This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa
File:                     3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (raw, json)
Hash identifier:          dZG8PuN4hDz7vnWbBJwf0vedp1FXcfJd17aOP8ITVq4=
Subject key identifier:   C2:D5:F0:57:86:4F:23:B4:7E:DA:90:C7:55:16:21:F5:9A:6E:B7:C1
Certificate issuer:       /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Certificate serial:       6F7F77A5B0DD99E6D48EA1082A51672BEBDED800
Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa
Signing time:             Tue 13 Jan 2026 10:00:02 +0000
ROA not before:           Tue 13 Jan 2026 09:55:02 +0000
ROA not after:            Tue 12 Jan 2027 10:00:02 +0000
asID:                     45289
IP address blocks:        103.241.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl
                          rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 19:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:7f:77:a5:b0:dd:99:e6:d4:8e:a1:08:2a:51:67:2b:eb:de:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
        Validity
            Not Before: Jan 13 09:55:02 2026 GMT
            Not After : Jan 12 10:00:02 2027 GMT
        Subject: CN=C2D5F057864F23B47EDA90C7551621F59A6EB7C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:82:02:73:7a:ca:8e:7c:0a:a6:be:bd:04:
                    25:e5:25:13:ba:6c:6e:78:cc:93:32:30:59:33:c9:
                    ea:99:c3:48:b0:05:d4:6d:07:df:80:a7:1c:3f:00:
                    b5:72:60:f0:31:d1:cb:50:0f:a4:f1:d6:b9:c4:1f:
                    cb:fd:13:91:1e:6e:2b:95:64:50:75:93:2e:20:ee:
                    74:3e:9f:ba:8b:31:99:6e:e7:37:fe:de:b5:81:d7:
                    f2:87:9f:cb:0c:dc:46:4b:ae:9a:d4:9b:de:1f:ac:
                    3c:5a:f5:7a:87:52:45:97:1b:40:83:21:98:e0:b3:
                    b7:cf:1b:a8:87:bf:b4:0c:b7:4e:11:e9:c5:27:3a:
                    79:39:49:d6:13:08:5c:23:09:fc:49:37:9a:55:d3:
                    23:1e:b0:1d:35:aa:c4:53:29:db:c5:28:85:40:01:
                    9f:a8:f0:be:f5:81:35:e6:ff:32:6c:30:e1:92:3c:
                    8f:5d:10:81:da:5e:7c:3e:c4:b0:00:62:0d:fa:e6:
                    7f:00:da:8c:6d:49:89:4e:da:59:c4:52:d1:08:44:
                    b6:53:fa:c0:84:03:66:27:55:f4:99:05:5c:b3:1b:
                    dc:2e:3f:7a:7b:95:87:db:7a:ce:b2:1c:20:7b:8f:
                    7c:85:28:17:f2:80:13:9e:a6:cb:ce:01:9e:16:fb:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D5:F0:57:86:4F:23:B4:7E:DA:90:C7:55:16:21:F5:9A:6E:B7:C1
            X509v3 Authority Key Identifier:
                keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:d5:39:d1:26:92:8b:3c:81:6f:a7:d3:9e:2d:08:50:8a:25:
         cd:8e:39:ee:3f:1a:af:07:11:48:c2:44:e0:fd:3e:c4:b5:e6:
         1d:6c:bc:91:f8:c2:d4:60:ea:a4:b8:a3:4c:fc:f9:45:e4:56:
         90:88:ea:a5:e6:e6:43:56:80:72:c6:06:97:de:a1:ee:cd:ed:
         38:91:e9:2c:3f:dc:8f:6a:14:80:b9:48:ff:b8:75:30:ec:d8:
         23:4a:4b:43:da:8c:9d:9c:49:96:e2:12:f7:35:c4:32:18:57:
         a5:99:74:28:26:4c:24:e8:d6:9a:75:cb:b4:f5:e7:78:5f:e0:
         6d:4b:79:6c:13:ca:4d:51:d1:c7:27:ad:45:74:e0:89:50:34:
         5d:e3:ef:3d:aa:ba:2e:4f:b8:1c:9d:33:eb:9e:e7:d7:01:f8:
         50:18:78:35:50:2c:6f:a0:99:a8:7f:21:48:a3:95:0f:c1:a5:
         25:7a:e6:4e:2c:a5:22:42:b6:21:79:d7:00:0d:ab:56:f4:4b:
         95:90:a7:3d:73:4f:74:aa:0a:89:ef:62:8f:5e:97:ea:ef:e6:
         cf:d0:8e:61:82:3f:fa:d3:e4:64:9a:fa:2e:8e:b0:60:b0:a4:
         dc:c5:25:42:1a:f7:0a:52:f9:88:3e:cf:6e:59:86:29:e2:1e:
         fb:d2:9f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:28:21 2026 by rpki-client