This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a3a2f33322d3332203d3e20313337333136.roa
File:                     323430323a376163303a3a2f33322d3332203d3e20313337333136.roa (raw, json)
Hash identifier:          6JRaMfDw77s6MGwxLGfVqqNW4EtALBUdGKfAUTj7Neo=
Subject key identifier:   0F:16:2B:2C:C4:BC:9F:6F:D7:FB:73:D0:59:7E:FE:C3:B2:7B:65:BB
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       03DC6ECC1D22C858016051E2818D09A87CC0AD4B
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a3a2f33322d3332203d3e20313337333136.roa
Signing time:             Sat 08 Nov 2025 10:00:01 +0000
ROA not before:           Sat 08 Nov 2025 09:55:01 +0000
ROA not after:            Sat 07 Nov 2026 10:00:01 +0000
asID:                     137316
IP address blocks:        2402:7ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 20:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:dc:6e:cc:1d:22:c8:58:01:60:51:e2:81:8d:09:a8:7c:c0:ad:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Nov  8 09:55:01 2025 GMT
            Not After : Nov  7 10:00:01 2026 GMT
        Subject: CN=0F162B2CC4BC9F6FD7FB73D0597EFEC3B27B65BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:4c:7e:b3:e0:02:b5:ac:6a:22:86:d2:a4:
                    57:a6:57:cf:1d:0c:86:4e:a0:ba:ba:f3:57:57:cb:
                    90:f0:6b:d8:fb:21:0e:2f:f8:e4:e4:fb:5b:5e:c8:
                    ac:b0:68:66:e5:dc:75:23:e8:1c:fd:9b:8b:fb:fa:
                    19:90:70:34:9d:27:03:7d:fe:11:f8:c5:4d:e4:59:
                    f1:1c:fe:ca:37:f2:9b:85:22:28:fa:a7:d2:da:22:
                    f5:db:0e:d7:55:7e:3a:1b:55:80:51:62:8e:30:cc:
                    cf:8c:3b:fa:fe:6b:0d:aa:55:76:bf:a9:a7:fe:1b:
                    0b:2a:ac:a0:89:31:1e:ed:61:9b:e5:e2:82:d0:42:
                    5c:8a:b8:18:66:07:ed:7c:9b:f6:bc:06:31:37:3f:
                    ce:0d:c0:a1:b3:3d:da:7d:51:82:38:5e:95:42:50:
                    71:01:f7:1c:8f:a8:9a:fe:ec:6b:be:c1:1b:25:08:
                    a6:ac:c9:6a:c9:3f:00:ac:40:66:26:80:2b:63:5f:
                    2d:56:5f:b2:ee:69:08:1d:88:bc:db:80:0c:cd:b3:
                    e9:69:d7:70:51:e9:9a:47:6f:dc:65:52:7e:7f:fe:
                    85:9f:a8:0a:1c:72:bc:e5:a5:04:af:3d:8e:36:52:
                    e4:5b:91:8c:e4:63:f6:0e:4b:28:04:fd:db:ba:49:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:16:2B:2C:C4:BC:9F:6F:D7:FB:73:D0:59:7E:FE:C3:B2:7B:65:BB
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a3a2f33322d3332203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:c7:24:5b:50:72:39:61:06:14:59:de:8b:54:b6:ee:dd:91:
