This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3139382e302f32342d3234203d3e20313339393934.roa
File: 3135372e38352e3139382e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier: Twzik8Cr8Z6GaxaxOvOAZBrEeZoz8eVQdZRr/dR1PG8=
Subject key identifier: 60:34:B5:B6:BF:13:8B:92:38:63:46:2F:CC:4E:C0:95:7C:84:26:49
Certificate issuer: /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial: 33BBB2DD1FD060FA4628CEB0220778755E8F62DD
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3139382e302f32342d3234203d3e20313339393934.roa
Signing time: Mon 02 Feb 2026 09:58:37 +0000
ROA not before: Mon 02 Feb 2026 09:53:37 +0000
ROA not after: Mon 01 Feb 2027 09:58:37 +0000
asID: 139994
IP address blocks: 157.85.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:bb:b2:dd:1f:d0:60:fa:46:28:ce:b0:22:07:78:75:5e:8f:62:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Validity
Not Before: Feb 2 09:53:37 2026 GMT
Not After : Feb 1 09:58:37 2027 GMT
Subject: CN=6034B5B6BF138B923863462FCC4EC0957C842649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:13:bc:08:13:a2:76:1c:0b:04:a2:56:52:ca:
67:7f:04:b1:ab:8d:7b:91:ca:f7:0b:42:31:c0:e9:
61:b2:23:d5:77:ac:c1:e1:b9:2d:4f:d8:9e:31:9b:
95:4c:70:21:a6:63:4e:30:c4:61:5b:ab:98:ae:5b:
69:8d:e9:5e:0c:2d:63:ad:ea:fb:3a:ca:6e:70:c8:
92:81:e3:25:c9:c3:23:a2:78:a1:59:61:75:05:45:
23:c0:6d:26:64:69:f0:27:f2:c9:0c:ab:05:5c:1f:
10:2b:1f:30:7a:7b:15:7e:d0:e6:d1:5f:24:55:78:
78:64:d1:68:85:65:c4:7c:26:04:e0:7c:15:1d:10:
b0:e8:cc:2c:6c:89:a0:d5:1e:b5:98:2c:52:8b:d8:
f4:78:0a:41:ef:15:73:d6:5e:47:ee:74:da:b8:e6:
1c:1e:26:6a:66:47:f4:c6:03:cd:22:2a:16:57:fb:
c8:8c:e8:6f:ec:c6:0c:55:66:cf:6d:ec:75:f5:4e:
77:a3:98:3e:e3:d3:b7:49:59:64:15:a2:e6:8f:11:
66:ec:9a:30:51:62:ad:2e:fc:9e:8c:83:95:ee:13:
e2:8a:95:2b:73:08:24:c0:ef:33:fe:a3:d4:98:a5:
fe:19:e9:4e:95:f3:da:c0:b0:ec:8e:a5:82:99:f1:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:34:B5:B6:BF:13:8B:92:38:63:46:2F:CC:4E:C0:95:7C:84:26:49
X509v3 Authority Key Identifier:
keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3139382e302f32342d3234203d3e20313339393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.85.198.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:01:9e:d9:2a:85:07:53:10:d5:42:f2:ae:c5:e7:0d:49:b6:
19:0b:13:d1:4c:e4:c6:2b:fb:46:4a:4b:45:2f:2f:cc:6d:c4:
53:98:df:a2:09:11:c9:7a:6b:63:c9:7e:ef:c0:03:64:09:70:
a3:60:b3:5e:0a:37:d1:a7:af:39:4d:eb:c4:09:ea:b5:6b:2d:
e3:c7:52:b2:d9:ba:b7:16:60:f1:e9:79:44:8a:42:e0:2d:97:
ec:95:47:84:9c:a8:0d:5a:53:bb:1f:74:dd:f9:b9:27:50:b8:
69:c3:e0:40:07:bb:32:e8:c1:db:ec:f0:60:1c:23:23:3a:4a:
6d:45:da:bc:55:65:4f:ca:3a:47:96:7a:28:0e:66:4b:2e:97:
b8:c2:4b:cd:57:72:f9:20:78:db:9d:7d:59:60:e2:6e:e0:54:
2d:7f:38:f9:5f:c2:7f:48:7d:cd:18:34:b9:67:11:ae:be:31:
ec:d3:d0:5e:97:40:c8:e7:e1:16:2c:6c:c5:46:45:b1:c8:0e:
58:09:ea:7e:df:f6:e4:1d:df:dd:fa:9b:88:6e:f7:67:d6:c2:
5c:76:f4:d8:02:31:83:f3:64:52:27:f7:5f:84:43:60:47:98:
00:f5:d9:bc:d0:df:11:f3:9c:b6:bb:c9:f4:0a:e0:3f:0e:01:
b0:10:c1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:18 2026 by rpki-client