This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/323030313a6466303a386438303a3a2f34382d3438203d3e20313338393031.roa File: 323030313a6466303a386438303a3a2f34382d3438203d3e20313338393031.roa (raw, json) Hash identifier: a3kFS1oWoqOKQ9pWCt27hqM+zPQA7qWPWdNpInoEdZg= Subject key identifier: 38:97:49:A6:C5:4A:34:D6:7A:95:84:20:59:F2:2D:D5:45:C4:BD:68 Certificate issuer: /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Certificate serial: 6BFCFFD8568B24065B8B51B16987B29EF59935F2 Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/323030313a6466303a386438303a3a2f34382d3438203d3e20313338393031.roa Signing time: Thu 29 Jan 2026 10:46:21 +0000 ROA not before: Thu 29 Jan 2026 10:41:21 +0000 ROA not after: Thu 28 Jan 2027 10:46:21 +0000 asID: 138901 IP address blocks: 2001:df0:8d80::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 22:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fc:ff:d8:56:8b:24:06:5b:8b:51:b1:69:87:b2:9e:f5:99:35:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Validity Not Before: Jan 29 10:41:21 2026 GMT Not After : Jan 28 10:46:21 2027 GMT Subject: CN=389749A6C54A34D67A95842059F22DD545C4BD68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f7:e7:fc:14:5c:e4:c3:25:6b:f1:d2:4d:12: 55:50:c6:04:79:a8:9f:8c:ad:2f:d5:c8:ad:81:47: 4f:fb:6b:df:72:da:fa:52:8a:e8:0f:4c:07:a4:be: b0:c4:49:c1:db:c8:74:2b:60:84:55:6e:09:9d:f4: 33:d4:87:dd:be:e0:8f:10:0d:e4:88:af:56:fa:1b: 4b:86:45:6c:fe:72:f5:e2:04:1a:ec:03:bd:6a:44: 2c:dd:65:6c:bd:a6:e1:1c:98:9f:76:00:24:5c:61: 26:63:85:2f:5d:c9:b3:b7:be:0e:70:4e:44:48:8d: 8a:fc:be:bb:55:3d:66:20:4c:88:42:19:74:db:b7: db:07:35:f0:0e:a5:d1:fd:3b:8c:0f:6f:5e:89:60: 4f:48:e7:c8:99:80:5b:74:ef:15:38:f4:d9:ef:11: 05:51:20:e3:9e:f8:67:26:d6:8f:e0:e1:3c:8b:07: 2f:8b:d5:eb:55:c5:f7:ad:60:e7:02:ab:08:fa:e9: c2:a9:cf:04:8d:bc:62:4d:d8:2a:16:56:80:80:19: bf:8f:a9:44:d4:27:80:a6:d4:70:98:00:68:c8:3e: 0f:33:10:28:cb:8c:0e:60:4d:d0:fb:cd:95:e5:7f: c0:99:31:01:4e:a7:a6:06:a7:d9:ab:f6:52:f6:e7: 01:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:97:49:A6:C5:4A:34:D6:7A:95:84:20:59:F2:2D:D5:45:C4:BD:68 X509v3 Authority Key Identifier: keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/323030313a6466303a386438303a3a2f34382d3438203d3e20313338393031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df0:8d80::/48 Signature Algorithm: sha256WithRSAEncryption bb:df:ba:46:49:c6:d0:d4:ca:84:db:79:45:70:95:43:d5:9b: 