This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/3130332e3136362e3137382e302f32342d3234203d3e20313534343130.roa
File:                     3130332e3136362e3137382e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier:          gzXm2H1SRhJOnW165GmOJoJuVcF7cAXPU5ZcWnDj+6k=
Subject key identifier:   5E:A8:13:EC:DC:A9:78:E9:8E:39:18:D4:2D:7A:C9:95:C6:84:35:91
Certificate issuer:       /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD
Certificate serial:       680C2BB1C8E92E4102AFEB08A91C220A01CD96A9
Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/3130332e3136362e3137382e302f32342d3234203d3e20313534343130.roa
Signing time:             Sun 01 Feb 2026 18:43:29 +0000
ROA not before:           Sun 01 Feb 2026 18:38:29 +0000
ROA not after:            Sun 31 Jan 2027 18:43:29 +0000
asID:                     154410
IP address blocks:        103.166.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl
                          rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 01:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0c:2b:b1:c8:e9:2e:41:02:af:eb:08:a9:1c:22:0a:01:cd:96:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD
        Validity
            Not Before: Feb  1 18:38:29 2026 GMT
            Not After : Jan 31 18:43:29 2027 GMT
        Subject: CN=5EA813ECDCA978E98E3918D42D7AC995C6843591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:50:5c:e2:f0:97:9c:ab:69:b4:97:3d:7e:
                    db:8b:de:a9:af:72:08:b6:43:d8:01:36:a3:c3:4d:
                    fc:b5:02:df:ec:a3:57:c9:72:b9:37:e0:e3:2b:d2:
                    32:55:2c:61:15:6b:af:d9:65:91:fd:31:43:c6:ba:
                    9c:23:44:40:4a:fa:57:b9:24:88:a1:cc:03:52:43:
                    45:de:42:36:20:2f:92:a3:ac:69:85:1b:92:07:fc:
                    e8:b3:05:1c:c2:bf:07:2d:f7:67:ad:8f:a2:d9:b8:
                    54:f7:49:3e:6e:31:e9:20:a5:37:0b:c4:35:77:fb:
                    7b:e1:80:84:21:90:33:4e:79:0a:94:93:3e:9a:9b:
                    42:f6:55:b2:5e:40:66:f9:8f:6d:94:b2:ee:fb:55:
                    54:0f:9a:c1:21:b1:4e:95:35:20:f5:2e:ff:5f:d8:
                    08:f6:e7:8e:06:38:a2:73:e6:5d:65:24:6c:1f:a1:
                    68:0f:3e:7e:0b:11:af:f1:5d:fd:e7:41:fb:2b:95:
                    b8:84:29:ee:65:ab:49:d0:0b:2b:e4:93:c1:52:97:
                    51:d6:c8:fe:3b:fa:56:de:a5:52:09:bf:40:01:9e:
                    21:db:f9:f0:66:4c:70:63:ee:10:c7:31:89:7a:22:
                    6b:20:de:f4:16:5f:42:5c:8e:06:66:da:89:9f:4f:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A8:13:EC:DC:A9:78:E9:8E:39:18:D4:2D:7A:C9:95:C6:84:35:91
            X509v3 Authority Key Identifier:
                keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/3130332e3136362e3137382e302f32342d3234203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:e7:21:54:2e:e5:32:be:98:10:9d:7d:56:7e:06:a0:1c:0d:
         1d:42:dc:7a:f9:18:f7:8a:25:b6:dc:26:b2:ae:3f:11:4d:9c:
         62:f0:19:4e:0d:e7:d2:4b:72:d3:6d:18:1b:68:25:b9:cc:50:
         db:cf:a8:12:d9:b2:27:04:25:10:81:e7:d1:48:a6:cc:ef:2b:
         16:59:61:0e:ef:e1:ec:16:8c:84:24:2a:ff:d6:b0:90:f2:77:
         fa:6b:2d:13:41:da:f6:18:9f:4f:3f:c3:79:e3:3b:e0:91:5c:
         63:bf:dd:25:d9:c8:95:2c:d2:67:f2:9a:1d:c4:e8:bb:39:ba:
         21:45:0c:55:9a:71:f8:99:8f:b2:a5:78:84:ef:cb:24:2b:d3:
         5a:4a:09:d4:fa:ff:05:9c:39:d7:e1:c0:57:50:12:3b:96:b3:
         2e:5a:fd:4a:45:d0:ba:4c:a6:ff:0f:74:b0:4f:b1:d5:f0:4f:
         9d:87:23:88:00:a7:92:17:be:6c:8f:25:38:ab:91:74:fb:08:
         ed:4d:00:e3:c7:3c:ce:ab:8f:9b:f2:33:91:6f:ba:f0:24:21:
         fe:ea:f4:ab:45:ed:0d:8e:ac:25:95:ac:e5:b3:8d:81:e0:72:
         4c:ba:99:0e:42:94:42:19:2f:db:9c:1f:ea:5b:87:da:7a:55:
         78:12:27:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:23:38 2026 by rpki-client