This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/3138302e39342e392e302f32342d3234203d3e20313532303430.roa
File:                     3138302e39342e392e302f32342d3234203d3e20313532303430.roa (raw, json)
Hash identifier:          wEcX2juwCI4r7czUlMraVPKObT0SxDceFI9YFbZ+Zxg=
Subject key identifier:   84:83:1B:ED:4D:F4:0A:8A:72:52:DF:6A:39:26:3C:3A:08:78:85:FF
Certificate issuer:       /CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD
Certificate serial:       172FFF029733E7E03CDA568865B05E189846808E
Authority key identifier: FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/3138302e39342e392e302f32342d3234203d3e20313532303430.roa
Signing time:             Fri 14 Nov 2025 02:00:02 +0000
ROA not before:           Fri 14 Nov 2025 01:55:02 +0000
ROA not after:            Fri 13 Nov 2026 02:00:02 +0000
asID:                     152040
IP address blocks:        180.94.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl
                          rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 10:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2f:ff:02:97:33:e7:e0:3c:da:56:88:65:b0:5e:18:98:46:80:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD
        Validity
            Not Before: Nov 14 01:55:02 2025 GMT
            Not After : Nov 13 02:00:02 2026 GMT
        Subject: CN=84831BED4DF40A8A7252DF6A39263C3A087885FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:7b:27:a5:44:71:9c:90:e5:9f:25:4a:8a:
                    73:14:db:3e:8b:11:2d:0c:7b:1e:0d:9c:0a:15:3f:
                    79:49:63:73:df:61:90:e2:3c:4f:6e:cd:90:1b:7c:
                    4a:bf:e6:76:fe:49:11:9d:13:76:70:40:17:57:7c:
                    61:a4:71:3e:b4:09:eb:d6:89:df:2e:0f:34:0a:a8:
                    c7:51:c7:dc:a6:cb:d9:13:2d:95:e8:bd:85:9b:da:
                    51:c8:a3:16:8c:30:5b:f8:44:b4:c6:ba:82:a8:81:
                    de:56:6f:66:ab:d4:76:1c:f3:86:8b:ca:7b:09:6a:
                    4c:c9:38:34:64:5e:de:52:50:94:ed:fa:70:1a:a7:
                    03:be:e4:d6:e0:36:f5:56:54:b5:26:b6:e0:b2:b2:
                    5b:0e:6c:64:b3:ce:5f:1b:be:9d:aa:b9:83:00:b2:
                    67:41:04:e0:9c:93:de:87:f7:25:d0:a3:e0:b0:8b:
                    2d:2a:0e:79:ed:63:43:2a:a1:2f:99:aa:0d:f2:57:
                    2c:fc:f0:b9:f6:7b:10:59:9d:e6:ae:65:d3:58:b3:
                    84:dc:80:3d:ee:a8:b9:4e:14:d1:88:43:c8:67:2a:
                    9e:3d:ef:4a:72:b3:7e:0d:75:80:f3:40:61:f8:f3:
                    3a:fc:3f:4d:cc:c9:d0:42:16:42:9c:2e:39:d6:a4:
                    c7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:83:1B:ED:4D:F4:0A:8A:72:52:DF:6A:39:26:3C:3A:08:78:85:FF
            X509v3 Authority Key Identifier:
