This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa
File:                     3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa (raw, json)
Hash identifier:          9AuWVfAW4RwxByDtV+qNsDrAUIg4Unvf503DJpSVZ3w=
Subject key identifier:   B5:D9:68:1A:15:B6:A0:79:A9:A2:5A:3F:D8:8B:31:5A:D6:4F:37:00
Certificate issuer:       /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial:       0E13718D1818287A7632493A01181F281EC5BD6D
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa
Signing time:             Sat 03 Jan 2026 13:00:02 +0000
ROA not before:           Sat 03 Jan 2026 12:55:02 +0000
ROA not after:            Sat 02 Jan 2027 13:00:02 +0000
asID:                     58478
IP address blocks:        202.182.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
                          rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:13:71:8d:18:18:28:7a:76:32:49:3a:01:18:1f:28:1e:c5:bd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
        Validity
            Not Before: Jan  3 12:55:02 2026 GMT
            Not After : Jan  2 13:00:02 2027 GMT
        Subject: CN=B5D9681A15B6A079A9A25A3FD88B315AD64F3700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:9a:f6:fd:af:4d:b7:c2:94:5c:a9:69:06:
                    0f:24:50:c7:21:c1:48:74:b8:af:6f:29:09:33:9e:
                    bc:cb:f1:0c:98:9c:46:b7:39:2a:4c:e7:05:68:88:
                    18:08:d3:5f:b0:98:d8:a7:56:14:3d:95:6f:2b:85:
                    1b:cd:6c:dd:dc:c9:b6:23:69:1a:bb:77:11:84:50:
                    fe:8d:fe:be:87:01:b0:34:2f:40:e4:ad:89:ff:26:
                    a3:71:d7:b9:e6:c1:f6:6f:77:ad:74:a6:e2:07:7a:
                    63:ea:2a:47:b8:da:4f:f8:a1:be:16:b1:3b:31:6a:
                    ee:8b:c5:39:77:2a:66:47:ee:8f:91:9a:89:67:e3:
                    1c:80:83:92:48:a1:89:36:69:b3:d4:3c:55:8a:ef:
                    5e:40:6b:1d:77:56:b1:8e:c0:6c:9b:be:96:72:cd:
                    63:63:27:55:6a:20:de:62:7e:a3:55:74:c2:f7:12:
                    b7:24:58:dc:04:db:e7:1b:7d:fc:50:f4:b4:6e:37:
                    1f:a7:99:d0:c2:0d:43:a0:ef:1a:fc:ff:c6:57:e7:
                    1e:ec:87:fb:6c:93:50:78:57:07:2b:a6:90:c5:e7:
                    16:57:05:30:d0:a6:15:9b:db:f4:68:39:76:fc:6e:
                    6d:28:44:57:d9:1a:7b:f9:9c:df:15:6f:bc:fd:28:
                    96:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D9:68:1A:15:B6:A0:79:A9:A2:5A:3F:D8:8B:31:5A:D6:4F:37:00
            X509v3 Authority Key Identifier:
                keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e3138322e3137342e302f32342d3234203d3e203538343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.182.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:5e:47:a5:38:e5:6d:9e:ea:93:6d:a8:b7:60:5e:6f:b3:ae:
         69:f6:d1:8d:14:12:a4:ac:8a:e9:e8:cd:9d:8f:35:6d:70:fb:
         dd:05:c2:16:da:14:70:36:88:36:87:c8:dd:ba:8a:0f:ce:a8:
         cf:ad:60:7e:1d:72:f0:81:ac:98:2b:21:f4:28:96:6c:30:e3:
         21:ca:fb:02:1a:57:0d:c3:68:98:d9:e2:69:9e:0c:2c:e7:e9:
         89:2c:cb:03:bd:ba:70:cf:04:f3:3f:d3:70:b9:6f:46:3a:44:
         31:ab:77:9e:fe:93:ce:4f:c2:4f:58:db:a8:88:ab:e0:90:86:
         07:07:86:0f:a5:64:e0:8d:3a:3a:80:2c:e3:81:4d:b7:95:fd:
         7a:a6:2e:8d:b7:0f:ed:e5:3a:4e:51:90:15:1f:0e:21:67:2e:
         e5:aa:1a:5c:1e:b4:4d:13:16:7c:2a:f7:1b:1e:98:6c:06:98:
         7c:58:39:93:77:67:6a:51:85:ca:85:09:71:bc:59:6d:84:40:
         8d:c1:ea:28:c3:a6:28:7b:0e:5d:1e:b4:b4:95:59:c6:28:5d:
         de:b9:d7:75:83:5a:83:8a:80:c0:c4:ab:f4:7f:5f:ee:21:00:
         d6:a7:af:25:6a:cd:6b:ea:16:6c:1c:37:d0:fc:1f:e3:da:ca:
         e3:32:c8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:27:41 2026 by rpki-client