This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34362e302f32342d3234203d3e20313338383838.roa
File:                     33362e35302e34362e302f32342d3234203d3e20313338383838.roa (raw, json)
Hash identifier:          cQcdBogOZRRzdmlt/FO0f1qY6yDC915UWFR4ot0N8yA=
Subject key identifier:   E0:C5:9C:3C:79:26:0E:AA:9C:0A:00:1B:07:E0:83:38:06:EA:3D:B9
Certificate issuer:       /CN=E380AA52674666F5E074BF511BB72FA0713E5270
Certificate serial:       15B7D0ED1461E78B58A5E62F3F7A8AD67BBB9E27
Authority key identifier: E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34362e302f32342d3234203d3e20313338383838.roa
Signing time:             Wed 12 Nov 2025 07:00:01 +0000
ROA not before:           Wed 12 Nov 2025 06:55:01 +0000
ROA not after:            Wed 11 Nov 2026 07:00:01 +0000
asID:                     138888
IP address blocks:        36.50.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl
                          rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 08:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b7:d0:ed:14:61:e7:8b:58:a5:e6:2f:3f:7a:8a:d6:7b:bb:9e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E380AA52674666F5E074BF511BB72FA0713E5270
        Validity
            Not Before: Nov 12 06:55:01 2025 GMT
            Not After : Nov 11 07:00:01 2026 GMT
        Subject: CN=E0C59C3C79260EAA9C0A001B07E0833806EA3DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8c:40:f9:8a:7e:16:4b:22:2a:60:d3:7b:15:
                    34:db:8b:1a:a6:66:f5:39:8f:d6:7b:8c:f5:c3:2d:
                    49:74:e0:76:e0:95:09:94:c1:8e:b2:0b:0e:90:a9:
                    88:05:4c:0a:02:81:9c:07:c0:7b:35:fa:ac:ad:58:
                    a3:69:e1:cc:08:b0:3b:6e:78:2e:3c:79:10:be:30:
                    bd:32:41:29:6b:85:dc:7a:27:14:ab:87:53:32:4f:
                    83:7a:29:7c:20:4e:f8:88:a8:38:f3:d8:8a:69:7c:
                    d8:2f:ef:46:2d:db:be:68:37:ef:19:a6:69:7b:59:
                    a3:98:45:0c:3c:a4:e5:0b:f7:77:29:57:3c:ab:bd:
                    3e:a2:23:52:47:86:75:a6:52:35:4f:66:bd:ba:68:
                    c4:16:12:05:1d:75:01:d1:fb:98:34:0e:87:a2:cb:
                    ed:6c:b3:ba:51:54:62:23:c8:aa:b3:b1:7c:7d:8c:
                    66:79:c9:4e:53:f2:85:91:53:86:39:11:38:a6:fb:
                    96:22:c9:65:84:4f:5b:7e:d3:d3:d6:88:c7:dd:5b:
                    8b:d7:a1:e0:e3:9a:de:78:ec:cb:c0:e3:f7:0d:e2:
                    da:ec:97:9e:a8:f1:0b:85:73:1a:56:eb:b2:8a:12:
                    fb:7a:33:b1:c9:fb:48:ac:fa:a4:e4:70:c2:5c:81:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C5:9C:3C:79:26:0E:AA:9C:0A:00:1B:07:E0:83:38:06:EA:3D:B9
            X509v3 Authority Key Identifier:
                keyid:E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34362e302f32342d3234203d3e20313338383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:fc:06:f2:7a:21:0d:6b:52:6b:20:a6:f1:e6:56:0f:80:e5:
         1b:d2:00:f0:45:a2:ef:b5:9b:64:33:3b:dc:1e:ce:54:31:be:
         42:f3:55:d4:52:18:32:45:73:53:99:db:3e:e5:6a:44:aa:ae:
         7b:77:17:ed:21:77:84:98:32:c4:e9:1d:2c:d2:ef:f5:04:ef:
         ba:a9:a5:b9:67:27:7f:f6:d3:cd:a7:08:8f:8a:d9:04:c2:c1:
         05:c3:e8:f6:ca:b3:ce:1e:f3:0c:39:1a:50:5a:2e:97:fc:f8:
         68:d8:42:42:98:8c:f4:20:08:d3:a5:6b:20:55:07:bc:52:3a:
         1a:e9:50:47:7c:de:2b:17:b6:83:d4:5a:fa:59:3a:73:a8:9c:
         52:a7:52:5d:5e:49:62:e9:5e:7c:16:9c:c9:68:78:41:f0:d1:
         64:17:e1:81:ee:d6:0a:84:6a:67:ee:dd:dc:44:33:4a:24:b7:
         12:68:2f:49:57:93:05:4c:b0:c6:31:6f:c3:c9:da:11:61:85:
         71:58:cd:62:7c:51:86:6d:bb:a6:c7:80:0f:c5:4d:31:89:f2:
         ca:34:67:2b:1c:c2:aa:6b:87:22:c4:92:ea:77:0a:9a:6d:69:
         19:95:c4:72:f6:55:b9:fd:0a:dc:82:3e:6c:11:6c:37:61:04:
         b2:73:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:32:35 2025 by rpki-client