This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa
File:                     3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (raw, json)
Hash identifier:          E4Gvpo5D/NeUbbz+zUDpV78niTppp2APH+i1gYLD2PM=
Subject key identifier:   18:1F:24:E1:95:0E:31:DA:CA:A9:40:65:B4:E7:EF:A6:0A:28:09:33
Certificate issuer:       /CN=2B90BB17E78B62C15179029C6583E42BD7E18277
Certificate serial:       6A61164A8D378A56AD09E0D726899622777C1074
Authority key identifier: 2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa
Signing time:             Sat 15 Nov 2025 05:00:03 +0000
ROA not before:           Sat 15 Nov 2025 04:55:03 +0000
ROA not after:            Sat 14 Nov 2026 05:00:03 +0000
asID:                     153092
IP address blocks:        103.80.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl
                          rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 00:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:61:16:4a:8d:37:8a:56:ad:09:e0:d7:26:89:96:22:77:7c:10:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B90BB17E78B62C15179029C6583E42BD7E18277
        Validity
            Not Before: Nov 15 04:55:03 2025 GMT
            Not After : Nov 14 05:00:03 2026 GMT
        Subject: CN=181F24E1950E31DACAA94065B4E7EFA60A280933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:73:25:68:c7:5e:f8:c2:6e:22:af:26:71:
                    6e:94:1e:6f:24:a1:aa:c1:6a:31:ca:6a:d1:be:9c:
                    e8:b1:4a:30:57:61:7a:b1:55:44:fc:ca:7d:af:51:
                    36:fb:3f:3d:94:40:93:d1:43:1a:bf:85:ef:4a:59:
                    87:83:88:49:af:25:8a:5f:48:c0:c0:33:87:c9:2c:
                    2c:a0:8f:e7:be:b1:e9:d1:ad:79:f8:f9:9a:dc:16:
                    72:e9:fe:a6:8e:eb:1a:89:ce:86:aa:a6:b3:93:9c:
                    06:74:b8:fb:25:82:8d:e5:b4:b0:dc:90:99:96:38:
                    37:74:a9:f0:bb:a3:6b:6e:c9:e6:4f:b9:b6:44:35:
                    7a:74:35:48:ce:f8:28:73:46:1c:74:05:12:5a:4a:
                    96:49:fe:8d:5b:37:40:d2:a7:f9:07:77:95:c3:0d:
                    17:7c:2b:9b:93:2a:6d:da:36:e9:7c:cf:cb:61:ad:
                    18:6f:0f:f6:ef:9b:94:f4:f6:15:a8:7f:c7:16:8e:
                    31:58:35:33:b2:a8:a0:d9:2b:3a:36:96:83:73:ef:
                    27:87:aa:3c:b3:ed:5a:98:b1:7f:95:4e:ea:3b:30:
                    b7:b3:43:6a:83:82:d6:eb:fe:66:12:4c:3b:27:71:
                    4d:49:88:ce:70:3f:26:e6:0b:a6:90:63:2f:77:c6:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1F:24:E1:95:0E:31:DA:CA:A9:40:65:B4:E7:EF:A6:0A:28:09:33
            X509v3 Authority Key Identifier:
