This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a653030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a653030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          Q63XnjQr1cPvNLDkv8W18jSx4Abv2y3TA8TC50cxiIk=
Subject key identifier:   45:FB:B7:31:60:AC:EA:1D:28:64:71:AD:D2:56:45:2F:AC:7F:DA:9C
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       7DFA5ED45E5547B8256AA8DDE7E7939D0204BCC0
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a653030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Fri 07 Nov 2025 14:00:01 +0000
ROA not before:           Fri 07 Nov 2025 13:55:01 +0000
ROA not after:            Fri 06 Nov 2026 14:00:01 +0000
asID:                     137316
IP address blocks:        2402:7ac0:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 20:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fa:5e:d4:5e:55:47:b8:25:6a:a8:dd:e7:e7:93:9d:02:04:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Nov  7 13:55:01 2025 GMT
            Not After : Nov  6 14:00:01 2026 GMT
        Subject: CN=45FBB73160ACEA1D286471ADD256452FAC7FDA9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3b:05:bd:e6:98:80:4c:b4:05:ec:85:25:bf:
                    19:8f:d4:9c:f0:bb:6f:7d:5a:08:2d:67:41:ed:a8:
                    f7:ed:1e:ea:63:55:ff:ff:a0:c1:81:60:bb:a0:b2:
                    c4:32:75:06:da:0e:cb:8f:38:82:18:17:52:cf:f8:
                    a6:56:71:3e:ac:53:85:2e:df:4e:e4:13:64:40:f4:
                    0f:db:f7:eb:af:af:0e:72:3b:1b:e4:af:5d:54:5a:
                    83:a8:08:e5:a0:4e:30:e3:26:7a:36:82:6e:e8:2b:
                    20:2b:29:6b:2c:58:50:de:22:c8:43:42:30:97:fa:
                    7c:08:bd:b5:98:8a:03:b7:f9:42:5b:c1:02:5b:cd:
                    48:3a:15:20:59:58:e0:7c:2f:f0:5e:de:af:19:45:
                    78:78:57:f8:2b:93:cf:9e:2f:d8:f6:f5:9c:5f:d9:
                    f8:48:22:a8:b9:78:8c:50:16:25:2e:62:45:a7:1a:
                    14:26:1e:9d:58:ec:2a:dc:84:6a:fc:f6:53:05:d9:
                    36:eb:d9:7a:88:63:25:57:15:d8:44:aa:81:3f:81:
                    57:4d:ef:4c:09:ed:8d:4d:8f:e2:ae:69:d9:66:bf:
                    d9:55:ac:7e:08:97:b6:e3:0a:cd:f6:66:ef:ab:3f:
                    17:98:b3:41:06:3b:3b:91:f7:9c:49:c1:65:70:d9:
                    7a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FB:B7:31:60:AC:EA:1D:28:64:71:AD:D2:56:45:2F:AC:7F:DA:9C
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a653030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         21:8b:bc:14:88:8e:ef:2d:20:b9:d7:ef:b6:7e:cd:58:a5:a5:
         45:21:5a:92:a3:87:7b:d5:0c:39:a3:2c:1d:ae:ab:4b:0b:21:
         f8:e7:f6:d1:5c:e7:10:21:48:d8:df:0f:79:53:7d:1c:dc:d0:
         93:97:d5:c6:6e:e4:cb:17:fb:df:11:dd:00:90:f8:06:ec:5f:
         8d:2f:2c:45:54:5f:5d:43:82:a8:a9:b7:00:09:64:ce:14:41:
         44:68:4c:3b:8c:84:34:5a:3b:68:d0:fc:0e:da:6c:c8:bd:2b:
         76:e4:ee:9b:a9:46:07:15:ba:45:b3:32:fa:ed:93:7c:e6:89:
         a6:20:d2:57:dd:6c:d1:d0:59:af:8e:d7:09:a7:50:40:95:77:
         67:51:be:1a:6b:89:18:82:74:7f:ce:f2:61:c6:95:cf:e1:73:
         31:67:13:1e:af:2d:5e:d8:1b:e0:f5:11:5b:b5:a3:4e:d8:b4:
         91:2f:fe:7c:96:ac:51:93:37:79:47:c7:d0:c8:bc:80:ad:ba:
         37:2b:d1:75:b3:c0:80:54:f2:99:61:bc:4d:c3:b3:fe:94:52:
         c9:e2:da:3e:ba:84:25:77:c3:91:49:c0:3c:d0:98:81:f2:f9:
         ea:78:eb:b1:8c:b2:2f:d6:e6:03:6e:c9:4b:c6:cd:49:e0:01:
         eb:1b:c5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:55 2025 by rpki-client