This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32322d3234203d3e203538333639.roa
File:                     34352e3131322e3132342e302f32322d3234203d3e203538333639.roa (raw, json)
Hash identifier:          WDTdSuoYk52qLYLCrOhTBoxHotEQdrhlBza4weNfG6I=
Subject key identifier:   45:F0:4D:80:9C:67:66:E3:E8:66:B0:13:8E:25:A3:5E:10:8E:A5:61
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       11F9ABB0452144EF2FB2028E939072D5E8B76654
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32322d3234203d3e203538333639.roa
Signing time:             Mon 22 Dec 2025 01:34:22 +0000
ROA not before:           Mon 22 Dec 2025 01:29:22 +0000
ROA not after:            Mon 21 Dec 2026 01:34:22 +0000
asID:                     58369
IP address blocks:        45.112.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 00:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f9:ab:b0:45:21:44:ef:2f:b2:02:8e:93:90:72:d5:e8:b7:66:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Dec 22 01:29:22 2025 GMT
            Not After : Dec 21 01:34:22 2026 GMT
        Subject: CN=45F04D809C6766E3E866B0138E25A35E108EA561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:93:05:87:32:00:1c:f2:76:19:31:d6:de:b2:
                    1d:8a:19:a6:c7:7a:a2:83:7b:bd:d7:85:7e:8c:61:
                    fe:7a:20:35:47:09:4a:a5:ec:5c:df:0a:98:0c:c7:
                    b7:84:1e:4e:bb:85:e0:56:a4:57:bb:c2:14:a4:8b:
                    46:8d:76:ec:ab:8e:74:f6:42:24:93:19:a1:bf:a4:
                    87:c3:d5:5f:64:68:04:5c:fe:4b:01:a2:14:c9:6f:
                    5d:28:ce:f7:66:35:2d:41:18:67:45:f5:3d:1d:1e:
                    6a:b5:55:2b:c2:83:b9:ec:10:6e:ba:f9:5f:63:0f:
                    ad:0f:90:24:fe:71:b0:24:be:85:4d:d2:56:b2:db:
                    e0:fe:ce:57:04:a3:f8:f6:f1:99:42:8d:28:aa:5e:
                    69:4d:b2:bc:ff:f7:4a:d9:cb:b8:28:de:d0:b4:82:
                    93:f6:fa:30:86:a0:32:0a:7d:83:bc:06:63:5f:c5:
                    01:72:aa:3f:55:7d:b7:56:6f:a6:36:7b:e9:e1:b9:
                    5b:ec:f2:01:2a:c4:fa:65:fb:ab:e2:1a:e4:84:df:
                    04:f1:21:82:cc:3a:f2:81:69:23:dc:31:c0:41:a6:
                    2b:22:63:89:8d:de:ea:0e:19:cc:56:64:c2:59:18:
                    60:b0:74:69:b9:32:e9:2d:2e:52:97:39:f2:2d:49:
                    7e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F0:4D:80:9C:67:66:E3:E8:66:B0:13:8E:25:A3:5E:10:8E:A5:61
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/34352e3131322e3132342e302f32322d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:c9:b6:46:cc:fa:1e:73:1c:cc:80:1a:62:3f:04:fe:43:41:
         e0:52:f7:9c:a0:2b:15:c4:64:c2:40:2f:8a:2a:c9:89:f0:05:
         97:4d:8d:6c:10:1d:38:08:5e:9f:49:6d:cd:60:e2:c9:ae:f1:
         ff:27:8c:2b:52:a8:0c:78:76:ce:d4:d4:07:97:f5:87:56:1e:
         8e:9e:71:1b:0d:ce:33:6d:f7:8e:08:c6:a8:e3:52:2d:00:2b:
         92:52:fa:a3:48:09:b8:2e:f3:64:0b:94:64:af:c8:cf:26:89:
         dd:fa:dd:95:3b:d8:2c:bb:24:d1:26:0c:6f:05:1a:69:67:bd:
         d3:21:5d:86:83:2e:95:c7:71:3b:51:87:43:d4:de:27:9f:15:
         be:41:60:d9:f3:a9:37:f9:7e:cf:b7:86:c0:4c:45:96:2b:92:
         74:86:19:b1:10:c6:55:b2:f6:15:39:d0:92:4e:d8:62:2e:61:
         a8:68:7e:87:6f:0d:68:c2:37:81:a7:5b:e7:94:ae:12:ac:e4:
         a6:34:09:24:10:b6:af:1c:c4:32:16:13:36:fc:91:ee:07:a3:
         b2:e7:be:1f:ea:94:da:ba:e1:e8:3a:1c:de:e2:d5:75:44:a0:
         4e:04:d5:46:4c:5f:11:02:e4:4e:6f:bc:75:9e:f6:95:49:0c:
         a2:fa:bb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 18:37:42 2025 by rpki-client