This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313030303a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313030303a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          yK5Kt5H9WNZtX/HNNL0bv286Z16/92qoWYRV6znuTLQ=
Subject key identifier:   8D:74:37:10:4A:33:9E:EB:D8:8D:96:5B:D8:E8:D6:7B:57:AE:95:D6
Certificate issuer:       /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Certificate serial:       4038A3307BF226B3A4F36099A96D6916018E7BB5
Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313030303a3a2f34382d3438203d3e203633383539.roa
Signing time:             Wed 28 Jan 2026 02:37:25 +0000
ROA not before:           Wed 28 Jan 2026 02:32:25 +0000
ROA not after:            Wed 27 Jan 2027 02:37:25 +0000
asID:                     63859
IP address blocks:        2402:8780:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
                          rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:38:a3:30:7b:f2:26:b3:a4:f3:60:99:a9:6d:69:16:01:8e:7b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
        Validity
            Not Before: Jan 28 02:32:25 2026 GMT
            Not After : Jan 27 02:37:25 2027 GMT
        Subject: CN=8D7437104A339EEBD88D965BD8E8D67B57AE95D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:2b:20:e1:98:f3:a9:90:4c:77:91:4e:51:
                    f4:c5:ae:56:0e:ba:8c:c5:7b:64:5e:23:12:77:ca:
                    da:cf:6b:ae:b3:7c:05:99:c6:2b:3a:0e:ac:65:6e:
                    d2:06:be:2f:aa:dd:17:47:23:d0:82:2c:4c:6e:81:
                    84:7a:2a:f4:35:f5:de:4a:d6:22:46:75:40:93:fb:
                    f7:a1:ef:14:2f:90:ae:13:08:99:08:41:91:8d:6e:
                    c8:75:8e:00:04:08:20:36:3c:d6:cf:0c:6d:5a:47:
                    4c:7a:be:d7:d3:20:42:24:8b:ca:a9:50:7e:0c:b0:
                    cb:0a:1d:65:84:2c:ff:51:0e:96:f0:9d:01:b9:28:
                    a6:7a:e9:d8:4e:fe:0e:c8:d5:f2:d1:e2:4f:9c:95:
                    f2:cd:d4:7c:8d:14:99:e5:b2:70:e4:94:8e:2d:83:
                    ba:7e:df:fd:a3:69:63:fd:28:7b:dd:a1:20:cd:2b:
                    28:20:42:27:b2:af:32:e0:2c:4f:1a:dc:90:96:7d:
                    c8:86:92:18:df:35:c3:96:1e:8b:54:63:f8:d1:eb:
                    88:a9:36:59:8b:15:72:ca:a2:d5:03:1f:4f:88:57:
                    83:6c:b4:5a:3d:da:b2:f2:c5:6d:9d:5f:7d:a9:05:
                    f2:35:11:29:b3:d7:b7:51:38:a3:6c:12:23:75:c1:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:74:37:10:4A:33:9E:EB:D8:8D:96:5B:D8:E8:D6:7B:57:AE:95:D6
            X509v3 Authority Key Identifier:
                keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313030303a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:f1:2c:70:73:53:37:84:77:6a:c4:a3:67:46:cc:5b:ad:2e:
         af:0f:ba:d7:ea:48:07:46:e8:ca:2d:b2:ee:27:10:ab:37:05:
         4f:16:a7:24:c1:71:1a:fc:6a:52:b0:13:ff:ae:92:cc:c0:fc:
         58:f3:fb:65:e3:37:3f:fe:32:f2:ed:ab:a2:6c:0d:6a:06:51:
         b5:73:9a:bd:2e:51:41:4c:58:93:a4:46:ac:8f:9f:29:e2:76:
         f9:ee:9c:75:47:ec:56:92:7b:de:b0:7e:22:89:cb:e4:19:11:
         98:a6:e0:8a:05:4f:ea:8b:2e:f6:7d:df:a3:23:2d:84:73:61:
         fd:65:f9:b8:55:70:5d:8f:e6:a6:76:76:97:56:d0:36:ee:91:
         8a:ea:a9:04:16:15:c7:62:1d:8d:ea:75:6a:02:74:e1:80:f3:
         0d:96:49:02:47:77:86:c0:d3:8e:72:de:3d:da:0f:b8:35:25:
         92:a2:70:f3:60:66:4f:4f:a9:24:5f:78:01:71:5e:57:ba:65:
         3a:5d:cb:53:d4:eb:83:f0:0c:30:58:45:3a:2d:f9:25:58:e7:
         51:0b:a4:04:7c:4f:d0:ce:f7:be:9b:43:48:c9:1b:bf:fe:aa:
         ba:9e:7a:90:0f:9c:64:4a:dc:7c:ce:f2:3f:16:a5:e5:7b:4e:
         f8:41:cd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:42:33 2026 by rpki-client