This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3232302e302f32342d3234203d3e20313339393934.roa
File: 3135372e38352e3232302e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier: yK3XLDzOi+3m97HSvjAuRym3VylO4T3Tk34vYu8HFO0=
Subject key identifier: 46:89:28:95:5F:0D:EB:23:6A:38:03:FA:9C:E5:74:28:5A:3C:98:39
Certificate issuer: /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial: 6137105C59D3B00FE83E327B7A7642D2E19703D6
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3232302e302f32342d3234203d3e20313339393934.roa
Signing time: Mon 02 Feb 2026 09:58:04 +0000
ROA not before: Mon 02 Feb 2026 09:53:04 +0000
ROA not after: Mon 01 Feb 2027 09:58:04 +0000
asID: 139994
IP address blocks: 157.85.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:37:10:5c:59:d3:b0:0f:e8:3e:32:7b:7a:76:42:d2:e1:97:03:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Validity
Not Before: Feb 2 09:53:04 2026 GMT
Not After : Feb 1 09:58:04 2027 GMT
Subject: CN=468928955F0DEB236A3803FA9CE574285A3C9839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:d6:b1:3c:2b:3e:d4:b4:04:bd:cf:8a:b9:
8e:43:00:f2:f5:cd:d0:e6:ca:e5:63:61:71:e2:6a:
44:d4:91:29:c5:07:dd:71:b7:a7:ff:f0:8c:8d:0a:
f2:12:6a:2e:76:2b:ad:18:04:60:0b:f8:1a:9a:1f:
0f:2d:d5:62:9c:97:c2:43:19:1c:70:63:a8:55:4e:
04:e8:93:62:29:a7:6b:50:bd:f3:28:ce:20:06:ce:
ac:2a:eb:91:7e:7a:2f:09:a4:47:4b:fd:58:e6:2f:
09:68:1c:3b:1f:23:62:b9:02:c8:8d:f4:91:9f:84:
3b:fd:9e:b0:21:6a:ad:fd:bf:bf:d7:92:6a:26:2a:
32:4c:17:97:d6:46:bd:c1:d4:5c:68:fd:75:38:b7:
42:06:63:01:e8:83:72:e3:e8:17:5b:73:63:c9:cd:
3b:37:b9:f2:c8:59:fb:82:54:07:98:9a:69:fc:02:
cc:b3:3b:b8:2c:89:e3:a7:2d:d2:3e:7c:c3:c8:c0:
ac:97:e4:ce:85:f7:d1:dc:c1:86:34:af:cd:16:d2:
c8:ac:ed:89:db:fd:83:0a:cf:46:09:7f:f7:19:17:
71:24:35:8d:65:22:df:ce:e2:84:17:77:26:6f:a1:
4a:ce:e8:1f:e2:50:52:b8:eb:63:51:5c:b0:df:07:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:89:28:95:5F:0D:EB:23:6A:38:03:FA:9C:E5:74:28:5A:3C:98:39
X509v3 Authority Key Identifier:
keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3232302e302f32342d3234203d3e20313339393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.85.220.0/24
Signature Algorithm: sha256WithRSAEncryption
64:48:43:b3:9d:cb:ef:b0:ca:eb:2f:fe:2f:2a:e4:b3:9d:f8:
97:fc:34:27:e1:bf:67:ca:f3:f1:26:7c:73:1d:7a:b2:d4:4b:
6e:a6:b7:bb:85:d5:29:d7:1e:70:21:0b:3c:0d:24:fd:ac:0f:
c1:87:75:e8:49:b4:88:2c:e5:01:0a:cc:6c:5a:ec:6f:d9:2f:
ac:9f:92:08:ba:96:f8:46:37:d7:4c:8a:e2:ae:c2:50:42:47:
ae:5b:31:dd:13:69:1f:40:5d:4e:0d:ff:e7:84:24:44:f3:e3:
9b:4d:d4:32:58:10:f6:54:83:a9:79:47:b5:7c:c5:15:e1:86:
76:99:a2:35:b9:b2:87:e0:ab:bf:d5:4b:ee:16:66:11:61:84:
8c:21:ef:91:2a:cd:1a:1b:51:d5:20:d8:b7:9f:2b:16:fc:66:
2d:c3:7f:df:d5:46:71:be:80:11:35:d6:bc:cb:ee:af:be:a6:
4e:e4:45:56:05:88:d6:c2:4b:b3:10:81:30:26:df:18:ff:8f:
af:53:e7:36:5b:ce:39:38:83:62:64:c1:d0:21:e7:57:59:38:
bc:fe:88:61:95:9e:74:2b:6a:e2:db:3d:cd:07:23:36:8e:3e:
c0:3d:eb:3e:73:39:8d:d6:36:f5:71:81:d4:60:87:f2:fa:53:
e5:0d:68:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:20 2026 by rpki-client