         3e:2c:7c:9b:d0:64:60:b6:05:e4:a4:5d:6c:d9:e3:53:88:50:
         6e:c7:60:9e:d2:be:10:04:7f:de:dd:19:a3:c2:3f:ac:9b:7a:
         f9:42:f7:1c:0c:ba:aa:6e:62:ba:c1:03:25:b2:09:ef:32:36:
         e6:db:a5:78:88:3f:5c:12:1b:d9:30:c8:a2:ec:da:6c:48:c0:
         5c:89:67:96:51:31:38:5d:9c:a9:77:48:41:ad:c3:2f:a8:6a:
         3f:65:2e:bd:51:6c:f0:8a:31:72:78:dc:6d:5f:5d:0b:c0:2f:
         f9:1c:d4:bf:42:1c:75:60:a7:68:9a:26:5f:dc:0b:2f:d6:2e:
         39:a1:0f:20:1e:ce:88:40:70:df:ae:a6:46:07:6d:8c:db:58:
         cf:a7:2b:ee:c5:e9:7d:72:0d:4a:82:60:2e:ce:a4:de:72:cd:
         91:2e:49:70:b9:e4:d6:fe:93:b4:50:3f:60:f7:83:2f:c1:fe:
         66:74:1b:c8:94:84:45:ba:b3:39:6d:bf:ad:50:46:4b:f3:59:
         c2:46:b7:9c:b0:c7:ed:ec:88:59:3e:8f:34:35:28:fa:0d:c5:
         7f:6c:e2:75:77:90:50:8c:13:96:ca:a5:e0:8d:37:c3:86:1f:
         e9:cc:bc:f0
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUA9xuzB0iyFgBYFHigY0JqHzArUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZB
NUEwNjY2RDAeFw0yNTExMDgwOTU1MDFaFw0yNjExMDcxMDAwMDFaMDMxMTAvBgNV
BAMTKDBGMTYyQjJDQzRCQzlGNkZEN0ZCNzNEMDU5N0VGRUMzQjI3QjY1QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yEx+s+ACtaxqIobSpFemV88d
DIZOoLq681dXy5Dwa9j7IQ4v+OTk+1teyKywaGbl3HUj6Bz9m4v7+hmQcDSdJwN9
/hH4xU3kWfEc/so38puFIij6p9LaIvXbDtdVfjobVYBRYo4wzM+MO/r+aw2qVXa/
qaf+GwsqrKCJMR7tYZvl4oLQQlyKuBhmB+18m/a8BjE3P84NwKGzPdp9UYI4XpVC
UHEB9xyPqJr+7Gu+wRslCKasyWrJPwCsQGYmgCtjXy1WX7LuaQgdiLzbgAzNs+lp
13BR6ZpHb9xlUn5//oWfqAoccrzlpQSvPY42UuRbkYzkY/YOSygE/du6SaYJAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUDxYrLMS8n2/X+3PQWX7+w7J7ZbswHwYDVR0j
BBgwFoAUezWDSkcEx+2F1iIS/GLEb6WgZm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
Y2M0NjJhNS04Zjc0LTQyYWYtODgzYi01ZTg5ZWU1ZjJkZjMvMC83QjM1ODM0QTQ3
MDRDN0VEODVENjIyMTJGQzYyQzQ2RkE1QTA2NjZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZBNUEw
NjY2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04
ODNiLTVlODllZTVmMmRmMy8wLzMyMzQzMDMyM2EzNzYxNjMzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzMzNzMzMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQCesAwDQYJKoZI
hvcNAQELBQADggEBAKXHJFtQcjlhBhRZ3otUtu7dkT4sfJvQZGC2BeSkXWzZ41OI
UG7HYJ7SvhAEf97dGaPCP6ybevlC9xwMuqpuYrrBAyWyCe8yNubbpXiIP1wSG9kw
yKLs2mxIwFyJZ5ZRMThdnKl3SEGtwy+oaj9lLr1RbPCKMXJ43G1fXQvAL/kc1L9C
HHVgp2iaJl/cCy/WLjmhDyAezohAcN+upkYHbYzbWM+nK+7F6X1yDUqCYC7OpN5y
zZEuSXC55Nb+k7RQP2D3gy/B/mZ0G8iUhEW6szltv61QRkvzWcJGt5ywx+3siFk+
jzQ1KPoNxX9s4nV3kFCME5bKpeCNN8OGH+nMvPA=
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:58 2025 by rpki-client