This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa
File:                     323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa (raw, json)
Hash identifier:          WNTxrRYuvFAGQlq4L+1XRs51JdHASJqS6XVgkAMZHi8=
Subject key identifier:   47:78:60:B2:EE:24:5D:AD:88:2F:7F:8C:64:D6:DE:F4:35:AC:6C:60
Certificate issuer:       /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial:       5257823488D256DD8316F26AD1382892D2B6E9A2
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa
Signing time:             Fri 02 Jan 2026 12:00:02 +0000
ROA not before:           Fri 02 Jan 2026 11:55:02 +0000
ROA not after:            Fri 01 Jan 2027 12:00:02 +0000
asID:                     9875
IP address blocks:        2001:f20:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
                          rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 15:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:57:82:34:88:d2:56:dd:83:16:f2:6a:d1:38:28:92:d2:b6:e9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
        Validity
            Not Before: Jan  2 11:55:02 2026 GMT
            Not After : Jan  1 12:00:02 2027 GMT
        Subject: CN=477860B2EE245DAD882F7F8C64D6DEF435AC6C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:c6:06:c2:75:f6:f8:f1:42:b4:73:a3:86:
                    57:35:b7:03:c7:bf:c0:2e:fc:a4:08:f9:6b:a4:5a:
                    f2:ea:e4:a8:6d:b4:da:3d:82:21:a7:ee:98:54:6d:
                    bb:d8:e5:b0:01:47:b1:10:3b:49:26:f3:38:d9:94:
                    eb:38:b2:d0:51:a7:9f:76:95:96:ea:45:16:ff:52:
                    38:65:d4:71:3c:21:c2:e9:3c:64:1a:71:1a:5f:14:
                    fa:ea:7c:c6:6b:dc:cf:a1:6e:2b:b1:8b:b6:d7:80:
                    ee:92:22:9f:5c:3c:a3:5a:09:78:75:e5:84:3d:54:
                    4a:0c:e9:9d:64:59:55:80:d4:1c:e7:b6:95:95:c3:
                    e9:3b:49:16:81:9f:2e:7d:5f:b2:2c:da:93:13:21:
                    7e:5b:30:d9:e2:5f:e7:32:ac:36:f0:d4:1e:f8:dd:
                    69:23:e9:ce:42:17:9c:a8:07:5c:74:50:d0:7e:96:
                    ac:ca:8f:5a:ad:88:be:4a:49:33:80:87:40:cd:8a:
                    f2:74:2f:e1:c6:1d:d7:25:65:ee:13:0a:47:68:3b:
                    c7:1e:cb:10:aa:34:0e:d7:5d:f0:a1:cf:b8:43:86:
                    5c:f8:c9:35:db:0c:df:dd:8a:ef:9d:25:6c:20:74:
                    52:db:ac:53:0e:58:df:8b:17:c1:38:71:56:d5:33:
                    84:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:78:60:B2:EE:24:5D:AD:88:2F:7F:8C:64:D6:DE:F4:35:AC:6C:60
            X509v3 Authority Key Identifier:
                keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/323030313a6632303a313030303a3a2f33362d3438203d3e2039383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:f20:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:0c:e2:e5:97:2a:2f:2e:e9:7b:e2:9d:50:c0:16:9f:71:
         66:7f:b8:2f:34:67:d7:39:aa:70:0e:97:d4:f6:7f:04:a2:77:
         d5:87:fd:36:75:f1:60:5f:62:dd:74:ac:66:16:53:81:82:d0:
         2b:f8:3b:95:c5:0b:48:ce:41:b4:26:8f:27:8a:d8:64:98:d3:
         b2:2e:1f:cf:75:cb:8f:a8:98:0d:be:31:49:90:e5:38:56:eb:
         08:de:47:01:f5:1e:7a:ea:19:7d:f4:73:cd:10:fd:37:5f:cb:
         74:ee:e8:f0:1a:fd:ad:44:a1:be:18:c6:9b:74:30:5f:62:74:
         a0:d9:87:c4:a8:0b:3b:49:ae:8a:6b:b6:c4:b1:8c:f0:f4:42:
         ef:5e:68:6b:c4:b5:2b:ba:e0:4f:ba:c4:71:ae:73:ef:c4:a4:
         07:46:41:3d:75:5e:ac:81:c7:83:54:e5:c0:fd:7f:f5:da:2a:
         a7:aa:ff:ab:62:c0:2a:10:eb:7c:c9:16:25:19:62:80:a0:c2:
         24:f3:0b:f7:e5:f2:45:1a:2a:20:66:cd:54:2d:b7:bb:65:a9:
         14:d5:c5:e3:d1:16:f0:4b:f7:bc:47:36:89:6e:0c:dc:0e:01:
         02:1e:9a:6c:b2:99:3b:60:99:e1:52:e7:29:8f:9b:77:91:35:
         30:78:4f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 16:00:00 2026 by rpki-client