This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/3138302e39342e382e302f32342d3234203d3e20313532303430.roa
File:                     3138302e39342e382e302f32342d3234203d3e20313532303430.roa (raw, json)
Hash identifier:          gDLjvs7mUZTJqV7sQahqgCZp1Ur5vaxNFNQ6lwvC3fA=
Subject key identifier:   50:2C:28:9B:2A:FA:4C:75:F7:F7:6C:89:C9:14:E2:0E:5A:54:24:55
Certificate issuer:       /CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD
Certificate serial:       4CF0C0870B6D919FFC5E9203F8710A5A3FE04E62
Authority key identifier: FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/3138302e39342e382e302f32342d3234203d3e20313532303430.roa
Signing time:             Fri 14 Nov 2025 02:00:02 +0000
ROA not before:           Fri 14 Nov 2025 01:55:02 +0000
ROA not after:            Fri 13 Nov 2026 02:00:02 +0000
asID:                     152040
IP address blocks:        180.94.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl
                          rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 10:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f0:c0:87:0b:6d:91:9f:fc:5e:92:03:f8:71:0a:5a:3f:e0:4e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD
        Validity
            Not Before: Nov 14 01:55:02 2025 GMT
            Not After : Nov 13 02:00:02 2026 GMT
        Subject: CN=502C289B2AFA4C75F7F76C89C914E20E5A542455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:d8:8b:0f:6a:30:3b:1f:77:ab:dc:b3:98:
                    d5:47:6c:31:2a:68:c3:de:f6:82:43:58:e4:88:ba:
                    54:dd:08:f9:c8:c6:37:39:41:73:d7:b6:e0:ea:01:
                    47:e1:58:e3:ee:07:35:21:dc:3b:52:bb:77:a5:a3:
                    34:2f:8a:e3:65:f5:6d:0e:2f:5a:97:5d:6e:42:b4:
                    41:c5:32:a9:c6:aa:de:d4:f1:4c:07:81:a4:25:4c:
                    b9:30:0d:fa:aa:32:9e:38:5b:de:9a:bc:4a:87:69:
                    b0:a6:1a:80:68:f0:34:2e:94:1e:46:82:35:a5:8b:
                    5a:58:eb:66:93:16:d9:4d:e5:9f:b8:6b:6b:1e:dd:
                    71:5a:be:76:f3:57:6a:52:d5:04:52:66:5b:97:a6:
                    b0:6f:db:ea:e2:a9:c6:67:b0:0e:de:0c:90:64:11:
                    3e:b6:4f:f1:85:17:aa:fd:d0:ee:40:52:11:a5:ba:
                    2b:52:2f:e4:6c:d0:3e:a6:bd:55:a6:10:63:cb:b9:
                    20:5f:66:37:80:4d:77:cd:d1:f9:14:f9:ca:5c:d4:
                    df:ec:e4:8b:ff:60:bc:20:a1:9e:2b:36:4c:6d:b4:
                    be:19:47:a5:d6:6c:9b:94:8c:bb:aa:5c:12:20:9c:
                    2f:33:1b:29:60:59:00:a4:22:10:1c:11:75:a8:22:
                    db:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2C:28:9B:2A:FA:4C:75:F7:F7:6C:89:C9:14:E2:0E:5A:54:24:55
            X509v3 Authority Key Identifier:
