This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa
File:                     323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa (raw, json)
Hash identifier:          UVW9pjMMh6nTzzAse0pe198GDDypk+vSUVBxDpcZFG8=
Subject key identifier:   93:1C:4C:87:60:5D:54:B6:5C:1F:FA:D5:2A:C3:94:E3:C8:82:2A:9F
Certificate issuer:       /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC
Certificate serial:       5E48C3CC232FCEC1E22DD397B93D1ABA9CF69135
Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa
Signing time:             Thu 13 Nov 2025 11:00:00 +0000
ROA not before:           Thu 13 Nov 2025 10:55:00 +0000
ROA not after:            Thu 12 Nov 2026 11:00:00 +0000
asID:                     132164
IP address blocks:        2001:df0:9e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl
                          rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 23:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:48:c3:cc:23:2f:ce:c1:e2:2d:d3:97:b9:3d:1a:ba:9c:f6:91:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC
        Validity
            Not Before: Nov 13 10:55:00 2025 GMT
            Not After : Nov 12 11:00:00 2026 GMT
        Subject: CN=931C4C87605D54B65C1FFAD52AC394E3C8822A9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:db:40:61:ba:3a:a3:3b:01:1e:c7:bd:49:
                    86:e7:22:e4:b2:a0:b1:3f:f1:a6:0d:6a:ce:35:85:
                    25:7f:8b:ef:48:28:a7:03:9f:a0:f9:78:50:eb:3c:
                    dc:94:cc:e1:4e:95:03:e6:5a:32:1c:1e:b9:79:12:
                    f6:7a:f9:55:e1:39:74:d8:26:ee:30:87:b9:d3:1d:
                    fe:87:63:9e:f7:85:eb:18:f2:fd:a3:ea:0a:52:db:
                    1d:fc:69:ce:bd:e9:cd:d6:47:35:c7:6a:91:41:71:
                    2e:e0:89:eb:50:6b:66:64:2a:25:c8:21:4a:93:92:
                    7e:41:f0:be:43:41:0d:20:38:8b:bc:de:75:25:5f:
                    94:71:ee:83:0e:3d:80:46:77:d1:26:c1:f0:82:31:
                    99:49:b6:9c:b5:61:c4:10:e3:4f:75:6c:3f:af:2e:
                    23:ac:a2:c5:b3:db:7c:c3:62:c6:24:67:88:ce:61:
                    fb:79:f7:f3:36:77:64:46:7f:80:c2:40:10:2b:e1:
                    82:80:ec:7e:98:b3:94:cd:4a:3c:1e:87:72:6c:a7:
                    dd:bb:74:79:29:10:a4:b2:d8:69:b1:15:dd:74:a6:
                    e3:14:c4:d2:aa:c6:ba:72:4a:1d:7b:82:05:27:b7:
                    2e:2e:bb:40:19:52:e2:22:40:29:89:f4:a8:7a:12:
                    61:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1C:4C:87:60:5D:54:B6:5C:1F:FA:D5:2A:C3:94:E3:C8:82:2A:9F
            X509v3 Authority Key Identifier:
                keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/323030313a6466303a396530303a3a2f34382d3438203d3e20313332313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:9e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:02:32:4a:0e:a2:f3:7f:eb:96:45:64:e0:3d:29:9b:17:b8:
