This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3231302e302f32342d3234203d3e20313339393934.roa
File: 3135372e38352e3231302e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier: 4RrZyrtYl0/TzFkzL5joH6DE+UbN40H36/1ByWbo5dY=
Subject key identifier: 10:73:D5:58:08:E4:F7:40:67:82:99:03:D1:02:E0:F5:BE:63:72:06
Certificate issuer: /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial: 14A17146B0DB4E94EA273492E70EA61A6D70E952
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3231302e302f32342d3234203d3e20313339393934.roa
Signing time: Mon 02 Feb 2026 09:56:51 +0000
ROA not before: Mon 02 Feb 2026 09:51:51 +0000
ROA not after: Mon 01 Feb 2027 09:56:51 +0000
asID: 139994
IP address blocks: 157.85.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a1:71:46:b0:db:4e:94:ea:27:34:92:e7:0e:a6:1a:6d:70:e9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Validity
Not Before: Feb 2 09:51:51 2026 GMT
Not After : Feb 1 09:56:51 2027 GMT
Subject: CN=1073D55808E4F74067829903D102E0F5BE637206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:12:21:78:48:13:ff:c4:dd:1d:18:21:d5:
71:e4:95:98:f6:40:6a:22:61:7c:71:bc:30:b1:70:
e2:26:b6:e1:43:28:62:4c:d2:19:3d:3d:91:b9:c8:
fc:6d:83:f7:68:ee:2e:9c:bf:b5:35:ca:39:b6:6e:
54:d7:d0:64:5d:4f:a9:f0:ea:46:2d:57:d5:47:ff:
c9:ac:ad:67:d0:12:14:99:54:47:bb:8e:de:32:3d:
48:6a:da:bc:86:19:00:cf:45:72:11:2f:cb:fb:59:
65:56:52:1f:f9:a4:bb:f1:b1:9e:ad:be:00:d9:53:
2c:6e:6d:52:08:58:57:e4:96:a6:e6:68:04:13:01:
39:de:a1:98:b2:62:0a:02:cf:17:78:59:8d:b7:fc:
23:99:08:5e:a7:4f:a0:08:ad:dc:cc:c5:bf:9c:8f:
50:5b:92:98:3c:4b:b8:4c:82:b8:ab:4f:c3:12:18:
49:3d:14:8d:3c:42:e6:15:6e:bc:7a:3a:83:e6:62:
c7:79:4f:5f:4e:62:1f:d6:be:04:39:d6:3b:11:b3:
9e:15:90:f6:ca:46:7b:9d:84:8f:28:4c:fe:4d:32:
36:55:95:fc:3c:e2:10:d8:73:4b:f2:0a:20:99:38:
07:a7:8e:48:c0:73:0c:a0:a3:39:4f:56:e2:cf:d1:
46:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:73:D5:58:08:E4:F7:40:67:82:99:03:D1:02:E0:F5:BE:63:72:06
X509v3 Authority Key Identifier:
keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3231302e302f32342d3234203d3e20313339393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.85.210.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:bc:da:8c:b6:82:6e:41:f3:79:21:2f:7b:2b:4f:39:24:9e:
e4:c2:e4:64:b0:d6:a8:fd:28:dd:fc:8d:01:03:e3:05:d4:b8:
ef:45:5c:58:40:87:e1:84:7a:82:5a:dd:e6:a2:87:0a:6c:da:
56:f6:a6:48:ef:07:40:67:cd:cb:e2:d8:80:94:6b:05:89:59:
14:04:95:99:d8:cd:6f:91:76:11:0b:00:aa:19:e1:7c:44:14:
8a:78:95:70:5a:bd:ac:23:28:75:ad:30:21:3a:d4:77:70:00:
01:da:92:e9:c9:f2:ad:e7:93:f0:34:e3:aa:61:5a:e7:07:17:
db:16:4f:8c:ba:7d:3b:3e:62:e2:5f:43:a8:ac:ab:78:b6:41:
3d:37:6a:af:ae:2d:2a:ae:64:a6:d2:f3:fc:1f:85:13:b1:54:
85:e7:18:75:84:68:b9:3e:3a:c0:88:95:d6:19:a2:68:14:c8:
ad:1e:eb:6a:d8:5c:6d:e9:6a:74:d8:f2:82:7c:f8:9e:25:c9:
ff:a2:dc:ec:bd:5d:2a:33:a3:07:0a:ed:27:43:4d:0f:1a:2e:
bb:3a:d9:36:e6:28:74:e3:36:7c:11:be:4c:d2:6f:6f:05:d8:
d0:71:22:e5:8c:43:0c:66:4f:aa:9d:06:3f:21:26:39:8f:3c:
9e:4a:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:20 2026 by rpki-client