This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35372e302f32342d3234203d3e20313532303239.roa
File:                     33362e35302e35372e302f32342d3234203d3e20313532303239.roa (raw, json)
Hash identifier:          LrLP8FwR1/mLygyohR7eR9/JUTFD1TFSAda0avJS6rc=
Subject key identifier:   10:03:E4:8E:95:14:29:3F:8C:B9:E6:85:55:85:6B:AF:64:F8:07:F6
Certificate issuer:       /CN=9A97A919AD61446780D593589DED8D76DE76F83A
Certificate serial:       43F8C1AA9F155828E18191F2952922D1AC49CD9E
Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35372e302f32342d3234203d3e20313532303239.roa
Signing time:             Thu 06 Nov 2025 08:02:25 +0000
ROA not before:           Thu 06 Nov 2025 07:57:25 +0000
ROA not after:            Thu 05 Nov 2026 08:02:25 +0000
asID:                     152029
IP address blocks:        36.50.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl
                          rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 14:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f8:c1:aa:9f:15:58:28:e1:81:91:f2:95:29:22:d1:ac:49:cd:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A
        Validity
            Not Before: Nov  6 07:57:25 2025 GMT
            Not After : Nov  5 08:02:25 2026 GMT
        Subject: CN=1003E48E9514293F8CB9E68555856BAF64F807F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:82:3a:2f:42:44:28:9d:b8:6e:a8:5e:8f:91:
                    40:6a:c3:90:ff:4d:82:18:3d:1f:59:08:c5:85:83:
                    1a:42:3a:a9:11:55:55:ad:af:fb:10:7d:c8:d9:94:
                    52:b0:de:5b:19:f6:9b:24:40:f2:81:7c:98:ec:88:
                    eb:bf:71:3b:63:98:e6:dd:a8:ce:02:11:8e:ba:88:
                    24:84:d2:5f:a0:3d:25:27:27:5f:4a:75:7f:18:7e:
                    ec:c3:c0:96:8b:31:77:db:d9:71:34:cc:c1:10:79:
                    96:e8:e0:61:f4:17:9a:84:d6:1e:71:11:08:c3:cf:
                    28:9e:6b:e7:c0:c0:b4:c8:dc:fb:47:f3:e8:8a:86:
                    6e:4f:4c:ce:94:4a:1a:6f:8e:3b:03:64:95:01:53:
                    25:d8:05:14:8f:79:b6:5f:dc:62:48:6e:6d:3f:da:
                    40:c4:5f:7b:6a:c3:cf:1a:a7:c2:c9:54:4d:7b:7c:
                    b0:db:b8:48:da:ca:58:9b:4e:a7:a0:de:cb:ee:9a:
                    69:04:cb:20:84:0c:a4:e6:e5:f8:7e:05:98:87:84:
                    14:01:d4:92:63:c6:68:69:99:73:00:41:3e:c4:5f:
                    44:3c:0d:99:e9:c7:3e:e6:93:bb:18:80:63:be:75:
                    13:38:37:2b:8f:3e:c9:c0:41:a9:f9:80:ca:56:37:
                    b1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:03:E4:8E:95:14:29:3F:8C:B9:E6:85:55:85:6B:AF:64:F8:07:F6
            X509v3 Authority Key Identifier:
                keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35372e302f32342d3234203d3e20313532303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:4c:2c:6d:06:64:d6:bd:3f:1e:7b:ff:9a:2c:1a:e9:25:a8:
         97:47:9e:b9:8f:97:ec:ed:c2:3f:fe:69:b4:34:df:f1:85:b2:
         ba:d7:58:ee:80:43:dc:fc:0b:49:31:4f:80:cc:d1:fc:1e:dd:
         f0:e8:4e:8c:b5:57:f8:5f:af:d6:98:dc:e5:f0:76:78:5e:9e:
         b7:8a:e9:d9:b6:fd:a3:0d:92:d3:d7:cd:c2:01:d9:51:ef:78:
         c7:75:1d:8b:08:3c:ea:ba:35:56:d8:e2:02:6d:28:2c:9a:6e:
         1a:84:49:bd:88:1a:56:36:ec:04:5f:3c:50:20:be:13:6c:e7:
         cd:70:6d:df:e1:de:44:e8:d2:d4:a1:21:86:b1:9a:e5:bc:79:
         34:b1:1d:87:35:58:10:39:a9:a8:8c:d4:af:9b:0f:ad:a7:8b:
         d3:45:57:f3:b1:9c:18:b6:00:01:1d:4b:bd:77:a7:ca:82:50:
         9a:aa:68:07:f5:73:98:d2:fe:a0:a7:4d:aa:cb:d1:8e:f7:af:
         b9:7f:9e:de:81:62:5c:ca:4e:7e:4a:c3:64:25:1d:7a:6d:ed:
         d0:3e:be:01:4e:24:2d:65:f8:cd:f0:d5:50:68:e1:4c:71:1b:
         06:f7:8a:48:b8:b5:15:a3:15:21:aa:09:bd:81:7f:59:37:6d:
         2c:b1:37:d1
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUQ/jBqp8VWCjhgZHylSki0axJzZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZE
RTc2RjgzQTAeFw0yNTExMDYwNzU3MjVaFw0yNjExMDUwODAyMjVaMDMxMTAvBgNV
BAMTKDEwMDNFNDhFOTUxNDI5M0Y4Q0I5RTY4NTU1ODU2QkFGNjRGODA3RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMgjovQkQonbhuqF6PkUBqw5D/
TYIYPR9ZCMWFgxpCOqkRVVWtr/sQfcjZlFKw3lsZ9pskQPKBfJjsiOu/cTtjmObd
qM4CEY66iCSE0l+gPSUnJ19KdX8YfuzDwJaLMXfb2XE0zMEQeZbo4GH0F5qE1h5x
EQjDzyiea+fAwLTI3PtH8+iKhm5PTM6UShpvjjsDZJUBUyXYBRSPebZf3GJIbm0/
2kDEX3tqw88ap8LJVE17fLDbuEjaylibTqeg3svummkEyyCEDKTm5fh+BZiHhBQB
1JJjxmhpmXMAQT7EX0Q8DZnpxz7mk7sYgGO+dRM4NyuPPsnAQan5gMpWN7ExAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUEAPkjpUUKT+MueaFVYVrr2T4B/YwHwYDVR0j
BBgwFoAUmpepGa1hRGeA1ZNYne2Ndt52+DowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
YjhhN2ZhNS1mZGEzLTRhM2UtOTJmNy1mYWJmZWQwNWE5NWMvMC85QTk3QTkxOUFE
NjE0NDY3ODBENTkzNTg5REVEOEQ3NkRFNzZGODNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUE5N0E5MTlBRDYxNDQ2NzgwRDU5MzU4OURFRDhENzZERTc2
RjgzQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliOGE3ZmE1LWZkYTMtNGEzZS05
MmY3LWZhYmZlZDA1YTk1Yy8wLzMzMzYyZTM1MzAyZTM1MzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzIzMDMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAkMjkwDQYJKoZIhvcN
AQELBQADggEBAGFMLG0GZNa9Px57/5osGuklqJdHnrmPl+ztwj/+abQ03/GFsrrX
WO6AQ9z8C0kxT4DM0fwe3fDoToy1V/hfr9aY3OXwdnhenreK6dm2/aMNktPXzcIB
2VHveMd1HYsIPOq6NVbY4gJtKCyabhqESb2IGlY27ARfPFAgvhNs581wbd/h3kTo
0tShIYaxmuW8eTSxHYc1WBA5qaiM1K+bD62ni9NFV/OxnBi2AAEdS713p8qCUJqq
aAf1c5jS/qCnTarL0Y73r7l/nt6BYlzKTn5Kw2QlHXpt7dA+vgFOJC1l+M3w1VBo
4UxxGwb3iki4tRWjFSGqCb2Bf1k3bSyxN9E=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:58:08 2025 by rpki-client