This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a3a2f33322d3332203d3e2037353837.roa File: 323030313a6436383a3a2f33322d3332203d3e2037353837.roa (raw, json) Hash identifier: 8fbkbe+zjfoqQaxLOTN723BKYFqkAiYSq9UlyPBgR3c= Subject key identifier: 70:21:50:7C:1E:88:4B:4D:A8:2C:14:15:69:6E:6C:0D:E4:BB:63:6D Certificate issuer: /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Certificate serial: 058054D551E131638A5A6FBF07D2EFDD4C091FBA Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a3a2f33322d3332203d3e2037353837.roa Signing time: Sun 01 Feb 2026 07:08:15 +0000 ROA not before: Sun 01 Feb 2026 07:03:15 +0000 ROA not after: Sun 31 Jan 2027 07:08:15 +0000 asID: 7587 IP address blocks: 2001:d68::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 23:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:80:54:d5:51:e1:31:63:8a:5a:6f:bf:07:d2:ef:dd:4c:09:1f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Validity Not Before: Feb 1 07:03:15 2026 GMT Not After : Jan 31 07:08:15 2027 GMT Subject: CN=7021507C1E884B4DA82C1415696E6C0DE4BB636D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f7:14:f8:67:be:db:10:4d:3d:75:cb:b0:09: 40:d4:27:18:2e:da:bc:23:19:ad:3e:b0:1b:45:94: 8b:93:a7:ec:0d:03:b9:4c:30:19:e6:11:98:0e:50: 8b:ef:cf:50:31:97:c2:c7:d9:3f:39:c3:0d:7d:e0: 26:74:46:09:ab:f5:42:23:59:a1:72:17:f3:ba:f0: 67:0e:61:54:16:5e:57:a3:5e:d2:50:8f:64:f2:6c: e9:8e:ce:6b:a8:74:7a:a9:ff:44:24:41:91:a8:00: 4b:af:3f:83:be:14:71:78:dc:e1:26:77:aa:43:5f: 4a:7a:7f:02:2e:c4:45:0a:c2:3e:98:21:92:4d:86: 0a:9d:9d:99:26:57:97:cd:12:12:50:bd:05:dc:2f: 92:44:6b:15:e1:ca:62:c0:8b:5c:2d:53:91:34:c9: 15:38:3f:00:11:f8:96:fa:9f:98:d7:a6:d6:1b:2c: b0:d7:3f:f1:0a:e9:fb:18:d7:fc:70:b3:d8:a5:d0: 33:56:22:f0:d0:90:4c:3f:47:81:2f:e1:16:39:53: 19:7d:e2:cb:e6:a9:fd:36:d6:e6:ab:1a:3b:d5:7d: da:6b:14:a8:00:90:84:69:6e:5c:0e:16:07:57:1f: aa:b4:1e:c6:ce:0a:b2:0a:69:57:b5:69:f1:1f:da: ee:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:21:50:7C:1E:88:4B:4D:A8:2C:14:15:69:6E:6C:0D:E4:BB:63:6D X509v3 Authority Key Identifier: keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/323030313a6436383a3a2f33322d3332203d3e2037353837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:d68::/32 Signature Algorithm: sha256WithRSAEncryption 2f:b2:ff:53:84:fb:54:6b:63:ef:6b:d3:05:15:1b:ae:22:51: 80:5e:5f:36:fb:31:55:db:56:fc:8f:b9:43:79:e3:a0:27:4e: 