This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234302e302f32342d3234203d3e203435323938.roa
File:                     3138322e31362e3234302e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          qXhqvNvwuShzZJIh5ULCs68p+eXdblwycqng954jYDU=
Subject key identifier:   B4:75:34:74:C5:9C:67:F7:1D:DE:99:38:07:E0:6E:9A:F2:E0:81:31
Certificate issuer:       /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial:       7722DFF46A6A207F1AD90AA181E16178F35D78F6
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234302e302f32342d3234203d3e203435323938.roa
Signing time:             Tue 27 Jan 2026 04:01:53 +0000
ROA not before:           Tue 27 Jan 2026 03:56:53 +0000
ROA not after:            Tue 26 Jan 2027 04:01:53 +0000
asID:                     45298
IP address blocks:        182.16.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
                          rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 03:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:22:df:f4:6a:6a:20:7f:1a:d9:0a:a1:81:e1:61:78:f3:5d:78:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
        Validity
            Not Before: Jan 27 03:56:53 2026 GMT
            Not After : Jan 26 04:01:53 2027 GMT
        Subject: CN=B4753474C59C67F71DDE993807E06E9AF2E08131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:6e:61:ac:97:bf:87:07:79:ed:44:af:45:
                    e6:2c:4b:4d:53:4b:2f:db:0d:45:43:18:b4:a1:45:
                    3b:27:fe:aa:70:e6:14:ba:b3:1b:64:f0:a3:c0:80:
                    ff:47:2a:89:66:26:89:e0:61:bb:05:ce:b8:e9:46:
                    92:8d:1a:51:4b:02:52:28:5c:fa:9f:48:0f:df:15:
                    a9:09:de:3b:cc:59:7c:57:fc:ec:8d:6d:45:f0:08:
                    ca:28:10:a1:f7:93:bf:83:ea:88:99:12:e8:4d:00:
                    9a:84:60:a7:e7:cc:75:a9:51:13:63:44:c1:d6:9c:
                    d0:e3:bb:25:27:5d:5f:14:4f:18:c9:d9:07:ee:67:
                    a0:65:fa:2c:28:1c:cd:ba:34:e8:25:35:20:d1:47:
                    44:4f:0f:0a:cf:58:d3:69:56:2b:d1:05:e8:f6:ad:
                    e1:f3:59:48:e2:66:d9:54:46:bb:bf:ad:ac:69:73:
                    b6:dc:f4:7c:ca:16:4b:d5:61:d6:25:8e:fb:ac:ad:
                    24:d0:8c:6e:fc:f3:7a:2e:b1:f8:8e:76:5c:45:89:
                    7f:bc:d5:9d:ce:c2:92:fd:5d:f4:1c:2f:9f:cf:81:
                    19:e4:79:85:85:b5:4e:17:9e:44:a3:43:e0:6d:15:
                    b5:40:2a:7c:be:28:a7:36:bd:89:d8:28:df:b1:44:
                    7f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:75:34:74:C5:9C:67:F7:1D:DE:99:38:07:E0:6E:9A:F2:E0:81:31
            X509v3 Authority Key Identifier:
                keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234302e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:89:5b:dd:ba:3d:65:fd:79:88:22:0a:d1:cd:1b:fb:b1:d8:
         93:4d:63:6f:15:b4:af:f8:53:18:39:e8:41:fe:1e:ad:d4:16:
         cb:3f:e2:53:5d:1f:e3:82:0e:fb:03:72:b7:e4:08:bc:08:c3:
         25:7a:5c:ff:27:74:31:08:8c:36:f1:1e:bc:be:4b:e5:b1:25:
         a6:1e:dd:78:d9:8c:af:3f:c9:29:90:65:f8:9b:f4:4b:6c:d5:
         72:63:0a:3f:d9:26:83:2d:7d:2c:06:db:69:ae:46:7a:9c:81:
         52:12:8a:d7:54:ec:13:b8:d1:7f:a4:4d:45:a7:22:9c:1b:19:
         5e:b3:5c:77:35:a0:92:c4:ef:cb:64:72:da:54:56:49:be:25:
         90:9c:cf:38:b3:1d:07:0e:49:b2:f2:0d:ef:98:25:43:34:49:
         21:42:dc:5f:9c:59:f3:f6:6d:36:e9:c1:75:b3:83:13:72:57:
         4c:d2:ad:bb:01:9a:be:fa:e4:16:f9:1f:f4:30:d7:90:2c:31:
         e0:21:e1:d8:0b:f1:eb:8d:40:5b:99:bd:a4:27:2f:0f:1b:68:
         cd:84:2d:4a:4c:3d:e1:6d:ca:86:90:24:02:7e:8c:07:6c:23:
         c6:a6:3e:1e:1c:a2:6d:45:d8:d4:44:78:d2:79:26:45:26:6c:
         6e:1f:a4:ff
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdyLf9GpqIH8a2QqhgeFhePNdePYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD
ODg2RjFERTAeFw0yNjAxMjcwMzU2NTNaFw0yNzAxMjYwNDAxNTNaMDMxMTAvBgNV
BAMTKEI0NzUzNDc0QzU5QzY3RjcxRERFOTkzODA3RTA2RTlBRjJFMDgxMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6em5hrJe/hwd57USvReYsS01T
Sy/bDUVDGLShRTsn/qpw5hS6sxtk8KPAgP9HKolmJongYbsFzrjpRpKNGlFLAlIo
XPqfSA/fFakJ3jvMWXxX/OyNbUXwCMooEKH3k7+D6oiZEuhNAJqEYKfnzHWpURNj
RMHWnNDjuyUnXV8UTxjJ2QfuZ6Bl+iwoHM26NOglNSDRR0RPDwrPWNNpVivRBej2
reHzWUjiZtlURru/raxpc7bc9HzKFkvVYdYljvusrSTQjG7883ousfiOdlxFiX+8
1Z3OwpL9XfQcL5/PgRnkeYWFtU4XnkSjQ+BtFbVAKny+KKc2vYnYKN+xRH/bAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUtHU0dMWcZ/cd3pk4B+BumvLggTEwHwYDVR0j
BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw
M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2
RjFERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05
MDk3LWMwYmVjMGIyNjZhNy8wLzMxMzgzMjJlMzEzNjJlMzIzNDMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTMyMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALYQ8DANBgkqhkiG
9w0BAQsFAAOCAQEAAYlb3bo9Zf15iCIK0c0b+7HYk01jbxW0r/hTGDnoQf4erdQW
yz/iU10f44IO+wNyt+QIvAjDJXpc/yd0MQiMNvEevL5L5bElph7deNmMrz/JKZBl
+Jv0S2zVcmMKP9kmgy19LAbbaa5GepyBUhKK11TsE7jRf6RNRacinBsZXrNcdzWg
ksTvy2Ry2lRWSb4lkJzPOLMdBw5JsvIN75glQzRJIULcX5xZ8/ZtNunBdbODE3JX
TNKtuwGavvrkFvkf9DDXkCwx4CHh2Avx641AW5m9pCcvDxtozYQtSkw94W3KhpAk
An6MB2wjxqY+HhyibUXY1ER40nkmRSZsbh+k/w==
-----END CERTIFICATE-----
Generated at Mon Feb 2 14:14:43 2026 by rpki-client