This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a313a3a2f34382d3438203d3e2037353837.roa File: 323030313a6436383a313a3a2f34382d3438203d3e2037353837.roa (raw, json) Hash identifier: 3O9Dun/SNBINZ3B9YhjfBGGqTvlmzFCIO86PaMzUieA= Subject key identifier: 81:6E:66:E6:97:2F:85:C5:75:65:3C:3A:08:22:E3:FA:7F:DE:8A:BC Certificate issuer: /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Certificate serial: 3A2FD42A68B42DB5678D9BF0BEB18676263AAB2D Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a313a3a2f34382d3438203d3e2037353837.roa Signing time: Tue 27 Jan 2026 14:27:45 +0000 ROA not before: Tue 27 Jan 2026 14:22:45 +0000 ROA not after: Tue 26 Jan 2027 14:27:45 +0000 asID: 7587 IP address blocks: 2001:d68:1::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 23:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2f:d4:2a:68:b4:2d:b5:67:8d:9b:f0:be:b1:86:76:26:3a:ab:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Validity Not Before: Jan 27 14:22:45 2026 GMT Not After : Jan 26 14:27:45 2027 GMT Subject: CN=816E66E6972F85C575653C3A0822E3FA7FDE8ABC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:bc:1f:e4:9e:8b:2e:7d:da:ed:2c:a7:98: 08:da:57:29:d1:a2:62:ee:45:f3:1c:be:d1:34:e9: e4:60:49:c5:f8:f2:14:23:b2:f0:09:7f:b7:04:88: 19:00:a5:f2:61:db:32:e8:d7:db:30:09:cf:c9:c2: f0:76:57:44:1a:1b:9b:4f:7b:62:94:91:d1:c4:15: 53:0a:b8:3e:93:66:a6:42:9f:9c:e8:e3:ee:06:6a: 16:fc:54:85:d7:54:c0:70:d5:6c:12:fe:48:9b:0c: b6:47:1e:be:60:05:84:42:e6:ee:8d:4e:e9:27:9f: 40:29:dc:cf:f6:02:b0:2c:35:e5:6b:f8:3f:47:32: 0e:76:4c:8f:10:92:ce:30:81:dd:2e:bf:13:eb:81: b1:d3:96:84:fa:9e:25:07:52:c6:74:a1:e6:5a:8d: ae:74:01:77:79:aa:f9:c4:8f:f1:72:85:7f:2b:bf: 07:ac:a9:a6:d8:01:4e:ea:02:22:48:b1:44:8b:53: 74:b9:e5:0c:0c:c9:8f:44:c3:64:5a:35:c6:bb:0c: 60:33:54:0c:0f:62:17:61:ef:33:fb:ee:ef:a2:9f: 45:f9:e2:97:80:86:ba:8f:62:8a:c3:2d:62:3e:6b: a7:dd:f0:92:74:47:c4:71:08:36:52:cd:7d:2f:cc: e7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6E:66:E6:97:2F:85:C5:75:65:3C:3A:08:22:E3:FA:7F:DE:8A:BC X509v3 Authority Key Identifier: keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a313a3a2f34382d3438203d3e2037353837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:d68:1::/48 Signature Algorithm: sha256WithRSAEncryption 6e:05:23:71:b1:79:d0:6c:ae:b0:3d:79:23:76:82:80:4d:d4: 89:c3:30:a2:81:3b:e2:ee:69:8b:ba:f6:74:82:16:bc:69:3a: 