This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313036313a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313036313a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          0jHuQjZuXjUclLGYHYYiSz8XXDbuCdUdap7bcYY7D/U=
Subject key identifier:   B7:19:02:7E:A7:71:DC:95:FD:C8:C1:31:6E:70:BD:31:1A:C2:8C:74
Certificate issuer:       /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Certificate serial:       27BDDD5C3012491828C8C6513874497EB1B72BB6
Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313036313a3a2f34382d3438203d3e203633383539.roa
Signing time:             Wed 28 Jan 2026 09:02:47 +0000
ROA not before:           Wed 28 Jan 2026 08:57:47 +0000
ROA not after:            Wed 27 Jan 2027 09:02:47 +0000
asID:                     63859
IP address blocks:        2402:8780:1061::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
                          rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bd:dd:5c:30:12:49:18:28:c8:c6:51:38:74:49:7e:b1:b7:2b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
        Validity
            Not Before: Jan 28 08:57:47 2026 GMT
            Not After : Jan 27 09:02:47 2027 GMT
        Subject: CN=B719027EA771DC95FDC8C1316E70BD311AC28C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:fc:d0:e8:53:a5:01:06:e4:20:c7:52:3e:
                    33:41:1d:30:2d:b5:23:12:4c:ef:8f:f7:88:48:64:
                    a3:59:03:ca:3f:58:99:ae:12:dd:30:69:d3:a7:1b:
                    a6:44:89:6c:e9:0d:b0:d7:94:6c:ba:25:a2:5d:8e:
                    db:bb:83:4f:a3:63:2f:33:b2:de:e1:30:6b:87:df:
                    60:94:47:9a:a4:69:af:fc:7d:a5:d8:c1:59:1d:56:
                    90:4b:74:92:dd:c3:4d:92:dc:b9:9e:0d:3f:04:e6:
                    0a:d1:14:a4:14:55:0a:96:10:45:d2:2f:c1:d0:5d:
                    9b:48:64:38:70:df:86:85:1a:ef:30:70:fd:25:86:
                    bb:a0:ae:4e:b3:54:19:e3:cc:1f:d1:ac:7a:88:0c:
                    10:7b:c1:60:f2:a8:26:ba:90:0a:cf:1a:63:e3:9a:
                    df:f4:6b:a8:de:c7:ad:ec:72:11:ec:e3:16:07:0f:
                    e3:d3:99:f8:3c:8f:01:55:b7:5f:13:f1:48:92:e4:
                    7b:6e:6f:de:3a:10:b4:01:c1:b6:bb:d1:78:96:32:
                    3e:76:70:0a:28:d1:58:57:02:e0:c6:5c:25:3c:46:
                    8a:f0:27:23:fb:7d:59:7e:a0:a1:b4:69:44:e3:ea:
                    36:c9:10:ac:20:9e:f5:9d:4c:f9:e7:e5:d2:de:fa:
                    af:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:19:02:7E:A7:71:DC:95:FD:C8:C1:31:6E:70:BD:31:1A:C2:8C:74
            X509v3 Authority Key Identifier:
                keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313036313a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1061::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:af:7c:34:b7:09:8d:12:4a:03:4c:81:a1:ff:be:ce:cb:40:
         76:73:33:72:78:a1:18:de:dd:54:89:cd:6b:e3:03:43:3d:c2:
         f1:e6:d1:31:9c:4a:4c:54:dc:bb:e4:17:7a:41:da:ee:8b:fd:
         2f:c0:bc:10:40:46:db:06:a5:48:70:a0:ea:b7:60:01:33:dc:
         1a:53:26:e2:a4:66:ce:cc:0e:f1:f0:4d:e5:df:05:23:b9:51:
         02:18:68:2d:0d:34:3b:8f:71:c6:ed:d2:c6:5b:5f:10:ec:3d:
         d4:ca:83:46:d2:1a:ca:be:26:33:36:2a:97:b4:6a:0c:b8:e5:
         aa:1a:0b:02:5b:32:fc:c9:06:7d:6e:2a:77:19:45:4d:ff:71:
         30:9c:5b:73:f9:99:40:cd:39:83:fa:ea:a2:7e:d6:bc:4d:00:
         2a:fd:59:9d:b0:d3:0e:0d:91:6c:43:e8:a2:27:6f:60:c2:5d:
         1f:b1:a7:83:79:a1:e3:d6:75:fd:c1:d1:d5:49:33:66:e4:b7:
         ff:10:f7:0b:5d:b8:e8:15:34:99:9b:98:e1:37:8f:3f:b4:7b:
         3e:62:49:ca:d8:c6:fc:63:23:7c:ac:23:45:7b:74:5b:f8:b8:
         bf:53:98:20:43:79:19:89:4a:ff:37:81:c2:0a:34:68:8b:47:
         9e:cf:b0:7a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUJ73dXDASSRgoyMZROHRJfrG3K7YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky
N0E3NDRFNDAeFw0yNjAxMjgwODU3NDdaFw0yNzAxMjcwOTAyNDdaMDMxMTAvBgNV
BAMTKEI3MTkwMjdFQTc3MURDOTVGREM4QzEzMTZFNzBCRDMxMUFDMjhDNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxzvzQ6FOlAQbkIMdSPjNBHTAt
tSMSTO+P94hIZKNZA8o/WJmuEt0wadOnG6ZEiWzpDbDXlGy6JaJdjtu7g0+jYy8z
st7hMGuH32CUR5qkaa/8faXYwVkdVpBLdJLdw02S3LmeDT8E5grRFKQUVQqWEEXS
L8HQXZtIZDhw34aFGu8wcP0lhrugrk6zVBnjzB/RrHqIDBB7wWDyqCa6kArPGmPj
mt/0a6jex63schHs4xYHD+PTmfg8jwFVt18T8UiS5Htub946ELQBwba70XiWMj52
cAoo0VhXAuDGXCU8RorwJyP7fVl+oKG0aUTj6jbJEKwgnvWdTPnn5dLe+q+xAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUtxkCfqdx3JX9yMExbnC9MRrCjHQwHwYDVR0j
BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE
NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3
NDRFNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04
NTk4LWI3Y2QxMDEzNDNjYS8wLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDM2MzEz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH
gBBhMA0GCSqGSIb3DQEBCwUAA4IBAQAKr3w0twmNEkoDTIGh/77Oy0B2czNyeKEY
3t1Uic1r4wNDPcLx5tExnEpMVNy75Bd6Qdrui/0vwLwQQEbbBqVIcKDqt2ABM9wa
UybipGbOzA7x8E3l3wUjuVECGGgtDTQ7j3HG7dLGW18Q7D3UyoNG0hrKviYzNiqX
tGoMuOWqGgsCWzL8yQZ9bip3GUVN/3EwnFtz+ZlAzTmD+uqifta8TQAq/VmdsNMO
DZFsQ+iiJ29gwl0fsaeDeaHj1nX9wdHVSTNm5Lf/EPcLXbjoFTSZm5jhN48/tHs+
YknK2Mb8YyN8rCNFe3Rb+Li/U5ggQ3kZiUr/N4HCCjRoi0eez7B6
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:42:37 2026 by rpki-client