         f5:54:f1:1f:39:04:60:0a:e7:05:64:eb:c3:05:12:67:4e:47:
         ba:6f:be:12:06:77:88:44:b6:56:2c:f5:96:2d:f4:3f:68:cb:
         75:e1:cf:67:8e:35:bd:cc:d9:07:0f:5b:fe:d5:57:8c:48:65:
         e2:2e:96:ca:21:4d:d4:6a:0c:99:e6:0a:3f:cb:2b:d5:42:d2:
         73:ad:3f:f4:30:dc:8a:c5:8d:b4:1d:d6:8f:1b:f2:2c:ca:ea:
         30:3d:03:f6:e9:a0:7d:b1:ad:75:15:05:49:29:f9:8f:81:76:
         49:af:15:e8:42:93:a9:b4:54:3c:03:9a:11:86:a9:c4:0c:75:
         c5:d5:c9:8a:37:09:c8:ec:c8:a4:44:8b:db:4b:f3:da:4a:4f:
         df:cf:5f:7b:cf:29:f4:42:bb:ad:07:0e:87:6f:b5:c4:5a:eb:
         db:47:14:0a:f0:65:a5:53:85:20:f4:f8:7e:77:67:ae:85:07:
         2c:28:e1:4b:f0:ee:de:b2:d0:f7:55:90:79:cb:3f:27:f0:94:
         1b:56:00:94:a9:69:01:08:d0:3e:77:68:86:86:da:ef:73:c9:
         3c:de:4a:f7:5b:ae:e2:5a:c0:ac:67:91:dd:92:e2:2d:36:ee:
         18:87:c8:0a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUXkjDzCMvzsHiLdOXuT0aupz2kTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1
M0YzNDhEQzAeFw0yNTExMTMxMDU1MDBaFw0yNjExMTIxMTAwMDBaMDMxMTAvBgNV
BAMTKDkzMUM0Qzg3NjA1RDU0QjY1QzFGRkFENTJBQzM5NEUzQzg4MjJBOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0h9tAYbo6ozsBHse9SYbnIuSy
oLE/8aYNas41hSV/i+9IKKcDn6D5eFDrPNyUzOFOlQPmWjIcHrl5EvZ6+VXhOXTY
Ju4wh7nTHf6HY573hesY8v2j6gpS2x38ac696c3WRzXHapFBcS7gietQa2ZkKiXI
IUqTkn5B8L5DQQ0gOIu83nUlX5Rx7oMOPYBGd9EmwfCCMZlJtpy1YcQQ4091bD+v
LiOsosWz23zDYsYkZ4jOYft59/M2d2RGf4DCQBAr4YKA7H6Ys5TNSjweh3Jsp927
dHkpEKSy2GmxFd10puMUxNKqxrpySh17ggUnty4uu0AZUuIiQCmJ9Kh6EmFxAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUkxxMh2BdVLZcH/rVKsOU48iCKp8wHwYDVR0j
BBgwFoAUY/2N7lpEOKUP9Qtrm51qP1PzSNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MTQxZjg4NC1kNWM5LTQzMzYtOWE1Yy03Nzc0MTllNTZkY2UvMC82M0ZEOERFRTVB
NDQzOEE1MEZGNTBCNkI5QjlENkEzRjUzRjM0OERDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjNGRDhERUU1QTQ0MzhBNTBGRjUwQjZCOUI5RDZBM0Y1M0Yz
NDhEQy5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxNDFmODg0LWQ1YzktNDMzNi05
YTVjLTc3NzQxOWU1NmRjZS8wLzMyMzAzMDMxM2E2NDY2MzAzYTM5NjUzMDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMyMzEzNjM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN
8J4AMA0GCSqGSIb3DQEBCwUAA4IBAQBaAjJKDqLzf+uWRWTgPSmbF7j1VPEfOQRg
CucFZOvDBRJnTke6b74SBneIRLZWLPWWLfQ/aMt14c9njjW9zNkHD1v+1VeMSGXi
LpbKIU3UagyZ5go/yyvVQtJzrT/0MNyKxY20HdaPG/IsyuowPQP26aB9sa11FQVJ
KfmPgXZJrxXoQpOptFQ8A5oRhqnEDHXF1cmKNwnI7MikRIvbS/PaSk/fz197zyn0
QrutBw6Hb7XEWuvbRxQK8GWlU4Ug9Ph+d2euhQcsKOFL8O7estD3VZB5yz8n8JQb
VgCUqWkBCNA+d2iGhtrvc8k83kr3W67iWsCsZ5HdkuItNu4Yh8gK
-----END CERTIFICATE-----
Generated at Wed Dec 3 15:32:31 2025 by rpki-client