This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa
File:                     3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (raw, json)
Hash identifier:          SO5xBVrlUoLYhhClYcL1ic80BzUIAtIXFSuHANOZ2Dc=
Subject key identifier:   AC:10:90:61:4D:E2:03:31:68:39:85:CB:C0:E2:44:3D:11:6A:75:C5
Certificate issuer:       /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3
Certificate serial:       7599B9BA2A43400AD6DCE1294CC7A747788C4335
Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa
Signing time:             Mon 02 Feb 2026 04:02:35 +0000
ROA not before:           Mon 02 Feb 2026 03:57:35 +0000
ROA not after:            Mon 01 Feb 2027 04:02:35 +0000
asID:                     140481
IP address blocks:        103.154.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl
                          rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:99:b9:ba:2a:43:40:0a:d6:dc:e1:29:4c:c7:a7:47:78:8c:43:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3
        Validity
            Not Before: Feb  2 03:57:35 2026 GMT
            Not After : Feb  1 04:02:35 2027 GMT
        Subject: CN=AC1090614DE20331683985CBC0E2443D116A75C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:af:51:92:1a:a3:59:4a:73:ec:20:4c:83:
                    b4:67:bc:de:83:70:45:32:89:13:25:ae:bb:85:79:
                    fa:48:64:2f:09:c8:22:2f:0a:aa:b2:d8:61:c8:76:
                    fb:84:c9:5d:39:b6:8a:0c:2c:d0:05:0b:c6:dd:16:
                    f0:68:22:a6:5e:09:2a:ee:aa:b4:e7:82:4d:31:5b:
                    56:12:e9:1d:21:fb:ae:c2:cd:32:01:97:5a:82:28:
                    56:46:16:0d:ad:64:f0:1c:6a:df:70:02:6e:0b:4c:
                    78:bf:18:21:08:2e:6b:a9:bf:14:f3:61:2b:b3:2d:
                    53:3e:a9:ea:3c:68:2c:a2:04:be:6f:3c:99:cb:13:
                    88:08:04:c8:de:af:1e:58:73:b9:7a:82:bf:1a:4c:
                    9e:0a:4a:cb:f1:51:ae:6b:c0:08:71:3f:61:c3:a6:
                    20:c8:25:2c:75:87:7c:53:98:af:54:dd:6b:9c:8b:
                    96:08:58:11:06:8f:38:51:89:d2:4d:5c:df:64:32:
                    ee:68:4c:76:3f:0a:9c:5e:80:cc:87:55:06:4c:22:
                    94:bc:42:a5:95:43:89:2f:cf:61:78:22:c4:73:b7:
                    64:46:06:57:73:fe:91:59:49:42:69:34:e0:df:ef:
                    c5:53:67:c9:79:cd:77:a7:d0:b4:f2:78:ab:09:38:
                    e0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:10:90:61:4D:E2:03:31:68:39:85:CB:C0:E2:44:3D:11:6A:75:C5
            X509v3 Authority Key Identifier:
                keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:bd:8a:fb:a0:7f:0d:a8:cb:c6:cb:3c:37:75:76:04:d4:8d:
         02:71:52:dd:18:75:8a:46:b4:a5:c5:bc:90:fb:b9:1b:e2:71:
         42:ae:4f:af:6f:9b:ef:ee:13:dc:1c:ea:fa:e3:f0:cf:bc:b2:
         bd:4c:f4:c8:4c:cc:97:d7:c0:3f:52:57:bc:23:c3:3f:ef:cb:
         bd:fe:de:1d:93:83:39:b9:47:4f:8d:e1:3f:b6:37:f5:7b:ed:
         76:4a:e6:0c:ad:b2:f7:1a:c5:ca:bf:55:f6:a9:bb:86:18:73:
         40:60:95:d4:ca:83:0d:31:50:04:f5:11:6f:66:b2:8b:26:69:
         64:57:c2:d9:79:83:65:4e:8e:cc:bc:41:93:da:8c:e0:87:ae:
         b4:c8:cc:c8:f9:09:55:47:df:19:10:08:a1:7e:65:37:3b:ae:
         d9:8d:0b:dc:29:22:23:10:31:d7:04:d2:03:72:7c:f8:cb:8a:
         6e:c3:33:7e:5d:74:b6:e6:f6:84:a0:bd:ab:c9:b9:67:c7:77:
         b2:9d:1f:e4:9e:8d:fa:df:2e:56:fc:80:de:93:77:6e:7c:07:
         9c:94:7e:c9:61:4a:42:3b:13:07:20:71:11:b6:63:2a:96:f4:
         71:f3:69:05:61:fc:90:b6:c0:0c:14:10:4d:f2:39:b2:4b:76:
         f9:21:c2:d7
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUdZm5uipDQArW3OEpTMenR3iMQzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC
NjVEMTdEMzAeFw0yNjAyMDIwMzU3MzVaFw0yNzAyMDEwNDAyMzVaMDMxMTAvBgNV
BAMTKEFDMTA5MDYxNERFMjAzMzE2ODM5ODVDQkMwRTI0NDNEMTE2QTc1QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNq9RkhqjWUpz7CBMg7RnvN6D
cEUyiRMlrruFefpIZC8JyCIvCqqy2GHIdvuEyV05tooMLNAFC8bdFvBoIqZeCSru
qrTngk0xW1YS6R0h+67CzTIBl1qCKFZGFg2tZPAcat9wAm4LTHi/GCEILmupvxTz
YSuzLVM+qeo8aCyiBL5vPJnLE4gIBMjerx5Yc7l6gr8aTJ4KSsvxUa5rwAhxP2HD
piDIJSx1h3xTmK9U3Wuci5YIWBEGjzhRidJNXN9kMu5oTHY/CpxegMyHVQZMIpS8
QqWVQ4kvz2F4IsRzt2RGBldz/pFZSUJpNODf78VTZ8l5zXen0LTyeKsJOOCRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUrBCQYU3iAzFoOYXLwOJEPRFqdcUwHwYDVR0j
BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5
RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE
MTdEMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2MzVhNDUxLWMzMDQtNDVmNS1i
N2RiLTU2ODdlMmIxMDgwNy8wLzMxMzAzMzJlMzEzNTM0MmUzNzM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5pMMA0GCSqG
SIb3DQEBCwUAA4IBAQAxvYr7oH8NqMvGyzw3dXYE1I0CcVLdGHWKRrSlxbyQ+7kb
4nFCrk+vb5vv7hPcHOr64/DPvLK9TPTITMyX18A/Ule8I8M/78u9/t4dk4M5uUdP
jeE/tjf1e+12SuYMrbL3GsXKv1X2qbuGGHNAYJXUyoMNMVAE9RFvZrKLJmlkV8LZ
eYNlTo7MvEGT2ozgh660yMzI+QlVR98ZEAihfmU3O67ZjQvcKSIjEDHXBNIDcnz4
y4puwzN+XXS25vaEoL2ryblnx3eynR/kno363y5W/IDek3dufAeclH7JYUpCOxMH
IHERtmMqlvRx82kFYfyQtsAMFBBN8jmyS3b5IcLX
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:55:39 2026 by rpki-client