This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa
File:                     323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (raw, json)
Hash identifier:          cEu0EjirS4vOm7fpY+AgTseXh1mis9QznqiCF2QTlk4=
Subject key identifier:   88:A0:FA:F1:39:69:77:4B:2B:5B:6A:9C:E1:B8:05:A1:21:EB:EF:78
Certificate issuer:       /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial:       46D44EF87ABAB5127CADF2A4AAD58DA9F5AC8DE8
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa
Signing time:             Sun 18 Jan 2026 15:00:00 +0000
ROA not before:           Sun 18 Jan 2026 14:55:00 +0000
ROA not after:            Sun 17 Jan 2027 15:00:00 +0000
asID:                     131705
IP address blocks:        2406:5c40:8888::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
                          rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 02:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d4:4e:f8:7a:ba:b5:12:7c:ad:f2:a4:aa:d5:8d:a9:f5:ac:8d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
        Validity
            Not Before: Jan 18 14:55:00 2026 GMT
            Not After : Jan 17 15:00:00 2027 GMT
        Subject: CN=88A0FAF13969774B2B5B6A9CE1B805A121EBEF78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:1f:aa:0a:b6:4f:49:e6:28:e8:d0:39:8d:
                    30:66:dc:b8:f4:5c:be:d9:f7:d8:84:8e:9f:e6:f5:
                    c0:36:b1:7f:01:ae:8b:d1:1d:50:22:3c:a7:61:c3:
                    fb:8c:59:7f:ca:1c:18:aa:f6:72:b9:b9:96:a5:2f:
                    34:11:4c:65:be:da:8a:4d:de:22:8a:23:32:bd:f1:
                    97:b7:3c:dc:18:4c:89:be:48:a2:8e:06:89:d8:da:
                    cb:e6:7f:ce:11:4e:6f:3d:af:23:1c:02:3c:04:b1:
                    00:47:b5:1f:4a:39:04:a4:18:0a:d3:29:49:31:3f:
                    9a:8a:9d:ea:1c:95:e3:e6:1d:1b:74:43:95:b8:50:
                    13:30:a1:d1:21:fe:6d:a7:a4:49:b0:4c:45:a1:b5:
                    94:35:4c:94:9c:8c:57:94:12:0d:b9:2b:94:f8:08:
                    2d:77:c2:36:ab:16:7c:e8:4a:e4:cc:c0:f0:f3:f4:
                    56:8d:88:c2:f9:15:b7:ac:84:57:80:62:24:8d:25:
                    f9:b0:2d:06:30:aa:ad:51:4f:c6:c7:4c:85:51:11:
                    09:b1:68:d4:6a:6f:70:d7:9f:99:6d:2e:4d:14:72:
                    db:d4:0c:ce:7c:fb:0a:74:cf:f0:ea:3b:75:27:72:
                    aa:b7:42:be:48:b2:7c:ef:4d:b1:12:18:23:c9:e1:
                    1e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A0:FA:F1:39:69:77:4B:2B:5B:6A:9C:E1:B8:05:A1:21:EB:EF:78
            X509v3 Authority Key Identifier:
                keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:5c40:8888::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:44:38:64:07:20:36:30:50:2b:96:81:09:06:e2:56:7b:ae:
         f6:f0:4a:87:e5:6c:e5:9c:a8:36:30:83:e5:00:2f:6f:55:1c:
         10:44:99:55:b4:2d:2c:6e:b7:ee:05:3c:38:f7:99:43:e8:07:
         93:d0:ad:51:f1:06:2b:45:9c:e7:3b:3f:2d:ce:cc:d1:9f:95:
         c4:4d:04:65:ba:77:57:a0:df:63:83:48:70:f9:a8:50:5c:59:
         bb:a1:7b:29:ab:52:26:26:d5:2c:7b:ed:e6:e2:e5:f9:5d:65:
         2f:43:06:e5:ec:93:61:29:48:6d:4d:9e:b1:c9:c8:f7:9e:29:
         35:eb:cc:7c:fe:58:15:a6:fb:9a:20:d1:73:56:af:fb:c1:d3:
         59:c9:d2:c9:19:86:f0:ad:9d:8b:c8:72:6f:f6:c3:75:2e:8a:
         be:e4:84:3b:96:21:3e:d1:67:cc:51:b2:a1:34:d5:50:99:82:
         d5:5f:6c:7e:c3:1d:8c:c8:23:fc:0b:47:6e:e6:1f:45:5f:23:
         06:a7:08:ed:8f:16:81:1c:1e:28:9b:ea:69:f0:4d:15:bd:62:
         70:f9:99:6f:7a:ad:88:29:59:20:da:2f:d0:89:d0:f4:58:e8:
         85:5d:9f:d0:55:e4:c3:a2:bd:78:a3:9b:cd:fe:e8:77:21:08:
         1b:d7:59:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:57:32 2026 by rpki-client