90:96:40:ac:ca:9c:e6:9f:30:3d:87:da:b2:32:a6:d7:55:7d: a6:bc:21:13:35:a5:aa:b1:a0:be:54:dc:95:01:f1:8b:e3:b0: 9b:da:bc:8d:27:84:87:2b:bd:0e:b9:30:b9:79:4e:c4:88:5f: d3:c4:d0:a2:c2:36:c6:03:fc:d6:f1:a4:a4:0b:21:ed:6d:9b: 3b:c2:57:f6:6e:e0:03:51:1b:a1:86:4e:75:fe:6e:4b:b8:eb: 19:de:c8:db:96:85:4d:42:9e:d9:6e:f0:84:b4:ec:0d:61:62: 52:8b:c9:46:78:66:1d:17:84:64:eb:13:9b:6b:80:d6:94:4f: 38:6b:9a:84:db:99:9a:9f:40:3e:28:4f:93:2d:ae:c4:f2:0a: 57:fa:1b:12:62:bc:54:8b:82:24:f9:6b:c7:ae:e7:a6:f7:e0: cf:df:2d:45:ea:bb:f2:00:f4:72:3f:de:5a:24:bb:68:84:89: 75:74:18:a9:93:d2:81:7e:39:a0:be:0e:b7:23:75:99:10:cb: 0c:7e:c4:a0:fb:42:59:f5:50:bc:03:65:04:89:1c:af:d7:af: ed:10:57:c1 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUOi/UKmi0LbVnjZvwvrGGdiY6qy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFF QzdDQTMwNjAeFw0yNjAxMjcxNDIyNDVaFw0yNzAxMjYxNDI3NDVaMDMxMTAvBgNV BAMTKDgxNkU2NkU2OTcyRjg1QzU3NTY1M0MzQTA4MjJFM0ZBN0ZERThBQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCum7wf5J6LLn3a7SynmAjaVynR omLuRfMcvtE06eRgScX48hQjsvAJf7cEiBkApfJh2zLo19swCc/JwvB2V0QaG5tP e2KUkdHEFVMKuD6TZqZCn5zo4+4Gahb8VIXXVMBw1WwS/kibDLZHHr5gBYRC5u6N Tuknn0Ap3M/2ArAsNeVr+D9HMg52TI8Qks4wgd0uvxPrgbHTloT6niUHUsZ0oeZa ja50AXd5qvnEj/FyhX8rvwesqabYAU7qAiJIsUSLU3S55QwMyY9Ew2RaNca7DGAz VAwPYhdh7zP77u+in0X54peAhrqPYorDLWI+a6fd8JJ0R8RxCDZSzX0vzOfTAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUgW5m5pcvhcV1ZTw6CCLj+n/eirwwHwYDVR0j BBgwFoAUQgQuZytojDBy/UdDs+fdgex8owYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTJmMjI4Yy1kZjIwLTQ3MjgtOWY5Ni04ZmFhMTM0MDAxN2EvMC80MjA0MkU2NzJC Njg4QzMwNzJGRDQ3NDNCM0U3REQ4MUVDN0NBMzA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFFQzdD QTMwNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExMmYyMjhjLWRmMjAtNDcyOC05 Zjk2LThmYWExMzQwMDE3YS8wLzMyMzAzMDMxM2E2NDM2MzgzYTMxM2EzYTJmMzQz ODJkMzQzODIwM2QzZTIwMzczNTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ1oAAEwDQYJKoZI hvcNAQELBQADggEBAG4FI3GxedBsrrA9eSN2goBN1InDMKKBO+LuaYu69nSCFrxp OpCWQKzKnOafMD2H2rIyptdVfaa8IRM1paqxoL5U3JUB8YvjsJvavI0nhIcrvQ65 MLl5TsSIX9PE0KLCNsYD/NbxpKQLIe1tmzvCV/Zu4ANRG6GGTnX+bku46xneyNuW hU1Cntlu8IS07A1hYlKLyUZ4Zh0XhGTrE5trgNaUTzhrmoTbmZqfQD4oT5MtrsTy Clf6GxJivFSLgiT5a8eu56b34M/fLUXqu/IA9HI/3loku2iEiXV0GKmT0oF+OaC+ DrcjdZkQywx+xKD7Qln1ULwDZQSJHK/Xr+0QV8E= -----END CERTIFICATE-----Generated at Mon Feb 2 12:59:37 2026 by rpki-client