This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3232302e302f32342d3234203d3e20313339393934.roa
File:                     3135372e38352e3232302e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          yK3XLDzOi+3m97HSvjAuRym3VylO4T3Tk34vYu8HFO0=
Subject key identifier:   46:89:28:95:5F:0D:EB:23:6A:38:03:FA:9C:E5:74:28:5A:3C:98:39
Certificate issuer:       /CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
Certificate serial:       6137105C59D3B00FE83E327B7A7642D2E19703D6
Authority key identifier: 2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3232302e302f32342d3234203d3e20313339393934.roa
Signing time:             Mon 02 Feb 2026 09:58:04 +0000
ROA not before:           Mon 02 Feb 2026 09:53:04 +0000
ROA not after:            Mon 01 Feb 2027 09:58:04 +0000
asID:                     139994
IP address blocks:        157.85.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl
                          rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 04:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:37:10:5c:59:d3:b0:0f:e8:3e:32:7b:7a:76:42:d2:e1:97:03:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C79B7AB0E4E8035C8B4DC24DE38586111050545
        Validity
            Not Before: Feb  2 09:53:04 2026 GMT
            Not After : Feb  1 09:58:04 2027 GMT
        Subject: CN=468928955F0DEB236A3803FA9CE574285A3C9839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:d6:b1:3c:2b:3e:d4:b4:04:bd:cf:8a:b9:
                    8e:43:00:f2:f5:cd:d0:e6:ca:e5:63:61:71:e2:6a:
                    44:d4:91:29:c5:07:dd:71:b7:a7:ff:f0:8c:8d:0a:
                    f2:12:6a:2e:76:2b:ad:18:04:60:0b:f8:1a:9a:1f:
                    0f:2d:d5:62:9c:97:c2:43:19:1c:70:63:a8:55:4e:
                    04:e8:93:62:29:a7:6b:50:bd:f3:28:ce:20:06:ce:
                    ac:2a:eb:91:7e:7a:2f:09:a4:47:4b:fd:58:e6:2f:
                    09:68:1c:3b:1f:23:62:b9:02:c8:8d:f4:91:9f:84:
                    3b:fd:9e:b0:21:6a:ad:fd:bf:bf:d7:92:6a:26:2a:
                    32:4c:17:97:d6:46:bd:c1:d4:5c:68:fd:75:38:b7:
                    42:06:63:01:e8:83:72:e3:e8:17:5b:73:63:c9:cd:
                    3b:37:b9:f2:c8:59:fb:82:54:07:98:9a:69:fc:02:
                    cc:b3:3b:b8:2c:89:e3:a7:2d:d2:3e:7c:c3:c8:c0:
                    ac:97:e4:ce:85:f7:d1:dc:c1:86:34:af:cd:16:d2:
                    c8:ac:ed:89:db:fd:83:0a:cf:46:09:7f:f7:19:17:
                    71:24:35:8d:65:22:df:ce:e2:84:17:77:26:6f:a1:
                    4a:ce:e8:1f:e2:50:52:b8:eb:63:51:5c:b0:df:07:
                    b6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:89:28:95:5F:0D:EB:23:6A:38:03:FA:9C:E5:74:28:5A:3C:98:39
            X509v3 Authority Key Identifier:
                keyid:2C:79:B7:AB:0E:4E:80:35:C8:B4:DC:24:DE:38:58:61:11:05:05:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C79B7AB0E4E8035C8B4DC24DE38586111050545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98e4610a-a794-4059-97d9-f2c69da54c8b/1/3135372e38352e3232302e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:48:43:b3:9d:cb:ef:b0:ca:eb:2f:fe:2f:2a:e4:b3:9d:f8:
         97:fc:34:27:e1:bf:67:ca:f3:f1:26:7c:73:1d:7a:b2:d4:4b:
         6e:a6:b7:bb:85:d5:29:d7:1e:70:21:0b:3c:0d:24:fd:ac:0f:
         c1:87:75:e8:49:b4:88:2c:e5:01:0a:cc:6c:5a:ec:6f:d9:2f:
         ac:9f:92:08:ba:96:f8:46:37:d7:4c:8a:e2:ae:c2:50:42:47:
         ae:5b:31:dd:13:69:1f:40:5d:4e:0d:ff:e7:84:24:44:f3:e3:
         9b:4d:d4:32:58:10:f6:54:83:a9:79:47:b5:7c:c5:15:e1:86:
         76:99:a2:35:b9:b2:87:e0:ab:bf:d5:4b:ee:16:66:11:61:84:
         8c:21:ef:91:2a:cd:1a:1b:51:d5:20:d8:b7:9f:2b:16:fc:66:
         2d:c3:7f:df:d5:46:71:be:80:11:35:d6:bc:cb:ee:af:be:a6:
         4e:e4:45:56:05:88:d6:c2:4b:b3:10:81:30:26:df:18:ff:8f:
         af:53:e7:36:5b:ce:39:38:83:62:64:c1:d0:21:e7:57:59:38:
         bc:fe:88:61:95:9e:74:2b:6a:e2:db:3d:cd:07:23:36:8e:3e:
         c0:3d:eb:3e:73:39:8d:d6:36:f5:71:81:d4:60:87:f2:fa:53:
         e5:0d:68:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:19:20 2026 by rpki-client