This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa
File:                     323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (raw, json)
Hash identifier:          1IuZ+1sb5CuVWfx/fjE2EJ1GmWjRaqNz5VL2CGRsg+c=
Subject key identifier:   B6:9F:9C:C2:C0:E7:52:CC:A8:4C:2C:7D:4F:5E:76:5B:CD:68:F8:ED
Certificate issuer:       /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial:       06C1BDC65D4E1702879CAAE76729D4938B6DBB58
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa
Signing time:             Tue 11 Nov 2025 05:01:51 +0000
ROA not before:           Tue 11 Nov 2025 04:56:51 +0000
ROA not after:            Tue 10 Nov 2026 05:01:51 +0000
asID:                     131704
IP address blocks:        2001:df6:6f00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl
                          rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 18:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c1:bd:c6:5d:4e:17:02:87:9c:aa:e7:67:29:d4:93:8b:6d:bb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
        Validity
            Not Before: Nov 11 04:56:51 2025 GMT
            Not After : Nov 10 05:01:51 2026 GMT
        Subject: CN=B69F9CC2C0E752CCA84C2C7D4F5E765BCD68F8ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:df:d8:39:dc:45:72:df:25:73:bc:3d:7b:
                    9d:8c:99:f5:a4:c7:77:4b:4b:88:3c:6f:4b:29:3e:
                    80:07:e7:7f:5b:c3:bc:a4:33:da:87:0d:df:9d:d7:
                    f5:b0:32:d0:51:4b:e0:7c:94:dd:bd:44:4b:45:e7:
                    43:23:8d:c3:69:f1:46:c9:63:2c:b7:47:f4:fb:42:
                    aa:55:b6:ef:4f:5a:61:d2:c6:45:b0:ab:3f:04:b9:
                    3c:53:03:96:44:af:92:2f:9e:58:65:a5:fa:ff:d0:
                    c4:39:8e:70:de:4b:39:56:72:4b:94:e8:97:69:56:
                    f0:a0:77:4e:e8:19:5b:66:46:44:8e:de:c0:2b:d1:
                    42:9f:5b:9d:9d:0b:63:a0:2c:46:fd:bd:b4:f4:0a:
                    f0:49:78:e4:55:19:9c:bc:0d:a7:3d:74:af:59:bb:
                    a6:f4:6c:26:f6:db:8c:06:ea:c2:e2:b5:5e:89:c7:
                    5d:38:95:2d:42:58:a6:32:2f:7d:cf:39:e0:d8:0f:
                    19:b2:77:8e:1b:bf:2d:ef:0d:f5:9a:85:48:8f:94:
                    2f:bd:55:2f:a0:b2:23:83:37:8f:f4:cd:1f:19:a7:
                    75:2f:5b:0f:80:a4:19:5b:a6:23:48:f4:c9:18:8d:
                    80:a5:10:5c:f0:16:24:19:47:19:47:81:6d:31:a9:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9F:9C:C2:C0:E7:52:CC:A8:4C:2C:7D:4F:5E:76:5B:CD:68:F8:ED
            X509v3 Authority Key Identifier:
                keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:6f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:58:ab:15:52:52:28:c1:d1:a0:fa:0c:74:b4:1b:19:a8:75:
         d6:e8:b2:1c:70:1d:de:d5:6b:d8:b8:8a:54:dd:1a:84:f0:b3:
         8f:46:22:51:c4:77:fb:58:d0:93:56:84:e9:86:43:07:c0:2c:
         f1:6d:fb:01:d6:93:37:0a:5a:7c:66:61:60:c8:ae:23:3e:0a:
         63:96:49:00:28:09:cf:6a:31:60:a9:4f:7e:94:43:ae:56:09:
         a5:95:dc:13:86:d2:84:9c:a9:03:21:1e:0a:87:25:6a:02:e9:
         80:0f:3e:2b:7a:35:da:74:4d:48:e9:28:b6:83:90:3e:9d:3b:
         9c:6d:e8:51:6d:1e:7f:65:d7:b9:55:57:bd:47:f3:58:23:42:
         0d:a7:e2:66:f4:83:45:33:5a:07:9a:17:d4:76:29:0a:3d:a0:
         6f:4f:79:31:a7:84:40:2f:f2:29:32:61:d9:49:06:09:0f:e3:
         6e:a6:4e:ce:e9:22:ca:68:11:c9:e1:6f:98:38:9d:4f:f6:ab:
         c3:98:d8:75:13:d6:fc:79:07:e7:18:b6:b5:b4:2e:fc:fb:25:
         4e:30:51:5e:02:58:7a:74:f8:89:01:88:c1:e7:be:31:44:ef:
         2a:49:1a:3c:5d:38:f6:27:cf:e5:e1:12:39:d2:dd:f4:95:bb:
         84:27:84:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:31:48 2025 by rpki-client