This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234362e302f32342d3234203d3e203435323938.roa
File:                     3138322e31362e3234362e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          FjDJ58MGH2Kic7+guQjA1l9znFMPxD6S25vaDbSNElQ=
Subject key identifier:   B4:EC:E3:DC:F1:A9:B8:B0:DD:A1:CF:E4:8E:8D:A4:C7:6A:01:B2:43
Certificate issuer:       /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial:       1ABD7762B7F510B4FF44FEA3DE08EC752FE777ED
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234362e302f32342d3234203d3e203435323938.roa
Signing time:             Tue 27 Jan 2026 04:01:54 +0000
ROA not before:           Tue 27 Jan 2026 03:56:54 +0000
ROA not after:            Tue 26 Jan 2027 04:01:54 +0000
asID:                     45298
IP address blocks:        182.16.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
                          rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 03:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:bd:77:62:b7:f5:10:b4:ff:44:fe:a3:de:08:ec:75:2f:e7:77:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
        Validity
            Not Before: Jan 27 03:56:54 2026 GMT
            Not After : Jan 26 04:01:54 2027 GMT
        Subject: CN=B4ECE3DCF1A9B8B0DDA1CFE48E8DA4C76A01B243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a4:56:20:93:bf:7e:ba:4f:65:0b:e4:c2:b5:
                    bb:c8:69:18:ab:e6:0a:b6:98:86:8e:6f:89:7a:0d:
                    76:58:dd:d0:ed:12:26:36:b2:de:6f:06:c1:bd:a3:
                    64:8f:46:2f:8e:3c:69:37:13:30:d5:78:8a:13:55:
                    b8:8b:7e:c9:a1:5d:98:06:14:b2:bf:91:6c:db:c0:
                    6f:8a:2c:f2:af:f8:f9:65:49:fd:81:f4:d1:be:06:
                    17:9d:45:b6:9d:ca:db:b5:af:47:ae:dc:5e:2b:89:
                    18:c1:19:33:27:bc:27:7d:e6:d4:60:35:c8:ad:94:
                    c3:2e:28:30:98:f2:27:1f:5f:8d:c5:2a:de:69:de:
                    7f:e1:f1:f4:dd:44:f3:c8:e5:1b:da:98:08:40:66:
                    6e:44:f0:c5:37:0a:47:fc:30:22:cf:7c:ae:34:47:
                    b7:b9:03:6d:0b:6a:cf:ee:fa:39:69:a0:fc:8e:a4:
                    d4:2e:28:4c:d3:62:c3:b7:e4:bb:bb:61:80:fa:0f:
                    83:6f:49:54:a2:3a:93:b2:97:27:49:f6:54:9a:fb:
                    bb:b9:8b:d9:d7:7b:b1:36:f4:80:2f:92:56:3d:e7:
                    c5:e1:c0:93:41:ec:bc:bc:da:e9:bd:a5:9e:f9:71:
                    fc:26:93:7a:0b:3b:48:6d:63:3a:95:7a:68:e6:cc:
                    e6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EC:E3:DC:F1:A9:B8:B0:DD:A1:CF:E4:8E:8D:A4:C7:6A:01:B2:43
            X509v3 Authority Key Identifier:
                keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3234362e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:07:0a:f0:21:3a:6f:01:87:b0:46:e4:35:8d:48:a2:24:0f:
         8c:f4:45:f5:4d:cb:e3:3b:cf:d7:66:5c:fb:56:04:69:7d:45:
         fd:16:b4:82:a4:9c:97:3f:f5:8d:22:5a:0e:16:a6:ee:ce:43:
         f2:97:29:0d:98:95:14:1d:05:84:65:c7:3e:81:fe:e9:be:5a:
         62:ab:45:4f:2f:25:7f:96:82:a1:ab:67:62:ff:da:b4:77:ab:
         a2:f5:27:a1:0b:f4:06:ea:ac:05:d8:14:d9:c6:e8:2f:37:80:
         3e:24:32:32:a7:2e:ea:dd:9a:4d:48:58:33:17:95:1a:a6:b4:
         c3:90:ed:18:6d:2b:b5:a3:64:13:31:47:cc:8b:03:5f:c3:ab:
         8d:54:50:06:6d:c9:b9:a2:42:0d:19:84:2a:93:95:8d:33:0b:
         f0:fa:ac:f5:3f:a8:d9:1e:1e:db:ad:4b:51:47:15:c7:10:5c:
         fc:13:71:12:c1:8a:a9:f4:0e:a1:e8:c0:23:0a:8b:28:13:2d:
         ce:91:6f:68:85:b2:b4:20:b0:09:90:d9:c3:be:fa:65:66:3a:
         23:3c:42:59:a7:98:e1:b8:76:91:ee:c3:06:c7:ee:c6:d3:dd:
         69:7c:ec:b1:29:e9:16:b0:aa:f3:d7:eb:ec:62:a5:cf:70:a3:
         56:fa:4d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 13:03:42 2026 by rpki-client