This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa
File:                     3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa (raw, json)
Hash identifier:          ddc27gBMr3OYby+60rTsFN4jTsnZf0K6QpQ3U8AJvJI=
Subject key identifier:   04:6D:CD:2A:D0:63:B9:A5:8C:B9:81:D1:D4:A5:77:BB:3E:DE:D7:3A
Certificate issuer:       /CN=73626536B3B2A503E6D53473A97CF39A13301753
Certificate serial:       11E8AA72EFC37222A788DA9B270FBAD989DC8258
Authority key identifier: 73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa
Signing time:             Sat 20 Dec 2025 06:00:02 +0000
ROA not before:           Sat 20 Dec 2025 05:55:02 +0000
ROA not after:            Sat 19 Dec 2026 06:00:02 +0000
asID:                     153122
IP address blocks:        160.187.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl
                          rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 00:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e8:aa:72:ef:c3:72:22:a7:88:da:9b:27:0f:ba:d9:89:dc:82:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73626536B3B2A503E6D53473A97CF39A13301753
        Validity
            Not Before: Dec 20 05:55:02 2025 GMT
            Not After : Dec 19 06:00:02 2026 GMT
        Subject: CN=046DCD2AD063B9A58CB981D1D4A577BB3EDED73A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:91:e3:a7:ad:76:16:1a:1e:98:fb:a9:32:
                    08:83:3f:84:2e:7c:9c:38:ee:2e:12:5c:ce:b7:ff:
                    cf:a7:17:2b:e0:d9:36:6b:30:13:7d:90:27:e2:6b:
                    28:44:01:1a:5e:2a:64:f6:0c:bb:c0:b1:34:05:09:
                    f8:6f:51:45:13:94:fc:43:76:78:37:d6:8e:64:33:
                    16:0d:23:3a:53:d6:80:e8:f1:00:a2:f2:3c:30:06:
                    28:53:fe:a0:83:11:15:16:53:6c:d7:e6:83:84:41:
                    c2:16:0f:f5:3c:d2:f8:b5:77:08:26:22:16:1f:eb:
                    c4:be:d3:8d:ee:4f:2c:87:5b:62:30:e7:0b:a7:2b:
                    9c:3d:5d:a7:15:f1:82:a7:ad:3a:af:73:f6:a6:3f:
                    7f:6c:3c:4a:35:35:51:95:86:71:fa:ad:d9:46:47:
                    6d:34:c2:9c:5b:13:39:b2:61:71:c3:e2:88:0f:99:
                    50:7a:53:4f:5c:c0:d3:4d:23:26:32:4a:3e:a8:d8:
                    af:ce:fb:09:73:c2:f8:0a:ee:63:86:4b:73:f8:42:
                    6a:d5:ad:ce:12:6f:80:12:b3:b4:36:8c:58:82:93:
                    00:e1:a9:c9:aa:3b:6d:81:b4:4f:ef:80:7f:c8:bf:
                    c1:66:a4:86:4b:c8:d7:8f:67:50:c4:ac:1d:d4:5e:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6D:CD:2A:D0:63:B9:A5:8C:B9:81:D1:D4:A5:77:BB:3E:DE:D7:3A
            X509v3 Authority Key Identifier:
