This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313035373a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313035373a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          NvPPSaT8BwrSe2+lBxElFJmmu54GgVbBcHfUoGBsY20=
Subject key identifier:   26:A0:20:F3:73:D2:7F:AB:22:6C:BE:8A:52:FF:B9:B5:7C:1D:D8:51
Certificate issuer:       /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Certificate serial:       15244884BD5F8958F91C819F1757B1C43B68C2DC
Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313035373a3a2f34382d3438203d3e203633383539.roa
Signing time:             Wed 28 Jan 2026 02:39:51 +0000
ROA not before:           Wed 28 Jan 2026 02:34:51 +0000
ROA not after:            Wed 27 Jan 2027 02:39:51 +0000
asID:                     63859
IP address blocks:        2402:8780:1057::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
                          rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:24:48:84:bd:5f:89:58:f9:1c:81:9f:17:57:b1:c4:3b:68:c2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
        Validity
            Not Before: Jan 28 02:34:51 2026 GMT
            Not After : Jan 27 02:39:51 2027 GMT
        Subject: CN=26A020F373D27FAB226CBE8A52FFB9B57C1DD851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e6:d9:8a:ad:c4:4d:0d:85:b1:25:c1:46:08:
                    06:2a:c4:3c:b1:9b:31:47:17:cf:8e:db:9c:e7:0f:
                    1c:57:44:e5:c3:74:c8:e1:28:c0:b3:35:d9:fd:64:
                    10:b6:40:31:40:33:fc:a1:00:44:b1:6e:4e:da:fe:
                    54:9d:50:bf:d4:8b:ac:1f:70:55:29:f8:dc:09:06:
                    56:aa:8c:a3:84:5e:7b:a0:74:14:c1:72:1c:c4:95:
                    3a:c0:6c:3b:e4:23:d8:67:43:34:35:17:4b:33:7f:
                    40:24:a7:67:0c:b8:ce:9d:5f:fe:30:06:f7:f9:63:
                    82:41:96:39:82:32:5c:ac:64:91:ae:35:e3:6f:b0:
                    5b:7a:e8:01:88:3b:a3:57:50:5d:5a:3b:77:10:d2:
                    62:db:9e:cb:ba:06:fc:85:6d:62:62:42:c8:b5:05:
                    96:19:12:f7:77:f9:0f:b0:da:bc:b8:be:1f:0e:8c:
                    e9:c0:68:70:9b:2f:76:f7:bf:16:36:30:c7:66:86:
                    5f:3a:40:bf:36:92:24:53:73:8a:20:14:97:d5:65:
                    f9:15:65:78:24:c3:3e:73:c5:d1:19:1d:87:97:e1:
                    4f:78:96:eb:a4:ed:86:0e:9b:2d:7c:11:ac:6d:c1:
                    57:b8:5d:72:41:17:b9:d7:76:54:b2:8e:2d:a0:16:
                    5f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A0:20:F3:73:D2:7F:AB:22:6C:BE:8A:52:FF:B9:B5:7C:1D:D8:51
            X509v3 Authority Key Identifier:
                keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313035373a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1057::/48

    Signature Algorithm: sha256WithRSAEncryption
         ec:a8:39:96:ff:b7:b5:62:26:bb:30:48:09:85:5a:65:9b:20:
         a1:c7:c6:d9:28:24:e2:10:87:f1:f7:42:cf:22:bb:a2:5d:4a:
         d3:50:7f:2a:7f:67:dd:7c:c2:ea:c4:2a:45:81:ae:ca:84:2f:
         9e:2f:9c:94:cb:eb:cb:6a:62:13:fc:65:f3:ca:03:88:d3:06:
         71:43:e9:e3:d9:71:c0:cd:9d:60:84:d8:f1:79:cc:ae:5b:d8:
         a0:21:94:f2:17:39:3c:18:6b:24:d8:65:42:c2:a2:5b:e9:27:
         05:dd:e2:97:ae:06:f3:72:d3:ad:0f:9d:98:ac:16:db:f6:a0:
         30:2d:19:4d:75:13:d7:05:49:7e:0c:33:86:46:45:af:60:2b:
         2f:64:db:9b:d4:43:24:1f:1f:c6:31:86:1c:f5:8c:d0:36:ca:
         a1:6f:0e:20:08:53:9f:3d:46:dc:60:a7:3d:57:30:3b:3c:1d:
         2f:7a:07:f3:c8:bb:45:cd:8a:8f:c0:f2:0c:37:26:d6:c0:bd:
         59:8c:e5:fd:b8:db:46:df:e1:7e:5c:6d:c4:28:e4:9b:ce:bd:
         8c:c9:7d:5b:eb:aa:db:4c:79:c7:f3:36:e8:c8:24:87:a0:55:
         2d:80:38:6a:60:05:78:d6:95:0e:d0:50:04:97:94:c1:b3:f9:
         dc:46:85:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:42:34 2026 by rpki-client