2e:35:b3:36:89:3f:ef:4c:d8:7e:cf:94:c7:19:9c:59:5d:7a: 18:e3:29:6c:13:89:3e:77:7d:b1:e5:1f:aa:1a:12:f0:37:4c: 95:cc:ed:b5:ce:32:c3:31:dc:ff:2a:28:12:3e:0d:2f:51:97: 07:48:e8:d8:76:cd:91:e8:e8:55:e5:0a:43:87:5b:77:75:07: 5f:c8:b6:e9:6d:88:34:da:4d:97:36:da:cb:c7:09:a2:6f:5a: 05:47:80:a7:42:30:dd:41:a5:d4:60:f8:b1:44:21:09:52:8b: 49:07:00:87:d7:7e:b4:d5:7f:76:2d:55:1a:a5:fe:06:b4:d6: 3e:3b:18:c4:06:d1:da:00:93:6f:04:fc:41:12:13:a5:79:62: 04:a7:e4:90:4b:30:88:66:95:90:50:26:23:17:01:55:87:42: 4c:36:aa:20:6c:e8:5a:32:cd:20:a0:32:52:83:eb:c4:74:e8: fb:0a:98:d9:d0:f1:42:7f:97:a5:25:4c:8c:df:5f:ce:be:dd: 50:52:84:03:2d:2d:f6:03:4b:8b:52:12:65:14:ca:91:45:1a: bc:7a:40:b9:64:51:c1:a4:50:0b:aa:eb:1a:81:42:c6:54:02: 69:bf:5c:04 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUa/z/2FaLJAZbi1GxaYeynvWZNfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlD ODQxREYzQTAeFw0yNjAxMjkxMDQxMjFaFw0yNzAxMjgxMDQ2MjFaMDMxMTAvBgNV BAMTKDM4OTc0OUE2QzU0QTM0RDY3QTk1ODQyMDU5RjIyREQ1NDVDNEJENjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd9+f8FFzkwyVr8dJNElVQxgR5 qJ+MrS/VyK2BR0/7a99y2vpSiugPTAekvrDEScHbyHQrYIRVbgmd9DPUh92+4I8Q DeSIr1b6G0uGRWz+cvXiBBrsA71qRCzdZWy9puEcmJ92ACRcYSZjhS9dybO3vg5w TkRIjYr8vrtVPWYgTIhCGXTbt9sHNfAOpdH9O4wPb16JYE9I58iZgFt07xU49Nnv EQVRIOOe+Gcm1o/g4TyLBy+L1etVxfetYOcCqwj66cKpzwSNvGJN2CoWVoCAGb+P qUTUJ4Cm1HCYAGjIPg8zECjLjA5gTdD7zZXlf8CZMQFOp6YGp9mr9lL25wH7AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUOJdJpsVKNNZ6lYQgWfIt1UXEvWgwHwYDVR0j BBgwFoAUNNEnzjYLaCzsWZj5YlyA2chB3zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc5OTA2OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC8zNEQxMjdDRTM2 MEI2ODJDRUM1OTk4Rjk2MjVDODBEOUM4NDFERjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlDODQx REYzQS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViNzk5MDY4LTRlYzgtNGMzNi04 ZmE3LTNlNzJhZWJjZWViOC8wLzMyMzAzMDMxM2E2NDY2MzAzYTM4NjQzODMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM4MzkzMDMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8I2AMA0GCSqGSIb3DQEBCwUAA4IBAQC737pGScbQ1MqE23lFcJVD1ZsuNbM2iT/v TNh+z5THGZxZXXoY4ylsE4k+d32x5R+qGhLwN0yVzO21zjLDMdz/KigSPg0vUZcH SOjYds2R6OhV5QpDh1t3dQdfyLbpbYg02k2XNtrLxwmib1oFR4CnQjDdQaXUYPix RCEJUotJBwCH13601X92LVUapf4GtNY+OxjEBtHaAJNvBPxBEhOleWIEp+SQSzCI ZpWQUCYjFwFVh0JMNqogbOhaMs0goDJSg+vEdOj7CpjZ0PFCf5elJUyM31/Ovt1Q UoQDLS32A0uLUhJlFMqRRRq8ekC5ZFHBpFALqusagULGVAJpv1wE -----END CERTIFICATE-----Generated at Mon Feb 2 12:42:47 2026 by rpki-client