This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/32372e3132332e302e302f32312d3234203d3e20313339393338.roa
File:                     32372e3132332e302e302f32312d3234203d3e20313339393338.roa (raw, json)
Hash identifier:          93zBrgb6m1LW3mW3NgO8+L8poGQYWz2Zyn5aV5wC7UU=
Subject key identifier:   4A:D1:50:D8:24:7D:A6:0B:A6:EA:F0:6C:82:BE:BC:1E:C3:5F:59:45
Certificate issuer:       /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial:       43F411AB5538AFCD454804BCD07DF286E565AD74
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/32372e3132332e302e302f32312d3234203d3e20313339393338.roa
Signing time:             Wed 05 Nov 2025 05:00:02 +0000
ROA not before:           Wed 05 Nov 2025 04:55:02 +0000
ROA not after:            Wed 04 Nov 2026 05:00:02 +0000
asID:                     139938
IP address blocks:        27.123.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
                          rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 23:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f4:11:ab:55:38:af:cd:45:48:04:bc:d0:7d:f2:86:e5:65:ad:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
        Validity
            Not Before: Nov  5 04:55:02 2025 GMT
            Not After : Nov  4 05:00:02 2026 GMT
        Subject: CN=4AD150D8247DA60BA6EAF06C82BEBC1EC35F5945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ce:01:55:26:03:00:f2:69:f2:03:34:d2:eb:
                    0f:14:92:82:15:16:32:37:4c:d6:f3:a7:b8:fa:20:
                    30:01:93:94:27:ac:ce:77:65:57:17:aa:65:aa:33:
                    3a:99:5d:5a:22:67:95:93:25:4c:58:04:f4:99:8d:
                    c2:fd:af:c5:6c:75:8f:0b:bd:c1:87:2f:b2:4d:32:
                    89:ab:9a:fc:10:c0:43:d3:af:39:57:86:ae:9f:b2:
                    81:2e:12:20:76:0a:ee:cf:7c:0a:05:90:37:e1:06:
                    18:0a:8c:4c:78:7f:64:91:05:6c:f9:10:89:0d:78:
                    a5:9c:06:38:bc:45:ea:16:da:a2:bc:67:5b:ac:fa:
                    bf:ce:1e:01:00:37:a0:ee:f9:64:09:e0:6c:de:f1:
                    82:b1:3f:f4:99:ec:38:61:6c:7d:eb:96:31:a1:b5:
                    1d:39:97:a5:d0:0c:12:75:5c:48:39:0d:44:53:b7:
                    74:d8:3b:c7:6c:22:b4:9d:58:25:1c:6c:83:27:4e:
                    ae:44:fd:53:cf:04:0e:f6:93:5d:fa:99:52:2c:20:
                    75:e2:70:f4:51:5f:ad:1c:32:47:f8:6b:e5:59:5b:
                    56:4a:e2:2f:25:a6:8e:92:7e:0f:a5:ec:cd:29:09:
                    f2:c1:e6:74:20:19:71:7f:1f:86:c3:40:86:da:b8:
                    96:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D1:50:D8:24:7D:A6:0B:A6:EA:F0:6C:82:BE:BC:1E:C3:5F:59:45
            X509v3 Authority Key Identifier:
                keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/32372e3132332e302e302f32312d3234203d3e20313339393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:6b:d5:f9:d8:69:9c:da:da:31:a6:c8:92:e9:44:1d:df:d2:
         8a:d9:24:69:10:28:db:cd:1e:be:3d:63:9c:f0:65:c4:bd:12:
         cc:86:79:b7:d9:82:85:53:ad:7e:75:e2:49:6d:4d:5e:1e:f9:
         29:9b:df:ae:23:cb:c6:60:99:ba:a9:66:f8:50:ae:f6:6d:7b:
         ba:d1:45:12:64:0a:d6:8e:93:36:22:79:45:99:08:a8:39:7c:
         66:2c:ed:90:8c:41:ba:10:f4:16:c8:a4:de:84:66:e5:67:fa:
         d2:47:b2:f6:9b:1b:7e:cd:b0:ef:3b:1e:db:71:9d:9d:a3:f2:
         21:78:94:24:10:98:ff:d9:30:a4:8d:f6:f2:fe:26:21:04:14:
         aa:64:07:c9:c2:30:ad:c3:57:40:ef:4a:b9:86:a7:c4:29:a7:
         dc:ba:41:01:0c:bd:85:08:17:ef:32:5f:7f:05:d2:f1:6c:53:
         2f:31:a4:fa:5f:68:5d:73:87:11:51:d6:0c:06:78:d8:1c:84:
         5c:4b:64:35:d0:5d:13:14:3e:1f:b8:a0:94:d5:ec:58:a1:0b:
         7e:a2:f5:ef:04:3c:13:59:eb:d7:69:9c:82:03:fb:93:5c:6f:
         5e:96:cf:d6:21:86:fb:aa:0d:07:75:4d:05:19:21:3c:a2:c4:
         95:70:48:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:11 2025 by rpki-client