This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3139382e302f32342d3234203d3e20313339393934.roa
File:                     3135372e38352e3139382e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          Twzik8Cr8Z6GaxaxOvOAZBrEeZoz8eVQdZRr/dR1PG8=
Subject key identifier:   60:34:B5:B6:BF:13:8B:92:38:63:46:2F:CC:4E:C0:95:7C:84:26:49
Certificate issuer:       /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial:       33BBB2DD1FD060FA4628CEB0220778755E8F62DD
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3139382e302f32342d3234203d3e20313339393934.roa
Signing time:             Mon 02 Feb 2026 09:58:37 +0000
ROA not before:           Mon 02 Feb 2026 09:53:37 +0000
ROA not after:            Mon 01 Feb 2027 09:58:37 +0000
asID:                     139994
IP address blocks:        157.85.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
                          rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 04:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:bb:b2:dd:1f:d0:60:fa:46:28:ce:b0:22:07:78:75:5e:8f:62:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
        Validity
            Not Before: Feb  2 09:53:37 2026 GMT
            Not After : Feb  1 09:58:37 2027 GMT
        Subject: CN=6034B5B6BF138B923863462FCC4EC0957C842649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:13:bc:08:13:a2:76:1c:0b:04:a2:56:52:ca:
                    67:7f:04:b1:ab:8d:7b:91:ca:f7:0b:42:31:c0:e9:
                    61:b2:23:d5:77:ac:c1:e1:b9:2d:4f:d8:9e:31:9b:
                    95:4c:70:21:a6:63:4e:30:c4:61:5b:ab:98:ae:5b:
                    69:8d:e9:5e:0c:2d:63:ad:ea:fb:3a:ca:6e:70:c8:
                    92:81:e3:25:c9:c3:23:a2:78:a1:59:61:75:05:45:
                    23:c0:6d:26:64:69:f0:27:f2:c9:0c:ab:05:5c:1f:
                    10:2b:1f:30:7a:7b:15:7e:d0:e6:d1:5f:24:55:78:
                    78:64:d1:68:85:65:c4:7c:26:04:e0:7c:15:1d:10:
                    b0:e8:cc:2c:6c:89:a0:d5:1e:b5:98:2c:52:8b:d8:
                    f4:78:0a:41:ef:15:73:d6:5e:47:ee:74:da:b8:e6:
                    1c:1e:26:6a:66:47:f4:c6:03:cd:22:2a:16:57:fb:
                    c8:8c:e8:6f:ec:c6:0c:55:66:cf:6d:ec:75:f5:4e:
                    77:a3:98:3e:e3:d3:b7:49:59:64:15:a2:e6:8f:11:
                    66:ec:9a:30:51:62:ad:2e:fc:9e:8c:83:95:ee:13:
                    e2:8a:95:2b:73:08:24:c0:ef:33:fe:a3:d4:98:a5:
                    fe:19:e9:4e:95:f3:da:c0:b0:ec:8e:a5:82:99:f1:
                    01:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:34:B5:B6:BF:13:8B:92:38:63:46:2F:CC:4E:C0:95:7C:84:26:49
            X509v3 Authority Key Identifier:
                keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3139382e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:01:9e:d9:2a:85:07:53:10:d5:42:f2:ae:c5:e7:0d:49:b6:
         19:0b:13:d1:4c:e4:c6:2b:fb:46:4a:4b:45:2f:2f:cc:6d:c4:
         53:98:df:a2:09:11:c9:7a:6b:63:c9:7e:ef:c0:03:64:09:70:
         a3:60:b3:5e:0a:37:d1:a7:af:39:4d:eb:c4:09:ea:b5:6b:2d:
         e3:c7:52:b2:d9:ba:b7:16:60:f1:e9:79:44:8a:42:e0:2d:97:
         ec:95:47:84:9c:a8:0d:5a:53:bb:1f:74:dd:f9:b9:27:50:b8:
         69:c3:e0:40:07:bb:32:e8:c1:db:ec:f0:60:1c:23:23:3a:4a:
         6d:45:da:bc:55:65:4f:ca:3a:47:96:7a:28:0e:66:4b:2e:97:
         b8:c2:4b:cd:57:72:f9:20:78:db:9d:7d:59:60:e2:6e:e0:54:
         2d:7f:38:f9:5f:c2:7f:48:7d:cd:18:34:b9:67:11:ae:be:31:
         ec:d3:d0:5e:97:40:c8:e7:e1:16:2c:6c:c5:46:45:b1:c8:0e:
         58:09:ea:7e:df:f6:e4:1d:df:dd:fa:9b:88:6e:f7:67:d6:c2:
         5c:76:f4:d8:02:31:83:f3:64:52:27:f7:5f:84:43:60:47:98:
         00:f5:d9:bc:d0:df:11:f3:9c:b6:bb:c9:f4:0a:e0:3f:0e:01:
         b0:10:c1:fc
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUM7uy3R/QYPpGKM6wIgd4dV6PYt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM3OUI3QUIwRTRFODAzNUM4QjREQzI0REUzODU4NjEx
MTA1MDU0NTAeFw0yNjAyMDIwOTUzMzdaFw0yNzAyMDEwOTU4MzdaMDMxMTAvBgNV
BAMTKDYwMzRCNUI2QkYxMzhCOTIzODYzNDYyRkNDNEVDMDk1N0M4NDI2NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWE7wIE6J2HAsEolZSymd/BLGr
jXuRyvcLQjHA6WGyI9V3rMHhuS1P2J4xm5VMcCGmY04wxGFbq5iuW2mN6V4MLWOt
6vs6ym5wyJKB4yXJwyOieKFZYXUFRSPAbSZkafAn8skMqwVcHxArHzB6exV+0ObR
XyRVeHhk0WiFZcR8JgTgfBUdELDozCxsiaDVHrWYLFKL2PR4CkHvFXPWXkfudNq4
5hweJmpmR/TGA80iKhZX+8iM6G/sxgxVZs9t7HX1TnejmD7j07dJWWQVouaPEWbs
mjBRYq0u/J6Mg5XuE+KKlStzCCTA7zP+o9SYpf4Z6U6V89rAsOyOpYKZ8QGJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUYDS1tr8Ti5I4Y0YvzE7AlXyEJkkwHwYDVR0j
BBgwFoAULHm3qw5OgDXItNwk3jhYYREFBUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OGU0NjEwYS1hNzk0LTQwNTktOTdkOS1mMmM2OWRhNTRjOGIvMS8yQzc5QjdBQjBF
NEU4MDM1QzhCNERDMjRERTM4NTg2MTExMDUwNTQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMkM3OUI3QUIwRTRFODAzNUM4QjREQzI0REUzODU4NjExMTA1
MDU0NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4ZTQ2MTBhLWE3OTQtNDA1OS05
N2Q5LWYyYzY5ZGE1NGM4Yi8xLzMxMzUzNzJlMzgzNTJlMzEzOTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnVXGMA0GCSqG
SIb3DQEBCwUAA4IBAQAdAZ7ZKoUHUxDVQvKuxecNSbYZCxPRTOTGK/tGSktFLy/M
bcRTmN+iCRHJemtjyX7vwANkCXCjYLNeCjfRp685TevECeq1ay3jx1Ky2bq3FmDx
6XlEikLgLZfslUeEnKgNWlO7H3Td+bknULhpw+BAB7sy6MHb7PBgHCMjOkptRdq8
VWVPyjpHlnooDmZLLpe4wkvNV3L5IHjbnX1ZYOJu4FQtfzj5X8J/SH3NGDS5ZxGu
vjHs09Bel0DI5+EWLGzFRkWxyA5YCep+3/bkHd/d+puIbvdn1sJcdvTYAjGD82RS
J/dfhENgR5gA9dm80N8R85y2u8n0CuA/DgGwEMH8
-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:18 2026 by rpki-client