This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa
File:                     323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (raw, json)
Hash identifier:          mwXZGvsiqYO8BjZGzGEqdxUw+nTF/7mJPJXCsYgA+E8=
Subject key identifier:   93:AD:18:C2:9F:9D:D3:CC:41:F0:5C:B8:B1:1D:03:23:91:F7:C9:95
Certificate issuer:       /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial:       46FF91057C11EDF3BA31564AE7C0AEE3396FC3D9
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa
Signing time:             Sun 18 Jan 2026 15:00:01 +0000
ROA not before:           Sun 18 Jan 2026 14:55:01 +0000
ROA not after:            Sun 17 Jan 2027 15:00:01 +0000
asID:                     131705
IP address blocks:        2406:5c40:7777::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
                          rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 02:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ff:91:05:7c:11:ed:f3:ba:31:56:4a:e7:c0:ae:e3:39:6f:c3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
        Validity
            Not Before: Jan 18 14:55:01 2026 GMT
            Not After : Jan 17 15:00:01 2027 GMT
        Subject: CN=93AD18C29F9DD3CC41F05CB8B11D032391F7C995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:eb:ea:d7:66:a5:76:eb:1c:ed:75:2b:9c:59:
                    f3:57:7a:10:f6:d9:81:0c:eb:4d:e4:50:13:c8:8a:
                    e1:9b:eb:37:d5:ef:ff:12:f8:0b:43:51:2b:8c:41:
                    1c:e7:ac:8c:fd:7f:25:34:18:1b:5b:7c:7c:6a:df:
                    d6:af:7e:d3:c5:21:d8:2b:c8:ca:7c:0d:e4:7b:f2:
                    fa:75:f7:ee:78:39:42:a2:df:8a:9c:fc:0e:e9:13:
                    20:78:ff:61:b6:bb:b2:6e:11:7e:d5:65:ea:c9:bf:
                    68:7c:7d:07:b6:24:66:9c:5d:cc:d9:01:b8:b4:6c:
                    94:2d:16:08:4d:c3:46:4a:3a:56:e0:7b:1b:2d:8b:
                    72:6b:4f:ac:2e:5a:5c:ab:20:1e:73:0f:27:90:88:
                    63:9b:34:5b:fd:53:36:e8:37:90:7e:46:4f:9c:8c:
                    aa:6d:b3:3c:9f:30:44:09:81:08:58:59:be:b7:85:
                    43:0e:a3:dd:ac:06:d2:c0:a5:58:15:66:1d:57:7e:
                    28:ca:59:25:1d:35:53:8f:43:20:76:b1:dc:4a:12:
                    bd:e6:65:7d:34:8c:9a:64:9d:e2:0a:7e:2c:bc:be:
                    df:e0:5a:c1:46:6d:5b:d4:fc:3c:a0:ae:08:67:51:
                    df:fc:e4:ed:62:57:93:62:73:a7:0f:d0:f2:5d:8a:
                    76:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AD:18:C2:9F:9D:D3:CC:41:F0:5C:B8:B1:1D:03:23:91:F7:C9:95
            X509v3 Authority Key Identifier:
                keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:5c40:7777::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:20:fb:2e:9a:25:09:d5:c7:23:63:ee:09:4f:9c:22:39:dd:
         85:66:f2:78:84:f0:0e:b4:34:11:3d:43:63:f9:af:5f:0b:05:
         ba:af:a7:17:f3:6c:d7:12:de:ed:5c:79:4f:cd:5d:eb:3d:88:
         8c:bb:10:9e:c6:39:7d:ae:49:0e:0a:fe:f9:5f:a6:4d:b0:38:
         0b:27:02:77:68:d9:9b:79:fe:53:b7:da:15:08:ac:ac:33:31:
         b3:47:6f:7d:56:4e:aa:76:c4:5b:70:50:0b:1a:d5:eb:76:5a:
         5f:3a:3e:a1:eb:a2:73:58:cd:33:c4:16:80:f7:63:39:f6:83:
         09:22:69:70:de:7c:bb:80:35:43:1d:9d:37:0e:97:7e:d1:1d:
         b6:24:04:1b:59:27:e3:9e:dd:2f:aa:71:1d:78:86:35:97:0a:
         30:bd:1c:e6:e4:cd:c9:5d:c9:7d:64:fa:86:19:72:d2:63:80:
         da:5a:2a:1e:27:19:0f:b5:06:a4:c1:49:7b:80:01:8b:b6:82:
         75:a4:35:cd:76:55:97:ea:8d:cb:db:72:2c:56:5d:2a:8f:f5:
         c6:53:96:61:bc:78:79:0b:7a:0c:ab:6c:bd:2c:82:72:7d:36:
         2e:a0:1b:70:d6:44:48:27:e6:3a:a6:22:5d:31:b2:f5:70:e7:
         5d:4a:88:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:57:21 2026 by rpki-client