This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa
File:                     323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (raw, json)
Hash identifier:          i8YeqA66jLTHkrWq3WhHNQrrw6cEUvyy58nchkz4ulc=
Subject key identifier:   F4:FF:B2:D5:D6:CF:95:2B:ED:A9:4E:75:AC:A2:0C:90:4D:74:47:CE
Certificate issuer:       /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial:       5D8E72D6484DAC27708E398DFBC028B2D4F1FF8C
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa
Signing time:             Sun 18 Jan 2026 15:00:01 +0000
ROA not before:           Sun 18 Jan 2026 14:55:01 +0000
ROA not after:            Sun 17 Jan 2027 15:00:01 +0000
asID:                     131705
IP address blocks:        2406:5c40:9999::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
                          rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 02:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8e:72:d6:48:4d:ac:27:70:8e:39:8d:fb:c0:28:b2:d4:f1:ff:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
        Validity
            Not Before: Jan 18 14:55:01 2026 GMT
            Not After : Jan 17 15:00:01 2027 GMT
        Subject: CN=F4FFB2D5D6CF952BEDA94E75ACA20C904D7447CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:7e:f3:ad:e1:96:2b:b0:e0:26:7a:6e:87:
                    89:8a:f8:40:c5:28:39:f7:a4:2b:d2:a7:2e:6a:f8:
                    3e:0c:62:68:0a:4e:74:fc:3e:12:1d:f2:d0:80:ba:
                    27:66:30:3e:ef:e1:cc:c6:b5:62:80:1c:5e:cf:2b:
                    0b:0d:0d:33:ca:d3:c8:c8:3c:ab:db:d5:ea:bf:02:
                    37:66:d4:d8:99:ab:42:b0:22:a8:83:a6:9a:e6:1f:
                    fd:fb:48:7c:4e:19:71:32:8b:04:f1:28:c4:42:ed:
                    ca:82:92:74:cf:43:42:b6:10:ee:d0:74:7d:f7:3d:
                    3b:6d:37:31:76:7d:80:98:12:43:a5:39:e3:c0:5f:
                    9e:d1:a1:16:3b:fd:fe:d5:dc:89:43:14:83:bc:d1:
                    6d:a1:a7:36:3b:aa:fa:8a:d2:a1:57:f2:58:e9:82:
                    24:85:67:b6:b0:a4:8c:e4:7f:52:9f:99:8f:50:d2:
                    3a:b7:14:ee:ce:63:37:6d:ee:ef:f9:0b:4a:35:b9:
                    5a:d4:d7:37:5a:b3:dd:1b:d4:2b:d2:0b:87:7f:c1:
                    f3:1b:2a:ca:03:f3:09:89:e0:5c:83:41:2a:f9:45:
                    2e:dd:70:3a:bb:89:08:7c:be:48:cd:91:35:ce:86:
                    95:eb:92:23:68:fc:74:be:19:7d:f2:1e:94:e9:f6:
                    36:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FF:B2:D5:D6:CF:95:2B:ED:A9:4E:75:AC:A2:0C:90:4D:74:47:CE
            X509v3 Authority Key Identifier:
                keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:5c40:9999::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:ef:30:c3:5c:72:d3:b7:67:7c:d2:4e:ed:33:4c:78:69:86:
         ff:58:62:f1:a5:32:fe:14:73:10:06:14:57:5f:5b:48:01:a8:
         13:e5:6f:78:9f:b2:94:90:e7:00:50:50:7f:78:a8:6f:2a:9d:
         03:7e:c9:6a:16:49:f5:ff:c1:79:9e:4e:2b:8d:19:96:3a:0d:
         cc:25:78:35:b7:b6:dd:cf:13:97:89:42:ba:8b:57:b0:7f:3a:
         13:09:1e:e6:20:48:87:b6:02:89:8d:36:94:5d:2d:14:19:b9:
         4f:06:f1:a5:f5:a4:6d:f4:f0:cb:e2:4b:02:2d:f3:3e:21:3e:
         c9:6e:47:db:50:ee:58:4c:92:b0:f9:06:f3:be:58:ce:82:39:
         e7:65:9b:d8:2f:98:2b:74:3b:77:76:69:09:9a:4d:7d:29:86:
         f6:09:9e:3d:33:f7:0d:9e:c4:7f:d7:9d:eb:a7:31:f2:92:78:
         1c:0a:e5:5a:6e:05:06:50:6c:40:f4:5f:28:aa:69:b8:2d:16:
         0a:8b:c2:18:0f:72:65:26:6d:b2:ef:fe:8d:89:3d:cf:c6:9c:
         30:6c:ed:81:3c:3f:3a:5f:31:66:ae:15:6f:20:98:cf:b7:e2:
         17:b0:14:b5:22:07:62:a9:c5:4a:20:2b:d3:8d:bc:e9:39:70:
         a8:10:82:a4
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXY5y1khNrCdwjjmN+8AostTx/4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz
MERCQjk1OTAeFw0yNjAxMTgxNDU1MDFaFw0yNzAxMTcxNTAwMDFaMDMxMTAvBgNV
BAMTKEY0RkZCMkQ1RDZDRjk1MkJFREE5NEU3NUFDQTIwQzkwNEQ3NDQ3Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJiX7zreGWK7DgJnpuh4mK+EDF
KDn3pCvSpy5q+D4MYmgKTnT8PhId8tCAuidmMD7v4czGtWKAHF7PKwsNDTPK08jI
PKvb1eq/Ajdm1NiZq0KwIqiDpprmH/37SHxOGXEyiwTxKMRC7cqCknTPQ0K2EO7Q
dH33PTttNzF2fYCYEkOlOePAX57RoRY7/f7V3IlDFIO80W2hpzY7qvqK0qFX8ljp
giSFZ7awpIzkf1KfmY9Q0jq3FO7OYzdt7u/5C0o1uVrU1zdas90b1CvSC4d/wfMb
KsoD8wmJ4FyDQSr5RS7dcDq7iQh8vkjNkTXOhpXrkiNo/HS+GX3yHpTp9jbhAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU9P+y1dbPlSvtqU51rKIMkE10R84wHwYDVR0j
BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3
ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC
Qjk1OS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5ZDZhY2M2LTBhZjMtNGI5Ny05
OWE0LTBmNDVlOGVjZjU3Ni8wLzMyMzQzMDM2M2EzNTYzMzQzMDNhMzkzOTM5Mzkz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzEzNzMwMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
BlxAmZkwDQYJKoZIhvcNAQELBQADggEBAKjvMMNcctO3Z3zSTu0zTHhphv9YYvGl
Mv4UcxAGFFdfW0gBqBPlb3ifspSQ5wBQUH94qG8qnQN+yWoWSfX/wXmeTiuNGZY6
DcwleDW3tt3PE5eJQrqLV7B/OhMJHuYgSIe2AomNNpRdLRQZuU8G8aX1pG308Mvi
SwIt8z4hPsluR9tQ7lhMkrD5BvO+WM6COedlm9gvmCt0O3d2aQmaTX0phvYJnj0z
9w2exH/XneunMfKSeBwK5VpuBQZQbED0XyiqabgtFgqLwhgPcmUmbbLv/o2JPc/G
nDBs7YE8PzpfMWauFW8gmM+34hewFLUiB2KpxUogK9ONvOk5cKgQgqQ=
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:58:48 2026 by rpki-client