This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3137352e3138342e3233362e302f32342d3234203d3e20313532343430.roa
File:                     3137352e3138342e3233362e302f32342d3234203d3e20313532343430.roa (raw, json)
Hash identifier:          6ydyDgUt3ZY0YnrLuFwNCWDzxfmHy7oR4fvhY53u9z0=
Subject key identifier:   B0:6C:CF:7E:85:E3:A5:1A:6D:C3:E2:C7:40:17:A9:DF:99:B5:85:40
Certificate issuer:       /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
Certificate serial:       486235DBA5F85A08BE932898945C3947D8319C75
Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3137352e3138342e3233362e302f32342d3234203d3e20313532343430.roa
Signing time:             Mon 24 Nov 2025 05:02:17 +0000
ROA not before:           Mon 24 Nov 2025 04:57:17 +0000
ROA not after:            Mon 23 Nov 2026 05:02:17 +0000
asID:                     152440
IP address blocks:        175.184.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl
                          rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 06:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:62:35:db:a5:f8:5a:08:be:93:28:98:94:5c:39:47:d8:31:9c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
        Validity
            Not Before: Nov 24 04:57:17 2025 GMT
            Not After : Nov 23 05:02:17 2026 GMT
        Subject: CN=B06CCF7E85E3A51A6DC3E2C74017A9DF99B58540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:16:68:e2:99:35:3c:27:66:01:06:14:ad:de:
                    4e:71:bc:69:af:2a:d2:56:fd:50:8f:6c:a7:b1:55:
                    b2:6b:ea:b1:73:d2:1d:a5:12:93:90:0d:10:14:4b:
                    ac:f1:25:10:ac:f0:e0:e4:f8:39:d6:67:6f:67:e9:
                    a4:5d:31:2f:ce:f3:d5:2e:a3:36:e5:7c:65:2f:a9:
                    dd:c5:d0:e1:3c:74:fd:2d:d0:a4:8b:c2:59:c3:fd:
                    8a:e6:f2:99:1a:20:5d:c9:9d:43:ed:81:8e:11:f3:
                    58:06:96:a8:29:fb:43:00:a1:2a:68:82:25:1d:e0:
                    69:98:cf:fa:ab:03:0a:93:49:a1:f8:f6:b3:b8:bb:
                    e7:62:9f:22:04:2b:0b:cc:9e:fe:da:92:d2:fe:12:
                    42:86:6e:98:b5:54:bf:aa:ac:30:b3:06:8c:c8:31:
                    61:40:51:d5:2c:2f:cb:0e:a9:23:dd:6e:ab:b8:46:
                    ec:30:d1:61:fc:f7:cd:a7:44:22:63:60:9c:a3:25:
                    4f:87:8c:27:94:51:e7:51:2f:e4:7b:55:cf:4c:11:
                    a5:e4:71:87:78:a8:f4:6e:d9:07:0d:db:1e:1d:29:
                    36:8d:c1:90:4e:10:69:6a:c8:5c:8f:56:c7:45:3f:
                    c0:15:e2:9a:15:e9:91:5f:03:7c:f6:e5:83:7b:5f:
                    e1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6C:CF:7E:85:E3:A5:1A:6D:C3:E2:C7:40:17:A9:DF:99:B5:85:40
            X509v3 Authority Key Identifier:
                keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3137352e3138342e3233362e302f32342d3234203d3e20313532343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.184.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:98:6c:01:83:56:85:fd:f0:ea:63:9a:1d:1f:97:e6:0e:5e:
         0b:4a:35:bb:c9:43:a1:5c:ce:12:09:d8:20:9e:ad:de:5a:27:
         3e:9e:37:60:64:b4:3f:ad:98:5a:35:dd:c3:15:b4:af:8f:5a:
         76:c9:ca:bc:2e:2c:58:5f:d4:88:ae:9f:a7:2f:a7:46:77:87:
         97:b0:1f:fb:44:57:50:7f:1d:4a:be:4f:a6:7d:fe:95:de:c6:
         c6:81:9e:ec:40:ca:8f:da:2d:0b:29:f8:e0:6f:20:a8:ef:37:
         3d:73:1c:2f:7a:07:3c:28:a3:ca:9c:0f:83:05:87:26:1a:94:
         a5:52:f5:58:41:55:51:7a:9e:b6:ba:30:94:65:ee:ca:61:f1:
         42:bb:27:f3:b9:c4:2c:c8:93:e4:76:8b:20:93:06:53:dd:be:
         70:ed:26:0c:ff:32:d2:5e:63:15:12:5b:78:5b:3b:6b:d1:16:
         9e:2a:26:d8:3f:fe:2a:b1:e9:1b:35:03:9d:4b:22:14:86:af:
         f7:63:37:fb:64:4e:0c:81:96:f0:4e:99:61:68:b2:de:f4:4b:
         ef:a8:e9:26:11:52:b6:ce:72:e1:a7:47:3c:46:66:74:36:bf:
         ad:17:e6:52:9f:3d:6f:dd:ea:3b:cd:61:e4:26:6b:f4:67:83:
         6b:e6:19:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 17:17:53 2025 by rpki-client