This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203539323831.roa
File:                     323430303a636438303a3a2f33322d3438203d3e203539323831.roa (raw, json)
Hash identifier:          SDDhhLbIPIon66Bn4BSdn8Fj3IQ8y3DGAekRQSKZURg=
Subject key identifier:   34:04:93:92:BE:91:79:1C:BA:64:DD:E9:BD:0C:E9:FD:F7:0C:3F:EA
Certificate issuer:       /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial:       4C7867984623A15051FD5A452B984A431123ABA0
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203539323831.roa
Signing time:             Wed 14 Jan 2026 08:00:00 +0000
ROA not before:           Wed 14 Jan 2026 07:55:00 +0000
ROA not after:            Wed 13 Jan 2027 08:00:00 +0000
asID:                     59281
IP address blocks:        2400:cd80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
                          rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 10:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:78:67:98:46:23:a1:50:51:fd:5a:45:2b:98:4a:43:11:23:ab:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
        Validity
            Not Before: Jan 14 07:55:00 2026 GMT
            Not After : Jan 13 08:00:00 2027 GMT
        Subject: CN=34049392BE91791CBA64DDE9BD0CE9FDF70C3FEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:19:79:5e:e7:65:a0:64:c8:d5:e3:65:cd:
                    f7:30:93:2a:f2:b3:85:4d:12:11:bb:27:a5:22:a6:
                    d7:72:f8:91:2a:3b:02:c0:e5:84:7e:70:ad:bf:90:
                    3f:16:99:c6:5a:8b:3f:31:82:a6:19:7d:db:57:53:
                    57:a8:16:ad:d9:85:44:ff:a6:eb:c8:d5:24:53:c5:
                    f6:5f:95:c2:29:f4:d7:f2:4f:c9:1a:a1:52:b2:9b:
                    e7:60:a8:f7:e2:b2:f1:35:6c:c4:60:bd:70:fb:00:
                    19:2a:d9:42:bc:f8:7b:ce:f5:d1:48:36:fc:40:62:
                    b2:3c:91:8c:24:42:9e:fe:d5:d7:07:0b:3d:96:eb:
                    21:ee:87:85:82:7c:be:9e:a2:b7:79:89:dc:13:25:
                    a9:79:85:d1:4c:e4:02:88:3b:0e:89:f9:ae:b1:fe:
                    90:e8:df:02:48:b1:ea:1d:8d:bf:b4:a2:23:c1:53:
                    97:2c:c5:16:d4:00:43:9d:c5:57:6e:6a:2a:95:b2:
                    86:c8:a2:34:18:90:c3:ec:20:7e:e3:8c:07:54:3e:
                    d1:ce:ab:1f:7b:fa:a1:6a:f5:a8:7f:77:df:88:62:
                    7e:f0:88:d0:2a:f9:8c:b4:bf:0d:a5:ca:b0:32:2f:
                    bb:c5:c4:81:22:12:c1:b1:f8:0e:01:b7:f2:6a:73:
                    84:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:04:93:92:BE:91:79:1C:BA:64:DD:E9:BD:0C:E9:FD:F7:0C:3F:EA
            X509v3 Authority Key Identifier:
                keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203539323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:cd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:02:a4:89:6a:2f:51:d7:bd:95:fb:99:a0:e4:41:e4:5f:77:
         26:fe:00:8c:41:c7:28:de:ad:d4:53:8a:8c:1f:16:19:29:d0:
         35:6d:88:4f:4e:bb:0f:38:0f:d2:94:df:7a:04:7e:02:a7:9e:
         2d:cf:29:5e:2d:70:08:16:27:07:f5:9d:66:3a:41:10:0c:86:
         21:93:65:30:6d:fb:41:63:db:89:74:f5:48:6b:5d:25:1c:fa:
         b7:15:f0:55:e7:93:58:a1:d1:94:f7:0b:07:a8:9e:7d:9e:7d:
         b5:34:14:18:e7:0e:bc:2a:bb:9c:88:7f:86:db:79:91:ac:02:
         a6:1f:f1:ab:5d:1e:95:d5:bd:f2:be:6c:5a:e2:fe:47:3a:42:
         8f:3b:5e:ab:27:77:d8:f5:5b:63:67:0e:25:a8:fb:29:87:50:
         c2:e1:07:08:ef:a3:b3:73:8f:60:aa:4f:ee:b9:db:57:9a:cd:
         35:7d:8d:eb:09:8d:49:50:79:da:8c:61:06:92:43:10:58:98:
         b7:e8:f7:01:2f:04:96:99:eb:e1:a8:f9:31:d1:08:be:4d:b9:
         dd:d2:db:ad:6b:22:35:b6:66:d3:1b:d5:3f:3a:d4:f0:9d:57:
         95:94:78:7b:13:8f:21:37:15:9a:e3:d8:04:77:f3:f4:24:f4:
         e8:c5:cd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:56:44 2026 by rpki-client