This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3231332e302f32342d3234203d3e20313339393934.roa
File: 3135372e38352e3231332e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier: SN9jtmwRx4rq3d9zDrgwZg575vEhTqfD0x01M8MKZ3I=
Subject key identifier: 9F:68:2F:2A:9B:CD:77:19:67:8A:24:22:26:44:B9:07:66:BA:D2:D0
Certificate issuer: /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial: 5BBAD96715A57ADA1A364BB822E1C47513207037
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3231332e302f32342d3234203d3e20313339393934.roa
Signing time: Mon 02 Feb 2026 09:57:28 +0000
ROA not before: Mon 02 Feb 2026 09:52:28 +0000
ROA not after: Mon 01 Feb 2027 09:57:28 +0000
asID: 139994
IP address blocks: 157.85.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ba:d9:67:15:a5:7a:da:1a:36:4b:b8:22:e1:c4:75:13:20:70:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Validity
Not Before: Feb 2 09:52:28 2026 GMT
Not After : Feb 1 09:57:28 2027 GMT
Subject: CN=9F682F2A9BCD7719678A24222644B90766BAD2D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:4f:6b:50:25:6b:50:cf:41:fd:22:85:3a:
d2:3d:fd:0d:f9:de:87:2d:63:38:0f:bd:6a:a8:67:
32:63:f1:24:f1:e9:de:ae:45:25:5e:bd:84:8d:95:
9e:09:0f:90:3f:0e:1c:ad:05:49:f6:2c:d4:c5:c5:
53:ba:1a:fc:30:e4:85:9f:95:b7:06:ed:d6:92:88:
33:0f:26:f7:b3:48:03:40:b3:74:5a:05:c9:78:b2:
d5:3e:b6:10:df:e8:ec:60:b6:f5:0e:2e:8d:85:0a:
22:e6:87:d8:30:0e:47:8f:d4:57:a4:ee:63:1a:12:
9c:62:c5:bd:61:2d:f7:a0:9c:70:35:13:98:1c:fe:
c7:56:51:44:18:17:ce:13:0b:48:fc:1d:b1:eb:92:
81:28:2e:fc:bf:b8:42:af:95:65:f7:89:52:c6:a2:
83:6e:b6:6c:8c:0e:5f:ce:3a:d7:fa:fe:9e:06:14:
5f:a1:46:dd:ec:5a:6d:dd:7a:fe:b7:cb:e9:f6:82:
47:22:0d:89:bf:89:05:3e:02:68:ff:ca:30:e6:1e:
8c:2c:f3:b7:59:43:36:5f:12:fd:e0:e2:6e:d3:97:
db:54:91:b5:1a:04:fc:b3:d7:47:05:3f:0d:12:00:
fb:50:68:9f:44:95:b5:1d:db:17:c3:24:9d:d6:8f:
bd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:68:2F:2A:9B:CD:77:19:67:8A:24:22:26:44:B9:07:66:BA:D2:D0
X509v3 Authority Key Identifier:
keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3231332e302f32342d3234203d3e20313339393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.85.213.0/24
Signature Algorithm: sha256WithRSAEncryption
31:67:e5:1c:0c:26:c7:f3:3f:c8:a9:5b:42:c1:9b:70:5a:2e:
be:81:d1:3f:92:e9:ab:ae:4a:ba:ee:eb:5f:de:e6:c1:bc:8f:
cc:76:b4:3c:0f:b2:bd:7b:10:f8:a6:f8:70:bf:ba:73:d9:a5:
56:7b:fb:c6:39:90:e4:3e:dd:db:5b:cc:30:5e:81:f6:1e:d0:
6b:cc:36:5f:ca:1b:b1:cc:5c:75:54:87:eb:b4:5c:cf:dd:c6:
f8:4f:7b:6b:db:73:2f:4e:ee:55:d6:f0:00:69:55:cb:5d:f4:
2f:3a:04:c0:7c:4d:c5:f3:b4:84:fe:0b:fd:a9:04:b9:c2:b0:
6a:89:fb:c9:8c:bd:0e:0d:55:e8:97:ef:67:14:cd:f1:b8:ef:
ad:ff:15:0d:3b:79:90:20:70:c3:ee:1d:ca:e7:e0:8c:04:b4:
68:b5:c1:ab:d4:bb:af:40:5e:17:08:e3:28:7e:dd:85:32:e1:
74:b5:63:85:88:f5:67:73:a1:c9:8f:49:68:ec:ec:25:77:11:
95:75:d4:77:76:f7:b6:9d:26:0d:b0:ce:f5:dd:79:aa:09:68:
7f:af:84:f9:d8:28:68:b3:19:ab:f8:e3:6a:34:4c:8b:3e:9f:
20:a8:a2:64:1a:31:75:fd:44:29:d7:b8:47:66:2f:d9:a7:ed:
d7:52:7f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:20 2026 by rpki-client