This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/3135372e32302e3135362e302f32332d3234203d3e20313532343131.roa
File:                     3135372e32302e3135362e302f32332d3234203d3e20313532343131.roa (raw, json)
Hash identifier:          4ExRW8SIxPfkw+kC/9gMRffVKwpQRwRaUKan/meBEX4=
Subject key identifier:   95:54:6C:75:58:43:20:0F:13:D6:7E:9C:D9:43:CE:68:08:C5:A6:D5
Certificate issuer:       /CN=99A17325620A243689E32E6074D5CFCA91D915EB
Certificate serial:       6B8DC7653B735E6025ED4782B893D860AB2CD5B1
Authority key identifier: 99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/3135372e32302e3135362e302f32332d3234203d3e20313532343131.roa
Signing time:             Sun 01 Feb 2026 18:00:02 +0000
ROA not before:           Sun 01 Feb 2026 17:55:02 +0000
ROA not after:            Sun 31 Jan 2027 18:00:02 +0000
asID:                     152411
IP address blocks:        157.20.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl
                          rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 04:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8d:c7:65:3b:73:5e:60:25:ed:47:82:b8:93:d8:60:ab:2c:d5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A17325620A243689E32E6074D5CFCA91D915EB
        Validity
            Not Before: Feb  1 17:55:02 2026 GMT
            Not After : Jan 31 18:00:02 2027 GMT
        Subject: CN=95546C755843200F13D67E9CD943CE6808C5A6D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:53:6d:66:8f:e7:fd:72:14:39:86:70:e8:
                    68:ba:d7:99:b0:1e:63:67:de:1a:66:7d:b5:47:e5:
                    5f:28:a8:9b:3b:82:cc:63:50:49:42:38:b2:fd:29:
                    dd:af:04:13:2e:dc:0b:ce:54:f3:ec:f9:d2:31:a3:
                    fa:73:52:b9:e5:b6:cb:4f:7b:aa:e0:26:07:a0:68:
                    d9:47:2a:e0:5c:89:a4:d9:8c:ca:15:4b:bd:d2:0b:
                    63:5e:d0:05:d0:f7:cf:a7:9f:a9:c2:cb:72:d7:a9:
                    29:5e:ca:b7:2f:38:5d:a7:e2:a1:aa:cb:4a:c3:9b:
                    7a:4a:66:bd:1a:6c:ba:c7:35:1b:e6:5d:d2:1b:2b:
                    f1:2e:67:4d:5f:b9:ff:8f:a8:1f:65:ae:92:c7:a8:
                    04:6b:8d:50:41:0f:53:41:8b:6d:15:96:3d:56:1f:
                    73:ab:92:05:c0:cd:f2:37:ef:a3:8d:00:03:c2:07:
                    e1:12:1c:ce:8c:e9:de:2f:85:36:42:ad:fb:f6:07:
                    37:24:4a:b3:a3:12:15:37:04:40:08:27:05:95:c2:
                    71:92:fa:ad:5e:bd:d7:9f:3f:49:1f:44:aa:12:c8:
                    bf:c9:8f:ea:e9:54:9d:e1:20:1e:3d:36:2f:b7:94:
                    31:0a:3d:75:8b:bd:cd:00:b3:e1:c4:5a:50:ae:ff:
                    f5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:54:6C:75:58:43:20:0F:13:D6:7E:9C:D9:43:CE:68:08:C5:A6:D5
            X509v3 Authority Key Identifier:
                keyid:99:A1:73:25:62:0A:24:36:89:E3:2E:60:74:D5:CF:CA:91:D9:15:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/99A17325620A243689E32E6074D5CFCA91D915EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/99A17325620A243689E32E6074D5CFCA91D915EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d59b822-5c08-46f1-b25e-758dc18e9905/0/3135372e32302e3135362e302f32332d3234203d3e20313532343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:9e:b2:fb:c9:58:b1:2e:d9:49:e0:68:96:d0:9e:88:97:0b:
         cf:28:be:a7:0b:80:62:07:60:7d:2e:0d:aa:91:37:a3:fe:71:
         07:b6:2c:bf:cc:60:88:75:b1:5c:30:cc:de:b7:15:e6:f0:1f:
         71:af:77:e9:10:3e:15:b5:f2:70:1d:a1:06:e4:2e:8b:62:c9:
         3c:79:ae:8e:7e:47:d8:de:8d:42:ea:43:cb:71:26:36:3a:51:
         07:90:27:07:61:c7:f1:7d:7a:e5:94:d5:32:8a:26:c2:f8:d7:
         f9:c3:51:3f:f4:97:c6:55:39:99:06:be:1c:c9:7f:12:f4:bf:
         68:5d:38:3c:c8:c7:98:64:5e:aa:75:c4:d7:a4:3b:84:fa:47:
         7d:70:ac:3e:f8:a3:cc:fc:f5:36:fc:04:c2:d7:d7:bc:95:78:
         1a:e7:9d:2b:bc:e8:c0:e6:82:fb:73:97:85:a3:9e:6f:f6:45:
         26:5e:78:c5:46:7a:55:9c:78:82:18:b0:93:bd:19:f1:1b:9f:
         ab:b4:b3:ae:2e:ec:54:17:32:76:25:51:18:4e:40:40:08:2b:
         74:20:f4:e7:2d:55:59:c8:7d:4a:e9:94:fc:81:d1:36:0c:0f:
         67:12:6c:c2:ad:c2:ac:8c:34:21:29:f6:2c:7d:d2:b3:4a:6c:
         d6:29:04:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:54:15 2026 by rpki-client