This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230372e302f32342d3234203d3e20313339393934.roa
File: 3135372e38352e3230372e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier: 4KKjhMIe91G+a6neiFRcO44kLZOptvWX510XN+PTeyQ=
Subject key identifier: DA:27:DE:65:40:32:9A:CC:28:43:72:3C:0C:64:96:88:EB:E9:EB:DC
Certificate issuer: /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial: 7C864E73094CCF6D24D4C483F91BA0BD17BE5F13
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230372e302f32342d3234203d3e20313339393934.roa
Signing time: Mon 02 Feb 2026 09:55:46 +0000
ROA not before: Mon 02 Feb 2026 09:50:46 +0000
ROA not after: Mon 01 Feb 2027 09:55:46 +0000
asID: 139994
IP address blocks: 157.85.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:86:4e:73:09:4c:cf:6d:24:d4:c4:83:f9:1b:a0:bd:17:be:5f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Validity
Not Before: Feb 2 09:50:46 2026 GMT
Not After : Feb 1 09:55:46 2027 GMT
Subject: CN=DA27DE6540329ACC2843723C0C649688EBE9EBDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:2c:a9:c9:16:7e:9d:96:e4:ff:38:d8:95:
08:67:70:79:dd:15:5f:5a:4d:06:94:bd:7e:d0:da:
b1:cc:9c:6b:39:43:af:93:db:d2:09:a8:60:5a:e7:
88:c1:85:dd:89:e7:94:ec:df:8d:d6:ac:42:3a:45:
f8:40:1c:ef:32:5f:19:f9:b2:67:cf:b8:32:b8:67:
71:53:f6:84:f3:bf:2f:73:dd:19:2c:45:d6:d8:2b:
de:75:7c:34:39:1e:c1:7c:bd:96:ea:8b:3d:d2:67:
bc:44:5e:60:c2:91:f2:f1:f2:3f:e0:78:fd:d7:83:
ab:d3:b0:cd:ad:ea:b7:55:89:d0:5a:33:f2:19:eb:
43:5a:c2:5d:b2:a3:e8:20:94:9e:4d:3c:4f:54:24:
b7:d5:87:9e:37:8a:05:82:0f:1d:d1:90:5d:b8:89:
bf:57:30:bd:97:67:c9:76:8c:d0:24:2b:95:9a:5a:
51:ea:c6:6c:62:82:a9:29:f9:59:7f:dd:bf:ac:94:
ad:59:28:94:c1:55:69:8b:ee:e7:13:86:8b:5c:a1:
db:1a:cd:38:e4:ef:96:bb:76:a7:df:10:2e:0a:3c:
a4:c9:0d:7b:2c:96:46:38:9a:ab:59:0f:f9:b5:bd:
ad:82:8c:e7:de:48:27:88:e8:69:9a:25:ee:2c:34:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:27:DE:65:40:32:9A:CC:28:43:72:3C:0C:64:96:88:EB:E9:EB:DC
X509v3 Authority Key Identifier:
keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230372e302f32342d3234203d3e20313339393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.85.207.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b4:b7:86:86:1f:81:e7:50:c0:6e:bf:03:60:d9:a3:4a:0a:
8a:3f:5b:b8:b0:db:92:a8:14:36:2a:f0:2a:c9:2c:e0:70:d1:
8e:9c:f2:fd:5c:99:c8:14:b2:1e:85:55:da:2f:78:e1:a9:4a:
ad:c5:b1:c8:f8:a8:89:f0:1c:8c:f8:c6:7f:9f:f5:da:5f:2b:
43:ed:be:2c:c5:2a:e6:5d:bc:68:f1:ab:76:9a:33:60:17:4a:
3e:94:ce:a4:fa:01:63:58:88:83:71:73:6f:89:e6:6c:4f:86:
e2:f3:96:18:35:98:7f:cf:4c:63:ae:e7:b8:1b:0d:cc:25:01:
d2:61:68:55:d5:bb:0a:0f:1b:a2:8c:a7:fe:95:04:7e:0d:39:
52:17:b9:63:48:1d:3c:35:73:9d:7c:a6:a4:aa:7a:09:88:40:
67:91:69:6e:59:6a:20:26:1d:3a:3d:53:7f:df:a2:81:51:5d:
01:35:84:0e:cc:a7:29:70:17:91:71:2f:cf:78:8d:fa:0d:1b:
04:17:41:72:25:d5:d4:86:fd:0a:88:4e:df:c8:23:6e:7c:ce:
12:25:40:31:6f:ca:bb:7e:36:24:3e:2d:6b:f8:56:21:d2:f6:
f4:52:0f:17:53:c6:0d:8f:7a:10:14:11:1c:06:1e:5f:84:5c:
f6:bf:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:21 2026 by rpki-client