This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3231382e302f32342d3234203d3e20313339393934.roa
File: 3135372e38352e3231382e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier: JxNUwXomc2PJWhbNmfjfM/+4dWebsLp22rxFUnq2rVE=
Subject key identifier: 11:86:F6:03:A7:9D:33:BB:7D:3A:5F:7C:62:01:43:AA:20:63:E1:97
Certificate issuer: /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial: 538365EB0527917E1DC691514EC874970CC3235E
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3231382e302f32342d3234203d3e20313339393934.roa
Signing time: Wed 28 Jan 2026 19:19:20 +0000
ROA not before: Wed 28 Jan 2026 19:14:20 +0000
ROA not after: Wed 27 Jan 2027 19:19:20 +0000
asID: 139994
IP address blocks: 157.85.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:83:65:eb:05:27:91:7e:1d:c6:91:51:4e:c8:74:97:0c:c3:23:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Validity
Not Before: Jan 28 19:14:20 2026 GMT
Not After : Jan 27 19:19:20 2027 GMT
Subject: CN=1186F603A79D33BB7D3A5F7C620143AA2063E197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2d:33:ff:44:96:04:3e:14:1a:5d:b4:43:7a:
ab:f4:2a:73:07:22:ca:8f:ab:2c:e9:ae:5d:40:b8:
71:21:20:3c:2c:c9:44:78:3f:6a:80:7e:c2:c4:40:
7e:f3:59:9d:b3:f7:4c:9a:89:3f:6d:b2:cc:13:56:
8c:97:63:a2:48:87:b7:71:61:70:f9:66:c1:49:f6:
7e:ea:03:92:94:26:24:a0:fb:ac:30:d4:9a:81:9e:
1a:e2:8c:bd:0f:bb:ec:74:ff:11:79:8e:b5:0b:2e:
9f:ce:32:d1:62:2f:74:ef:99:72:d0:df:9d:c7:50:
d9:5c:c7:52:a8:94:a8:37:ef:54:0b:b9:08:d0:0e:
84:ce:09:80:33:95:b7:0d:24:0e:b3:a7:6d:e7:58:
bc:f6:c2:25:76:44:e0:30:3e:65:ef:c4:5e:b9:b1:
f4:f9:99:1b:6a:f4:0a:63:50:00:30:7e:36:e7:b7:
24:48:8a:f8:2d:78:19:10:87:43:41:b2:83:67:ad:
79:0f:c4:9d:e7:8a:4f:68:ef:51:03:cb:c4:63:a9:
46:3e:ea:bc:e4:41:58:9b:80:97:db:e8:7f:d5:ce:
09:ca:4a:c7:0a:b3:7d:79:e1:bb:ec:2c:f8:d0:72:
67:05:68:4c:83:96:29:f4:98:a3:02:c1:2f:1a:8b:
1e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:86:F6:03:A7:9D:33:BB:7D:3A:5F:7C:62:01:43:AA:20:63:E1:97
X509v3 Authority Key Identifier:
keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3231382e302f32342d3234203d3e20313339393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.85.218.0/24
Signature Algorithm: sha256WithRSAEncryption
29:13:fe:22:8a:c1:a7:a7:f4:67:63:eb:3f:d4:eb:a5:df:79:
e1:22:54:86:6a:70:db:26:25:d9:2e:90:e3:61:c8:13:6e:2b:
99:d1:c5:a7:52:f9:83:e5:86:67:72:8b:a1:2c:42:85:b4:7a:
c1:c6:0d:15:53:ab:8d:1e:d4:db:fc:2d:b3:62:63:61:f0:5b:
90:1e:b3:8a:36:df:30:b9:37:83:30:49:f1:43:68:ee:dc:d9:
e0:9e:c0:0c:e5:07:eb:29:13:fd:0f:2f:7d:b9:a6:af:8a:80:
3f:53:58:b6:6f:35:af:c2:08:5f:4a:5b:72:87:18:59:41:00:
63:c5:20:a1:f1:7c:54:6f:4a:76:13:c8:e2:47:d0:5c:35:fb:
59:1c:7a:f1:3f:cb:6f:64:02:70:02:4b:1d:06:96:89:27:d4:
f1:e3:cd:90:9c:34:c5:c2:d8:47:92:b9:ee:f6:ff:b8:61:2b:
eb:f6:e7:f1:2b:ac:d5:03:d5:4b:97:1f:09:aa:9d:d3:1a:48:
7f:24:3a:9d:80:7d:a6:a9:f9:fa:46:0d:6a:0c:d0:2d:be:09:
64:4d:21:28:07:9b:47:54:1a:55:fd:ae:a2:f4:06:d6:15:01:
83:28:36:b8:a1:fe:b2:81:c7:dd:4f:3e:47:42:2b:e7:54:78:
81:b9:a7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:19 2026 by rpki-client