIOcni7IQOoWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNjAxMzAwNjE2MjdaFw0yNzAxMjkwNjIxMjdaMDMxMTAvBgNV BAMTKEQ1RkMzRjFGNzgyNjE1RkY5RTM1QkY5ODdFNDA2ODM2NUVDN0E3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbuJXcAYixQ6q+0F7nUIBUjuWd i2+PrgzbE4Pwb+TyY4cIwtxIigO2idtDFLmJ9H04rUX4e0c5eWiR3KLpvCE7PaSO +Z0DUyPVtmGQqBI9zvNvhUXYCS3rjfLrWHULWpfmV+VpiS2941U5eJbRSpGkT++h V53LQ76xW1pkXNQQKtSo0XMbqak7AS/II3IT8W+5fQyR0/9y9h+fr1ShrSLl0GpU ugyebjxgXb3yvDwXjCwIn1217wJv2TDxfOuW3SytxG5t6XCACQNbKUOXenKC0vCA H0KHPa3MFQvw2K3IVZY7pxelpPa7YpoY9gVQxWOG/WeIamHtxvPZ17bPFRYZAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQU1fw/H3gmFf+eNb+YfkBoNl7Hp8EwHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVlYzI1ZTQtOWFhOC00YmVmLTkw OTctYzBiZWMwYjI2NmE3LzAvMzIzNDMwMzUzYTM3MzAzMDNhM2EyZjMzMzIyZDMz MzIyMDNkM2UyMDM5MzIzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAUHADANBgkqhkiG9w0BAQsF AAOCAQEAVJlT7n1YkmK+/VppOMkfnSi/I2lpkMxKp1Nx9S/KIBDZrjUeGh9Yhadw PeiiOGG5JPFjHlBHkL4fbWBwUt+Psn4FGUIp64gW9jDEJY8ybTvfrDwBDjjd5Tpk gW64Zu9z4xZkxAM0Zyg7a7qGAkE68yBQPeByrJuwQ49HxlTrsP4VZY27b6zKFeWB CiBquO/iWGrA9w4V8XLUsUwT+Zs7psZVptOeww99NmsC7tp+4oUDbbe5dtRVI84k xmC/+x6fXPaI0DW57uv5wjjqdpqyDPK9ay3J/jD4UDwOg7fdaV4e2WLSoghq0IYR LDMZeWusjp4SQ+EcQDA/3tzumSbKOA== -----END CERTIFICATE-----Generated at Mon Feb 2 12:59:35 2026 by rpki-client