This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa
File:                     3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa (raw, json)
Hash identifier:          JiJTXfa7mukjH1+H1dwt2oOGW1HxAnHYwzIb9Nz189M=
Subject key identifier:   6E:D9:B6:D5:CB:59:B3:05:E3:55:73:6A:04:D2:FC:04:EE:68:2C:39
Certificate issuer:       /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Certificate serial:       5503508711497B8DE1F715026AAC0442F480B30F
Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa
Signing time:             Sat 15 Nov 2025 05:54:53 +0000
ROA not before:           Sat 15 Nov 2025 05:49:53 +0000
ROA not after:            Sat 14 Nov 2026 05:54:53 +0000
asID:                     149966
IP address blocks:        103.191.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl
                          rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 04:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:03:50:87:11:49:7b:8d:e1:f7:15:02:6a:ac:04:42:f4:80:b3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
        Validity
            Not Before: Nov 15 05:49:53 2025 GMT
            Not After : Nov 14 05:54:53 2026 GMT
        Subject: CN=6ED9B6D5CB59B305E355736A04D2FC04EE682C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b0:c0:d2:f9:92:b3:60:61:b3:ae:3c:19:64:
                    27:13:8c:71:90:79:6d:92:d8:d8:bb:2f:3c:b5:ac:
                    29:5f:d3:14:ae:53:49:b0:0d:b4:f6:1b:92:f2:9d:
                    a7:7d:b2:89:ca:45:f5:8b:4d:df:38:99:ae:48:8a:
                    f7:a7:07:cc:18:51:33:08:bc:58:b6:0e:5e:7c:01:
                    75:14:d0:6e:47:45:1e:87:0f:cc:6f:ac:b8:8a:8d:
                    7d:69:2e:bb:df:05:e1:4d:f3:68:45:be:ee:e6:e5:
                    28:55:b8:c5:13:04:f2:4c:86:d1:54:4e:1e:7a:1a:
                    b0:57:2c:2c:ca:f4:60:a6:0d:e0:53:dd:5b:9d:7e:
                    0e:8c:e5:34:a0:00:2a:c7:9e:59:f6:e0:1f:05:23:
                    59:1b:5f:d7:ec:25:8f:13:1d:25:aa:26:14:c9:b7:
                    9b:21:de:43:59:f7:4f:ed:5c:54:6d:54:04:01:6c:
                    20:d5:69:44:03:f2:74:c1:32:70:83:18:ed:68:ea:
                    ec:3a:e5:e1:fb:30:8f:ca:35:c1:c6:73:0e:a4:0f:
                    c4:4f:a2:c0:5f:57:6e:0f:79:22:3f:9e:dc:52:a7:
                    1f:f2:86:be:7b:c0:c8:43:4c:e8:f5:0c:10:61:fc:
                    04:b0:51:0f:04:fa:d0:7e:63:f9:36:40:10:a0:ac:
                    26:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D9:B6:D5:CB:59:B3:05:E3:55:73:6A:04:D2:FC:04:EE:68:2C:39
            X509v3 Authority Key Identifier:
                keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32342d3234203d3e20313439393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:2c:ca:93:86:d0:65:bb:f2:12:c2:f3:5c:85:ab:5c:24:cb:
         59:4e:3a:d8:26:71:5c:4d:a2:25:be:5f:e4:76:a7:92:e8:bd:
         d8:e9:71:85:7e:6c:20:59:c6:fa:cb:7e:cd:c2:f6:ff:91:48:
         33:05:30:32:e1:86:68:0c:78:53:61:82:8e:f1:ad:42:95:36:
         ad:cd:45:e0:e7:a2:4e:15:8e:f3:37:40:82:ac:13:44:36:72:
         dc:63:d0:92:99:49:50:d4:1e:c4:7a:60:6f:6d:e7:db:07:e5:
         e2:a0:f3:cf:0e:af:05:96:65:a9:3f:b6:b9:54:60:29:b6:6e:
         db:c9:75:f9:67:47:91:0d:f9:05:f9:54:62:9d:76:0c:ab:be:
         0a:61:15:ee:53:f3:18:80:30:67:31:63:ef:c3:c1:89:2b:98:
         44:f2:40:48:72:94:02:fa:3f:4d:c5:79:94:e5:93:c3:1b:7b:
         87:c6:80:29:31:16:9c:71:9d:fc:77:6c:d0:df:8f:cb:fa:64:
         96:f0:74:4f:39:72:48:f4:31:fb:a1:d3:a1:5b:0e:99:25:7b:
         b6:ce:fc:29:35:79:77:dd:ef:81:20:ec:a2:2e:bd:63:96:2e:
         67:1e:13:da:b9:14:7c:bc:35:44:db:bd:ea:c6:a2:86:5e:f9:
         a9:b2:79:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:26:55 2025 by rpki-client