This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa
File:                     3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa (raw, json)
Hash identifier:          culnOZ+9LI8JbiM/iJt/J//Lb5wajjvnBMY/KnuE8Q4=
Subject key identifier:   FF:59:3E:8C:55:6D:D3:95:E0:5F:CF:5B:B4:30:A4:CA:31:D5:C8:11
Certificate issuer:       /CN=6A755F0ECD114936B4C154BE153030E6BFE42025
Certificate serial:       7C08700E164F3DD367184A12B1E01B9BE8F4C0AB
Authority key identifier: 6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa
Signing time:             Mon 17 Nov 2025 10:04:29 +0000
ROA not before:           Mon 17 Nov 2025 09:59:29 +0000
ROA not after:            Mon 16 Nov 2026 10:04:29 +0000
asID:                     153111
IP address blocks:        160.25.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl
                          rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 08:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:08:70:0e:16:4f:3d:d3:67:18:4a:12:b1:e0:1b:9b:e8:f4:c0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A755F0ECD114936B4C154BE153030E6BFE42025
        Validity
            Not Before: Nov 17 09:59:29 2025 GMT
            Not After : Nov 16 10:04:29 2026 GMT
        Subject: CN=FF593E8C556DD395E05FCF5BB430A4CA31D5C811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e0:d1:53:2d:17:d2:0f:3c:b3:ff:1b:ce:90:
                    84:d2:ee:0a:71:18:60:0e:e2:e2:7e:90:2b:b5:98:
                    97:af:74:47:0c:5c:2d:c9:9b:82:13:25:cc:91:b6:
                    13:05:3d:52:30:ea:56:ea:cb:c4:74:97:c5:85:51:
                    96:ba:00:a0:45:27:18:fc:b0:50:f6:1d:aa:d5:60:
                    8d:29:b5:63:72:7e:85:94:95:2a:10:36:45:ea:28:
                    bb:b9:3c:3c:8a:c8:28:00:6d:51:be:4c:1e:39:75:
                    87:9e:a6:af:2c:df:99:5b:07:58:90:91:2d:45:c8:
                    1e:13:3c:d5:ef:57:01:96:6d:cb:bb:75:4a:74:e5:
                    7d:7a:51:3b:c4:cf:07:61:d0:86:78:0a:aa:7c:34:
                    5a:98:05:ae:34:0a:9e:af:ff:b3:a2:0b:fe:45:75:
                    8d:9a:6e:2f:2e:13:88:68:a7:88:29:34:55:6e:7c:
                    a7:0f:c8:17:7d:f4:95:92:15:0f:d9:c8:22:11:4c:
                    5e:91:9c:04:4b:5f:f4:1d:20:1f:73:7e:b3:c2:ac:
                    0a:5e:98:aa:4c:94:85:89:c0:5f:27:6a:49:26:83:
                    97:3c:46:e8:3b:42:b9:e7:0b:3c:c8:b3:29:14:52:
                    df:08:35:28:ef:d4:8d:ca:64:a7:6d:1a:d3:18:0e:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:59:3E:8C:55:6D:D3:95:E0:5F:CF:5B:B4:30:A4:CA:31:D5:C8:11
            X509v3 Authority Key Identifier:
