This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          rE8QhG11yM8aGCgVzMRgC0rY8IeQi/+qb3JKhg6xI60=
Subject key identifier:   65:38:DC:B9:35:08:9D:D5:2F:99:89:12:F4:BD:73:93:3D:6F:40:A1
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       36AB3E471E6F449DE4037C0D35483C84376CADAD
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Fri 07 Nov 2025 14:00:02 +0000
ROA not before:           Fri 07 Nov 2025 13:55:02 +0000
ROA not after:            Fri 06 Nov 2026 14:00:02 +0000
asID:                     137316
IP address blocks:        2402:7ac0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 20:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ab:3e:47:1e:6f:44:9d:e4:03:7c:0d:35:48:3c:84:37:6c:ad:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Nov  7 13:55:02 2025 GMT
            Not After : Nov  6 14:00:02 2026 GMT
        Subject: CN=6538DCB935089DD52F998912F4BD73933D6F40A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:18:1f:ad:9e:28:f9:15:5c:43:84:66:6c:
                    74:98:42:b5:ac:1b:b7:d9:e9:6d:0b:09:50:9a:42:
                    9c:1c:d1:d4:09:8f:2d:b1:2c:c6:83:1f:cc:71:14:
                    4c:47:f4:87:00:24:40:f9:0a:3a:5c:fc:2f:c2:5e:
                    91:ce:7a:9b:68:23:fd:25:03:2b:7c:a6:6b:9e:ba:
                    b2:fa:d9:10:7a:90:a8:ca:0b:ae:3c:e4:e1:71:0f:
                    16:32:25:fd:32:4d:c7:97:b4:78:c9:0e:ab:6d:5f:
                    34:59:d4:72:26:1d:10:2e:8b:44:82:0d:02:8a:2e:
                    5a:9a:5a:d5:4b:88:55:ac:09:5b:72:4a:d4:01:e6:
                    60:78:ca:34:de:9c:05:a5:ca:23:18:4f:0c:b6:a7:
                    15:9a:9c:3a:51:5a:4b:07:3b:37:68:47:cf:91:51:
                    a1:31:b1:8d:4f:6a:9f:10:e9:f1:56:e0:b4:f9:0e:
                    ba:f4:75:61:98:d1:b4:1d:e4:8b:95:27:c2:d3:35:
                    a2:69:81:60:37:23:4e:d0:f3:16:1e:22:96:01:72:
                    f0:ea:b7:49:a3:77:92:06:a3:28:b8:30:93:50:bb:
                    d6:35:d6:fb:37:40:5a:21:7a:d0:08:74:62:61:ce:
                    56:e3:a5:66:b2:a1:ca:80:5d:5c:99:60:14:1b:d5:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:38:DC:B9:35:08:9D:D5:2F:99:89:12:F4:BD:73:93:3D:6F:40:A1
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a323030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         24:f7:d0:e1:3b:0b:c5:ac:ad:3d:b8:6f:aa:44:4a:c9:5e:f1:
         86:65:e0:9b:47:28:30:a1:39:55:4b:db:a0:d2:86:01:a9:c6:
         68:f2:97:bb:d7:10:eb:08:3b:c4:aa:43:a3:7d:cc:d1:f2:16:
         c6:09:06:61:90:4d:cb:b4:d9:28:3b:bd:33:fc:6a:70:f0:da:
         7a:56:83:3a:5f:8f:e7:ca:a6:2c:3f:8d:eb:b8:f9:c9:70:d2:
         eb:d9:eb:ab:cd:c0:ad:2b:b4:56:e7:d4:b2:71:b5:6a:9e:22:
         2f:cb:77:44:9f:e1:13:66:e3:f5:ea:86:6a:a1:09:3a:28:15:
         83:aa:55:7c:7d:76:f5:f4:92:25:66:f2:69:dc:63:84:b3:16:
         62:58:b7:57:6f:01:47:06:54:8a:01:db:72:88:27:39:bb:6b:
         31:7f:35:17:ea:12:ef:92:fa:2d:d0:c7:d4:71:87:f3:f3:cd:
         ef:89:d5:23:bb:32:9b:c2:de:b3:9b:f5:0d:da:6f:68:01:e8:
         33:cb:0f:22:d9:c5:18:32:37:68:30:3a:63:af:62:d4:0b:43:
         24:df:ec:5b:d9:05:46:db:04:2a:85:98:58:47:c7:97:a6:53:
         99:9f:33:3f:c9:d6:c6:8d:73:3a:69:3f:aa:42:77:f3:35:51:
         5f:52:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:56 2025 by rpki-client