This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313031323a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313031323a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          SRFJg0vpyyqKeKF1R3zw8dkZHQA/T/+WhtuVLiz2IAY=
Subject key identifier:   94:7A:36:14:4C:7B:3D:39:F1:F6:F2:D0:15:1D:FA:1B:E5:DE:A9:80
Certificate issuer:       /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Certificate serial:       23078247FBCEAF076D713CD74D0E74DF318B8F11
Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313031323a3a2f34382d3438203d3e203633383539.roa
Signing time:             Wed 28 Jan 2026 02:47:30 +0000
ROA not before:           Wed 28 Jan 2026 02:42:30 +0000
ROA not after:            Wed 27 Jan 2027 02:47:30 +0000
asID:                     63859
IP address blocks:        2402:8780:1012::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
                          rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:07:82:47:fb:ce:af:07:6d:71:3c:d7:4d:0e:74:df:31:8b:8f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
        Validity
            Not Before: Jan 28 02:42:30 2026 GMT
            Not After : Jan 27 02:47:30 2027 GMT
        Subject: CN=947A36144C7B3D39F1F6F2D0151DFA1BE5DEA980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:43:26:37:8a:0f:4b:27:8d:d8:d3:ef:77:7e:
                    00:49:cb:81:fc:4b:95:f7:33:48:59:f4:30:1f:9e:
                    0f:76:76:f4:bd:18:2a:e2:84:ec:bd:96:b0:1e:d4:
                    05:3b:0b:d8:e7:c4:1b:37:c5:a4:2d:f6:1f:64:b9:
                    53:64:1c:ed:d4:52:6e:3f:c3:82:d6:da:e2:68:ff:
                    98:b9:9b:af:46:3f:6d:31:10:14:28:da:21:f0:ed:
                    ea:48:c4:16:61:34:ce:86:c9:0a:d4:81:0f:e3:38:
                    0f:2d:e7:c6:38:a8:6f:2c:c1:45:16:03:75:5a:94:
                    d1:35:cf:3f:01:8f:46:14:ee:0d:e7:12:57:7e:cb:
                    3d:47:a1:3c:ee:92:47:e2:c5:3e:e0:95:36:f7:20:
                    43:be:46:70:6f:82:4d:09:c4:39:02:b8:9c:e7:26:
                    98:3c:23:03:65:8d:50:79:56:58:a7:68:79:09:bb:
                    cd:ac:32:e7:60:41:8f:5e:d1:81:dd:c6:a8:46:a1:
                    8f:bc:7a:52:e1:f8:f3:fe:c7:8b:f6:8b:6d:31:66:
                    95:37:1e:5a:91:be:d0:e4:41:90:96:c0:65:cd:7d:
                    cf:86:e8:49:bd:5f:8d:95:04:22:47:7d:d3:ba:04:
                    23:d0:1d:d6:03:2e:ee:57:cd:26:9a:22:95:27:c5:
                    6e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7A:36:14:4C:7B:3D:39:F1:F6:F2:D0:15:1D:FA:1B:E5:DE:A9:80
            X509v3 Authority Key Identifier:
                keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313031323a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1012::/48

    Signature Algorithm: sha256WithRSAEncryption
         da:92:2c:8b:c3:ab:25:e0:59:8a:e2:6b:fb:5b:80:68:2d:36:
         c6:15:7f:a2:65:7c:82:6c:b2:04:a2:1e:64:32:ac:ce:a4:e6:
         50:5d:86:45:e7:41:28:b4:8e:ee:ef:a7:58:a2:b2:2a:d5:63:
         7a:48:4c:97:41:65:fd:c6:52:10:de:37:d4:68:ea:60:14:bf:
         73:a2:56:31:2e:2d:7d:12:43:9b:70:7e:32:3b:a1:e8:27:2c:
         34:f1:0f:4f:02:a5:fb:2f:6d:8e:09:2a:89:14:b8:dd:50:36:
         85:3b:9a:cc:8c:14:42:e0:5e:81:a7:8d:1e:5c:01:a1:b4:c5:
         bb:05:54:08:0f:8c:fb:54:9f:90:cf:07:e5:33:fc:2a:16:58:
         6a:f5:7c:7a:b0:2c:48:b4:ba:44:1a:eb:bf:83:ff:9e:1c:1c:
         ae:7e:35:26:7d:bf:20:1f:df:0a:0d:91:5e:c0:50:68:ba:27:
         b2:57:f5:99:07:10:61:4f:c5:c8:1c:23:c9:2d:48:7a:89:63:
         e3:fd:ac:4c:f2:f5:27:c4:3e:09:c7:6b:48:5c:da:51:6b:25:
         ef:17:aa:23:1f:98:62:dc:fb:62:1b:ae:22:7c:a5:9b:a4:7e:
         c2:c6:a2:ed:cf:f4:15:71:09:02:19:b2:97:07:82:5f:e9:1c:
         41:e6:63:c9
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUIweCR/vOrwdtcTzXTQ503zGLjxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky
N0E3NDRFNDAeFw0yNjAxMjgwMjQyMzBaFw0yNzAxMjcwMjQ3MzBaMDMxMTAvBgNV
BAMTKDk0N0EzNjE0NEM3QjNEMzlGMUY2RjJEMDE1MURGQTFCRTVERUE5ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQyY3ig9LJ43Y0+93fgBJy4H8
S5X3M0hZ9DAfng92dvS9GCrihOy9lrAe1AU7C9jnxBs3xaQt9h9kuVNkHO3UUm4/
w4LW2uJo/5i5m69GP20xEBQo2iHw7epIxBZhNM6GyQrUgQ/jOA8t58Y4qG8swUUW
A3ValNE1zz8Bj0YU7g3nEld+yz1HoTzukkfixT7glTb3IEO+RnBvgk0JxDkCuJzn
Jpg8IwNljVB5VlinaHkJu82sMudgQY9e0YHdxqhGoY+8elLh+PP+x4v2i20xZpU3
HlqRvtDkQZCWwGXNfc+G6Em9X42VBCJHfdO6BCPQHdYDLu5XzSaaIpUnxW6ZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUlHo2FEx7PTnx9vLQFR36G+XeqYAwHwYDVR0j
BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE
NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3
NDRFNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04
NTk4LWI3Y2QxMDEzNDNjYS8wLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDMxMzIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH
gBASMA0GCSqGSIb3DQEBCwUAA4IBAQDakiyLw6sl4FmK4mv7W4BoLTbGFX+iZXyC
bLIEoh5kMqzOpOZQXYZF50EotI7u76dYorIq1WN6SEyXQWX9xlIQ3jfUaOpgFL9z
olYxLi19EkObcH4yO6HoJyw08Q9PAqX7L22OCSqJFLjdUDaFO5rMjBRC4F6Bp40e
XAGhtMW7BVQID4z7VJ+QzwflM/wqFlhq9Xx6sCxItLpEGuu/g/+eHByufjUmfb8g
H98KDZFewFBouieyV/WZBxBhT8XIHCPJLUh6iWPj/axM8vUnxD4Jx2tIXNpRayXv
F6ojH5hi3PtiG64ifKWbpH7CxqLtz/QVcQkCGbKXB4Jf6RxB5mPJ
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:42:52 2026 by rpki-client