                keyid:FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/3138302e39342e392e302f32342d3234203d3e20313532303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:db:00:c5:da:55:5a:6d:37:cc:6b:2c:4f:d0:ec:2f:9c:db:
         e0:99:bb:c4:e8:11:53:52:14:92:a2:a8:9a:cf:2f:4f:4a:16:
         9d:83:b0:36:9d:73:54:b8:75:f2:a4:ca:f6:ca:2e:cb:31:fd:
         b4:11:41:fa:6a:01:3d:4a:49:62:73:ab:31:83:c3:01:e3:53:
         7b:00:8d:45:a1:84:68:26:74:31:5b:03:02:a4:f4:45:40:0f:
         6a:fd:ad:da:0a:09:d3:7d:ee:94:7c:0e:ca:bd:5b:9c:e8:b3:
         e1:af:28:63:d8:e7:37:35:95:06:b4:ee:79:2f:b8:a9:88:22:
         a6:61:3b:f9:6f:cd:84:dc:a4:01:7b:cc:63:3d:4c:42:01:1a:
         44:17:df:32:45:a3:87:82:92:b4:73:c4:42:7a:47:c8:bd:07:
         3e:d1:13:76:3c:a0:04:54:c1:57:55:4c:59:8e:67:03:3d:93:
         fe:84:c2:c7:f3:04:b0:fd:6f:cb:f4:a5:03:08:65:87:aa:c4:
         61:b6:e4:d8:75:5d:bb:e5:f4:33:d1:be:9f:60:cf:45:fc:69:
         5b:aa:24:0e:b0:5a:a2:97:e3:7c:d4:19:bd:b4:5d:16:72:22:
         d4:55:f8:85:eb:c6:8d:7d:8c:4e:87:5b:2d:95:0a:44:4f:96:
         69:ef:58:3d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUFy//Apcz5+A82laIZbBeGJhGgI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1
N0QwMThDRDAeFw0yNTExMTQwMTU1MDJaFw0yNjExMTMwMjAwMDJaMDMxMTAvBgNV
BAMTKDg0ODMxQkVENERGNDBBOEE3MjUyREY2QTM5MjYzQzNBMDg3ODg1RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2HsnpURxnJDlnyVKinMU2z6L
ES0Mex4NnAoVP3lJY3PfYZDiPE9uzZAbfEq/5nb+SRGdE3ZwQBdXfGGkcT60CevW
id8uDzQKqMdRx9ymy9kTLZXovYWb2lHIoxaMMFv4RLTGuoKogd5Wb2ar1HYc84aL
ynsJakzJODRkXt5SUJTt+nAapwO+5NbgNvVWVLUmtuCyslsObGSzzl8bvp2quYMA
smdBBOCck96H9yXQo+Cwiy0qDnntY0MqoS+Zqg3yVyz88Ln2exBZneauZdNYs4Tc
gD3uqLlOFNGIQ8hnKp4970pys34NdYDzQGH48zr8P03MydBCFkKcLjnWpMdhAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUhIMb7U30CopyUt9qOSY8Ogh4hf8wHwYDVR0j
BBgwFoAU+l9syZusgp1N577O6CMZllfQGM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NmYxZWI0Yi00OGRjLTRlZWEtOTE4MS0xMjhjYjI4YjNkYmEvMC9GQTVGNkNDOTlC
QUM4MjlENERFN0JFQ0VFODIzMTk5NjU3RDAxOENELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1N0Qw
MThDRC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2ZjFlYjRiLTQ4ZGMtNGVlYS05
MTgxLTEyOGNiMjhiM2RiYS8wLzMxMzgzMDJlMzkzNDJlMzkyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzIzMDM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0XgkwDQYJKoZIhvcN
AQELBQADggEBAH3bAMXaVVptN8xrLE/Q7C+c2+CZu8ToEVNSFJKiqJrPL09KFp2D
sDadc1S4dfKkyvbKLssx/bQRQfpqAT1KSWJzqzGDwwHjU3sAjUWhhGgmdDFbAwKk
9EVAD2r9rdoKCdN97pR8Dsq9W5zos+GvKGPY5zc1lQa07nkvuKmIIqZhO/lvzYTc
pAF7zGM9TEIBGkQX3zJFo4eCkrRzxEJ6R8i9Bz7RE3Y8oARUwVdVTFmOZwM9k/6E
wsfzBLD9b8v0pQMIZYeqxGG25Nh1Xbvl9DPRvp9gz0X8aVuqJA6wWqKX43zUGb20
XRZyItRV+IXrxo19jE6HWy2VCkRPlmnvWD0=
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:11:03 2025 by rpki-client