This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3231302e302f32342d3234203d3e20313339393934.roa
File:                     3135372e38352e3231302e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          4RrZyrtYl0/TzFkzL5joH6DE+UbN40H36/1ByWbo5dY=
Subject key identifier:   10:73:D5:58:08:E4:F7:40:67:82:99:03:D1:02:E0:F5:BE:63:72:06
Certificate issuer:       /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial:       14A17146B0DB4E94EA273492E70EA61A6D70E952
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3231302e302f32342d3234203d3e20313339393934.roa
Signing time:             Mon 02 Feb 2026 09:56:51 +0000
ROA not before:           Mon 02 Feb 2026 09:51:51 +0000
ROA not after:            Mon 01 Feb 2027 09:56:51 +0000
asID:                     139994
IP address blocks:        157.85.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
                          rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 04:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a1:71:46:b0:db:4e:94:ea:27:34:92:e7:0e:a6:1a:6d:70:e9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
        Validity
            Not Before: Feb  2 09:51:51 2026 GMT
            Not After : Feb  1 09:56:51 2027 GMT
        Subject: CN=1073D55808E4F74067829903D102E0F5BE637206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:12:21:78:48:13:ff:c4:dd:1d:18:21:d5:
                    71:e4:95:98:f6:40:6a:22:61:7c:71:bc:30:b1:70:
                    e2:26:b6:e1:43:28:62:4c:d2:19:3d:3d:91:b9:c8:
                    fc:6d:83:f7:68:ee:2e:9c:bf:b5:35:ca:39:b6:6e:
                    54:d7:d0:64:5d:4f:a9:f0:ea:46:2d:57:d5:47:ff:
                    c9:ac:ad:67:d0:12:14:99:54:47:bb:8e:de:32:3d:
                    48:6a:da:bc:86:19:00:cf:45:72:11:2f:cb:fb:59:
                    65:56:52:1f:f9:a4:bb:f1:b1:9e:ad:be:00:d9:53:
                    2c:6e:6d:52:08:58:57:e4:96:a6:e6:68:04:13:01:
                    39:de:a1:98:b2:62:0a:02:cf:17:78:59:8d:b7:fc:
                    23:99:08:5e:a7:4f:a0:08:ad:dc:cc:c5:bf:9c:8f:
                    50:5b:92:98:3c:4b:b8:4c:82:b8:ab:4f:c3:12:18:
                    49:3d:14:8d:3c:42:e6:15:6e:bc:7a:3a:83:e6:62:
                    c7:79:4f:5f:4e:62:1f:d6:be:04:39:d6:3b:11:b3:
                    9e:15:90:f6:ca:46:7b:9d:84:8f:28:4c:fe:4d:32:
                    36:55:95:fc:3c:e2:10:d8:73:4b:f2:0a:20:99:38:
                    07:a7:8e:48:c0:73:0c:a0:a3:39:4f:56:e2:cf:d1:
                    46:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:73:D5:58:08:E4:F7:40:67:82:99:03:D1:02:E0:F5:BE:63:72:06
            X509v3 Authority Key Identifier:
                keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3231302e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:bc:da:8c:b6:82:6e:41:f3:79:21:2f:7b:2b:4f:39:24:9e:
         e4:c2:e4:64:b0:d6:a8:fd:28:dd:fc:8d:01:03:e3:05:d4:b8:
         ef:45:5c:58:40:87:e1:84:7a:82:5a:dd:e6:a2:87:0a:6c:da:
         56:f6:a6:48:ef:07:40:67:cd:cb:e2:d8:80:94:6b:05:89:59:
         14:04:95:99:d8:cd:6f:91:76:11:0b:00:aa:19:e1:7c:44:14:
         8a:78:95:70:5a:bd:ac:23:28:75:ad:30:21:3a:d4:77:70:00:
         01:da:92:e9:c9:f2:ad:e7:93:f0:34:e3:aa:61:5a:e7:07:17:
         db:16:4f:8c:ba:7d:3b:3e:62:e2:5f:43:a8:ac:ab:78:b6:41:
         3d:37:6a:af:ae:2d:2a:ae:64:a6:d2:f3:fc:1f:85:13:b1:54:
         85:e7:18:75:84:68:b9:3e:3a:c0:88:95:d6:19:a2:68:14:c8:
         ad:1e:eb:6a:d8:5c:6d:e9:6a:74:d8:f2:82:7c:f8:9e:25:c9:
         ff:a2:dc:ec:bd:5d:2a:33:a3:07:0a:ed:27:43:4d:0f:1a:2e:
         bb:3a:d9:36:e6:28:74:e3:36:7c:11:be:4c:d2:6f:6f:05:d8:
         d0:71:22:e5:8c:43:0c:66:4f:aa:9d:06:3f:21:26:39:8f:3c:
         9e:4a:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:20 2026 by rpki-client