This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230362e302f32342d3234203d3e20313339393934.roa File: 3135372e38352e3230362e302f32342d3234203d3e20313339393934.roa (raw, json) Hash identifier: iiwS82zB9GxKCjKKyiKUK9GjzAqb1QNfmgk+53pJJDQ= Subject key identifier: 7D:31:A7:8E:7A:B7:C7:A3:20:19:97:43:B0:02:DB:9D:BB:EA:A3:13 Certificate issuer: /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545 Certificate serial: 5F6151F202C05B939C1E8466C7A4526642CD19BF Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230362e302f32342d3234203d3e20313339393934.roa Signing time: Thu 15 Jan 2026 08:35:52 +0000 ROA not before: Thu 15 Jan 2026 08:30:52 +0000 ROA not after: Thu 14 Jan 2027 08:35:52 +0000 asID: 139994 IP address blocks: 157.85.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 19:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:61:51:f2:02:c0:5b:93:9c:1e:84:66:c7:a4:52:66:42:cd:19:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545 Validity Not Before: Jan 15 08:30:52 2026 GMT Not After : Jan 14 08:35:52 2027 GMT Subject: CN=7D31A78E7AB7C7A320199743B002DB9DBBEAA313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c4:3e:f2:f5:01:c6:24:70:79:ac:6e:23:40: 66:9e:6a:ed:bf:45:ea:fa:a9:88:13:74:f5:a0:68: 35:41:47:8d:56:5e:fd:b8:0b:00:ec:17:8f:de:bb: f2:b4:dd:c9:27:59:20:74:e0:e8:47:2c:9e:63:b6: 6c:d6:df:1b:da:40:46:55:01:11:e6:1e:9b:4c:54: f2:b0:60:49:5f:58:22:03:0a:54:ba:c0:49:3c:f1: 57:cc:ed:8d:8c:74:82:05:05:35:58:db:05:68:fa: 92:60:f8:3a:68:93:07:77:10:58:c9:33:c5:99:85: e3:6b:78:62:b7:fc:5e:e9:54:88:3c:fe:83:21:c6: 2f:39:32:a8:ee:8e:b0:cf:85:ce:fc:67:7d:04:8c: 98:ad:6d:96:43:cd:37:04:18:44:2c:c4:3d:03:23: 5d:78:12:0b:b4:34:26:af:22:12:57:d2:59:72:af: 52:41:4e:54:82:b4:4d:36:32:66:03:63:eb:7f:fe: a0:4f:51:1f:2b:74:ee:31:9b:73:16:b1:27:56:11: df:14:cc:94:5d:40:d8:eb:88:3c:a5:c4:44:9a:c7: 9e:1c:c1:62:be:c0:0e:2a:c4:4c:99:8d:29:8f:7b: 02:8d:ad:e9:07:40:9f:ca:53:35:3a:1c:a2:6b:bc: f2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:31:A7:8E:7A:B7:C7:A3:20:19:97:43:B0:02:DB:9D:BB:EA:A3:13 X509v3 Authority Key Identifier: keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230362e302f32342d3234203d3e20313339393934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.85.206.0/24 Signature Algorithm: sha256WithRSAEncryption a1:fb:f9:1e:80:4b:dd:93:42:f9:1c:4b:08:e9:30:11:63:94: f5:a3:9e:99:5c:c2:38:16:9b:2d:56:2e:90:8d:28:6d:8b:e2: 