This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          OfkoUg3UTzMLGTeFopyur6gnhnkL4EGug0+Xb441G9I=
Subject key identifier:   91:D6:B8:05:E0:74:76:41:67:42:66:A3:3A:F4:2D:0E:D7:4A:F8:4D
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       3D45AEAAAB4F4F9BB137D5C222BD3E6586B95231
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Fri 07 Nov 2025 14:00:02 +0000
ROA not before:           Fri 07 Nov 2025 13:55:02 +0000
ROA not after:            Fri 06 Nov 2026 14:00:02 +0000
asID:                     137316
IP address blocks:        2402:7ac0:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 20:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:45:ae:aa:ab:4f:4f:9b:b1:37:d5:c2:22:bd:3e:65:86:b9:52:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Nov  7 13:55:02 2025 GMT
            Not After : Nov  6 14:00:02 2026 GMT
        Subject: CN=91D6B805E0747641674266A33AF42D0ED74AF84D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:2f:bf:9a:7b:32:84:02:af:41:8b:e5:78:
                    ee:67:0a:14:ee:80:b1:69:35:94:37:8c:44:05:87:
                    b1:6d:87:a7:47:41:52:b3:52:d3:69:a8:25:09:d9:
                    09:f3:90:60:ce:0b:61:06:d3:fb:cb:40:65:a1:3c:
                    e7:65:5f:71:8f:97:96:93:96:36:25:68:f1:ac:b3:
                    7a:34:44:7f:93:3c:2d:67:36:77:db:64:d2:8b:a4:
                    a7:bb:6f:2c:b0:cb:86:2a:4c:04:88:88:89:a3:e2:
                    50:d6:5d:f7:1b:03:60:55:4e:f1:8f:6f:a8:26:ba:
                    c4:05:63:09:30:fd:91:1b:f8:e8:eb:20:3b:aa:c8:
                    bd:69:03:79:45:b8:b2:a5:c9:32:48:dd:36:8c:a3:
                    03:27:c4:bf:b1:ef:a2:71:4c:9d:97:5a:0d:82:e3:
                    7e:64:be:8a:8a:81:b6:98:08:e8:ee:7c:a8:a4:9d:
                    d2:5f:e5:db:cd:8a:6a:fe:c1:03:72:c8:f2:24:f7:
                    05:8a:0f:2c:04:7e:a3:80:71:16:11:33:91:f9:bc:
                    75:29:bc:09:3a:1d:14:57:4a:a2:d7:07:67:5a:3b:
                    c7:03:5b:4d:f3:7d:cc:e2:a7:44:b1:d5:c1:73:3e:
                    f8:1c:d7:1d:31:16:fb:35:fb:ff:bc:77:52:86:68:
                    03:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D6:B8:05:E0:74:76:41:67:42:66:A3:3A:F4:2D:0E:D7:4A:F8:4D
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a353030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         79:8b:45:d6:48:a6:42:87:36:f8:84:68:de:d4:d2:e1:dd:5a:
         42:1a:2f:6f:e4:66:93:7d:5f:2a:63:40:85:7f:48:80:90:a5:
         3e:ec:0c:f9:06:e7:5c:6e:c5:ef:ae:fb:7f:42:a0:77:54:d3:
         08:cf:e3:e4:c8:89:42:c2:85:1b:fe:88:3a:b4:fd:a7:7b:46:
         10:0d:5c:9d:a7:c5:f8:f1:ce:1f:69:90:ab:22:d2:ff:f8:c0:
         37:7f:f6:30:05:63:9f:e0:ea:21:e6:42:1a:94:2e:12:f1:03:
         7c:1b:c3:53:21:bf:d6:9b:8a:8c:cc:1e:ec:5c:63:8b:33:e5:
         90:4c:f9:a1:ce:97:84:bf:ca:d3:ba:22:cb:fa:36:8f:73:fe:
         7c:8c:7b:19:a6:ca:94:71:53:84:a5:4a:31:ac:b1:15:15:2e:
         fc:64:52:32:5d:3b:cb:4f:48:f9:74:3c:1b:8a:79:0a:81:1a:
         fe:c0:da:aa:c5:a2:62:a0:49:16:91:0e:41:f5:e2:44:df:b0:
         18:45:8c:66:f5:6f:fc:be:d8:11:a1:54:3f:53:77:30:a2:b1:
         86:f8:7a:41:5b:b1:c0:5b:d0:e6:75:3c:66:db:4e:35:a2:26:
         af:0b:6e:0b:73:4a:9a:d3:c6:6e:e2:f9:4d:5f:1c:62:4c:b5:
         2e:a1:79:c9
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUPUWuqqtPT5uxN9XCIr0+ZYa5UjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZB
NUEwNjY2RDAeFw0yNTExMDcxMzU1MDJaFw0yNjExMDYxNDAwMDJaMDMxMTAvBgNV
BAMTKDkxRDZCODA1RTA3NDc2NDE2NzQyNjZBMzNBRjQyRDBFRDc0QUY4NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZwS+/mnsyhAKvQYvleO5nChTu
gLFpNZQ3jEQFh7Fth6dHQVKzUtNpqCUJ2QnzkGDOC2EG0/vLQGWhPOdlX3GPl5aT
ljYlaPGss3o0RH+TPC1nNnfbZNKLpKe7byywy4YqTASIiImj4lDWXfcbA2BVTvGP
b6gmusQFYwkw/ZEb+OjrIDuqyL1pA3lFuLKlyTJI3TaMowMnxL+x76JxTJ2XWg2C
435kvoqKgbaYCOjufKikndJf5dvNimr+wQNyyPIk9wWKDywEfqOAcRYRM5H5vHUp
vAk6HRRXSqLXB2daO8cDW03zfczip0Sx1cFzPvgc1x0xFvs1+/+8d1KGaAPFAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUkda4BeB0dkFnQmajOvQtDtdK+E0wHwYDVR0j
BBgwFoAUezWDSkcEx+2F1iIS/GLEb6WgZm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
Y2M0NjJhNS04Zjc0LTQyYWYtODgzYi01ZTg5ZWU1ZjJkZjMvMC83QjM1ODM0QTQ3
MDRDN0VEODVENjIyMTJGQzYyQzQ2RkE1QTA2NjZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZBNUEw
NjY2RC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04
ODNiLTVlODllZTVmMmRmMy8wLzMyMzQzMDMyM2EzNzYxNjMzMDNhMzUzMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTMzMzczMzMxMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk
AnrAUDANBgkqhkiG9w0BAQsFAAOCAQEAeYtF1kimQoc2+IRo3tTS4d1aQhovb+Rm
k31fKmNAhX9IgJClPuwM+QbnXG7F7677f0Kgd1TTCM/j5MiJQsKFG/6IOrT9p3tG
EA1cnafF+PHOH2mQqyLS//jAN3/2MAVjn+DqIeZCGpQuEvEDfBvDUyG/1puKjMwe
7FxjizPlkEz5oc6XhL/K07oiy/o2j3P+fIx7GabKlHFThKVKMayxFRUu/GRSMl07
y09I+XQ8G4p5CoEa/sDaqsWiYqBJFpEOQfXiRN+wGEWMZvVv/L7YEaFUP1N3MKKx
hvh6QVuxwFvQ5nU8ZttONaImrwtuC3NKmtPGbuL5TV8cYky1LqF5yQ==
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:56 2025 by rpki-client