This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa
File:                     3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa (raw, json)
Hash identifier:          /uvYv6HXm75DxIAvpZkO8f6t2HrqKvSXY9kmVPmsLBo=
Subject key identifier:   CC:16:3F:6F:AF:E7:DA:D4:91:23:F1:34:4A:B4:43:EB:6D:ED:94:BF
Certificate issuer:       /CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313
Certificate serial:       5151718C602311788440C8EFDA422774877E87CE
Authority key identifier: C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa
Signing time:             Wed 07 Jan 2026 05:03:06 +0000
ROA not before:           Wed 07 Jan 2026 04:58:06 +0000
ROA not after:            Wed 06 Jan 2027 05:03:06 +0000
asID:                     141607
IP address blocks:        210.79.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl
                          rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 17:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:51:71:8c:60:23:11:78:84:40:c8:ef:da:42:27:74:87:7e:87:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3359BEBF0C15C9D4739CE88BFB2142D15A99313
        Validity
            Not Before: Jan  7 04:58:06 2026 GMT
            Not After : Jan  6 05:03:06 2027 GMT
        Subject: CN=CC163F6FAFE7DAD49123F1344AB443EB6DED94BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3c:9a:6a:61:40:37:8f:d9:99:01:bf:d4:77:
                    12:95:cf:57:93:9c:2c:fc:94:23:5d:0d:60:52:46:
                    6f:da:4d:84:d8:b0:28:04:aa:7c:4c:77:33:1d:18:
                    88:4d:ec:cd:25:dd:77:d0:8a:fe:ca:f0:f6:0d:8f:
                    d1:25:44:ca:5d:33:cb:70:b1:7f:9a:cb:87:b0:e8:
                    cb:aa:b3:b8:4d:4d:ef:06:ae:ac:17:2c:ef:f9:3e:
                    a3:cc:e8:c8:8a:9d:67:83:e6:90:ca:a2:69:2a:63:
                    fd:e1:16:a3:3c:81:0d:04:bb:67:e3:b4:1d:60:3d:
                    60:9d:0d:0d:ea:d6:49:9a:77:83:67:ed:e3:42:c6:
                    49:6f:91:5d:50:e6:97:bf:e9:ec:12:e0:1a:9b:26:
                    a1:22:8e:f8:49:7d:01:09:dc:c0:84:ab:6d:70:74:
                    99:20:79:7b:a2:8e:7d:4c:78:f3:0d:67:f0:0d:11:
                    ed:21:9f:09:df:cf:87:5c:4f:88:38:4a:f7:cf:de:
                    23:5b:b9:58:ca:1a:cd:e2:6f:f2:e8:c7:99:46:72:
                    d0:a5:2d:a1:90:80:c7:4a:8e:02:fe:ea:77:aa:6c:
                    28:29:6a:84:00:61:e9:df:e0:f1:0f:57:f8:21:d6:
                    87:ea:89:1e:f9:a9:c9:4c:ba:34:9d:4e:fe:a4:f2:
                    20:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:16:3F:6F:AF:E7:DA:D4:91:23:F1:34:4A:B4:43:EB:6D:ED:94:BF
            X509v3 Authority Key Identifier:
                keyid:C3:35:9B:EB:F0:C1:5C:9D:47:39:CE:88:BF:B2:14:2D:15:A9:93:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3359BEBF0C15C9D4739CE88BFB2142D15A99313.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5438f6aa-f27d-4906-951e-f02d891bf1ed/0/3231302e37392e3134322e302f32342d3234203d3e20313431363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:0f:07:c6:fb:a6:e4:f9:b3:10:b6:3c:24:4b:7b:6c:ae:9b:
         c2:ea:cb:19:0d:e4:e6:3a:69:1e:70:68:e2:d3:63:71:6b:89:
         6c:65:05:77:89:a2:5e:a2:77:91:cd:2f:0c:05:89:84:15:48:
         c8:fa:2f:9b:95:af:6f:20:cc:d0:80:a4:4a:07:e2:d1:56:c0:
         53:bb:39:17:32:ba:64:89:a5:bc:c3:d2:60:39:e4:87:61:1b:
         ff:61:65:67:b2:72:a8:7c:6a:b8:5d:ab:9c:e7:35:51:60:71:
         e0:41:0b:5b:46:25:48:e9:4e:41:05:bb:0c:f8:2a:f9:2e:d1:
         cb:82:24:de:ab:70:3d:9b:01:c0:1d:92:09:f8:70:9d:38:ff:
         e2:51:c4:a9:7d:a4:cb:c3:e8:b4:95:55:a0:7e:52:42:71:03:
         f9:1a:64:0a:6c:9e:91:a4:d6:15:0a:06:f5:a2:39:b1:72:cc:
         1e:38:9f:71:6f:56:41:c9:77:af:3a:d9:d5:57:c0:63:75:35:
         d5:80:11:95:8d:8c:c4:6a:53:70:7d:2b:ec:9e:bc:d6:ef:91:
         41:ea:61:f1:6d:03:0c:60:28:35:9f:02:4d:82:69:53:bb:e6:
         e4:c6:d3:69:5b:88:7b:ac:26:68:22:08:58:b2:d7:30:43:42:
         bf:eb:84:c6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUVFxjGAjEXiEQMjv2kIndId+h84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQx
NUE5OTMxMzAeFw0yNjAxMDcwNDU4MDZaFw0yNzAxMDYwNTAzMDZaMDMxMTAvBgNV
BAMTKENDMTYzRjZGQUZFN0RBRDQ5MTIzRjEzNDRBQjQ0M0VCNkRFRDk0QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZPJpqYUA3j9mZAb/UdxKVz1eT
nCz8lCNdDWBSRm/aTYTYsCgEqnxMdzMdGIhN7M0l3XfQiv7K8PYNj9ElRMpdM8tw
sX+ay4ew6Muqs7hNTe8GrqwXLO/5PqPM6MiKnWeD5pDKomkqY/3hFqM8gQ0Eu2fj
tB1gPWCdDQ3q1kmad4Nn7eNCxklvkV1Q5pe/6ewS4BqbJqEijvhJfQEJ3MCEq21w
dJkgeXuijn1MePMNZ/ANEe0hnwnfz4dcT4g4SvfP3iNbuVjKGs3ib/Lox5lGctCl
LaGQgMdKjgL+6neqbCgpaoQAYenf4PEPV/gh1ofqiR75qclMujSdTv6k8iBXAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUzBY/b6/n2tSRI/E0SrRD623tlL8wHwYDVR0j
BBgwFoAUwzWb6/DBXJ1HOc6Iv7IULRWpkxMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NDM4ZjZhYS1mMjdkLTQ5MDYtOTUxZS1mMDJkODkxYmYxZWQvMC9DMzM1OUJFQkYw
QzE1QzlENDczOUNFODhCRkIyMTQyRDE1QTk5MzEzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzMzNTlCRUJGMEMxNUM5RDQ3MzlDRTg4QkZCMjE0MkQxNUE5
OTMxMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU0MzhmNmFhLWYyN2QtNDkwNi05
NTFlLWYwMmQ4OTFiZjFlZC8wLzMyMzEzMDJlMzczOTJlMzEzNDMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0k+OMA0GCSqG
SIb3DQEBCwUAA4IBAQB7DwfG+6bk+bMQtjwkS3tsrpvC6ssZDeTmOmkecGji02Nx
a4lsZQV3iaJeoneRzS8MBYmEFUjI+i+bla9vIMzQgKRKB+LRVsBTuzkXMrpkiaW8
w9JgOeSHYRv/YWVnsnKofGq4Xauc5zVRYHHgQQtbRiVI6U5BBbsM+Cr5LtHLgiTe
q3A9mwHAHZIJ+HCdOP/iUcSpfaTLw+i0lVWgflJCcQP5GmQKbJ6RpNYVCgb1ojmx
csweOJ9xb1ZByXevOtnVV8BjdTXVgBGVjYzEalNwfSvsnrzW75FB6mHxbQMMYCg1
nwJNgmlTu+bkxtNpW4h7rCZoIghYstcwQ0K/64TG
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:58:55 2026 by rpki-client