This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a623030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a623030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          +dwDIrZ0JgqLMurx6+Fa+khQ/9EgzN5vn1D9mgZCZcQ=
Subject key identifier:   05:AA:A5:55:EF:3D:65:6C:A9:08:A2:FD:1C:67:85:27:80:F3:02:30
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       0EC533B4E6C5D07FBBCA9010042DD480CA2A42F9
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a623030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Fri 07 Nov 2025 14:00:02 +0000
ROA not before:           Fri 07 Nov 2025 13:55:02 +0000
ROA not after:            Fri 06 Nov 2026 14:00:02 +0000
asID:                     137316
IP address blocks:        2402:7ac0:b000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 20:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c5:33:b4:e6:c5:d0:7f:bb:ca:90:10:04:2d:d4:80:ca:2a:42:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Nov  7 13:55:02 2025 GMT
            Not After : Nov  6 14:00:02 2026 GMT
        Subject: CN=05AAA555EF3D656CA908A2FD1C67852780F30230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:4b:8d:26:97:ff:1a:2a:70:71:5a:80:8b:
                    ae:ff:bd:98:86:c5:34:eb:6d:93:95:22:20:83:ad:
                    5d:dc:a5:68:c1:86:69:ec:dd:ff:c6:56:9e:bc:97:
                    ab:d8:87:60:3a:1f:7f:cb:95:c1:86:3e:91:20:e6:
                    bd:75:76:2f:cb:4e:5e:53:f3:65:bc:5f:79:60:98:
                    cc:eb:13:af:da:65:1d:52:19:58:cc:8b:51:a9:82:
                    dc:f7:4c:f5:eb:ed:fe:a3:c2:4f:97:0a:c3:02:d8:
                    99:b5:5d:08:be:10:62:41:0c:95:41:4c:7a:66:34:
                    5e:d8:4d:03:c8:3f:93:d2:5a:dd:5e:6b:4e:c4:cb:
                    16:3b:7f:72:0c:dc:2c:a6:37:92:45:65:8c:c2:7f:
                    b1:f8:40:1c:f4:18:26:6d:ee:c8:30:fe:8e:ed:9d:
                    ce:49:95:37:f2:f6:cb:40:76:1a:5c:cf:7b:34:62:
                    49:65:bd:a6:15:2a:92:71:a4:4a:86:6a:51:5b:62:
                    67:0d:1c:0c:d2:0c:91:26:84:fb:88:e8:70:9f:6c:
                    a5:b8:79:16:88:38:7c:38:de:5f:b1:f0:ec:0b:db:
                    4b:5d:d7:32:60:57:f9:41:dc:0e:54:c1:bb:1d:1a:
                    5f:5a:06:00:cb:b1:da:55:19:4b:e8:63:79:28:be:
                    0b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AA:A5:55:EF:3D:65:6C:A9:08:A2:FD:1C:67:85:27:80:F3:02:30
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a623030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7a:86:cc:b0:68:b4:b2:eb:c1:6f:13:f4:2c:49:d7:86:96:b3:
         50:f6:58:e8:e9:2e:15:87:fb:ec:ad:2d:14:da:36:9f:60:17:
         b2:69:1c:a5:b4:9a:b3:72:27:b9:c7:7b:1d:d5:b7:db:99:2d:
         b7:20:cf:1b:86:5e:1d:b9:98:f1:b5:76:27:bd:ec:1e:ed:be:
         64:63:a2:36:77:c7:ec:70:fa:22:48:cf:1c:cd:60:53:ca:b1:
         f2:a1:9e:5d:8c:85:b5:fd:b9:da:78:a2:ad:ff:d9:7c:11:ad:
         e6:74:37:74:01:50:d6:e8:8f:85:4c:c1:64:07:88:fb:10:aa:
         1c:b5:3c:59:56:d6:f5:78:b8:db:e4:da:9b:73:3e:00:85:13:
         6b:80:4f:15:f6:bc:a5:bb:a1:3c:ef:09:97:04:2e:9b:a8:27:
         d1:ba:ab:54:33:5b:6c:9f:aa:63:f2:30:9b:5b:8f:61:76:22:
         62:e0:b5:36:50:74:3f:14:82:22:02:09:6f:80:63:1f:87:3e:
         32:1d:db:4f:0c:4b:73:06:98:e5:8a:14:fb:1f:87:8b:b4:58:
         39:ff:49:20:e5:42:9f:96:7a:05:a2:50:93:45:c9:09:91:dd:
         b7:20:b7:98:d3:1e:2f:d0:0f:ae:28:21:58:db:f1:df:71:d9:
         eb:b6:b8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:56 2025 by rpki-client