This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230392e302f32342d3234203d3e20313339393934.roa
File: 3135372e38352e3230392e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier: a5X2+ok8mE8xIf3a1VXtJJWHKpTDOaC8E6A5dn4gMkI=
Subject key identifier: AC:90:90:72:71:63:67:01:8B:30:EE:30:D1:AB:71:0E:B1:2A:0F:20
Certificate issuer: /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial: 4A4EDBAE4358DF9DD57BBBA6FF2E197DEAA1FF19
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230392e302f32342d3234203d3e20313339393934.roa
Signing time: Mon 02 Feb 2026 09:56:16 +0000
ROA not before: Mon 02 Feb 2026 09:51:16 +0000
ROA not after: Mon 01 Feb 2027 09:56:16 +0000
asID: 139994
IP address blocks: 157.85.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:4e:db:ae:43:58:df:9d:d5:7b:bb:a6:ff:2e:19:7d:ea:a1:ff:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Validity
Not Before: Feb 2 09:51:16 2026 GMT
Not After : Feb 1 09:56:16 2027 GMT
Subject: CN=AC909072716367018B30EE30D1AB710EB12A0F20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9e:02:e2:b4:b9:dc:5d:e7:ea:e7:29:68:e1:
0e:6c:61:26:e9:6a:31:38:f4:2a:43:3b:63:97:a5:
f9:69:70:43:3d:2d:e8:38:26:0a:2e:90:87:c0:c4:
2d:a2:0b:6b:9c:71:f1:ce:99:bb:e5:79:4c:7f:e0:
5f:0b:13:ec:ac:ef:6f:d2:36:d3:26:66:e8:46:95:
e0:ae:31:ec:3b:39:ff:a9:54:b8:21:95:18:a9:f7:
68:03:f5:8c:dc:bc:57:03:e6:58:b0:90:62:8a:bd:
68:d1:13:5b:ad:49:fa:51:24:5e:5e:4c:50:cb:a9:
5a:36:26:ba:53:1e:ee:1a:a5:b5:71:b4:70:9b:4b:
e1:2a:b5:da:7a:67:31:a9:df:cc:3a:3e:70:5b:37:
bc:a3:2f:5e:0c:f4:60:de:7f:ab:b2:99:3a:53:1d:
b4:52:18:28:f4:9a:c2:c8:df:72:71:45:91:e7:b2:
ec:25:06:26:a4:dc:64:50:66:f6:ef:c6:c4:b5:8d:
20:7d:61:94:a9:64:52:61:c1:e8:f7:7c:70:ef:e4:
8b:69:b7:7f:6b:87:6c:60:35:7b:e6:83:c3:2e:8f:
15:c4:2d:ba:3e:eb:20:ed:a4:2a:65:b4:60:a4:ec:
ef:fc:cf:a9:61:d2:95:00:24:fe:66:e0:0f:a1:1d:
6c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:90:90:72:71:63:67:01:8B:30:EE:30:D1:AB:71:0E:B1:2A:0F:20
X509v3 Authority Key Identifier:
keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230392e302f32342d3234203d3e20313339393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.85.209.0/24
Signature Algorithm: sha256WithRSAEncryption
88:40:8c:94:f8:2c:9c:7d:f6:08:74:b0:33:67:3c:e2:83:8a:
93:ac:fa:f1:a9:ae:bd:ad:f7:ea:55:91:0d:1c:03:10:af:3e:
11:6a:9d:08:84:45:b6:ff:01:b3:e4:30:82:81:70:cd:e9:29:
62:61:84:a8:65:73:de:b2:fb:f9:26:b1:65:19:65:d8:a8:6e:
1e:21:28:77:6e:ee:60:b1:8f:bf:97:45:35:5c:0d:94:21:22:
d7:4d:2d:65:76:2c:d1:8a:24:ec:0d:44:7d:6e:90:8c:a6:a8:
3f:5c:3f:28:f8:88:5e:5b:bd:5b:79:2e:13:4d:9c:36:df:dc:
6a:82:a1:36:ea:64:82:63:d0:2b:88:11:80:34:1c:3c:f6:5f:
93:5e:de:b9:cf:30:db:7f:da:47:33:cb:f0:5a:8d:68:74:63:
b4:2f:9f:68:a9:ca:9e:e7:ce:89:47:dc:8e:ee:ae:18:42:a7:
2f:a2:f0:5a:bc:1b:91:f1:97:e7:1c:98:10:45:e7:0d:52:57:
db:f4:dc:fa:17:d4:26:62:2a:93:d3:24:bc:30:8e:5f:9d:40:
c6:48:45:d4:0b:63:fd:d3:90:87:77:57:c9:79:16:04:8c:92:
89:bd:86:80:3f:ce:fa:ff:0a:8f:20:54:ef:5e:41:a9:5a:63:
ad:cc:9a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:20 2026 by rpki-client