This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3231322e302f32342d3234203d3e20313339393934.roa
File: 3135372e38352e3231322e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier: o5QFNroTfR8vlfsQq1I5A5R9aNMvpQaRACO8I+AaU5c=
Subject key identifier: 97:9A:01:14:0F:E6:E2:63:B1:6F:E7:2D:DF:0E:EF:B5:D4:88:A8:53
Certificate issuer: /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial: 67522B8F00F9CEA7F2EC68708BE0FB66D6DED9DE
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3231322e302f32342d3234203d3e20313339393934.roa
Signing time: Mon 02 Feb 2026 09:57:16 +0000
ROA not before: Mon 02 Feb 2026 09:52:16 +0000
ROA not after: Mon 01 Feb 2027 09:57:16 +0000
asID: 139994
IP address blocks: 157.85.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:52:2b:8f:00:f9:ce:a7:f2:ec:68:70:8b:e0:fb:66:d6:de:d9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Validity
Not Before: Feb 2 09:52:16 2026 GMT
Not After : Feb 1 09:57:16 2027 GMT
Subject: CN=979A01140FE6E263B16FE72DDF0EEFB5D488A853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:e9:9c:60:f2:4d:45:01:de:a7:23:41:3c:
20:87:17:5a:f8:a2:60:03:74:4b:2c:f6:f3:99:b0:
e6:8e:ad:58:a3:11:c2:6a:12:de:ea:05:1d:07:b3:
52:5e:a1:a8:09:92:c1:96:2b:a5:30:50:99:bc:db:
19:ef:27:f3:f6:33:05:e1:5b:0c:72:29:59:15:25:
3d:03:77:11:ef:89:2e:5d:87:55:c5:e8:d4:22:9e:
b7:d1:7f:03:d9:31:c6:f0:a4:d8:63:9b:42:ba:ea:
95:c1:a6:31:c1:5b:9c:22:33:34:0e:02:81:3c:39:
8f:e9:7a:4a:cc:b0:fd:b0:79:2e:9f:bf:74:78:ff:
10:70:92:3b:43:9a:fe:fe:c6:4c:6a:35:79:be:2f:
fb:c9:f6:e1:d0:15:5e:c0:ad:e7:71:07:c2:d6:29:
f0:0b:89:8a:23:74:7e:84:25:67:69:7f:55:f3:ad:
5d:cf:9e:4c:93:26:b7:5f:f7:10:6f:90:e6:8c:bd:
c7:08:f7:0d:12:d4:95:8f:af:74:32:30:51:3f:64:
6c:4a:1d:d9:95:6e:2f:af:d3:1d:68:6a:f8:dd:69:
7e:51:6f:92:f7:fb:65:20:6b:68:80:96:ee:bb:8b:
59:2d:43:01:34:32:1c:9b:ad:d0:79:74:6e:ec:0c:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9A:01:14:0F:E6:E2:63:B1:6F:E7:2D:DF:0E:EF:B5:D4:88:A8:53
X509v3 Authority Key Identifier:
keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3231322e302f32342d3234203d3e20313339393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.85.212.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:2d:8a:cb:ab:5c:4e:9b:50:c1:01:e7:8c:b5:02:1d:32:35:
68:7c:44:94:d8:16:b9:11:03:70:75:9c:8d:cb:88:b8:98:02:
39:bb:9a:c3:f7:11:00:cd:32:79:c6:c5:0f:5a:f2:2c:4d:3d:
7d:30:58:ad:95:02:d9:6c:91:58:1f:bd:56:31:91:f5:34:92:
18:8a:2b:ec:65:23:20:bf:06:fa:7a:61:08:9a:cd:44:d5:cf:
3b:ca:30:54:10:ac:8b:08:9e:e9:86:60:c2:08:09:a5:a3:13:
6e:e8:f1:7f:50:aa:e6:3c:f5:8f:88:94:6e:76:86:71:7f:c0:
48:0d:4f:82:c4:6f:b2:d1:2d:45:7a:83:0b:66:ca:75:6a:9f:
50:98:72:63:ad:4c:64:20:a8:9c:5d:b2:c7:e6:ce:6c:22:ed:
28:ae:d0:1d:8d:81:34:e7:7f:66:41:35:c9:45:6f:07:97:94:
76:2a:e3:9f:95:5e:31:68:f4:c3:20:e3:aa:74:ea:f4:40:d8:
a5:d1:23:f0:30:bf:fd:47:5c:73:46:70:ff:2e:9b:16:1a:c0:
51:d5:ae:d7:92:39:99:1e:45:38:2f:8c:e8:96:ee:59:4c:2b:
d6:35:02:73:51:8b:08:da:ee:ed:b5:93:5a:eb:76:6b:f2:ca:
94:f7:8e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:19 2026 by rpki-client