This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa
File:                     3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa (raw, json)
Hash identifier:          lACmpGVHsyrMldz7jGg52ZaHGDv45aSE8H1uNtq/C7Q=
Subject key identifier:   86:9E:4A:55:E6:DD:19:3C:ED:76:C3:35:0E:F0:85:B5:20:12:E0:40
Certificate issuer:       /CN=E6E710DACC1F6D6DD9D78FA6117E43626642E6F6
Certificate serial:       2A8F29808E80BBF422AB4E4F3152A5CA85525B12
Authority key identifier: E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa
Signing time:             Wed 21 Jan 2026 03:00:00 +0000
ROA not before:           Wed 21 Jan 2026 02:55:00 +0000
ROA not after:            Wed 20 Jan 2027 03:00:00 +0000
asID:                     152401
IP address blocks:        157.15.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl
                          rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 15:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:8f:29:80:8e:80:bb:f4:22:ab:4e:4f:31:52:a5:ca:85:52:5b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E710DACC1F6D6DD9D78FA6117E43626642E6F6
        Validity
            Not Before: Jan 21 02:55:00 2026 GMT
            Not After : Jan 20 03:00:00 2027 GMT
        Subject: CN=869E4A55E6DD193CED76C3350EF085B52012E040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f7:83:85:e8:02:34:15:0b:b2:56:2f:49:f9:
                    6a:96:50:42:57:29:b3:2c:d9:2d:b0:cc:71:b6:2e:
                    0d:80:9c:9d:33:5c:9b:62:9f:52:4f:c6:25:b5:7a:
                    28:2f:b0:ed:d9:6e:70:96:d1:b6:4d:4d:b4:0a:9e:
                    7d:de:d6:aa:c6:ea:67:d7:f1:4c:ea:38:37:69:b9:
                    39:46:7b:0f:72:b3:09:f6:49:05:b4:6c:14:68:aa:
                    fe:4d:9a:9a:b0:70:d4:d1:aa:05:9c:4b:ad:55:53:
                    74:3a:7b:a7:46:b1:54:ca:51:96:60:58:50:42:48:
                    8c:ae:82:5e:40:ef:14:20:87:5b:d5:ad:24:a0:b7:
                    d9:6d:11:57:fe:0e:83:f2:45:39:7c:be:8b:62:5f:
                    23:f4:b4:8e:b1:0b:26:9d:79:99:7c:15:1f:3e:1e:
                    2d:d8:63:01:56:d8:02:88:09:50:ed:2a:24:e8:00:
                    ca:31:0f:d9:df:cd:d6:f1:64:8e:5e:ae:b1:b1:0f:
                    73:78:88:cb:2e:59:4c:5d:0e:6b:6a:ee:e3:a2:aa:
                    73:eb:95:29:0d:f9:3e:13:02:a2:76:41:c3:9c:2d:
                    a5:32:7e:17:65:7c:f7:87:36:23:f5:c4:ff:5a:1b:
                    3d:a8:4f:e4:74:cb:04:da:27:e7:a1:b6:6e:3c:46:
                    14:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9E:4A:55:E6:DD:19:3C:ED:76:C3:35:0E:F0:85:B5:20:12:E0:40
            X509v3 Authority Key Identifier:
                keyid:E6:E7:10:DA:CC:1F:6D:6D:D9:D7:8F:A6:11:7E:43:62:66:42:E6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E6E710DACC1F6D6DD9D78FA6117E43626642E6F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bed736dc-e5db-4381-971f-62436741854b/0/3135372e31352e3131382e302f32342d3234203d3e20313532343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:25:e1:3a:9d:4a:fe:01:d6:55:bf:17:a5:1d:c7:7c:93:d1:
         7b:91:2f:00:e2:1c:b1:42:5e:40:be:7f:fd:5e:34:c8:1e:d1:
         74:c1:23:8c:6c:27:8a:5c:41:7a:5a:fa:0b:20:3d:66:e5:99:
         a4:7d:6a:91:a9:c7:e0:42:e8:21:a6:43:ca:c0:5d:ed:82:45:
         f4:15:cc:1e:8e:ff:75:33:c9:d1:9c:68:a5:88:bb:b7:07:d1:
         48:2b:cf:6b:2f:82:91:2a:87:01:c0:58:90:c3:5b:37:4f:07:
         57:2e:1b:85:ae:a5:69:81:8f:b0:97:e9:21:4f:29:1d:8d:e3:
         eb:9f:1b:7f:86:cb:a5:70:d0:14:86:f7:89:d9:c6:2d:57:cf:
         87:7f:88:d8:80:68:0f:a1:a1:61:82:5c:ec:4b:6f:21:89:6b:
         b7:85:27:7b:05:64:83:f1:7d:43:06:ea:f2:02:5e:1d:88:31:
         1a:ec:46:33:5c:58:c7:8d:5e:37:9b:3f:a6:19:53:9c:b4:38:
         a0:e0:c9:d4:b4:67:e7:a3:da:91:6e:7c:0c:82:f1:bb:61:50:
         db:39:b8:44:8d:e9:e2:7d:f8:ae:42:00:34:d9:d1:d3:5d:7f:
         fc:b1:f8:f8:f8:bc:77:ea:e1:30:df:98:d5:7a:47:3a:f5:e4:
         e9:65:8f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:52:46 2026 by rpki-client