This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230372e302f32342d3234203d3e20313339393934.roa
File:                     3135372e38352e3230372e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          4KKjhMIe91G+a6neiFRcO44kLZOptvWX510XN+PTeyQ=
Subject key identifier:   DA:27:DE:65:40:32:9A:CC:28:43:72:3C:0C:64:96:88:EB:E9:EB:DC
Certificate issuer:       /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial:       7C864E73094CCF6D24D4C483F91BA0BD17BE5F13
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230372e302f32342d3234203d3e20313339393934.roa
Signing time:             Mon 02 Feb 2026 09:55:46 +0000
ROA not before:           Mon 02 Feb 2026 09:50:46 +0000
ROA not after:            Mon 01 Feb 2027 09:55:46 +0000
asID:                     139994
IP address blocks:        157.85.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
                          rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 04:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:86:4e:73:09:4c:cf:6d:24:d4:c4:83:f9:1b:a0:bd:17:be:5f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
        Validity
            Not Before: Feb  2 09:50:46 2026 GMT
            Not After : Feb  1 09:55:46 2027 GMT
        Subject: CN=DA27DE6540329ACC2843723C0C649688EBE9EBDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:2c:a9:c9:16:7e:9d:96:e4:ff:38:d8:95:
                    08:67:70:79:dd:15:5f:5a:4d:06:94:bd:7e:d0:da:
                    b1:cc:9c:6b:39:43:af:93:db:d2:09:a8:60:5a:e7:
                    88:c1:85:dd:89:e7:94:ec:df:8d:d6:ac:42:3a:45:
                    f8:40:1c:ef:32:5f:19:f9:b2:67:cf:b8:32:b8:67:
                    71:53:f6:84:f3:bf:2f:73:dd:19:2c:45:d6:d8:2b:
                    de:75:7c:34:39:1e:c1:7c:bd:96:ea:8b:3d:d2:67:
                    bc:44:5e:60:c2:91:f2:f1:f2:3f:e0:78:fd:d7:83:
                    ab:d3:b0:cd:ad:ea:b7:55:89:d0:5a:33:f2:19:eb:
                    43:5a:c2:5d:b2:a3:e8:20:94:9e:4d:3c:4f:54:24:
                    b7:d5:87:9e:37:8a:05:82:0f:1d:d1:90:5d:b8:89:
                    bf:57:30:bd:97:67:c9:76:8c:d0:24:2b:95:9a:5a:
                    51:ea:c6:6c:62:82:a9:29:f9:59:7f:dd:bf:ac:94:
                    ad:59:28:94:c1:55:69:8b:ee:e7:13:86:8b:5c:a1:
                    db:1a:cd:38:e4:ef:96:bb:76:a7:df:10:2e:0a:3c:
                    a4:c9:0d:7b:2c:96:46:38:9a:ab:59:0f:f9:b5:bd:
                    ad:82:8c:e7:de:48:27:88:e8:69:9a:25:ee:2c:34:
                    57:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:27:DE:65:40:32:9A:CC:28:43:72:3C:0C:64:96:88:EB:E9:EB:DC
            X509v3 Authority Key Identifier:
                keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230372e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:b4:b7:86:86:1f:81:e7:50:c0:6e:bf:03:60:d9:a3:4a:0a:
         8a:3f:5b:b8:b0:db:92:a8:14:36:2a:f0:2a:c9:2c:e0:70:d1:
         8e:9c:f2:fd:5c:99:c8:14:b2:1e:85:55:da:2f:78:e1:a9:4a:
         ad:c5:b1:c8:f8:a8:89:f0:1c:8c:f8:c6:7f:9f:f5:da:5f:2b:
         43:ed:be:2c:c5:2a:e6:5d:bc:68:f1:ab:76:9a:33:60:17:4a:
         3e:94:ce:a4:fa:01:63:58:88:83:71:73:6f:89:e6:6c:4f:86:
         e2:f3:96:18:35:98:7f:cf:4c:63:ae:e7:b8:1b:0d:cc:25:01:
         d2:61:68:55:d5:bb:0a:0f:1b:a2:8c:a7:fe:95:04:7e:0d:39:
         52:17:b9:63:48:1d:3c:35:73:9d:7c:a6:a4:aa:7a:09:88:40:
         67:91:69:6e:59:6a:20:26:1d:3a:3d:53:7f:df:a2:81:51:5d:
         01:35:84:0e:cc:a7:29:70:17:91:71:2f:cf:78:8d:fa:0d:1b:
         04:17:41:72:25:d5:d4:86:fd:0a:88:4e:df:c8:23:6e:7c:ce:
         12:25:40:31:6f:ca:bb:7e:36:24:3e:2d:6b:f8:56:21:d2:f6:
         f4:52:0f:17:53:c6:0d:8f:7a:10:14:11:1c:06:1e:5f:84:5c:
         f6:bf:2e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:21 2026 by rpki-client