This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa
File:                     323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (raw, json)
Hash identifier:          vIO6PhCd4cB1k0BQaAZQv7MW8qfuF2ReRTB65p41S5s=
Subject key identifier:   90:01:86:F5:4A:2F:92:79:4F:68:00:67:5C:ED:27:8D:0E:FB:2B:51
Certificate issuer:       /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E
Certificate serial:       0298BE09718CAFC0A6A33B9623D72FD1B92AD10E
Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa
Signing time:             Fri 09 Jan 2026 09:02:33 +0000
ROA not before:           Fri 09 Jan 2026 08:57:33 +0000
ROA not after:            Fri 08 Jan 2027 09:02:33 +0000
asID:                     150196
IP address blocks:        2001:df3:2540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl
                          rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 08:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:98:be:09:71:8c:af:c0:a6:a3:3b:96:23:d7:2f:d1:b9:2a:d1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E
        Validity
            Not Before: Jan  9 08:57:33 2026 GMT
            Not After : Jan  8 09:02:33 2027 GMT
        Subject: CN=900186F54A2F92794F6800675CED278D0EFB2B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:5f:8f:c9:09:85:7b:4b:29:86:5f:63:aa:
                    bb:c8:fc:88:10:5e:3b:3d:a9:7a:07:cc:a0:e6:8a:
                    26:df:7d:7a:2f:ed:b4:46:78:09:d7:39:52:19:7c:
                    7c:20:76:24:97:b8:ff:bc:5a:c9:a3:4b:1a:5e:0c:
                    5b:2a:50:fe:64:d3:26:9f:aa:56:15:3b:a7:6d:02:
                    53:c8:b1:b3:31:aa:4d:31:44:cb:99:dd:e2:2a:81:
                    34:54:0a:96:0d:31:bf:f2:0f:e8:71:94:c1:73:bb:
                    24:4a:22:52:d1:0a:7b:32:6d:36:e2:a4:71:26:84:
                    39:04:6a:6d:67:45:68:6a:9b:e8:56:73:40:7f:7b:
                    64:1f:ad:ec:83:ef:b5:0a:a7:70:03:11:66:70:c2:
                    be:a3:d9:5f:60:c9:09:68:74:b4:d0:ad:da:32:2a:
                    ef:ee:cc:96:e7:d5:c5:7d:97:33:10:86:83:c0:01:
                    cf:1c:90:75:b2:ee:c9:fa:5f:93:02:6a:95:e2:87:
                    88:60:dd:93:d0:a7:c2:d5:c7:b1:18:b7:1c:bb:30:
                    d1:be:68:63:97:d1:5d:de:df:ad:f2:8d:b5:45:35:
                    b5:7a:73:99:f5:e1:89:e0:a8:27:00:b1:91:73:0c:
                    1d:7d:b7:48:72:3a:bc:1e:82:f9:fd:60:88:9d:57:
                    03:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:01:86:F5:4A:2F:92:79:4F:68:00:67:5C:ED:27:8D:0E:FB:2B:51
            X509v3 Authority Key Identifier:
                keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:2540::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:05:27:ee:26:09:e3:dc:40:7f:d7:66:b9:3a:30:a6:cf:f1:
         49:4f:b3:47:3d:cd:38:40:9a:73:44:5e:1b:27:75:22:56:39:
         ae:5d:ab:18:a8:69:fe:0c:4e:cc:81:bc:12:76:6c:ec:78:f5:
         3f:7d:16:2b:b7:0a:21:4a:d7:0b:86:d7:1c:b1:c0:53:5b:54:
         bc:d8:47:fa:a3:7a:31:be:ac:09:d3:4e:c2:0b:2d:9c:8d:51:
         b7:68:06:a0:ae:2d:7e:18:08:91:9c:6b:c0:60:46:d4:dd:b7:
         a1:b8:0f:5c:32:9b:71:02:09:22:52:35:0f:cc:e9:56:2a:73:
         cc:43:00:4e:82:93:07:e2:48:fd:3e:bd:dc:f6:01:a0:28:31:
         4e:b0:2f:05:53:6d:6a:0b:ce:01:7a:69:74:3d:c5:7d:62:fe:
         6a:f7:b5:13:4b:46:4d:54:9a:fe:46:bb:28:53:8e:62:7a:8b:
         ff:38:b5:9f:a7:45:4a:dc:95:1c:8a:cf:5c:7d:0a:2c:80:51:
         e5:2c:50:66:cb:5a:62:68:eb:da:a5:23:5d:61:5e:72:5d:6c:
         d2:7f:7a:ab:14:a5:94:42:c8:fa:48:0d:85:4c:93:ac:5e:ae:
         04:fe:45:d3:1c:17:a1:be:e3:e7:28:5a:02:7f:8e:d4:f0:c7:
         d9:bd:34:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 13:04:41 2026 by rpki-client