This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135332e302f32342d3234203d3e203535363532.roa
File:                     31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (raw, json)
Hash identifier:          is5MWGQz2ThLibcgEVqAwJiiHTPRuDzYs+szhUZM1uA=
Subject key identifier:   C8:83:B4:6F:EB:A5:CC:3D:72:C0:23:90:76:6F:83:E5:73:0B:65:90
Certificate issuer:       /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial:       1D1B3F1FBA2F291F1A19D912B15773AE2DFFD142
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135332e302f32342d3234203d3e203535363532.roa
Signing time:             Sat 08 Nov 2025 10:24:28 +0000
ROA not before:           Sat 08 Nov 2025 10:19:28 +0000
ROA not after:            Sat 07 Nov 2026 10:24:28 +0000
asID:                     55652
IP address blocks:        14.102.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
                          rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 00:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1b:3f:1f:ba:2f:29:1f:1a:19:d9:12:b1:57:73:ae:2d:ff:d1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
        Validity
            Not Before: Nov  8 10:19:28 2025 GMT
            Not After : Nov  7 10:24:28 2026 GMT
        Subject: CN=C883B46FEBA5CC3D72C02390766F83E5730B6590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:df:a9:06:04:05:49:b9:c8:e8:b5:13:b7:
                    ed:19:a5:9b:93:c8:c2:46:3d:c0:0b:5c:90:71:88:
                    32:69:e1:c1:5e:80:04:7e:9d:1b:2c:54:5f:5e:32:
                    7b:1b:11:d9:18:af:df:8d:e9:b0:fe:23:bf:b8:77:
                    fd:d9:51:b3:7d:8c:18:4e:07:8f:64:e8:9a:37:27:
                    eb:d6:cf:42:5f:af:4e:1e:7a:05:2a:4a:07:87:2d:
                    68:c8:52:e0:08:ff:29:21:83:c8:d3:48:20:c4:37:
                    da:4f:b6:f4:03:ea:ce:7c:38:e2:9c:c7:b3:a4:03:
                    2b:f1:c3:2d:b7:e7:03:81:53:91:da:bb:7c:82:6b:
                    6f:af:5f:3e:74:6b:51:95:ae:ae:1b:75:ce:36:93:
                    3e:86:36:9f:f0:20:d7:f8:5b:d6:3f:19:7f:2c:1b:
                    91:c0:e0:51:f8:0d:44:0e:6e:6d:10:3c:c9:d7:34:
                    23:e2:95:87:b7:17:f6:d6:63:4f:81:aa:dc:79:d1:
                    62:44:01:6e:32:d1:f7:4f:95:39:34:a9:4c:88:8f:
                    1b:74:35:5b:70:ce:64:29:5d:67:18:e3:b9:e4:1b:
                    d8:d7:df:f7:72:fe:58:63:a1:ab:53:b3:f9:a2:ea:
                    8d:95:7a:03:fa:0e:ce:cd:31:b5:45:21:26:59:38:
                    ca:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:83:B4:6F:EB:A5:CC:3D:72:C0:23:90:76:6F:83:E5:73:0B:65:90
            X509v3 Authority Key Identifier:
                keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135332e302f32342d3234203d3e203535363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:e8:42:42:05:da:83:43:32:ed:cc:3f:c2:0b:a4:b2:8d:37:
         0c:9e:7e:b5:90:4e:be:6f:d3:13:57:2b:13:c9:40:2f:c7:ff:
         20:65:2a:d3:ec:71:60:c5:ce:b4:d6:36:d1:6c:61:78:86:b9:
         30:6f:09:f4:73:8b:1e:6e:ab:f7:97:7c:0c:6f:66:a5:a5:dc:
         46:5c:9a:23:bc:79:fa:0a:0c:2c:a2:34:a1:e6:5e:4d:5b:13:
         47:1f:32:fa:95:9d:c9:bd:56:a1:0d:bd:3f:45:04:61:55:78:
         97:d2:a6:9a:b3:83:49:08:de:77:0f:eb:8a:6d:50:45:42:15:
         bd:7f:92:74:fa:0d:76:7b:bc:0b:aa:ac:5e:5c:b4:3c:71:0b:
         41:36:84:e8:b8:90:30:6e:53:19:06:2f:07:78:77:7c:42:e8:
         aa:3f:14:b1:b0:42:2a:bd:e8:aa:96:7b:27:40:39:72:32:64:
         14:a9:45:4b:f9:16:6e:38:33:25:e8:b1:32:94:44:25:18:a4:
         75:22:34:7c:b8:45:38:7b:01:2f:a3:55:0b:3e:f3:e9:b1:49:
         12:98:23:31:3a:c7:08:5d:c5:a9:e3:8d:31:94:c2:a8:d0:cf:
         6e:27:f3:e7:df:47:81:aa:23:af:42:32:26:bf:df:4a:70:86:
         5f:b4:b7:b3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHRs/H7ovKR8aGdkSsVdzri3/0UIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1
MzU3RTZBMzAeFw0yNTExMDgxMDE5MjhaFw0yNjExMDcxMDI0MjhaMDMxMTAvBgNV
BAMTKEM4ODNCNDZGRUJBNUNDM0Q3MkMwMjM5MDc2NkY4M0U1NzMwQjY1OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/st+pBgQFSbnI6LUTt+0ZpZuT
yMJGPcALXJBxiDJp4cFegAR+nRssVF9eMnsbEdkYr9+N6bD+I7+4d/3ZUbN9jBhO
B49k6Jo3J+vWz0Jfr04eegUqSgeHLWjIUuAI/ykhg8jTSCDEN9pPtvQD6s58OOKc
x7OkAyvxwy235wOBU5Hau3yCa2+vXz50a1GVrq4bdc42kz6GNp/wINf4W9Y/GX8s
G5HA4FH4DUQObm0QPMnXNCPilYe3F/bWY0+Bqtx50WJEAW4y0fdPlTk0qUyIjxt0
NVtwzmQpXWcY47nkG9jX3/dy/lhjoatTs/mi6o2VegP6Ds7NMbVFISZZOMonAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUyIO0b+ulzD1ywCOQdm+D5XMLZZAwHwYDVR0j
BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2
ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3
RTZBMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5NzQ2NWUzLTc4YTAtNDk2NS1h
ZTE0LWU0Y2I0ZDBmYzE4NS8wLzMxMzQyZTMxMzAzMjJlMzEzNTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAA5mmTANBgkqhkiG
9w0BAQsFAAOCAQEAd+hCQgXag0My7cw/wgukso03DJ5+tZBOvm/TE1crE8lAL8f/
IGUq0+xxYMXOtNY20WxheIa5MG8J9HOLHm6r95d8DG9mpaXcRlyaI7x5+goMLKI0
oeZeTVsTRx8y+pWdyb1WoQ29P0UEYVV4l9KmmrODSQjedw/rim1QRUIVvX+SdPoN
dnu8C6qsXly0PHELQTaE6LiQMG5TGQYvB3h3fELoqj8UsbBCKr3oqpZ7J0A5cjJk
FKlFS/kWbjgzJeixMpREJRikdSI0fLhFOHsBL6NVCz7z6bFJEpgjMTrHCF3FqeON
MZTCqNDPbifz599Hgaojr0IyJr/fSnCGX7S3sw==
-----END CERTIFICATE-----
Generated at Wed Dec 3 15:26:54 2025 by rpki-client