This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa
File:                     323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa (raw, json)
Hash identifier:          bNnwrhgv95Y8fezfjD+6Dkpbbpux7t2Jar+72EAcVrU=
Subject key identifier:   6A:C6:92:2B:F1:ED:68:E0:4B:7D:CA:5F:2B:3B:8E:4F:F3:E3:DA:D2
Certificate issuer:       /CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
Certificate serial:       6209D1CF27A65642A4381691576EEE9ACB3812E9
Authority key identifier: 5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa
Signing time:             Sun 01 Feb 2026 00:00:02 +0000
ROA not before:           Sat 31 Jan 2026 23:55:02 +0000
ROA not after:            Sun 31 Jan 2027 00:00:02 +0000
asID:                     38156
IP address blocks:        2405:a540:1011::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl
                          rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 06:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:09:d1:cf:27:a6:56:42:a4:38:16:91:57:6e:ee:9a:cb:38:12:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4
        Validity
            Not Before: Jan 31 23:55:02 2026 GMT
            Not After : Jan 31 00:00:02 2027 GMT
        Subject: CN=6AC6922BF1ED68E04B7DCA5F2B3B8E4FF3E3DAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:63:0a:c6:fa:6b:41:ac:aa:51:0c:da:fd:
                    f2:97:6b:72:e5:8e:a4:e7:ef:86:b4:a1:3a:69:ae:
                    14:32:63:f5:be:ae:3f:59:0f:2b:d4:89:0a:75:ae:
                    41:49:94:51:42:54:a7:bd:ec:4b:20:8c:fb:28:c3:
                    a2:95:c3:c4:ac:e1:66:a1:ee:d2:43:d3:09:bb:ab:
                    50:37:f7:71:f7:6e:c6:4d:09:d5:09:66:32:c1:01:
                    fa:ca:05:d1:d7:a6:b6:1a:a6:88:a0:e9:08:57:46:
                    33:53:5b:88:96:d6:34:44:70:b0:a7:c0:12:a9:b8:
                    51:88:c7:2d:39:8c:92:67:f8:40:f1:1d:a4:ff:85:
                    59:59:e8:a7:e4:f8:0a:c4:f1:12:99:75:5e:d0:36:
                    03:54:13:7d:e2:88:89:41:88:5a:c3:e0:36:8a:d8:
                    51:19:97:79:e2:e1:0f:28:37:3c:f4:04:85:d0:6f:
                    90:56:90:ad:b2:92:8e:2d:2e:08:e7:2d:57:4b:5c:
                    e1:b5:44:3f:74:55:ff:7d:ef:ad:a3:da:ac:9f:80:
                    0a:b2:6a:8f:d0:a2:2f:fb:d0:59:46:05:2d:35:6d:
                    4e:36:df:4e:45:e1:c2:e8:04:27:05:a8:5e:b8:95:
                    a8:56:aa:dc:36:e1:c5:7e:8a:0c:48:92:f6:dd:7a:
                    06:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C6:92:2B:F1:ED:68:E0:4B:7D:CA:5F:2B:3B:8E:4F:F3:E3:DA:D2
            X509v3 Authority Key Identifier:
                keyid:5B:D0:FD:00:EB:8A:CC:F5:09:29:F6:B0:F5:6C:75:00:6A:4D:58:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD0FD00EB8ACCF50929F6B0F56C75006A4D58C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5d3d22a-338b-4302-93f4-c021ea6ad548/0/323430353a613534303a313031313a3a2f34382d3438203d3e203338313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:a540:1011::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:0a:63:14:d3:19:3b:fa:d9:ed:93:78:33:d6:1d:a3:69:a7:
         eb:47:42:80:5e:a0:dc:f6:3c:f9:d2:4d:b8:cb:e7:6d:16:d8:
         de:41:86:1e:ae:eb:e6:ae:bd:f3:55:62:a4:af:0c:00:8e:fe:
         33:b5:7c:27:4d:d5:7f:ce:5f:3e:d1:19:cb:a8:1f:20:31:1c:
         91:00:e8:f1:f5:55:a7:df:a7:b0:1f:6c:16:d8:e0:f1:44:b6:
         bb:54:b6:58:02:b8:d7:bd:f0:fd:db:3f:b5:b0:34:a8:d1:e7:
         6f:51:73:6e:a8:d6:d6:39:8c:49:c7:64:d8:36:43:5d:ae:ec:
         92:09:ce:86:88:ec:55:76:ac:4d:1b:92:5c:bd:2d:c4:17:87:
         4a:7c:6b:bc:e9:90:61:3e:4e:64:68:7f:aa:bf:cd:84:74:7d:
         bc:d9:9a:49:d0:31:b5:e4:fc:39:2d:cb:72:80:a9:64:90:96:
         5f:2e:3e:f5:30:26:3e:a8:69:92:bf:a4:c0:f7:76:13:00:31:
         6c:36:94:08:0c:cc:97:ee:f9:86:e8:62:b7:91:c9:2c:fb:1b:
         2e:05:63:11:14:01:c9:2b:59:e4:54:59:c6:9b:b1:cd:59:d6:
         67:ea:af:48:c3:e2:5c:d0:46:9f:80:d9:c4:93:2a:64:ee:a6:
         10:94:3f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:15:39 2026 by rpki-client