This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313036633a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313036633a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          H86q0MXuPDiz0d9A8HFLw1Gbla25BLJJwrd8COSuUdo=
Subject key identifier:   B3:C2:59:62:C5:E6:A2:E8:E2:FF:29:A8:88:1B:60:C7:25:F8:45:ED
Certificate issuer:       /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Certificate serial:       36F0A29FD0A7F1AC692090AAD5E9B08CC3FE129A
Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313036633a3a2f34382d3438203d3e203633383539.roa
Signing time:             Wed 28 Jan 2026 08:19:57 +0000
ROA not before:           Wed 28 Jan 2026 08:14:57 +0000
ROA not after:            Wed 27 Jan 2027 08:19:57 +0000
asID:                     63859
IP address blocks:        2402:8780:106c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
                          rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f0:a2:9f:d0:a7:f1:ac:69:20:90:aa:d5:e9:b0:8c:c3:fe:12:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
        Validity
            Not Before: Jan 28 08:14:57 2026 GMT
            Not After : Jan 27 08:19:57 2027 GMT
        Subject: CN=B3C25962C5E6A2E8E2FF29A8881B60C725F845ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8a:e5:69:10:24:25:90:b0:82:76:52:2c:7f:
                    83:4c:17:db:2b:79:42:26:90:01:38:df:1c:57:40:
                    cd:f6:f6:56:36:57:b3:5f:81:a3:8b:47:b7:df:67:
                    a7:2e:3c:8a:2e:cf:e9:75:2d:ea:21:d9:fa:dd:8e:
                    4f:09:9a:a5:15:55:b0:52:56:80:58:f7:15:de:e9:
                    6d:2f:71:03:3c:ae:1a:da:c1:6a:1c:b6:dd:ff:2a:
                    31:bb:65:7b:c3:f9:9d:9f:b9:f8:91:65:3c:99:fa:
                    fe:9b:1c:78:66:f9:df:fb:4d:6b:da:27:e9:91:88:
                    1a:0e:1e:b2:43:d8:f8:c9:93:29:cb:3e:e0:09:e7:
                    d0:58:7e:bf:4c:2f:5d:5a:a3:8b:5b:50:1b:45:b6:
                    13:4c:ef:59:7e:e1:c8:45:c3:76:d2:9b:7a:2c:26:
                    0c:ba:9b:47:30:57:93:04:de:33:14:c9:b4:9e:b0:
                    ca:be:3c:1a:70:38:d8:f4:35:b7:7f:55:4e:4a:5f:
                    9f:d4:c3:55:86:1c:b5:91:b5:65:1e:25:ae:a6:07:
                    15:c1:24:ea:67:35:97:1a:66:4f:36:f9:b5:8a:96:
                    21:03:90:cc:12:25:f4:28:21:74:6b:36:f7:19:75:
                    d8:d3:4e:e6:c3:f3:8d:4c:15:a5:6a:c6:6b:00:41:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C2:59:62:C5:E6:A2:E8:E2:FF:29:A8:88:1B:60:C7:25:F8:45:ED
            X509v3 Authority Key Identifier:
                keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313036633a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:106c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:16:b5:10:69:a7:f4:47:a2:38:3c:5c:1f:90:e7:66:0e:2b:
         bc:5b:99:dd:65:b7:ad:b5:3d:9c:99:30:2d:25:cf:0d:f3:2b:
         52:5e:92:ad:c7:d2:eb:10:ac:c6:83:93:0d:81:e6:cb:14:b1:
         c4:37:fb:54:5e:19:1d:e9:ed:8b:5a:67:a9:73:6a:d5:b2:c8:
         d4:ab:06:21:d9:28:e7:c2:6d:0f:dd:b2:cf:27:df:25:30:a8:
         9f:61:3b:f9:8d:b9:ce:98:dc:5c:8e:eb:71:b9:93:75:f9:b3:
         79:79:05:b6:78:a5:28:d6:0e:43:96:ea:2a:46:76:99:6d:8d:
         90:64:6a:fb:e4:a2:06:e8:32:f0:5d:50:40:aa:ca:4b:cc:20:
         50:5e:27:fe:2c:69:7a:9f:21:14:a3:09:1d:44:74:46:1a:e6:
         6b:8d:c1:c7:f0:1c:01:bf:a2:44:43:fb:fa:4b:76:97:15:10:
         47:14:63:7d:68:51:30:88:50:66:d4:c1:b8:75:65:f4:12:3d:
         58:b3:0f:4d:85:f8:59:30:99:28:09:5c:b2:18:35:d1:4b:89:
         6d:00:8b:3c:f7:5d:28:5c:7b:34:82:d2:6f:b2:3a:2f:b3:f1:
         e2:e6:d9:77:56:fd:c5:98:20:ab:1d:d8:32:83:ce:35:9a:4b:
         40:30:a8:37
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUNvCin9Cn8axpIJCq1emwjMP+EpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky
N0E3NDRFNDAeFw0yNjAxMjgwODE0NTdaFw0yNzAxMjcwODE5NTdaMDMxMTAvBgNV
BAMTKEIzQzI1OTYyQzVFNkEyRThFMkZGMjlBODg4MUI2MEM3MjVGODQ1RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtiuVpECQlkLCCdlIsf4NMF9sr
eUImkAE43xxXQM329lY2V7NfgaOLR7ffZ6cuPIouz+l1Leoh2frdjk8JmqUVVbBS
VoBY9xXe6W0vcQM8rhrawWoctt3/KjG7ZXvD+Z2fufiRZTyZ+v6bHHhm+d/7TWva
J+mRiBoOHrJD2PjJkynLPuAJ59BYfr9ML11ao4tbUBtFthNM71l+4chFw3bSm3os
Jgy6m0cwV5ME3jMUybSesMq+PBpwONj0Nbd/VU5KX5/Uw1WGHLWRtWUeJa6mBxXB
JOpnNZcaZk82+bWKliEDkMwSJfQoIXRrNvcZddjTTubD841MFaVqxmsAQXcxAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUs8JZYsXmouji/ymoiBtgxyX4Re0wHwYDVR0j
BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE
NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3
NDRFNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04
NTk4LWI3Y2QxMDEzNDNjYS8wLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDM2NjMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH
gBBsMA0GCSqGSIb3DQEBCwUAA4IBAQB/FrUQaaf0R6I4PFwfkOdmDiu8W5ndZbet
tT2cmTAtJc8N8ytSXpKtx9LrEKzGg5MNgebLFLHEN/tUXhkd6e2LWmepc2rVssjU
qwYh2Sjnwm0P3bLPJ98lMKifYTv5jbnOmNxcjutxuZN1+bN5eQW2eKUo1g5Dluoq
RnaZbY2QZGr75KIG6DLwXVBAqspLzCBQXif+LGl6nyEUowkdRHRGGuZrjcHH8BwB
v6JEQ/v6S3aXFRBHFGN9aFEwiFBm1MG4dWX0Ej1Ysw9NhfhZMJkoCVyyGDXRS4lt
AIs8910oXHs0gtJvsjovs/Hi5tl3Vv3FmCCrHdgyg841mktAMKg3
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:42:37 2026 by rpki-client