This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/323030313a6466303a62363a3a2f34382d3438203d3e203633353130.roa
File:                     323030313a6466303a62363a3a2f34382d3438203d3e203633353130.roa (raw, json)
Hash identifier:          kNYG7SAIiKgSyZG2fQIJ5rRy8D++wscSmsfqJ/JMAnk=
Subject key identifier:   D4:CA:96:7E:F9:90:29:05:A5:22:86:D4:E8:23:3A:F8:C3:57:3A:E0
Certificate issuer:       /CN=79D1595B22C90AC275A4090AF3BE0AEF665EA81B
Certificate serial:       7950CE34EFD587C79F46A99DACF4F809CD34FDF5
Authority key identifier: 79:D1:59:5B:22:C9:0A:C2:75:A4:09:0A:F3:BE:0A:EF:66:5E:A8:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/323030313a6466303a62363a3a2f34382d3438203d3e203633353130.roa
Signing time:             Thu 18 Dec 2025 04:07:23 +0000
ROA not before:           Thu 18 Dec 2025 04:02:23 +0000
ROA not after:            Thu 17 Dec 2026 04:07:23 +0000
asID:                     63510
IP address blocks:        2001:df0:b6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.crl
                          rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 09:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:50:ce:34:ef:d5:87:c7:9f:46:a9:9d:ac:f4:f8:09:cd:34:fd:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79D1595B22C90AC275A4090AF3BE0AEF665EA81B
        Validity
            Not Before: Dec 18 04:02:23 2025 GMT
            Not After : Dec 17 04:07:23 2026 GMT
        Subject: CN=D4CA967EF9902905A52286D4E8233AF8C3573AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7d:43:d3:97:a1:ae:d2:a0:e4:58:f9:cd:bc:
                    df:6d:da:52:0d:b9:21:9b:50:d9:26:35:1b:ba:0f:
                    1a:94:69:db:27:5b:71:5c:2e:9a:eb:36:a4:dd:e7:
                    b0:7f:78:09:8f:29:30:f9:b5:d4:7f:4e:eb:32:54:
                    f9:6b:5e:6a:a3:ae:1d:25:d4:e0:db:28:6e:3c:d9:
                    67:f0:bb:02:77:9f:a3:a5:a4:e6:25:e7:fa:66:65:
                    51:71:96:3b:3a:cd:32:27:34:c1:50:b8:c3:58:b5:
                    3c:fe:bf:15:7d:b8:18:7d:08:50:84:1d:81:f4:f4:
                    14:2d:55:d2:8f:20:21:52:8f:89:9e:88:6f:5d:1b:
                    d9:05:2a:44:a2:2c:a5:d3:61:18:ca:ac:3e:37:de:
                    e2:8e:ca:81:8d:c4:32:75:a0:03:03:62:b3:6a:46:
                    e3:20:f5:60:5f:5a:4e:4a:c7:3d:17:2c:89:38:cd:
                    d1:5e:cf:90:bc:ec:91:3e:10:0b:f3:3f:2f:22:ed:
                    77:b0:7d:48:a0:9b:8a:a8:25:bf:99:48:cf:76:1b:
                    c7:2f:c0:af:54:7b:7f:15:37:c5:d6:a5:d2:c7:95:
                    a5:0a:f9:66:af:48:1f:ae:5b:75:75:2d:c1:28:3e:
                    4a:de:5b:27:fb:69:51:e4:30:6c:c0:a2:16:e2:68:
                    93:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CA:96:7E:F9:90:29:05:A5:22:86:D4:E8:23:3A:F8:C3:57:3A:E0
            X509v3 Authority Key Identifier:
                keyid:79:D1:59:5B:22:C9:0A:C2:75:A4:09:0A:F3:BE:0A:EF:66:5E:A8:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/323030313a6466303a62363a3a2f34382d3438203d3e203633353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:b6::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:26:79:af:63:88:f2:6d:09:8d:de:7d:c6:02:c7:4d:c1:5c:
         79:0b:fe:74:b1:67:b4:68:21:cf:b9:62:00:f4:87:f0:ad:6d:
         11:bc:6d:07:83:cc:ef:c8:9b:69:2d:16:b1:78:10:6e:0e:dc:
         81:55:4c:e5:3e:58:97:8c:d2:c3:e3:e0:1d:4f:f7:ee:bd:dd:
         87:3a:51:f6:2c:77:b4:c0:79:6e:4a:f7:cf:14:82:27:b4:e8:
         b5:7b:6c:3c:91:4d:dd:e1:8e:c2:0e:c7:23:59:78:88:61:fc:
         dc:71:41:00:1f:a1:05:fd:71:a9:5d:55:90:b2:91:eb:ec:5f:
         28:1f:79:2b:5b:8b:ef:7d:19:a9:6e:86:69:86:22:74:da:af:
         4d:7f:96:2d:fd:03:44:00:21:c7:9e:c9:88:89:03:24:41:5b:
         9e:11:b2:98:bf:7e:b1:31:0b:d8:62:94:aa:28:7a:eb:5d:a2:
         5c:7a:82:b9:f8:dc:28:83:1d:ae:47:89:d6:33:82:fa:57:64:
         4b:50:ca:f9:25:36:c8:9c:bc:ed:73:e4:bd:8d:61:15:af:94:
         c6:4b:de:f9:4c:d2:83:be:b6:b5:b3:28:0c:97:ad:09:fa:f9:
         41:ca:79:46:29:07:33:43:52:7f:6c:fc:f9:d3:bf:6a:6f:d2:
         29:ac:42:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:39:54 2025 by rpki-client