This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230392e302f32342d3234203d3e20313339393934.roa
File:                     3135372e38352e3230392e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          a5X2+ok8mE8xIf3a1VXtJJWHKpTDOaC8E6A5dn4gMkI=
Subject key identifier:   AC:90:90:72:71:63:67:01:8B:30:EE:30:D1:AB:71:0E:B1:2A:0F:20
Certificate issuer:       /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial:       4A4EDBAE4358DF9DD57BBBA6FF2E197DEAA1FF19
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230392e302f32342d3234203d3e20313339393934.roa
Signing time:             Mon 02 Feb 2026 09:56:16 +0000
ROA not before:           Mon 02 Feb 2026 09:51:16 +0000
ROA not after:            Mon 01 Feb 2027 09:56:16 +0000
asID:                     139994
IP address blocks:        157.85.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
                          rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 04:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4e:db:ae:43:58:df:9d:d5:7b:bb:a6:ff:2e:19:7d:ea:a1:ff:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
        Validity
            Not Before: Feb  2 09:51:16 2026 GMT
            Not After : Feb  1 09:56:16 2027 GMT
        Subject: CN=AC909072716367018B30EE30D1AB710EB12A0F20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9e:02:e2:b4:b9:dc:5d:e7:ea:e7:29:68:e1:
                    0e:6c:61:26:e9:6a:31:38:f4:2a:43:3b:63:97:a5:
                    f9:69:70:43:3d:2d:e8:38:26:0a:2e:90:87:c0:c4:
                    2d:a2:0b:6b:9c:71:f1:ce:99:bb:e5:79:4c:7f:e0:
                    5f:0b:13:ec:ac:ef:6f:d2:36:d3:26:66:e8:46:95:
                    e0:ae:31:ec:3b:39:ff:a9:54:b8:21:95:18:a9:f7:
                    68:03:f5:8c:dc:bc:57:03:e6:58:b0:90:62:8a:bd:
                    68:d1:13:5b:ad:49:fa:51:24:5e:5e:4c:50:cb:a9:
                    5a:36:26:ba:53:1e:ee:1a:a5:b5:71:b4:70:9b:4b:
                    e1:2a:b5:da:7a:67:31:a9:df:cc:3a:3e:70:5b:37:
                    bc:a3:2f:5e:0c:f4:60:de:7f:ab:b2:99:3a:53:1d:
                    b4:52:18:28:f4:9a:c2:c8:df:72:71:45:91:e7:b2:
                    ec:25:06:26:a4:dc:64:50:66:f6:ef:c6:c4:b5:8d:
                    20:7d:61:94:a9:64:52:61:c1:e8:f7:7c:70:ef:e4:
                    8b:69:b7:7f:6b:87:6c:60:35:7b:e6:83:c3:2e:8f:
                    15:c4:2d:ba:3e:eb:20:ed:a4:2a:65:b4:60:a4:ec:
                    ef:fc:cf:a9:61:d2:95:00:24:fe:66:e0:0f:a1:1d:
                    6c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:90:90:72:71:63:67:01:8B:30:EE:30:D1:AB:71:0E:B1:2A:0F:20
            X509v3 Authority Key Identifier:
                keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3230392e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:40:8c:94:f8:2c:9c:7d:f6:08:74:b0:33:67:3c:e2:83:8a:
         93:ac:fa:f1:a9:ae:bd:ad:f7:ea:55:91:0d:1c:03:10:af:3e:
         11:6a:9d:08:84:45:b6:ff:01:b3:e4:30:82:81:70:cd:e9:29:
         62:61:84:a8:65:73:de:b2:fb:f9:26:b1:65:19:65:d8:a8:6e:
         1e:21:28:77:6e:ee:60:b1:8f:bf:97:45:35:5c:0d:94:21:22:
         d7:4d:2d:65:76:2c:d1:8a:24:ec:0d:44:7d:6e:90:8c:a6:a8:
         3f:5c:3f:28:f8:88:5e:5b:bd:5b:79:2e:13:4d:9c:36:df:dc:
         6a:82:a1:36:ea:64:82:63:d0:2b:88:11:80:34:1c:3c:f6:5f:
         93:5e:de:b9:cf:30:db:7f:da:47:33:cb:f0:5a:8d:68:74:63:
         b4:2f:9f:68:a9:ca:9e:e7:ce:89:47:dc:8e:ee:ae:18:42:a7:
         2f:a2:f0:5a:bc:1b:91:f1:97:e7:1c:98:10:45:e7:0d:52:57:
         db:f4:dc:fa:17:d4:26:62:2a:93:d3:24:bc:30:8e:5f:9d:40:
         c6:48:45:d4:0b:63:fd:d3:90:87:77:57:c9:79:16:04:8c:92:
         89:bd:86:80:3f:ce:fa:ff:0a:8f:20:54:ef:5e:41:a9:5a:63:
         ad:cc:9a:2f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSk7brkNY353Ve7um/y4Zfeqh/xkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkM3OUI3QUIwRTRFODAzNUM4QjREQzI0REUzODU4NjEx
MTA1MDU0NTAeFw0yNjAyMDIwOTUxMTZaFw0yNzAyMDEwOTU2MTZaMDMxMTAvBgNV
BAMTKEFDOTA5MDcyNzE2MzY3MDE4QjMwRUUzMEQxQUI3MTBFQjEyQTBGMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmngLitLncXefq5ylo4Q5sYSbp
ajE49CpDO2OXpflpcEM9Leg4JgoukIfAxC2iC2uccfHOmbvleUx/4F8LE+ys72/S
NtMmZuhGleCuMew7Of+pVLghlRip92gD9YzcvFcD5liwkGKKvWjRE1utSfpRJF5e
TFDLqVo2JrpTHu4apbVxtHCbS+Eqtdp6ZzGp38w6PnBbN7yjL14M9GDef6uymTpT
HbRSGCj0msLI33JxRZHnsuwlBiak3GRQZvbvxsS1jSB9YZSpZFJhwej3fHDv5Itp
t39rh2xgNXvmg8MujxXELbo+6yDtpCpltGCk7O/8z6lh0pUAJP5m4A+hHWwrAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUrJCQcnFjZwGLMO4w0atxDrEqDyAwHwYDVR0j
BBgwFoAULHm3qw5OgDXItNwk3jhYYREFBUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OGU0NjEwYS1hNzk0LTQwNTktOTdkOS1mMmM2OWRhNTRjOGIvMS8yQzc5QjdBQjBF
NEU4MDM1QzhCNERDMjRERTM4NTg2MTExMDUwNTQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMkM3OUI3QUIwRTRFODAzNUM4QjREQzI0REUzODU4NjExMTA1
MDU0NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4ZTQ2MTBhLWE3OTQtNDA1OS05
N2Q5LWYyYzY5ZGE1NGM4Yi8xLzMxMzUzNzJlMzgzNTJlMzIzMDM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnVXRMA0GCSqG
SIb3DQEBCwUAA4IBAQCIQIyU+CycffYIdLAzZzzig4qTrPrxqa69rffqVZENHAMQ
rz4Rap0IhEW2/wGz5DCCgXDN6SliYYSoZXPesvv5JrFlGWXYqG4eISh3bu5gsY+/
l0U1XA2UISLXTS1ldizRiiTsDUR9bpCMpqg/XD8o+IheW71beS4TTZw239xqgqE2
6mSCY9AriBGANBw89l+TXt65zzDbf9pHM8vwWo1odGO0L59oqcqe586JR9yO7q4Y
QqcvovBavBuR8ZfnHJgQRecNUlfb9Nz6F9QmYiqT0yS8MI5fnUDGSEXUC2P905CH
d1fJeRYEjJKJvYaAP876/wqPIFTvXkGpWmOtzJov
-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:20 2026 by rpki-client