                keyid:6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/3136302e32352e3234342e302f32332d3233203d3e20313533313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:3f:fc:1c:d1:3a:12:52:9b:18:da:8a:12:01:e3:9b:a3:13:
         e9:3d:7c:95:8c:a4:b9:b2:1e:01:e6:9e:73:63:2f:79:49:00:
         a3:99:63:03:95:33:5d:1f:8d:36:77:5b:ba:39:49:6e:8b:48:
         d8:f6:5e:88:a6:de:c7:ac:43:6f:df:f0:3d:08:0e:ca:dc:06:
         f5:20:03:28:38:09:a9:1e:5d:a9:9f:84:04:61:e2:19:b6:51:
         e9:42:7b:b2:df:49:5f:e0:da:da:cd:11:f1:40:59:8c:f2:0b:
         bc:dd:7c:4c:46:58:b8:92:02:6d:3c:bc:dd:e1:e1:38:63:0e:
         5d:aa:55:92:6d:7c:40:c7:bc:b4:32:5b:b9:22:a9:85:b5:4a:
         40:15:b7:f5:41:28:c9:6a:db:1e:b0:5e:4b:b5:30:99:42:37:
         0f:54:40:0b:dc:05:78:84:46:84:dc:70:ad:e1:f9:2d:51:88:
         18:2e:fb:79:4e:33:a4:a3:d5:41:00:a3:2b:33:f8:c4:c7:39:
         49:15:c2:26:32:c0:47:27:02:bd:c0:3c:86:79:92:07:e0:ff:
         f6:da:c7:75:12:f4:84:17:e4:14:48:8e:9c:32:b0:b6:fa:a3:
         82:8b:d8:3c:b4:53:40:b4:fd:f5:0e:0c:5c:c8:ca:f0:e8:f2:
         84:6f:82:83
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUfAhwDhZPPdNnGEoSseAbm+j0wKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZC
RkU0MjAyNTAeFw0yNTExMTcwOTU5MjlaFw0yNjExMTYxMDA0MjlaMDMxMTAvBgNV
BAMTKEZGNTkzRThDNTU2REQzOTVFMDVGQ0Y1QkI0MzBBNENBMzFENUM4MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4NFTLRfSDzyz/xvOkITS7gpx
GGAO4uJ+kCu1mJevdEcMXC3Jm4ITJcyRthMFPVIw6lbqy8R0l8WFUZa6AKBFJxj8
sFD2HarVYI0ptWNyfoWUlSoQNkXqKLu5PDyKyCgAbVG+TB45dYeepq8s35lbB1iQ
kS1FyB4TPNXvVwGWbcu7dUp05X16UTvEzwdh0IZ4Cqp8NFqYBa40Cp6v/7OiC/5F
dY2abi8uE4hop4gpNFVufKcPyBd99JWSFQ/ZyCIRTF6RnARLX/QdIB9zfrPCrApe
mKpMlIWJwF8nakkmg5c8Rug7QrnnCzzIsykUUt8INSjv1I3KZKdtGtMYDqIPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU/1k+jFVt05XgX89btDCkyjHVyBEwHwYDVR0j
BBgwFoAUanVfDs0RSTa0wVS+FTAw5r/kICUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
OGNjMWM3ZS1kYTc0LTRiMTEtYjY3YS1kNWYyN2Q5ODE3NTcvMC82QTc1NUYwRUNE
MTE0OTM2QjRDMTU0QkUxNTMwMzBFNkJGRTQyMDI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZCRkU0
MjAyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4Y2MxYzdlLWRhNzQtNGIxMS1i
NjdhLWQ1ZjI3ZDk4MTc1Ny8wLzMxMzYzMDJlMzIzNTJlMzIzNDM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMzMzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBn0MA0GCSqG
SIb3DQEBCwUAA4IBAQDEP/wc0ToSUpsY2ooSAeOboxPpPXyVjKS5sh4B5p5zYy95
SQCjmWMDlTNdH402d1u6OUlui0jY9l6Ipt7HrENv3/A9CA7K3Ab1IAMoOAmpHl2p
n4QEYeIZtlHpQnuy30lf4NrazRHxQFmM8gu83XxMRli4kgJtPLzd4eE4Yw5dqlWS
bXxAx7y0Mlu5IqmFtUpAFbf1QSjJatsesF5LtTCZQjcPVEAL3AV4hEaE3HCt4fkt
UYgYLvt5TjOko9VBAKMrM/jExzlJFcImMsBHJwK9wDyGeZIH4P/22sd1EvSEF+QU
SI6cMrC2+qOCi9g8tFNAtP31DgxcyMrw6PKEb4KD
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:39:36 2025 by rpki-client