This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313037373a3a2f34382d3438203d3e203633383539.roa
File:                     323430323a383738303a313037373a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier:          uezMtm9yfboQIT5jcCNmn+YeTeFhBFZYzV1MJBfEVkA=
Subject key identifier:   99:6B:BB:B7:4F:D2:0E:D6:9B:08:CD:93:5B:8F:6B:35:96:A7:D9:7E
Certificate issuer:       /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Certificate serial:       3524C86FB95B435B8E11B9173079609879D143C1
Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313037373a3a2f34382d3438203d3e203633383539.roa
Signing time:             Wed 28 Jan 2026 02:38:49 +0000
ROA not before:           Wed 28 Jan 2026 02:33:49 +0000
ROA not after:            Wed 27 Jan 2027 02:38:49 +0000
asID:                     63859
IP address blocks:        2402:8780:1077::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
                          rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:24:c8:6f:b9:5b:43:5b:8e:11:b9:17:30:79:60:98:79:d1:43:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
        Validity
            Not Before: Jan 28 02:33:49 2026 GMT
            Not After : Jan 27 02:38:49 2027 GMT
        Subject: CN=996BBBB74FD20ED69B08CD935B8F6B3596A7D97E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:82:f5:72:18:56:e8:51:18:3f:ad:cf:3d:9f:
                    02:e2:f6:28:1d:25:c4:21:b1:c6:6a:35:d8:58:c2:
                    89:a0:34:d2:16:2d:51:33:ba:f2:49:c1:8f:ff:d1:
                    39:d0:7b:1a:28:9f:77:b1:8f:09:37:a1:3b:ee:d8:
                    6a:57:2d:7e:19:c3:cc:11:09:e7:80:57:3a:ed:d3:
                    77:3a:d0:fe:a3:28:99:d1:45:a9:c2:bf:66:f1:a2:
                    97:53:7e:f2:27:0d:90:71:bb:0d:60:95:c7:c6:4c:
                    bc:11:02:c2:6f:75:df:5b:b0:64:3f:4a:c1:11:eb:
                    c2:17:71:9b:ac:fb:a2:16:21:cb:1c:77:4d:72:ff:
                    fc:e8:2d:87:b6:96:75:52:0a:b8:da:63:e5:ec:1c:
                    1d:80:91:19:0a:09:14:fc:7e:b0:68:a5:19:ac:43:
                    53:c3:fb:db:46:72:a8:b5:ec:5f:80:55:eb:1c:91:
                    8d:10:dc:7a:c0:cc:cc:fd:bf:eb:ce:9e:a9:ab:97:
                    70:69:6c:17:7f:bf:21:76:5d:22:02:a9:4d:5a:65:
                    17:d4:03:e4:23:6e:fc:08:74:92:fa:b3:7f:5e:29:
                    03:5f:de:94:77:dd:a9:2b:10:00:de:99:17:13:89:
                    a3:6a:2c:77:44:cc:2f:18:74:45:45:07:cd:c5:dd:
                    a3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6B:BB:B7:4F:D2:0E:D6:9B:08:CD:93:5B:8F:6B:35:96:A7:D9:7E
            X509v3 Authority Key Identifier:
                keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313037373a3a2f34382d3438203d3e203633383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:8780:1077::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:ce:22:ff:b1:9e:76:07:c9:5a:fa:9b:8e:33:4e:b9:33:93:
         4b:9a:61:af:ce:d7:7e:de:54:5f:90:51:a3:59:70:d6:94:f7:
         43:9a:71:ef:e3:54:b5:21:7a:e2:89:20:db:14:42:51:8e:5c:
         99:0c:3e:e0:ac:54:2c:82:a8:3b:f1:c1:16:eb:96:73:11:69:
         bb:4b:2a:01:83:8d:53:ca:e5:58:f2:b7:4d:b8:2e:12:9f:0e:
         59:43:78:9d:1a:1a:6f:7c:7c:d8:a4:ab:96:2f:72:e2:62:1c:
         7d:9b:b5:48:07:df:e4:a3:2c:d6:31:51:83:9a:3e:91:49:d9:
         ad:04:5b:0d:c5:a2:a2:32:83:33:9e:29:ce:7f:49:20:9c:b3:
         5f:52:51:1c:c4:cb:b3:5d:fd:19:66:47:9b:67:a3:d8:8d:d4:
         12:5c:4a:91:2f:12:23:81:0d:64:4a:d9:cb:b4:8c:a7:3b:1d:
         03:61:e1:28:ea:ff:b5:2a:bb:eb:d8:ce:b0:3c:64:2c:ba:9c:
         77:99:0e:54:e1:0f:81:ce:e2:6d:dc:b3:08:ff:56:05:6c:d7:
         14:10:63:36:0a:1b:29:0a:60:f4:ec:9e:d7:62:59:90:d8:c8:
         6a:81:48:39:bf:6f:7a:15:c5:f6:43:5a:8d:3e:c4:4d:50:67:
         42:de:49:a6
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUNSTIb7lbQ1uOEbkXMHlgmHnRQ8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky
N0E3NDRFNDAeFw0yNjAxMjgwMjMzNDlaFw0yNzAxMjcwMjM4NDlaMDMxMTAvBgNV
BAMTKDk5NkJCQkI3NEZEMjBFRDY5QjA4Q0Q5MzVCOEY2QjM1OTZBN0Q5N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgvVyGFboURg/rc89nwLi9igd
JcQhscZqNdhYwomgNNIWLVEzuvJJwY//0TnQexoon3exjwk3oTvu2GpXLX4Zw8wR
CeeAVzrt03c60P6jKJnRRanCv2bxopdTfvInDZBxuw1glcfGTLwRAsJvdd9bsGQ/
SsER68IXcZus+6IWIcscd01y//zoLYe2lnVSCrjaY+XsHB2AkRkKCRT8frBopRms
Q1PD+9tGcqi17F+AVesckY0Q3HrAzMz9v+vOnqmrl3BpbBd/vyF2XSICqU1aZRfU
A+QjbvwIdJL6s39eKQNf3pR33akrEADemRcTiaNqLHdEzC8YdEVFB83F3aP/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUmWu7t0/SDtabCM2TW49rNZan2X4wHwYDVR0j
BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE
NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3
NDRFNC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04
NTk4LWI3Y2QxMDEzNDNjYS8wLzMyMzQzMDMyM2EzODM3MzgzMDNhMzEzMDM3Mzcz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAKH
gBB3MA0GCSqGSIb3DQEBCwUAA4IBAQAbziL/sZ52B8la+puOM065M5NLmmGvztd+
3lRfkFGjWXDWlPdDmnHv41S1IXriiSDbFEJRjlyZDD7grFQsgqg78cEW65ZzEWm7
SyoBg41TyuVY8rdNuC4Snw5ZQ3idGhpvfHzYpKuWL3LiYhx9m7VIB9/koyzWMVGD
mj6RSdmtBFsNxaKiMoMzninOf0kgnLNfUlEcxMuzXf0ZZkebZ6PYjdQSXEqRLxIj
gQ1kStnLtIynOx0DYeEo6v+1Krvr2M6wPGQsupx3mQ5U4Q+BzuJt3LMI/1YFbNcU
EGM2ChspCmD07J7XYlmQ2MhqgUg5v296FcX2Q1qNPsRNUGdC3kmm
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:42:53 2026 by rpki-client