This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa
File:                     3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa (raw, json)
Hash identifier:          zoZa3tLUvTTpmYIJTx5LfPwbAyo/gY5JwiU6TWgDs78=
Subject key identifier:   1D:65:25:21:29:07:F0:40:51:E7:84:73:02:A8:A1:EC:22:87:69:E7
Certificate issuer:       /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial:       948D624884CFB3DAF44EA57CA2B2175EF5F63C
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa
Signing time:             Thu 27 Nov 2025 16:43:47 +0000
ROA not before:           Thu 27 Nov 2025 16:38:47 +0000
ROA not after:            Thu 26 Nov 2026 16:43:47 +0000
asID:                     142393
IP address blocks:        150.107.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
                          rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 16:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            94:8d:62:48:84:cf:b3:da:f4:4e:a5:7c:a2:b2:17:5e:f5:f6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
        Validity
            Not Before: Nov 27 16:38:47 2025 GMT
            Not After : Nov 26 16:43:47 2026 GMT
        Subject: CN=1D6525212907F04051E7847302A8A1EC228769E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:e8:42:7f:54:0c:92:fa:5d:ca:fe:2f:93:
                    38:a8:78:d3:7b:3f:d8:18:41:5d:bb:40:85:b4:1a:
                    8d:60:76:04:4a:9c:04:f7:5a:ac:03:92:52:45:a4:
                    8e:2d:cd:ea:35:51:5d:16:b3:fb:bf:7d:7a:9c:cf:
                    2e:81:b5:27:db:05:cb:32:61:7e:35:31:96:b7:be:
                    11:4a:bc:14:01:97:29:78:00:36:11:7a:1d:51:30:
                    6a:01:c1:65:71:10:7f:66:33:f2:a8:ea:e2:65:94:
                    b2:05:76:6a:34:98:be:59:2e:01:7d:ea:27:18:0f:
                    62:42:93:46:c2:f1:f7:92:d9:45:1d:63:08:ef:7c:
                    95:7b:ba:02:75:a7:af:3c:8e:d3:ad:84:45:8f:29:
                    d4:e3:15:3b:4f:e9:da:ce:79:b9:f5:1a:3b:ff:fa:
                    d0:c2:a3:d6:29:02:e1:43:1a:4f:b3:1e:84:4f:79:
                    ea:b8:11:2a:a6:49:ec:ed:c3:ac:59:7a:1b:c8:a8:
                    4b:17:95:21:cc:dd:ca:4f:15:eb:4d:b0:2e:14:aa:
                    4b:3f:84:76:90:b5:af:a3:67:90:85:aa:2f:2b:47:
                    1a:7c:de:bc:1d:ec:74:47:07:04:6d:65:0f:46:f7:
                    47:4d:1d:f5:bc:28:ad:24:8b:c4:d4:e3:cc:40:3b:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:65:25:21:29:07:F0:40:51:E7:84:73:02:A8:A1:EC:22:87:69:E7
            X509v3 Authority Key Identifier:
                keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:55:3a:4e:88:4c:e2:29:3c:2d:70:6b:16:2e:27:9f:ce:4e:
         fd:ff:1e:ee:2d:fd:e9:10:0f:0b:ea:70:8e:e0:b9:d7:79:fe:
         b9:7f:f9:57:80:52:cb:10:a3:07:3b:c1:8b:73:27:52:f8:7b:
         7c:3e:4e:63:5d:ca:ae:6e:6a:3c:0d:3f:fe:c4:f4:c7:60:86:
         09:eb:a7:56:f9:16:4e:2b:2d:a8:6e:7f:5d:8a:83:4e:a6:49:
         2f:49:9b:ba:30:5f:d6:ae:32:05:78:5c:8b:9e:bd:90:e8:1a:
         37:b0:8b:7e:97:e8:00:38:d4:d2:ee:70:d6:8f:8c:22:01:1d:
         f5:fe:02:fb:46:c9:a5:da:0d:0a:62:49:3f:c8:e2:e9:18:f8:
         d9:0b:57:e7:b4:b4:9f:7a:fe:ab:78:fd:f7:81:9d:59:9c:dc:
         1b:52:33:7e:ad:ee:d9:10:19:73:00:e6:13:c2:cc:11:41:0e:
         d0:3c:c6:89:fc:47:59:03:eb:aa:ce:4b:d7:f4:d7:11:ef:cc:
         48:fd:b7:69:12:05:d7:39:f9:fe:7f:78:82:c7:36:c6:1e:1a:
         cb:61:59:6b:a0:8c:f6:c8:f5:5b:a4:ea:15:04:4e:d5:4a:38:
         73:df:a9:5f:c3:b7:9e:e7:73:21:d5:47:dc:8e:61:e1:2c:2f:
         54:f1:b8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:54:49 2025 by rpki-client