88:95:fe:57:59:07:35:a7:c5:99:41:ab:6b:47:d3:78:09:f2: 1f:fb:87:e9:fb:b0:4e:f0:ef:d5:f1:c8:1d:85:24:0e:a8:3c: 9b:d8:fd:43:da:ef:b8:ee:c2:de:14:ec:89:6b:36:26:64:3b: 44:d2:0f:46:34:fb:24:e1:ff:49:c6:b2:93:33:6c:5b:d9:49: b7:99:4b:1e:bc:d0:7f:a8:35:67:f6:55:37:ca:04:ee:e3:7f: 0b:c0:c5:4a:3b:a5:79:29:20:1b:1d:ce:03:c3:50:48:9b:05: ab:1d:64:a5:2f:52:10:35:d9:43:ba:0b:ea:dc:72:53:56:e3: ff:7e:a3:79:3d:65:db:36:7c:e0:01:a8:7b:12:a4:75:f7:e5: e5:9d:77:3a:c2:06:c4:02:3d:8d:1a:3b:93:db:f8:8d:65:1c: 93:35:9d:35:f3:74:5e:51:11:17:37:38:36:6a:00:d9:b6:6e: 4a:d5:10:e7:25:7c:61:c5:63:c0:6c:3c:7e:3a:55:5d:bc:fa: 7f:5f:1e:9d:54:5d:a3:e8:b0:e4:4f:dd:e0:ae:f9:55:5e:a1: 4b:74:ae:f4 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUBYBU1VHhMWOKWm+/B9Lv3UwJH7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFF QzdDQTMwNjAeFw0yNjAyMDEwNzAzMTVaFw0yNzAxMzEwNzA4MTVaMDMxMTAvBgNV BAMTKDcwMjE1MDdDMUU4ODRCNERBODJDMTQxNTY5NkU2QzBERTRCQjYzNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD29xT4Z77bEE09dcuwCUDUJxgu 2rwjGa0+sBtFlIuTp+wNA7lMMBnmEZgOUIvvz1Axl8LH2T85ww194CZ0Rgmr9UIj WaFyF/O68GcOYVQWXlejXtJQj2TybOmOzmuodHqp/0QkQZGoAEuvP4O+FHF43OEm d6pDX0p6fwIuxEUKwj6YIZJNhgqdnZkmV5fNEhJQvQXcL5JEaxXhymLAi1wtU5E0 yRU4PwAR+Jb6n5jXptYbLLDXP/EK6fsY1/xws9il0DNWIvDQkEw/R4Ev4RY5Uxl9 4svmqf021uarGjvVfdprFKgAkIRpblwOFgdXH6q0HsbOCrIKaVe1afEf2u7fAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUcCFQfB6IS02oLBQVaW5sDeS7Y20wHwYDVR0j BBgwFoAUQgQuZytojDBy/UdDs+fdgex8owYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTJmMjI4Yy1kZjIwLTQ3MjgtOWY5Ni04ZmFhMTM0MDAxN2EvMC80MjA0MkU2NzJC Njg4QzMwNzJGRDQ3NDNCM0U3REQ4MUVDN0NBMzA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFFQzdD QTMwNi5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyZjIyOGMtZGYyMC00NzI4LTlm OTYtOGZhYTEzNDAwMTdhLzAvMzIzMDMwMzEzYTY0MzYzODNhM2EyZjMzMzIyZDMz MzIyMDNkM2UyMDM3MzUzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAENaDANBgkqhkiG9w0BAQsF AAOCAQEAL7L/U4T7VGtj72vTBRUbriJRgF5fNvsxVdtW/I+5Q3njoCdOiJX+V1kH NafFmUGra0fTeAnyH/uH6fuwTvDv1fHIHYUkDqg8m9j9Q9rvuO7C3hTsiWs2JmQ7 RNIPRjT7JOH/ScaykzNsW9lJt5lLHrzQf6g1Z/ZVN8oE7uN/C8DFSjuleSkgGx3O A8NQSJsFqx1kpS9SEDXZQ7oL6txyU1bj/36jeT1l2zZ84AGoexKkdffl5Z13OsIG xAI9jRo7k9v4jWUckzWdNfN0XlERFzc4NmoA2bZuStUQ5yV8YcVjwGw8fjpVXbz6 f18enVRdo+iw5E/d4K75VV6hS3Su9A== -----END CERTIFICATE-----Generated at Mon Feb 2 12:59:36 2026 by rpki-client