This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a393030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a393030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          /LOMJD9RRofNBMsOR20iyy1pTMcWn0Aig+hAKim0ulw=
Subject key identifier:   94:C2:83:B8:11:74:8A:30:80:A4:9C:72:54:47:C9:AD:2B:26:0F:83
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       0ED53C551089F4FC69F8A73BA2C9137A4CF72550
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a393030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Fri 07 Nov 2025 14:00:03 +0000
ROA not before:           Fri 07 Nov 2025 13:55:03 +0000
ROA not after:            Fri 06 Nov 2026 14:00:03 +0000
asID:                     137316
IP address blocks:        2402:7ac0:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 20:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d5:3c:55:10:89:f4:fc:69:f8:a7:3b:a2:c9:13:7a:4c:f7:25:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Nov  7 13:55:03 2025 GMT
            Not After : Nov  6 14:00:03 2026 GMT
        Subject: CN=94C283B811748A3080A49C725447C9AD2B260F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5e:84:27:27:77:b9:da:96:0b:97:4c:2c:2d:
                    73:05:50:0a:35:5b:e6:83:3f:0a:8e:4c:56:fd:e0:
                    ae:1e:1b:3a:4b:0a:a5:34:c2:78:bc:bf:94:33:c9:
                    58:d6:c1:be:f5:a0:ba:e8:de:d5:51:d3:55:c8:2b:
                    f3:87:33:f4:9d:e9:a2:d6:84:b5:73:8e:77:7a:82:
                    50:81:e7:f0:2f:fb:87:f2:cd:64:34:20:bd:b9:f6:
                    55:08:aa:db:a9:8d:c3:28:b0:70:5f:f8:1c:12:90:
                    95:5a:78:00:7a:f0:93:f2:ff:8b:74:70:ca:a7:ea:
                    97:20:4b:ba:ac:07:cc:57:f7:3e:28:46:fe:17:28:
                    e2:b3:80:b3:9b:40:6b:ad:01:16:8d:76:ed:fd:60:
                    a6:a6:8e:76:ba:da:ae:82:6d:c1:45:01:58:fe:71:
                    7c:ea:0d:fa:b1:e2:3d:92:a9:7a:dc:0d:ad:44:7d:
                    aa:60:1c:5e:8d:8c:b8:7f:ca:0e:ef:32:88:bc:37:
                    ff:5f:b9:73:06:a3:88:6c:a4:b9:77:47:36:32:1d:
                    28:29:71:54:05:db:5b:0e:0a:08:fc:b2:8e:8f:e9:
                    e3:42:61:9f:3b:ba:1e:94:88:7b:c3:ab:d7:5e:d2:
                    fd:f8:e2:d6:ef:0b:92:c0:a0:1b:93:b6:c2:98:0a:
                    13:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C2:83:B8:11:74:8A:30:80:A4:9C:72:54:47:C9:AD:2B:26:0F:83
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a393030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a8:0e:48:86:88:c6:e9:b0:df:85:b9:3f:1e:6d:b3:d8:24:a6:
         d2:7c:09:52:3f:be:48:6c:6f:e3:c4:22:a2:ce:fd:55:96:3a:
         40:93:34:81:34:6b:d3:4e:a0:69:0f:87:a6:58:e8:a8:e4:c3:
         2a:07:e8:60:61:e9:95:ef:06:cb:da:74:92:28:71:34:4d:22:
         74:f7:d7:3d:e6:1e:d7:4f:e0:06:60:9c:47:86:dc:c9:28:1f:
         7b:23:65:d2:0f:02:1d:3a:a6:0e:76:04:9e:bd:46:a3:34:82:
         d5:23:96:8d:81:a0:fa:92:43:f8:9b:89:a4:df:7a:ec:d5:89:
         55:33:6f:f3:f6:31:ec:79:d6:3f:a7:99:45:17:cf:b4:61:23:
         03:03:c6:ba:2e:a4:7b:f1:0b:a5:a7:9d:eb:ef:31:72:48:34:
         13:99:1f:ce:9d:e5:eb:58:fe:22:dc:93:fd:43:c5:25:71:c8:
         89:be:16:47:c9:f6:de:51:73:db:22:d9:bb:fa:f6:ed:7e:67:
         9b:3c:07:a5:59:2b:a1:d8:a4:81:ac:e6:7a:cd:98:76:92:5f:
         18:60:c3:86:74:1a:67:ca:56:dc:f9:9d:5b:69:41:f9:a1:e6:
         e9:e3:8c:a2:35:fd:a0:33:d3:bb:7c:6e:f9:db:de:d5:47:2b:
         62:88:dd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:56 2025 by rpki-client