This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a3a2f33322d3438203d3e20313332363437.roa
File:                     323430323a656538303a3a2f33322d3438203d3e20313332363437.roa (raw, json)
Hash identifier:          wwYKe/sjxREQnj5G37QP1SEX1SplROb7ytmXu6rBig8=
Subject key identifier:   6B:9E:98:CE:B0:04:1E:FE:72:F1:96:4F:37:F4:DD:D5:65:CD:E4:FD
Certificate issuer:       /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
Certificate serial:       0772C5E2CCE711368745541E28CD77B1FC782986
Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a3a2f33322d3438203d3e20313332363437.roa
Signing time:             Fri 12 Dec 2025 08:25:26 +0000
ROA not before:           Fri 12 Dec 2025 08:20:26 +0000
ROA not after:            Fri 11 Dec 2026 08:25:26 +0000
asID:                     132647
IP address blocks:        2402:ee80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl
                          rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 02:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:72:c5:e2:cc:e7:11:36:87:45:54:1e:28:cd:77:b1:fc:78:29:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
        Validity
            Not Before: Dec 12 08:20:26 2025 GMT
            Not After : Dec 11 08:25:26 2026 GMT
        Subject: CN=6B9E98CEB0041EFE72F1964F37F4DDD565CDE4FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:8d:38:71:e9:ae:be:6b:b4:e7:e8:f6:2d:
                    b1:97:5f:ba:56:40:39:6e:bd:77:b0:51:65:42:13:
                    a9:5e:81:a7:f9:eb:c3:94:1d:3c:14:7e:ca:1d:fd:
                    b3:3e:03:d7:4b:67:d3:91:6f:fd:b9:6d:12:c8:9b:
                    79:41:b5:f4:52:30:03:99:17:e6:7b:22:d2:ff:92:
                    8e:99:be:96:b7:be:31:63:fd:42:ac:c8:f9:32:e0:
                    f6:b6:7e:8d:cd:03:8f:db:fb:ff:ea:34:5a:da:ad:
                    39:ee:3f:a6:c5:31:b8:bf:6d:c4:67:a3:3b:6e:2e:
                    0c:3c:af:41:7e:10:8d:55:a3:3a:1e:d6:c1:b5:74:
                    36:29:ab:43:26:ef:fd:cf:99:fc:08:5b:91:b1:c0:
                    7d:8f:51:cc:7a:8a:ca:e1:e1:9a:f2:f5:05:e8:cd:
                    d5:9d:ed:d2:5f:71:d6:d0:da:0f:62:60:93:a3:c3:
                    a2:19:3d:f9:52:48:4d:72:64:50:33:4c:91:af:b6:
                    e8:58:37:54:38:80:60:c1:39:e4:5e:a1:0d:5b:97:
                    3d:e6:39:bb:da:69:da:ee:97:c1:ee:77:e8:15:bb:
                    93:de:ae:57:a4:17:88:40:0b:ec:6d:87:4c:19:be:
                    da:8b:54:2f:ac:e0:91:98:12:3e:2b:f3:68:de:34:
                    07:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9E:98:CE:B0:04:1E:FE:72:F1:96:4F:37:F4:DD:D5:65:CD:E4:FD
            X509v3 Authority Key Identifier:
                keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/323430323a656538303a3a2f33322d3438203d3e20313332363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:ee80::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:5d:20:e0:36:5e:d2:55:79:c8:7d:dd:04:f4:bd:cf:d7:be:
         d2:b7:d2:f1:02:d2:d2:dd:8f:3c:75:f3:b0:f5:e2:23:59:30:
         60:a6:38:4b:e7:ce:58:9c:cd:8f:88:b0:33:ea:bd:52:11:27:
         f0:b5:69:41:ae:ef:ed:18:58:76:0c:9b:32:31:f9:f8:82:e3:
         18:39:98:ad:75:f2:90:36:14:14:2e:87:7d:cf:fc:dc:70:ad:
         3c:48:86:fd:a0:11:9a:6a:e3:3a:ba:04:4a:56:1b:54:0d:36:
         35:d8:53:ae:f1:83:ea:b8:e4:98:d4:a7:03:ce:ac:4c:fb:60:
         de:e4:0f:55:92:2d:a4:3f:73:26:a8:9e:18:be:3a:90:86:23:
         4d:6a:74:6e:c0:e0:be:5d:b2:1f:50:52:1f:49:73:68:33:b0:
         3e:6e:ea:93:b0:19:7b:18:97:8f:35:02:5e:e3:c0:c5:5e:86:
         c4:9b:19:2c:12:4c:f2:85:c5:45:08:bc:5f:ef:2c:32:b6:44:
         9d:b3:30:4f:3c:27:b4:a2:a8:bd:cf:c9:7c:e6:d9:6b:20:67:
         2d:1c:d1:35:75:43:58:08:c2:59:8d:28:ab:c3:4d:34:ff:0c:
         0a:88:1d:80:32:0e:bd:e5:e0:7d:a3:f3:b3:1c:e5:61:1e:ac:
         3c:9d:fc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:33:30 2025 by rpki-client