This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3139372e302f32342d3234203d3e20313339393934.roa
File:                     3135372e38352e3139372e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          6+g3imB+eHfRhzSR9gW7ZpkaEhVwSzA1W8HoDvKHSeI=
Subject key identifier:   49:A6:58:15:98:B3:73:81:7F:CC:30:BA:3E:70:D9:2B:F3:D1:AC:ED
Certificate issuer:       /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial:       1285B6D340384FF34FDD3AA7C8C9B2FD31F94916
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3139372e302f32342d3234203d3e20313339393934.roa
Signing time:             Mon 02 Feb 2026 09:58:26 +0000
ROA not before:           Mon 02 Feb 2026 09:53:26 +0000
ROA not after:            Mon 01 Feb 2027 09:58:26 +0000
asID:                     139994
IP address blocks:        157.85.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
                          rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 04:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:85:b6:d3:40:38:4f:f3:4f:dd:3a:a7:c8:c9:b2:fd:31:f9:49:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
        Validity
            Not Before: Feb  2 09:53:26 2026 GMT
            Not After : Feb  1 09:58:26 2027 GMT
        Subject: CN=49A6581598B373817FCC30BA3E70D92BF3D1ACED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:07:3d:a4:81:42:77:26:66:40:cf:3b:78:
                    60:f1:18:70:07:5b:76:f0:bf:3c:6a:12:2f:4f:70:
                    9a:0e:3b:96:70:3a:3e:52:96:30:d4:a3:73:73:ab:
                    3c:24:12:10:fc:d7:f9:85:0a:31:42:ba:74:ef:97:
                    97:85:43:18:ae:14:3b:fa:15:11:7c:de:c8:3a:7a:
                    e3:7f:e6:b1:b0:98:87:83:c1:6a:53:49:a8:0f:b2:
                    54:55:cb:b1:81:3d:c3:ae:9c:71:6e:0b:57:02:5c:
                    85:1d:2f:95:49:58:44:ea:7a:94:fa:51:e3:f7:80:
                    63:11:22:3d:33:57:62:6a:8f:63:33:37:bf:af:c6:
                    77:89:23:11:0f:47:65:ae:27:c4:9c:76:55:4c:6a:
                    64:9a:81:e0:f8:45:c6:43:51:18:10:30:37:75:a6:
                    4a:c1:38:f2:c7:8d:11:6a:7b:73:0f:da:36:20:df:
                    a2:18:ab:3d:9d:91:e7:36:1d:69:b7:87:d9:cf:63:
                    a6:82:2f:5e:a0:34:4e:50:d1:b3:46:f8:fa:10:e3:
                    70:85:d7:61:82:fc:fa:dd:bc:93:a6:e5:59:0d:9b:
                    89:8f:2a:a7:24:e3:4e:89:ff:8a:9a:6b:4e:6d:70:
                    2e:c7:b4:8f:70:7f:f0:85:32:97:4f:3a:9a:01:b1:
                    f8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A6:58:15:98:B3:73:81:7F:CC:30:BA:3E:70:D9:2B:F3:D1:AC:ED
            X509v3 Authority Key Identifier:
                keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3139372e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:67:d7:e0:4e:97:59:e0:28:58:20:e6:bd:78:d9:ec:bc:00:
         9a:54:94:bd:15:d5:c5:29:31:87:1a:ac:c5:0b:e0:23:9c:b6:
         35:03:e6:db:ed:61:ab:c5:40:63:e1:b8:0f:ec:47:68:2c:16:
         ca:5d:fb:ed:2b:85:5d:4d:1c:19:9d:88:e5:2c:c0:a3:97:a6:
         c6:26:58:c5:7c:b1:5e:18:be:6c:63:76:91:89:fb:3c:e7:2a:
         d2:f3:8c:78:69:d2:05:68:05:c6:49:1d:97:24:38:9b:40:57:
         ef:07:8c:fc:c8:ba:44:e5:11:99:e8:c8:46:ca:b3:eb:50:4a:
         39:cb:1f:32:fe:7d:d3:3a:03:aa:80:68:55:23:62:aa:3e:2a:
         2c:8a:97:79:49:75:bc:6b:93:2c:0d:19:a9:82:1a:3f:49:d3:
         dd:a8:6b:e5:9d:cf:e0:af:01:86:ae:08:83:7b:0e:b6:32:3c:
         76:4d:9a:be:5c:14:ed:72:3c:9a:cc:fa:4d:74:8b:f3:eb:80:
         10:58:58:37:5a:ab:7d:d8:54:30:c6:57:ef:6b:11:f8:01:ff:
         c0:f4:39:ce:7a:0e:e6:65:9f:53:ac:9c:db:33:c3:c1:ef:37:
         6e:93:4b:ed:51:fe:fb:76:68:23:35:91:3f:c3:36:85:64:ac:
         2f:e8:b1:d8
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUEoW200A4T/NP3TqnyMmy/TH5SRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM3OUI3QUIwRTRFODAzNUM4QjREQzI0REUzODU4NjEx
MTA1MDU0NTAeFw0yNjAyMDIwOTUzMjZaFw0yNzAyMDEwOTU4MjZaMDMxMTAvBgNV
BAMTKDQ5QTY1ODE1OThCMzczODE3RkNDMzBCQTNFNzBEOTJCRjNEMUFDRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuOwc9pIFCdyZmQM87eGDxGHAH
W3bwvzxqEi9PcJoOO5ZwOj5SljDUo3NzqzwkEhD81/mFCjFCunTvl5eFQxiuFDv6
FRF83sg6euN/5rGwmIeDwWpTSagPslRVy7GBPcOunHFuC1cCXIUdL5VJWETqepT6
UeP3gGMRIj0zV2Jqj2MzN7+vxneJIxEPR2WuJ8ScdlVMamSageD4RcZDURgQMDd1
pkrBOPLHjRFqe3MP2jYg36IYqz2dkec2HWm3h9nPY6aCL16gNE5Q0bNG+PoQ43CF
12GC/PrdvJOm5VkNm4mPKqck406J/4qaa05tcC7HtI9wf/CFMpdPOpoBsfi9AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUSaZYFZizc4F/zDC6PnDZK/PRrO0wHwYDVR0j
BBgwFoAULHm3qw5OgDXItNwk3jhYYREFBUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OGU0NjEwYS1hNzk0LTQwNTktOTdkOS1mMmM2OWRhNTRjOGIvMS8yQzc5QjdBQjBF
NEU4MDM1QzhCNERDMjRERTM4NTg2MTExMDUwNTQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMkM3OUI3QUIwRTRFODAzNUM4QjREQzI0REUzODU4NjExMTA1
MDU0NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4ZTQ2MTBhLWE3OTQtNDA1OS05
N2Q5LWYyYzY5ZGE1NGM4Yi8xLzMxMzUzNzJlMzgzNTJlMzEzOTM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnVXFMA0GCSqG
SIb3DQEBCwUAA4IBAQCzZ9fgTpdZ4ChYIOa9eNnsvACaVJS9FdXFKTGHGqzFC+Aj
nLY1A+bb7WGrxUBj4bgP7EdoLBbKXfvtK4VdTRwZnYjlLMCjl6bGJljFfLFeGL5s
Y3aRifs85yrS84x4adIFaAXGSR2XJDibQFfvB4z8yLpE5RGZ6MhGyrPrUEo5yx8y
/n3TOgOqgGhVI2KqPiosipd5SXW8a5MsDRmpgho/SdPdqGvlnc/grwGGrgiDew62
Mjx2TZq+XBTtcjyazPpNdIvz64AQWFg3Wqt92FQwxlfvaxH4Af/A9DnOeg7mZZ9T
rJzbM8PB7zduk0vtUf77dmgjNZE/wzaFZKwv6LHY
-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:19 2026 by rpki-client