This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34332e3234392e3230382e302f32342d3234203d3e203435323938.roa File: 34332e3234392e3230382e302f32342d3234203d3e203435323938.roa (raw, json) Hash identifier: kir6HzO6TsF3UBXe2ZlqXSSUm84/f99k2Bf6oJ5BbWE= Subject key identifier: EB:3B:C7:A6:F9:81:1B:D2:D0:EE:7C:D2:03:CF:E4:9A:A9:F9:7A:42 Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 53EBF657F9CED22FDC6083A571458021FB52340E Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34332e3234392e3230382e302f32342d3234203d3e203435323938.roa Signing time: Wed 28 Jan 2026 01:00:01 +0000 ROA not before: Wed 28 Jan 2026 00:55:01 +0000 ROA not after: Wed 27 Jan 2027 01:00:01 +0000 asID: 45298 IP address blocks: 43.249.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 03:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:eb:f6:57:f9:ce:d2:2f:dc:60:83:a5:71:45:80:21:fb:52:34:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Jan 28 00:55:01 2026 GMT Not After : Jan 27 01:00:01 2027 GMT Subject: CN=EB3BC7A6F9811BD2D0EE7CD203CFE49AA9F97A42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b1:19:90:7d:eb:86:07:fe:9a:ac:94:ee:d7: 1b:6c:29:b8:9f:93:27:0d:3e:30:bb:fa:09:2a:31: e4:4d:e9:9b:85:05:4b:da:1e:05:14:58:20:11:f9: c4:fe:8d:4b:e3:df:8e:d7:3f:7e:7d:f3:c4:0e:0a: 9b:8f:bf:65:2a:8e:e1:ac:df:76:09:90:f3:85:c8: 39:9c:f8:27:04:b0:35:9d:c7:8c:08:45:f0:9e:c2: 4b:e6:28:9d:2d:91:25:bf:37:d9:54:e6:52:10:1a: cd:78:84:d9:2a:59:e2:a2:a7:8e:ad:05:52:26:99: 57:de:f0:3f:10:d0:c2:69:81:01:c9:76:e3:b3:b0: 7c:bd:e5:50:f9:4f:a0:d0:0b:1e:95:82:e6:b7:21: 8d:1b:f7:ba:e3:2a:1a:74:be:61:5a:fb:c1:1c:ee: c4:ad:00:60:42:80:8d:c3:50:54:fd:71:66:f5:88: db:f1:2a:bc:f0:fd:14:de:64:73:6e:79:4f:d6:7b: 21:45:63:02:3b:3e:2b:01:d5:72:dc:a1:11:d8:1e: ee:26:93:55:8a:10:69:92:24:c6:8b:33:f2:b4:c1: 93:3e:78:49:4e:42:ea:79:2a:4e:31:cc:54:a5:e6: 9c:35:df:d9:47:1a:3e:44:5a:2c:67:05:f6:3a:0e: 92:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3B:C7:A6:F9:81:1B:D2:D0:EE:7C:D2:03:CF:E4:9A:A9:F9:7A:42 X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/34332e3234392e3230382e302f32342d3234203d3e203435323938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.249.208.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:17:78:03:ae:cc:1c:36:fb:b2:67:68:40:97:39:52:cb:40: 69:b0:fb:58:51:fe:73:01:09:09:25:7f:8b:d2:b5:af:d1:7e: 16:54:5e:1c:ff:35:a1:0c:ff:43:53:3c:24:24:ea:81:ba:c8: 53:22:8e:02:8c:c7:b7:33:04:e2:f8:1d:c3:e2:04:fa:c3:14: fd:30:57:cc:14:55:37:42:26:dc:6a:bf:60:90:9c:ac:39:e6: b1:a2:84:6e:6a:d7:1f:8e:bd:e3:b0:73:33:a8:c8:1b:91:57: eb:a0:65:96:d8:fe:3d:6f:05:ed:0b:1d:d1:6e:d1:bc:1c:54: 9e:7b:21:2b:55:b1:d8:d1:e4:ca:14:cf:aa:1a:f2:95:fd:11: a0:12:e4:6f:19:55:79:d8:88:4c:0e:9e:ae:d4:bf:2e:28:3e: ba:25:0f:19:8e:33:9d:b1:15:ed:fa:e3:71:81:16:ea:71:6d: ae:77:0c:f6:49:bb:28:61:bb:ba:b3:92:30:d6:f8:e5:6c:ee: 39:a2:f3:89:4f:6c:35:c2:9e:a0:82:bc:bc:2e:74:1e:2e:8e: b4:00:46:4f:fb:f7:5e:3c:36:b0:f1:95:d1:ba:0f:24:55:78: 36:0e:ea:dd:07:35:78:6c:e4:f9:1e:06:cd:27:d3:c0:fe:47: 6b:1e:c3:47 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUU+v2V/nO0i/cYIOlcUWAIftSNA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNjAxMjgwMDU1MDFaFw0yNzAxMjcwMTAwMDFaMDMxMTAvBgNV BAMTKEVCM0JDN0E2Rjk4MTFCRDJEMEVFN0NEMjAzQ0ZFNDlBQTlGOTdBNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsRmQfeuGB/6arJTu1xtsKbif kycNPjC7+gkqMeRN6ZuFBUvaHgUUWCAR+cT+jUvj347XP35988QOCpuPv2UqjuGs 33YJkPOFyDmc+CcEsDWdx4wIRfCewkvmKJ0tkSW/N9lU5lIQGs14hNkqWeKip46t BVImmVfe8D8Q0MJpgQHJduOzsHy95VD5T6DQCx6Vgua3IY0b97rjKhp0vmFa+8Ec 7sStAGBCgI3DUFT9cWb1iNvxKrzw/RTeZHNueU/WeyFFYwI7PisB1XLcoRHYHu4m k1WKEGmSJMaLM/K0wZM+eElOQup5Kk4xzFSl5pw139lHGj5EWixnBfY6DpLtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU6zvHpvmBG9LQ7nzSA8/kmqn5ekIwHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzM0MzMyZTMyMzQzOTJlMzIzMDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMyMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACv50DANBgkqhkiG 9w0BAQsFAAOCAQEAnRd4A67MHDb7smdoQJc5UstAabD7WFH+cwEJCSV/i9K1r9F+ FlReHP81oQz/Q1M8JCTqgbrIUyKOAozHtzME4vgdw+IE+sMU/TBXzBRVN0Im3Gq/ YJCcrDnmsaKEbmrXH46947BzM6jIG5FX66Blltj+PW8F7Qsd0W7RvBxUnnshK1Wx 2NHkyhTPqhrylf0RoBLkbxlVediITA6ertS/Lig+uiUPGY4znbEV7frjcYEW6nFt rncM9km7KGG7urOSMNb45WzuOaLziU9sNcKeoIK8vC50Hi6OtABGT/v3Xjw2sPGV 0boPJFV4Ng7q3Qc1eGzk+R4GzSfTwP5Hax7DRw== -----END CERTIFICATE-----Generated at Mon Feb 2 14:14:42 2026 by rpki-client