This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235342e302f32342d3234203d3e203435323938.roa
File:                     3138322e31362e3235342e302f32342d3234203d3e203435323938.roa (raw, json)
Hash identifier:          WHf+vsK6H58iEm7i814JdrFsRDazGTrDW/jhnCRMY5o=
Subject key identifier:   6E:8C:69:51:B8:57:54:18:FF:B1:4F:B3:D2:05:EA:AF:DC:3C:E9:38
Certificate issuer:       /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial:       75A077F523C7CB9FFC0C2FE132D0ADAA1642E2D0
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235342e302f32342d3234203d3e203435323938.roa
Signing time:             Wed 28 Jan 2026 02:00:02 +0000
ROA not before:           Wed 28 Jan 2026 01:55:02 +0000
ROA not after:            Wed 27 Jan 2027 02:00:02 +0000
asID:                     45298
IP address blocks:        182.16.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
                          rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 03:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a0:77:f5:23:c7:cb:9f:fc:0c:2f:e1:32:d0:ad:aa:16:42:e2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
        Validity
            Not Before: Jan 28 01:55:02 2026 GMT
            Not After : Jan 27 02:00:02 2027 GMT
        Subject: CN=6E8C6951B8575418FFB14FB3D205EAAFDC3CE938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:62:93:2b:d9:99:a0:60:33:ec:46:07:b9:
                    4b:11:3d:61:78:97:19:49:0a:39:34:1b:e2:93:37:
                    45:f2:b8:9a:ba:10:cb:61:c5:6c:6f:78:9d:59:ff:
                    ec:35:28:ae:11:75:cc:bb:80:76:c6:61:6e:81:28:
                    5e:76:e8:b0:81:23:42:50:37:78:52:a9:e8:93:62:
                    9d:01:94:e3:bb:0d:59:a5:0d:1b:b9:02:92:a8:61:
                    b0:db:49:cd:94:60:2f:0d:51:cb:31:3a:ca:fe:4d:
                    92:d7:49:f7:68:54:55:03:13:5b:73:9e:c6:3d:7f:
                    9a:17:06:9e:31:fa:93:55:0b:7a:d9:93:68:61:a3:
                    04:25:68:dd:a6:f4:85:aa:a2:0e:8b:87:42:a7:89:
                    31:d7:4f:88:9e:55:a5:7d:8a:96:2c:04:0f:c9:a0:
                    f0:12:3c:51:e4:6b:7f:d1:49:d2:16:6b:d0:6b:4e:
                    f4:3f:0f:48:a5:47:4c:30:f4:0e:18:f4:87:82:9b:
                    a9:d1:ba:24:5e:b8:73:0f:92:df:05:0d:a7:90:57:
                    32:9c:6f:c8:d3:ef:3d:f9:c9:bd:3a:8a:28:a9:83:
                    e8:84:12:62:41:70:57:4c:14:03:2d:8f:78:61:09:
                    33:6a:7f:ab:3c:db:af:34:c9:3f:49:7c:ba:17:66:
                    14:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8C:69:51:B8:57:54:18:FF:B1:4F:B3:D2:05:EA:AF:DC:3C:E9:38
            X509v3 Authority Key Identifier:
                keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235342e302f32342d3234203d3e203435323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.16.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:6e:a1:87:5d:75:35:a5:a7:05:a5:ac:77:14:85:7d:85:d2:
         fc:e3:e9:9c:2b:3e:c7:c5:e4:68:64:3c:3f:7a:b4:45:3a:3a:
         35:21:ff:d3:14:2c:a9:9d:88:16:d5:05:c8:a7:75:c7:a2:eb:
         13:76:f0:27:6e:3f:1a:98:c3:23:cb:b6:16:59:52:88:2c:b9:
         16:f1:c5:4d:69:58:a9:9d:1e:1e:10:a9:08:32:74:4f:97:a4:
         73:7d:f6:b5:5a:0a:04:b4:9a:7c:93:27:bc:a4:7f:97:9b:58:
         55:1b:a9:ff:d4:9a:c9:3d:17:88:26:b2:c9:2d:fb:76:71:fc:
         49:8d:6d:d4:5e:a1:2f:b0:2f:a5:a4:8b:1a:1a:be:33:3a:a9:
         4a:2a:33:83:a0:b5:bb:7f:50:f7:0c:9e:76:01:b5:2f:e6:ab:
         b5:e8:41:76:1e:33:e1:7d:ac:55:99:eb:d9:2d:6f:23:7d:63:
         c6:8d:19:b3:c6:29:c1:7f:c0:5b:6a:25:ce:1d:7e:c8:d0:28:
         12:7e:87:4a:e4:a0:27:79:83:75:34:5c:31:d4:f6:77:83:80:
         70:73:b2:1c:15:8c:fc:35:75:d8:e5:3d:6d:24:d6:7e:da:48:
         23:4a:fd:63:3a:e3:43:9d:af:5b:c0:b5:1c:0b:e4:e4:3e:7e:
         f5:93:5b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:14:42 2026 by rpki-client