                keyid:FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/3138302e39342e382e302f32342d3234203d3e20313532303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:4f:a1:37:74:d1:3a:c1:bf:3c:27:8c:83:24:e5:08:0d:76:
         39:1d:5d:29:d0:fc:8c:95:c4:0c:e7:dd:e4:42:3e:43:53:88:
         11:26:37:3e:e9:6c:fc:d9:4e:d8:e6:18:9d:c2:5d:eb:cb:30:
         61:eb:ce:2e:25:7a:6b:85:e2:bd:9c:bb:1e:82:57:99:23:bb:
         c9:a0:0b:95:ba:f2:d8:60:db:5e:36:8c:b2:fe:52:2c:cc:0c:
         a8:e5:d2:24:e7:2d:3f:68:70:96:3d:3b:7d:92:a2:89:6e:06:
         38:da:cc:54:49:c8:b5:bd:cb:49:09:31:f4:97:83:44:84:d2:
         f3:05:4b:b4:61:d7:11:45:98:60:f5:44:b6:18:99:8f:cd:f3:
         a4:51:c6:bf:82:56:ad:2c:83:65:7a:13:99:0a:b1:72:8c:c4:
         fe:d1:01:1e:d8:7b:f6:f9:bd:cb:3d:10:da:7f:c5:bf:51:0b:
         56:04:5d:54:60:76:13:29:6f:1b:1b:10:54:56:79:d3:73:2d:
         f8:9b:5a:6e:39:8e:c8:72:e3:cc:18:20:42:dc:4d:df:41:7b:
         ec:bd:bb:42:dd:49:12:b9:82:57:f7:89:57:ae:b6:23:59:68:
         f6:f5:70:08:fe:a9:e7:90:4a:3e:a9:8a:b3:26:1c:21:c1:74:
         c6:e0:78:25
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUTPDAhwttkZ/8XpID+HEKWj/gTmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1
N0QwMThDRDAeFw0yNTExMTQwMTU1MDJaFw0yNjExMTMwMjAwMDJaMDMxMTAvBgNV
BAMTKDUwMkMyODlCMkFGQTRDNzVGN0Y3NkM4OUM5MTRFMjBFNUE1NDI0NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NtiLD2owOx93q9yzmNVHbDEq
aMPe9oJDWOSIulTdCPnIxjc5QXPXtuDqAUfhWOPuBzUh3DtSu3elozQviuNl9W0O
L1qXXW5CtEHFMqnGqt7U8UwHgaQlTLkwDfqqMp44W96avEqHabCmGoBo8DQulB5G
gjWli1pY62aTFtlN5Z+4a2se3XFavnbzV2pS1QRSZluXprBv2+riqcZnsA7eDJBk
ET62T/GFF6r90O5AUhGluitSL+Rs0D6mvVWmEGPLuSBfZjeATXfN0fkU+cpc1N/s
5Iv/YLwgoZ4rNkxttL4ZR6XWbJuUjLuqXBIgnC8zGylgWQCkIhAcEXWoItuZAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUUCwomyr6THX392yJyRTiDlpUJFUwHwYDVR0j
BBgwFoAU+l9syZusgp1N577O6CMZllfQGM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NmYxZWI0Yi00OGRjLTRlZWEtOTE4MS0xMjhjYjI4YjNkYmEvMC9GQTVGNkNDOTlC
QUM4MjlENERFN0JFQ0VFODIzMTk5NjU3RDAxOENELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1N0Qw
MThDRC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2ZjFlYjRiLTQ4ZGMtNGVlYS05
MTgxLTEyOGNiMjhiM2RiYS8wLzMxMzgzMDJlMzkzNDJlMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzIzMDM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0XggwDQYJKoZIhvcN
AQELBQADggEBAJtPoTd00TrBvzwnjIMk5QgNdjkdXSnQ/IyVxAzn3eRCPkNTiBEm
Nz7pbPzZTtjmGJ3CXevLMGHrzi4lemuF4r2cux6CV5kju8mgC5W68thg2142jLL+
UizMDKjl0iTnLT9ocJY9O32SooluBjjazFRJyLW9y0kJMfSXg0SE0vMFS7Rh1xFF
mGD1RLYYmY/N86RRxr+CVq0sg2V6E5kKsXKMxP7RAR7Ye/b5vcs9ENp/xb9RC1YE
XVRgdhMpbxsbEFRWedNzLfibWm45jshy48wYIELcTd9Be+y9u0LdSRK5glf3iVeu
tiNZaPb1cAj+qeeQSj6pirMmHCHBdMbgeCU=
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:11:30 2025 by rpki-client