This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa
File:                     323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (raw, json)
Hash identifier:          SBnQR+zv8l07BbYG06eTb7vfRhUvVUWA8zTkQAxpGrY=
Subject key identifier:   E8:2B:44:19:B2:7D:D8:03:B6:8E:48:63:64:B8:3F:5B:DA:E2:D4:7F
Certificate issuer:       /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial:       6519933C4E6271ED3A0A8EF346F36FED4A4C9717
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa
Signing time:             Sun 18 Jan 2026 15:00:01 +0000
ROA not before:           Sun 18 Jan 2026 14:55:01 +0000
ROA not after:            Sun 17 Jan 2027 15:00:01 +0000
asID:                     131705
IP address blocks:        2406:5c40:2000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
                          rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 02:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:19:93:3c:4e:62:71:ed:3a:0a:8e:f3:46:f3:6f:ed:4a:4c:97:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
        Validity
            Not Before: Jan 18 14:55:01 2026 GMT
            Not After : Jan 17 15:00:01 2027 GMT
        Subject: CN=E82B4419B27DD803B68E486364B83F5BDAE2D47F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d5:c4:a2:e7:8e:b7:71:38:97:37:b3:d5:72:
                    28:28:ac:f5:1a:b0:a1:4b:d4:f9:79:46:81:97:a7:
                    06:1c:fb:f1:10:39:d8:7e:ea:cb:de:8f:16:e1:70:
                    0d:89:ab:bd:2d:c8:32:d1:49:27:1e:de:e7:95:a7:
                    a1:97:ef:15:f3:dc:03:1c:80:2c:b1:bb:e1:2d:87:
                    2a:51:54:32:26:b8:bb:92:43:0a:c8:e2:d0:68:d5:
                    43:6a:aa:db:85:4d:60:14:56:aa:c4:56:03:6c:b7:
                    86:63:9c:3b:3b:66:bc:4f:65:17:d1:0a:6a:50:c0:
                    b6:63:52:8e:63:75:3b:ec:5f:c9:99:bb:5e:d3:26:
                    da:41:9d:1b:23:c6:62:17:ed:97:e8:84:7c:0e:57:
                    b2:2b:53:89:3a:fd:37:9b:df:93:1b:67:a3:48:42:
                    fb:7e:d3:48:ea:c0:27:dd:36:5f:4d:da:8d:69:c9:
                    30:67:ca:58:0e:8f:91:e3:26:d8:06:fa:dc:7e:1b:
                    65:dc:9a:e9:94:00:3d:9a:8c:a3:3d:8b:19:54:04:
                    69:55:05:e3:e2:2a:32:a9:98:b0:77:b0:e8:47:3b:
                    c1:23:8e:7a:e2:4e:21:a4:33:d9:fa:8a:51:cc:ba:
                    c3:6d:4f:04:f7:22:53:dc:20:2f:80:c6:64:c7:f3:
                    36:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2B:44:19:B2:7D:D8:03:B6:8E:48:63:64:B8:3F:5B:DA:E2:D4:7F
            X509v3 Authority Key Identifier:
                keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:5c40:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a6:0a:12:84:92:0f:76:1a:52:1b:f0:11:b6:67:8e:5e:21:ed:
         ce:b8:87:3f:da:f4:1f:ad:28:ad:70:87:de:20:79:e6:0e:25:
         82:1a:19:ce:ca:3d:38:c5:8c:54:40:e6:94:99:67:c1:8c:83:
         74:c8:fd:02:7b:a5:b0:17:cf:f2:8f:b3:a1:19:dc:2b:9c:e8:
         cf:7b:52:32:07:f4:c3:51:47:64:8e:ec:42:51:1f:5c:d2:60:
         01:0e:55:da:77:e0:df:cb:74:7f:fb:91:d0:d9:8f:22:4a:72:
         d9:1a:61:86:8d:ac:15:25:9d:c7:42:54:d1:ea:f8:bf:cc:27:
         52:aa:1f:d2:d9:36:35:e2:3f:31:b9:49:cf:de:62:15:61:28:
         04:30:08:e8:6a:63:0e:aa:a8:f0:e0:b6:9a:d6:32:90:41:7e:
         9e:13:74:78:c7:be:54:b6:4a:a0:eb:a5:21:a9:f5:0b:fb:3a:
         d9:03:02:96:1b:b6:48:ad:d0:01:7c:dc:44:cf:13:e7:b1:9d:
         c7:20:2a:1d:d0:16:bc:a0:16:98:a2:3c:13:a2:6e:ef:99:e3:
         c8:c2:bd:e4:e2:db:d2:52:e5:03:b4:1f:1c:e4:77:62:25:59:
         68:94:90:e3:30:8b:7d:76:9b:f6:97:02:d7:ba:06:6d:bf:4e:
         d3:40:61:81
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUZRmTPE5ice06Co7zRvNv7UpMlxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz
MERCQjk1OTAeFw0yNjAxMTgxNDU1MDFaFw0yNzAxMTcxNTAwMDFaMDMxMTAvBgNV
BAMTKEU4MkI0NDE5QjI3REQ4MDNCNjhFNDg2MzY0QjgzRjVCREFFMkQ0N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd1cSi5463cTiXN7PVcigorPUa
sKFL1Pl5RoGXpwYc+/EQOdh+6svejxbhcA2Jq70tyDLRSSce3ueVp6GX7xXz3AMc
gCyxu+EthypRVDImuLuSQwrI4tBo1UNqqtuFTWAUVqrEVgNst4ZjnDs7ZrxPZRfR
CmpQwLZjUo5jdTvsX8mZu17TJtpBnRsjxmIX7ZfohHwOV7IrU4k6/Teb35MbZ6NI
Qvt+00jqwCfdNl9N2o1pyTBnylgOj5HjJtgG+tx+G2XcmumUAD2ajKM9ixlUBGlV
BePiKjKpmLB3sOhHO8EjjnriTiGkM9n6ilHMusNtTwT3IlPcIC+AxmTH8zYtAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQU6CtEGbJ92AO2jkhjZLg/W9ri1H8wHwYDVR0j
BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3
ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC
Qjk1OS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5ZDZhY2M2LTBhZjMtNGI5Ny05
OWE0LTBmNDVlOGVjZjU3Ni8wLzMyMzQzMDM2M2EzNTYzMzQzMDNhMzIzMDMwMzAz
YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTMzMzEzNzMwMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk
BlxAIDANBgkqhkiG9w0BAQsFAAOCAQEApgoShJIPdhpSG/ARtmeOXiHtzriHP9r0
H60orXCH3iB55g4lghoZzso9OMWMVEDmlJlnwYyDdMj9AnulsBfP8o+zoRncK5zo
z3tSMgf0w1FHZI7sQlEfXNJgAQ5V2nfg38t0f/uR0NmPIkpy2Rphho2sFSWdx0JU
0er4v8wnUqof0tk2NeI/MblJz95iFWEoBDAI6GpjDqqo8OC2mtYykEF+nhN0eMe+
VLZKoOulIan1C/s62QMClhu2SK3QAXzcRM8T57GdxyAqHdAWvKAWmKI8E6Ju75nj
yMK95OLb0lLlA7QfHOR3YiVZaJSQ4zCLfXab9pcC17oGbb9O00BhgQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:56:46 2026 by rpki-client