6a:4d:54:e7:f5:8b:96:a3:b1:d8:0b:9e:27:fb:b1:7b:1c:33: 61:3a:b6:74:39:90:08:29:5d:43:55:36:8b:b9:23:2c:03:9b: ba:07:96:20:6b:1d:0b:34:eb:b4:a5:a3:5d:24:fb:d8:98:de: 2f:ba:f8:13:35:6f:c7:22:e6:4e:73:00:e4:5d:c2:9d:73:79: 82:58:de:25:f2:21:49:53:e4:2b:c5:eb:ad:7f:9e:fd:10:e2: b9:b0:05:74:2e:43:f6:fa:17:81:14:58:fc:21:c5:f1:b2:bb: 3a:cd:78:3c:7a:a8:25:f7:c7:95:16:1d:52:d0:9c:3c:3b:74: 5a:8f:0a:f5:30:f5:4d:19:a4:52:2a:24:2b:e1:26:33:12:09: b9:8a:4d:25:57:51:23:73:d9:a0:d9:7a:67:a6:1a:66:fa:71: c2:78:f6:30:02:37:45:7c:b6:cb:b7:00:5d:94:d1:f1:0d:76: 49:15:1f:21:13:34:1d:d2:cc:50:64:9c:1b:63:41:89:45:dc: 89:50:f2:6b:e9:a8:8e:de:af:c1:90:5d:b0:50:c5:db:0f:36: 9a:d7:20:1c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUX2FR8gLAW5OcHoRmx6RSZkLNGb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM3OUI3QUIwRTRFODAzNUM4QjREQzI0REUzODU4NjEx MTA1MDU0NTAeFw0yNjAxMTUwODMwNTJaFw0yNzAxMTQwODM1NTJaMDMxMTAvBgNV BAMTKDdEMzFBNzhFN0FCN0M3QTMyMDE5OTc0M0IwMDJEQjlEQkJFQUEzMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfxD7y9QHGJHB5rG4jQGaeau2/ Rer6qYgTdPWgaDVBR41WXv24CwDsF4/eu/K03cknWSB04OhHLJ5jtmzW3xvaQEZV ARHmHptMVPKwYElfWCIDClS6wEk88VfM7Y2MdIIFBTVY2wVo+pJg+Dpokwd3EFjJ M8WZheNreGK3/F7pVIg8/oMhxi85MqjujrDPhc78Z30EjJitbZZDzTcEGEQsxD0D I114Egu0NCavIhJX0llyr1JBTlSCtE02MmYDY+t//qBPUR8rdO4xm3MWsSdWEd8U zJRdQNjriDylxESax54cwWK+wA4qxEyZjSmPewKNrekHQJ/KUzU6HKJrvPJbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUfTGnjnq3x6MgGZdDsALbnbvqoxMwHwYDVR0j BBgwFoAULHm3qw5OgDXItNwk3jhYYREFBUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGU0NjEwYS1hNzk0LTQwNTktOTdkOS1mMmM2OWRhNTRjOGIvMS8yQzc5QjdBQjBF NEU4MDM1QzhCNERDMjRERTM4NTg2MTExMDUwNTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM3OUI3QUIwRTRFODAzNUM4QjREQzI0REUzODU4NjExMTA1 MDU0NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4ZTQ2MTBhLWE3OTQtNDA1OS05 N2Q5LWYyYzY5ZGE1NGM4Yi8xLzMxMzUzNzJlMzgzNTJlMzIzMDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnVXOMA0GCSqG SIb3DQEBCwUAA4IBAQCh+/kegEvdk0L5HEsI6TARY5T1o56ZXMI4FpstVi6QjSht i+JqTVTn9YuWo7HYC54n+7F7HDNhOrZ0OZAIKV1DVTaLuSMsA5u6B5Ygax0LNOu0 paNdJPvYmN4vuvgTNW/HIuZOcwDkXcKdc3mCWN4l8iFJU+Qrxeutf579EOK5sAV0 LkP2+heBFFj8IcXxsrs6zXg8eqgl98eVFh1S0Jw8O3Rajwr1MPVNGaRSKiQr4SYz Egm5ik0lV1Ejc9mg2Xpnphpm+nHCePYwAjdFfLbLtwBdlNHxDXZJFR8hEzQd0sxQ ZJwbY0GJRdyJUPJr6aiO3q/BkF2wUMXbDzaa1yAc -----END CERTIFICATE-----Generated at Wed Jan 21 13:19:26 2026 by rpki-client