                keyid:2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:12:34:37:55:54:56:66:a9:de:f8:36:74:45:2d:94:12:82:
         3e:9e:67:2e:51:b4:84:cc:d1:56:31:64:9b:2c:28:af:2f:76:
         47:1c:74:d2:21:d9:66:89:bc:c9:9d:33:64:30:59:77:9f:4b:
         3d:d9:c2:fa:9f:b1:c1:48:89:c6:43:4c:dd:6d:f3:30:8a:ca:
         5c:f3:5a:f0:78:74:15:0d:30:fe:1d:9f:cd:58:d7:10:e3:01:
         be:73:2b:45:01:f2:88:62:b5:d3:7d:17:c2:b7:a4:b1:fb:9f:
         f7:94:b4:9b:d2:02:99:c2:e6:72:77:4b:12:bd:60:f2:ba:e9:
         e8:33:bf:e4:9c:c4:28:cf:24:90:e9:19:a8:b3:04:66:ff:64:
         45:9d:e2:f2:de:45:f3:90:82:9e:65:84:59:7b:f8:a0:80:27:
         a8:a8:5f:90:78:a3:f9:43:c7:20:9c:0a:34:b6:2b:dd:f4:15:
         b8:9d:75:a1:88:7b:4a:2c:ee:fe:4a:b4:68:66:9e:9d:2e:06:
         93:af:97:c7:75:95:b9:e8:cf:69:7c:aa:68:2f:e9:e8:e5:c5:
         75:50:a8:9c:26:b8:f1:33:2c:dd:15:fc:99:8e:54:91:c7:65:
         ba:76:90:b5:2d:3b:55:ab:f0:f2:7f:6c:75:6b:9a:b5:03:f6:
         74:2d:7f:68
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUamEWSo03ilatCeDXJomWInd8EHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0MkJE
N0UxODI3NzAeFw0yNTExMTUwNDU1MDNaFw0yNjExMTQwNTAwMDNaMDMxMTAvBgNV
BAMTKDE4MUYyNEUxOTUwRTMxREFDQUE5NDA2NUI0RTdFRkE2MEEyODA5MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe63MlaMde+MJuIq8mcW6UHm8k
oarBajHKatG+nOixSjBXYXqxVUT8yn2vUTb7Pz2UQJPRQxq/he9KWYeDiEmvJYpf
SMDAM4fJLCygj+e+senRrXn4+ZrcFnLp/qaO6xqJzoaqprOTnAZ0uPslgo3ltLDc
kJmWODd0qfC7o2tuyeZPubZENXp0NUjO+ChzRhx0BRJaSpZJ/o1bN0DSp/kHd5XD
DRd8K5uTKm3aNul8z8thrRhvD/bvm5T09hWof8cWjjFYNTOyqKDZKzo2loNz7yeH
qjyz7VqYsX+VTuo7MLezQ2qDgtbr/mYSTDsncU1JiM5wPybmC6aQYy93xpWzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUGB8k4ZUOMdrKqUBltOfvpgooCTMwHwYDVR0j
BBgwFoAUK5C7F+eLYsFReQKcZYPkK9fhgncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZTVhNWU2ZC05MWVlLTQ0OTctYjQxNy04ZDMyZjY1M2U0YjAvMC8yQjkwQkIxN0U3
OEI2MkMxNTE3OTAyOUM2NTgzRTQyQkQ3RTE4Mjc3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0MkJEN0Ux
ODI3Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlNWE1ZTZkLTkxZWUtNDQ5Ny1i
NDE3LThkMzJmNjUzZTRiMC8wLzMxMzAzMzJlMzgzMDJlMzIzMTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1DXMA0GCSqG
SIb3DQEBCwUAA4IBAQAoEjQ3VVRWZqne+DZ0RS2UEoI+nmcuUbSEzNFWMWSbLCiv
L3ZHHHTSIdlmibzJnTNkMFl3n0s92cL6n7HBSInGQ0zdbfMwispc81rweHQVDTD+
HZ/NWNcQ4wG+cytFAfKIYrXTfRfCt6Sx+5/3lLSb0gKZwuZyd0sSvWDyuunoM7/k
nMQozySQ6RmoswRm/2RFneLy3kXzkIKeZYRZe/iggCeoqF+QeKP5Q8cgnAo0tivd
9BW4nXWhiHtKLO7+SrRoZp6dLgaTr5fHdZW56M9pfKpoL+no5cV1UKicJrjxMyzd
FfyZjlSRx2W6dpC1LTtVq/Dyf2x1a5q1A/Z0LX9o
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:58:35 2025 by rpki-client