                keyid:73:62:65:36:B3:B2:A5:03:E6:D5:34:73:A9:7C:F3:9A:13:30:17:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/73626536B3B2A503E6D53473A97CF39A13301753.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73626536B3B2A503E6D53473A97CF39A13301753.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133392e302f32342d3234203d3e20313533313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:3b:42:03:e2:cf:0c:f3:ca:0b:9f:eb:19:1f:3d:5e:e5:b5:
         13:07:2e:0f:78:e8:af:7f:7d:4c:76:45:de:3e:c2:dd:b4:5c:
         7a:f5:c3:89:0d:d8:32:b7:65:97:51:8a:f3:53:ef:b9:6a:66:
         65:81:57:86:75:e8:b7:d5:57:e0:ff:98:28:30:1b:90:d1:d4:
         39:16:53:b3:a9:4b:69:4c:09:06:df:b1:b2:50:48:b4:71:f9:
         a8:e7:10:24:23:8a:ed:7c:d2:d2:da:8e:25:00:20:34:3b:49:
         53:4d:dd:b7:32:3d:10:35:07:d1:12:bb:ed:55:ab:72:5e:c9:
         af:03:9a:98:4d:db:df:cf:96:87:44:6a:25:1f:34:59:44:02:
         d6:bc:dc:1b:11:5e:9d:84:f8:91:4c:b6:09:bb:1e:eb:ae:f2:
         b4:3b:b6:55:34:f1:96:07:09:a5:28:e5:f6:38:da:68:29:00:
         14:36:ee:24:ed:bd:60:2d:a7:2c:41:34:99:09:87:df:d9:12:
         0d:11:7e:bb:3e:90:4d:78:d4:ad:73:d8:f4:f3:fe:32:ba:06:
         a8:ad:13:20:4c:53:90:50:a9:da:52:69:f4:ed:82:0c:6b:16:
         88:10:7b:c1:ee:53:56:4e:72:4d:8e:30:a4:ac:43:44:0c:ac:
         b2:0d:77:1c
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUEeiqcu/DciKniNqbJw+62YncglgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUEx
MzMwMTc1MzAeFw0yNTEyMjAwNTU1MDJaFw0yNjEyMTkwNjAwMDJaMDMxMTAvBgNV
BAMTKDA0NkRDRDJBRDA2M0I5QTU4Q0I5ODFEMUQ0QTU3N0JCM0VERUQ3M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7y5Hjp612FhoemPupMgiDP4Qu
fJw47i4SXM63/8+nFyvg2TZrMBN9kCfiayhEARpeKmT2DLvAsTQFCfhvUUUTlPxD
dng31o5kMxYNIzpT1oDo8QCi8jwwBihT/qCDERUWU2zX5oOEQcIWD/U80vi1dwgm
IhYf68S+043uTyyHW2Iw5wunK5w9XacV8YKnrTqvc/amP39sPEo1NVGVhnH6rdlG
R200wpxbEzmyYXHD4ogPmVB6U09cwNNNIyYySj6o2K/O+wlzwvgK7mOGS3P4QmrV
rc4Sb4ASs7Q2jFiCkwDhqcmqO22BtE/vgH/Iv8FmpIZLyNePZ1DErB3UXl0XAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUBG3NKtBjuaWMuYHR1KV3uz7e1zowHwYDVR0j
BBgwFoAUc2JlNrOypQPm1TRzqXzzmhMwF1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMC83MzYyNjUzNkIz
QjJBNTAzRTZENTM0NzNBOTdDRjM5QTEzMzAxNzUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNzM2MjY1MzZCM0IyQTUwM0U2RDUzNDczQTk3Q0YzOUExMzMw
MTc1My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjJmNjQ5LTk5NjgtNDk1ZC1i
ZGYxLTdkNzYyNTZkYWFkNS8wLzMxMzYzMDJlMzEzODM3MmUzMTMzMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTMyMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgu4swDQYJ
KoZIhvcNAQELBQADggEBAAk7QgPizwzzyguf6xkfPV7ltRMHLg946K9/fUx2Rd4+
wt20XHr1w4kN2DK3ZZdRivNT77lqZmWBV4Z16LfVV+D/mCgwG5DR1DkWU7OpS2lM
CQbfsbJQSLRx+ajnECQjiu180tLajiUAIDQ7SVNN3bcyPRA1B9ESu+1Vq3Jeya8D
mphN29/PlodEaiUfNFlEAta83BsRXp2E+JFMtgm7Huuu8rQ7tlU08ZYHCaUo5fY4
2mgpABQ27iTtvWAtpyxBNJkJh9/ZEg0Rfrs+kE141K1z2PTz/jK6BqitEyBMU5BQ
qdpSafTtggxrFogQe8HuU1ZOck2OMKSsQ0QMrLINdxw=
-----END CERTIFICATE-----
Generated at Wed Jan 21 13:23:26 2026 by rpki-client