This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230382e302f32342d3234203d3e20313339393934.roa File: 3135372e38352e3230382e302f32342d3234203d3e20313339393934.roa (raw, json) Hash identifier: 8hC+akllTPtDtyoAEK0uLN3M/kVK/RND27v1DAQHUIA= Subject key identifier: 3D:A4:7B:D8:4F:B3:9A:D8:E2:E1:D7:C8:19:02:A9:B1:59:01:8B:4F Certificate issuer: /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545 Certificate serial: 32B84EA4A0E92DBF1905767E08AB1369A19ADF6D Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230382e302f32342d3234203d3e20313339393934.roa Signing time: Mon 02 Feb 2026 09:55:59 +0000 ROA not before: Mon 02 Feb 2026 09:50:59 +0000 ROA not after: Mon 01 Feb 2027 09:55:59 +0000 asID: 139994 IP address blocks: 157.85.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 04:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:b8:4e:a4:a0:e9:2d:bf:19:05:76:7e:08:ab:13:69:a1:9a:df:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545 Validity Not Before: Feb 2 09:50:59 2026 GMT Not After : Feb 1 09:55:59 2027 GMT Subject: CN=3DA47BD84FB39AD8E2E1D7C81902A9B159018B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:d2:1e:70:f2:6a:11:15:f0:a6:12:e7:86: 3b:0f:fb:a2:14:1c:1b:af:c6:ad:7a:47:e4:ae:c8: b6:9c:38:e7:02:96:d2:5a:3d:a7:4d:c3:d7:a6:62: 91:ac:41:09:20:fa:df:d8:eb:c2:36:d1:5e:14:ba: 80:be:f5:73:cf:b6:26:e8:e0:c3:28:c4:f6:6f:4d: 33:81:49:71:a9:2c:63:7f:f7:1a:ab:fe:d9:94:f5: a9:b7:e8:97:66:d5:e0:0f:59:df:41:dc:b8:84:dd: 6f:be:a5:20:75:cd:9c:9e:25:b4:d8:9a:ae:1e:0a: a0:b9:94:30:ff:f9:77:9e:0f:26:08:55:f8:62:28: 2f:0c:6f:6c:04:9a:df:c2:88:3a:8e:07:3b:2c:a7: e9:63:82:26:92:e6:6c:df:70:3b:2c:4b:a5:3f:f4: 7b:46:8a:62:30:2e:29:e9:ca:66:6f:72:43:d7:84: 5f:a1:f8:5c:07:45:e1:ff:67:1c:ec:bb:08:5d:c6: 7f:af:38:69:b4:5c:fd:0b:bd:ab:24:ae:81:ca:63: 18:bd:0d:ad:76:20:1c:bf:b4:4c:35:37:c5:9e:d6: da:61:04:2f:96:7f:e3:33:5a:fd:a4:0b:e7:6d:59: 91:cb:c0:10:d6:d2:e8:da:e6:66:2c:c4:2b:c4:02: e9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A4:7B:D8:4F:B3:9A:D8:E2:E1:D7:C8:19:02:A9:B1:59:01:8B:4F X509v3 Authority Key Identifier: keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230382e302f32342d3234203d3e20313339393934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.85.208.0/24 Signature Algorithm: sha256WithRSAEncryption b8:0a:50:04:1f:df:d0:29:0f:b6:f4:49:27:6c:9d:41:6c:2e: 67:9b:d0:09:8a:24:f0:35:53:64:33:5d:3b:fb:56:36:93:78: 