This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a363030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a363030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          O7PqEPanvte3vJab+GsIIctKGg9yiQBnjhHgamtxmv0=
Subject key identifier:   D5:EE:E0:BB:C6:1A:A9:46:FD:F6:36:4E:31:26:C9:81:0A:65:9F:AA
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       67FFFDD70FC72C61EFE36360991A6AE34E9A95BD
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a363030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Fri 07 Nov 2025 14:00:03 +0000
ROA not before:           Fri 07 Nov 2025 13:55:03 +0000
ROA not after:            Fri 06 Nov 2026 14:00:03 +0000
asID:                     137316
IP address blocks:        2402:7ac0:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 20:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ff:fd:d7:0f:c7:2c:61:ef:e3:63:60:99:1a:6a:e3:4e:9a:95:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Nov  7 13:55:03 2025 GMT
            Not After : Nov  6 14:00:03 2026 GMT
        Subject: CN=D5EEE0BBC61AA946FDF6364E3126C9810A659FAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:3e:53:5e:f6:83:0e:b5:ca:b5:dc:44:58:
                    6b:b7:43:19:fe:fc:2a:1c:a0:8f:1c:0a:7a:a1:76:
                    0d:6b:f3:4e:fe:3c:c5:50:0d:77:5e:da:e2:66:3c:
                    a3:b0:86:2a:3d:58:97:de:ff:a8:60:68:e0:74:f8:
                    b6:97:67:6c:e6:3f:f0:2d:ab:b5:b8:38:8a:fc:e6:
                    78:a5:f0:62:5b:a3:46:a2:f7:84:a1:22:72:b9:61:
                    f8:48:51:2c:bf:f2:89:4b:b3:9e:a3:79:77:ab:bc:
                    f8:e4:4b:d3:cd:7b:ed:9a:44:cc:f6:a3:43:51:d4:
                    32:c7:2d:30:98:38:28:c9:55:76:38:e0:e9:87:31:
                    d1:e3:13:12:99:14:5d:c6:b3:25:53:fe:63:81:26:
                    e2:df:34:43:30:72:9a:cf:65:8a:f3:39:db:5c:dc:
                    69:bc:5d:28:ee:f2:85:28:12:64:55:a0:a5:aa:06:
                    b7:1a:c9:7d:95:d2:98:78:c6:66:f9:fb:c2:6f:00:
                    2f:38:93:73:84:41:1c:ed:00:08:62:f9:4e:2c:aa:
                    71:c4:bd:78:6f:92:c7:c7:a0:7b:23:a8:58:75:87:
                    e5:53:15:c6:e8:21:1e:ac:a8:84:4c:81:da:cb:da:
                    2e:67:e6:5f:b4:5f:0e:41:fb:40:b9:08:75:18:5a:
                    0d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EE:E0:BB:C6:1A:A9:46:FD:F6:36:4E:31:26:C9:81:0A:65:9F:AA
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a363030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:84:20:a4:4f:09:6a:49:20:ef:5f:2f:ec:79:0a:f4:86:97:
         d4:71:ec:53:95:c1:ff:92:7a:b3:29:ee:c1:bf:f1:c7:48:6c:
         b2:db:0d:0d:18:1c:4a:46:1c:57:e2:67:b6:cb:10:ae:46:31:
         0b:09:45:8a:90:2f:18:b7:1c:fa:09:cb:cb:c7:55:cd:61:a0:
         42:28:06:95:a3:73:81:d0:35:96:90:4a:b7:72:fb:95:ba:54:
         fb:f6:0a:3f:05:17:88:4f:5a:4f:63:76:b4:81:69:eb:a3:d0:
         db:35:b8:76:8b:53:05:e7:2a:e6:f6:13:63:72:1b:69:9c:ec:
         f5:1e:79:4e:05:17:28:e3:bc:73:a8:c7:cc:d7:34:55:dc:58:
         2e:b4:61:7f:57:2f:2a:c5:cb:64:32:47:84:0a:d5:00:4c:18:
         29:dc:8a:93:7b:14:76:04:78:18:0b:16:4a:08:cb:56:8c:ee:
         75:96:2e:eb:5e:61:33:cb:97:27:3b:c2:70:4f:97:bb:5a:e6:
         fe:c3:5d:64:49:25:3b:fa:7c:24:62:da:d4:f2:de:3b:59:b6:
         c5:ad:e0:5d:82:73:42:c2:45:de:f7:7e:50:4e:13:d9:cb:3d:
         1f:ec:2c:99:5f:7e:1c:8c:4e:0f:95:35:d4:4e:4d:64:bb:24:
         1c:a3:a1:ee
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUZ//91w/HLGHv42NgmRpq406alb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZB
NUEwNjY2RDAeFw0yNTExMDcxMzU1MDNaFw0yNjExMDYxNDAwMDNaMDMxMTAvBgNV
BAMTKEQ1RUVFMEJCQzYxQUE5NDZGREY2MzY0RTMxMjZDOTgxMEE2NTlGQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy0D5TXvaDDrXKtdxEWGu3Qxn+
/CocoI8cCnqhdg1r807+PMVQDXde2uJmPKOwhio9WJfe/6hgaOB0+LaXZ2zmP/At
q7W4OIr85nil8GJbo0ai94ShInK5YfhIUSy/8olLs56jeXervPjkS9PNe+2aRMz2
o0NR1DLHLTCYOCjJVXY44OmHMdHjExKZFF3GsyVT/mOBJuLfNEMwcprPZYrzOdtc
3Gm8XSju8oUoEmRVoKWqBrcayX2V0ph4xmb5+8JvAC84k3OEQRztAAhi+U4sqnHE
vXhvksfHoHsjqFh1h+VTFcboIR6sqIRMgdrL2i5n5l+0Xw5B+0C5CHUYWg2RAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQU1e7gu8YaqUb99jZOMSbJgQpln6owHwYDVR0j
BBgwFoAUezWDSkcEx+2F1iIS/GLEb6WgZm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
Y2M0NjJhNS04Zjc0LTQyYWYtODgzYi01ZTg5ZWU1ZjJkZjMvMC83QjM1ODM0QTQ3
MDRDN0VEODVENjIyMTJGQzYyQzQ2RkE1QTA2NjZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZBNUEw
NjY2RC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04
ODNiLTVlODllZTVmMmRmMy8wLzMyMzQzMDMyM2EzNzYxNjMzMDNhMzYzMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTMzMzczMzMxMzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk
AnrAYDANBgkqhkiG9w0BAQsFAAOCAQEAjoQgpE8Jakkg718v7HkK9IaX1HHsU5XB
/5J6synuwb/xx0hsstsNDRgcSkYcV+JntssQrkYxCwlFipAvGLcc+gnLy8dVzWGg
QigGlaNzgdA1lpBKt3L7lbpU+/YKPwUXiE9aT2N2tIFp66PQ2zW4dotTBecq5vYT
Y3IbaZzs9R55TgUXKOO8c6jHzNc0VdxYLrRhf1cvKsXLZDJHhArVAEwYKdyKk3sU
dgR4GAsWSgjLVozudZYu615hM8uXJzvCcE+Xu1rm/sNdZEklO/p8JGLa1PLeO1m2
xa3gXYJzQsJF3vd+UE4T2cs9H+wsmV9+HIxOD5U11E5NZLskHKOh7g==
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:57 2025 by rpki-client