This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          d4X0G1PCcjo4pU79OovEgrn/RZTilZubb8gOZdEdU1o=
Subject key identifier:   B6:E7:BE:1D:25:9A:6B:AC:40:17:D5:F2:42:B6:68:F0:56:28:95:B9
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       2F994E1D4E15558DE7EB7315977E406C01D9AA69
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Fri 07 Nov 2025 14:00:01 +0000
ROA not before:           Fri 07 Nov 2025 13:55:01 +0000
ROA not after:            Fri 06 Nov 2026 14:00:01 +0000
asID:                     137316
IP address blocks:        2402:7ac0:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 20:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:99:4e:1d:4e:15:55:8d:e7:eb:73:15:97:7e:40:6c:01:d9:aa:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Nov  7 13:55:01 2025 GMT
            Not After : Nov  6 14:00:01 2026 GMT
        Subject: CN=B6E7BE1D259A6BAC4017D5F242B668F0562895B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:30:2a:dd:5e:cb:00:16:81:76:c8:fd:40:26:
                    79:d8:65:72:9a:7c:0b:0d:e9:d5:b2:94:ec:04:4c:
                    23:98:e9:a0:74:ae:da:17:d9:6b:ef:66:2f:7e:13:
                    e6:7f:11:04:e6:57:86:d0:a2:2f:6a:f6:c7:cd:2d:
                    eb:f6:ae:d2:f6:d8:6e:d9:50:87:ee:e6:70:af:a9:
                    a5:cc:d2:08:60:e9:be:c8:77:ae:83:67:44:6e:08:
                    70:41:1b:a1:09:dc:ad:a3:b4:26:4c:a5:cd:22:77:
                    f7:f4:6e:80:72:56:2a:21:dd:b6:4f:e4:25:4b:72:
                    a7:d8:44:fe:43:b6:7f:1d:c0:e8:bc:d2:28:a2:f5:
                    5c:23:42:0d:e5:53:41:f5:0c:78:ed:70:fb:cb:2c:
                    c3:78:b1:2b:0f:55:08:f0:56:fe:fa:e5:53:7d:ff:
                    37:f1:0a:4d:a5:31:39:48:a9:87:e1:3d:4c:ed:0b:
                    43:43:4c:eb:a9:a1:9d:dd:9e:43:69:c1:bc:9e:c5:
                    dd:bd:24:85:b6:cc:20:17:23:59:28:07:07:7a:28:
                    44:0f:84:39:0a:ed:b2:92:e8:13:5f:b4:de:07:37:
                    64:72:09:71:41:03:fd:59:fe:60:1d:b0:e7:78:ba:
                    5d:19:e9:74:05:52:ec:06:c9:da:c6:a9:7a:06:d3:
                    f3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E7:BE:1D:25:9A:6B:AC:40:17:D5:F2:42:B6:68:F0:56:28:95:B9
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         53:86:e1:d0:50:61:f6:27:80:6b:56:3e:fa:0d:82:6a:60:c2:
         21:ed:9f:7b:54:77:9e:0f:37:d2:9f:bf:2d:04:31:8f:1d:b8:
         c2:85:7b:1c:f8:29:de:e7:ef:ef:5c:68:26:ae:96:63:77:6f:
         07:1a:98:0b:fb:d1:b7:7b:08:7e:f1:14:0f:86:d6:62:5a:6e:
         1e:1d:4a:c9:33:e7:e7:1a:d2:29:e5:9e:88:81:bd:b7:91:26:
         dd:d9:cd:34:c4:2d:e2:d3:65:a1:f1:1e:c8:34:98:11:5b:83:
         04:f4:b0:ad:2a:01:0f:31:f8:e6:68:7e:99:43:28:4a:f9:fb:
         e9:85:be:94:97:85:f5:5d:35:23:5c:06:d1:7a:3f:c2:89:24:
         75:45:0c:3a:fd:08:f1:c3:2b:7f:b5:1e:a0:5b:66:e0:a8:14:
         bc:8b:8f:01:b3:ed:77:83:93:dc:97:28:4c:f6:b9:00:ef:dd:
         46:e6:64:25:b7:fb:a9:f9:34:2d:0a:6d:1b:93:b7:67:10:76:
         7f:90:ac:b8:67:b6:77:16:2b:1a:02:63:0c:3e:44:e9:21:f8:
         36:c3:ea:2a:04:8f:e6:ed:54:03:aa:6c:67:fc:b6:bb:82:19:
         f5:b3:ce:93:86:c0:64:5b:a8:3c:b6:60:1b:7a:0b:40:bc:f5:
         10:64:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:56 2025 by rpki-client