This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3232312e302f32342d3234203d3e20313339393934.roa
File: 3135372e38352e3232312e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier: b+FAAT7iaq5DKHJcCl3/hr6S30G0F0UGhSvK5RqcPJA=
Subject key identifier: BB:5E:55:CA:96:58:A3:CB:F3:46:6C:1B:3A:DE:B0:F4:1E:05:B8:1A
Certificate issuer: /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial: 405F9F7CF389CFB8E2142F2974398A1A39D7384D
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3232312e302f32342d3234203d3e20313339393934.roa
Signing time: Mon 02 Feb 2026 09:57:45 +0000
ROA not before: Mon 02 Feb 2026 09:52:45 +0000
ROA not after: Mon 01 Feb 2027 09:57:45 +0000
asID: 139994
IP address blocks: 157.85.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 04:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:5f:9f:7c:f3:89:cf:b8:e2:14:2f:29:74:39:8a:1a:39:d7:38:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Validity
Not Before: Feb 2 09:52:45 2026 GMT
Not After : Feb 1 09:57:45 2027 GMT
Subject: CN=BB5E55CA9658A3CBF3466C1B3ADEB0F41E05B81A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:fc:e6:41:03:08:19:6c:99:f9:69:75:6b:
a4:3c:01:5e:60:3d:5b:f6:23:f9:19:7d:82:c6:8e:
4b:1a:95:bb:54:91:d2:b9:ff:84:9a:1a:00:cb:6c:
b8:8b:23:0c:19:0f:0d:90:ec:e0:e7:67:23:86:8e:
3a:60:5e:9f:d9:9b:ad:9c:65:38:0b:3b:32:66:8a:
8d:cd:61:13:50:24:6f:4d:cb:ba:10:1e:ff:5f:69:
04:da:04:5d:44:2c:23:7e:8a:aa:ca:c9:cf:0b:14:
1f:40:d5:03:c9:2f:61:a1:09:74:4e:d5:9a:94:78:
21:43:4c:46:a4:90:6f:bb:0d:dc:33:32:2a:87:40:
0a:6f:ff:aa:40:7e:45:23:61:f1:92:b7:3b:18:8b:
a2:75:d8:d6:08:5e:2d:c7:a0:e1:8a:9e:60:9d:9f:
0d:c8:73:b9:05:af:59:03:ee:1d:51:a6:81:ed:06:
60:d8:4d:f3:a4:ec:a9:4b:05:0d:16:df:70:30:43:
5b:e5:9e:ae:56:2d:69:20:cd:0b:5e:fd:c8:57:bb:
d2:d7:c5:78:b0:f3:c3:e0:3f:48:e1:e8:3b:b6:99:
fc:68:f3:49:6a:c8:bf:e8:f1:68:e8:ef:a6:f8:a0:
45:da:c2:88:c2:e7:16:40:2b:67:e8:07:eb:ba:e9:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5E:55:CA:96:58:A3:CB:F3:46:6C:1B:3A:DE:B0:F4:1E:05:B8:1A
X509v3 Authority Key Identifier:
keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3232312e302f32342d3234203d3e20313339393934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.85.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a1:fd:41:f8:da:3b:a3:39:ef:f3:6c:86:05:e4:66:12:dc:
67:1b:54:08:36:71:ad:c7:a4:28:4e:ca:f9:57:e6:cf:e2:b0:
6b:2e:d0:6b:5a:53:67:e5:18:c3:eb:92:37:7f:e0:7a:b7:45:
83:c1:14:e9:48:e7:21:12:97:c2:64:bd:ec:bb:ad:c9:20:f7:
a6:cf:02:9e:6c:40:fb:84:43:02:9f:4b:c7:c7:9c:61:a4:e6:
d9:f4:07:15:2b:b4:56:e7:a7:f9:e7:4b:8c:e4:b9:89:07:8f:
30:68:2c:5f:5b:22:77:ae:3f:d6:d2:c1:95:d0:00:36:0b:4d:
5e:33:cd:89:af:3a:ba:71:57:d4:b1:6e:84:f4:62:49:39:ce:
53:c2:06:9e:f8:b8:6f:f5:c3:08:53:8e:f4:32:60:00:60:49:
61:2b:91:54:88:33:4a:0e:88:57:5c:b2:6b:00:d6:0a:00:e5:
c8:ec:88:99:06:6e:41:40:a7:06:ce:07:f3:7a:65:d3:79:d5:
2a:3c:b7:de:3f:94:12:80:be:5b:6a:a8:1e:f8:64:3e:59:44:
88:20:03:2d:50:ae:ce:55:9b:af:21:c3:a2:ff:e5:0d:78:32:
e4:60:ab:97:e3:1e:c0:34:2d:fa:94:43:85:da:a5:ce:13:1b:
57:d2:b4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:19 2026 by rpki-client