2a:47:36:c3:61:9e:c6:73:03:dc:08:0b:b0:14:45:f6:3a:44: 7c:16:0f:2c:06:25:20:6d:cb:f1:5d:a5:b6:b4:7f:ce:70:c5: 56:55:d0:05:f8:d4:bb:7e:db:0c:87:46:f7:e0:5e:af:88:6f: 72:e7:a8:3f:7a:5e:e2:92:cd:e0:18:e8:55:f6:b6:a0:38:db: 5c:40:ee:d6:27:9c:87:34:87:30:5e:4f:e4:89:19:5f:e1:6a: eb:12:05:ce:ad:71:22:0a:8f:5c:19:2f:8f:a7:21:85:44:11: f2:3f:f2:32:c3:99:ab:86:1f:47:57:17:55:e2:ef:93:30:35: b9:58:51:90:d6:f0:cf:41:0d:fb:fb:11:36:e2:9a:b0:70:28: 05:f1:8d:1a:60:28:0c:8e:ca:1a:31:db:e0:ee:4f:4c:ba:eb: 87:0b:af:5d:c4:e6:50:e8:51:2b:7e:c6:3a:39:35:a3:e7:5a: 25:a4:cf:75:83:4b:e5:9a:d0:f9:48:69:58:a1:f4:6f:8a:5c: e5:80:82:c2:5d:16:62:81:f0:50:2b:75:6b:a9:58:c1:28:f9: 1c:14:f2:f3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMrhOpKDpLb8ZBXZ+CKsTaaGa320wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM3OUI3QUIwRTRFODAzNUM4QjREQzI0REUzODU4NjEx MTA1MDU0NTAeFw0yNjAyMDIwOTUwNTlaFw0yNzAyMDEwOTU1NTlaMDMxMTAvBgNV BAMTKDNEQTQ3QkQ4NEZCMzlBRDhFMkUxRDdDODE5MDJBOUIxNTkwMThCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCNIecPJqERXwphLnhjsP+6IU HBuvxq16R+SuyLacOOcCltJaPadNw9emYpGsQQkg+t/Y68I20V4UuoC+9XPPtibo 4MMoxPZvTTOBSXGpLGN/9xqr/tmU9am36Jdm1eAPWd9B3LiE3W++pSB1zZyeJbTY mq4eCqC5lDD/+XeeDyYIVfhiKC8Mb2wEmt/CiDqOBzssp+ljgiaS5mzfcDssS6U/ 9HtGimIwLinpymZvckPXhF+h+FwHReH/Zxzsuwhdxn+vOGm0XP0LvaskroHKYxi9 Da12IBy/tEw1N8We1tphBC+Wf+MzWv2kC+dtWZHLwBDW0uja5mYsxCvEAun7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPaR72E+zmtji4dfIGQKpsVkBi08wHwYDVR0j BBgwFoAULHm3qw5OgDXItNwk3jhYYREFBUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGU0NjEwYS1hNzk0LTQwNTktOTdkOS1mMmM2OWRhNTRjOGIvMS8yQzc5QjdBQjBF NEU4MDM1QzhCNERDMjRERTM4NTg2MTExMDUwNTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM3OUI3QUIwRTRFODAzNUM4QjREQzI0REUzODU4NjExMTA1 MDU0NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4ZTQ2MTBhLWE3OTQtNDA1OS05 N2Q5LWYyYzY5ZGE1NGM4Yi8xLzMxMzUzNzJlMzgzNTJlMzIzMDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnVXQMA0GCSqG SIb3DQEBCwUAA4IBAQC4ClAEH9/QKQ+29EknbJ1BbC5nm9AJiiTwNVNkM107+1Y2 k3gqRzbDYZ7GcwPcCAuwFEX2OkR8Fg8sBiUgbcvxXaW2tH/OcMVWVdAF+NS7ftsM h0b34F6viG9y56g/el7iks3gGOhV9ragONtcQO7WJ5yHNIcwXk/kiRlf4WrrEgXO rXEiCo9cGS+PpyGFRBHyP/Iyw5mrhh9HVxdV4u+TMDW5WFGQ1vDPQQ37+xE24pqw cCgF8Y0aYCgMjsoaMdvg7k9MuuuHC69dxOZQ6FErfsY6OTWj51olpM91g0vlmtD5 SGlYofRvilzlgILCXRZigfBQK3VrqVjBKPkcFPLz -----END CERTIFICATE-----Generated at Mon Feb 2 17:19:20 2026 by rpki-client