This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313035363a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313035363a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          Apikojh/WZyuhxTN0KNy8rD1xo4n1AVmCyXIBJU31/A=
Subject key identifier:   25:86:94:A6:5E:BC:D9:A6:4B:84:0A:09:26:7A:90:5E:89:66:93:06
Certificate issuer:       /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Certificate serial:       469B9003000475A4025C99BF5F6EF564803F1CF3
Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313035363a3a2f34382d3438203d3e203633383539.roa
Signing time:             Wed 28 Jan 2026 02:39:42 +0000
ROA not before:           Wed 28 Jan 2026 02:34:42 +0000
ROA not after:            Wed 27 Jan 2027 02:39:42 +0000
asID:                     63859
IP address blocks:        2402:8780:1056::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
                          rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9b:90:03:00:04:75:a4:02:5c:99:bf:5f:6e:f5:64:80:3f:1c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
        Validity
            Not Before: Jan 28 02:34:42 2026 GMT
            Not After : Jan 27 02:39:42 2027 GMT
        Subject: CN=258694A65EBCD9A64B840A09267A905E89669306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:bc:52:8f:98:be:ce:30:9e:1c:45:20:8f:
                    6e:e4:62:64:f0:90:1f:f1:e4:2f:d3:bf:71:9b:e1:
                    0c:2f:be:f8:7b:67:51:db:36:10:38:2b:c0:64:27:
                    0f:45:58:5e:95:27:d3:e5:df:03:e6:86:af:c4:46:
                    ed:66:66:41:bc:b7:a2:a6:d4:7c:6b:e4:4c:33:59:
                    26:ca:bf:cb:8f:ec:7b:9f:85:fd:a8:2f:3a:7a:41:
                    b6:38:4b:78:b4:05:61:67:f2:4e:8d:e5:18:70:52:
                    5e:64:46:a6:bd:30:1b:ea:11:bd:a6:03:5d:4d:cc:
                    73:1d:69:2f:6c:42:6e:1c:7e:0a:ff:ef:35:bb:4b:
                    78:89:76:3b:14:0d:14:fb:07:c3:05:3e:aa:f0:0d:
                    d4:50:9f:7e:1c:31:11:00:52:0b:cb:c1:d9:7b:17:
                    5b:75:81:43:a6:c5:92:2e:eb:f0:6e:6b:f9:c2:e7:
                    96:c0:f0:d5:4b:7f:d0:d8:58:0a:c4:18:a3:c9:39:
                    67:cd:79:53:01:f3:b6:60:cf:32:a0:47:84:7b:58:
                    98:6b:08:a2:a2:fc:85:61:d7:ce:d7:41:16:e4:d9:
                    c0:00:95:f9:89:1c:e6:6d:57:91:4c:b4:4f:14:07:
                    f9:16:8a:1b:3d:21:96:a3:72:40:32:5a:9f:38:d1:
                    02:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:86:94:A6:5E:BC:D9:A6:4B:84:0A:09:26:7A:90:5E:89:66:93:06
            X509v3 Authority Key Identifier:
                keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313035363a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1056::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:40:45:bd:ba:6b:a3:0d:c3:d1:bf:b8:e1:89:b4:a2:f7:d4:
         f1:2f:e5:0c:66:f5:a2:85:90:d7:57:42:c1:19:12:52:e9:5e:
         cc:dc:55:bf:01:8d:2f:03:50:fa:95:9f:1d:c0:8d:7e:05:85:
         29:f2:a3:03:d8:8b:aa:21:b3:d1:e6:ee:e0:e7:0b:63:16:a6:
         bd:bb:da:dd:89:01:7b:a4:df:81:ad:46:f4:86:cb:ea:9e:35:
         6c:6c:67:bf:2a:74:49:d6:5b:bf:e4:0a:99:7e:20:58:e3:43:
         a8:0d:be:82:6b:6c:a7:9d:98:d0:13:8b:88:e1:23:ce:e0:41:
         b3:69:5e:70:30:67:ea:44:20:c9:5f:37:bc:5c:7f:b4:b1:fa:
         f7:8b:70:8b:dc:32:2d:75:96:ae:ac:67:3f:48:88:71:a5:b7:
         4e:7d:db:fe:00:6e:c0:0b:b1:32:d1:63:95:9a:d8:5e:86:ae:
         b9:91:96:d4:ce:de:ea:24:6c:15:37:26:1d:0c:58:e0:0f:e0:
         1f:94:45:4a:8a:1f:7c:1d:1e:00:8f:e2:1e:67:29:53:80:cb:
         2f:4c:9c:b1:29:ee:3b:e0:ba:a9:63:ec:0a:84:82:54:2a:15:
         ae:63:84:bd:bc:69:22:cf:69:46:fc:ab:22:f3:0b:6d:75:99:
         ff:9c:75:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:42:36 2026 by rpki-client