This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34372e302f32342d3234203d3e20313338383838.roa
File:                     33362e35302e34372e302f32342d3234203d3e20313338383838.roa (raw, json)
Hash identifier:          4qCzYDWfZRxvBbMDRyzBLsBB9oG5aGMchf/M5rIoNHE=
Subject key identifier:   79:C0:86:44:FC:5E:7B:FB:8E:F0:AD:1E:3C:58:26:9F:1B:A6:AB:6B
Certificate issuer:       /CN=E380AA52674666F5E074BF511BB72FA0713E5270
Certificate serial:       1EAB2D7B9A657BAAD0550CF551067B4FBFCC0CF8
Authority key identifier: E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34372e302f32342d3234203d3e20313338383838.roa
Signing time:             Wed 12 Nov 2025 07:00:01 +0000
ROA not before:           Wed 12 Nov 2025 06:55:01 +0000
ROA not after:            Wed 11 Nov 2026 07:00:01 +0000
asID:                     138888
IP address blocks:        36.50.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl
                          rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 08:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ab:2d:7b:9a:65:7b:aa:d0:55:0c:f5:51:06:7b:4f:bf:cc:0c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E380AA52674666F5E074BF511BB72FA0713E5270
        Validity
            Not Before: Nov 12 06:55:01 2025 GMT
            Not After : Nov 11 07:00:01 2026 GMT
        Subject: CN=79C08644FC5E7BFB8EF0AD1E3C58269F1BA6AB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:52:15:96:b7:f7:c0:fe:d8:7f:ff:d9:8f:
                    cf:e1:2e:17:77:55:de:a8:9e:0c:3d:ef:e7:b4:d7:
                    b2:7f:80:3e:ff:1a:a8:9b:19:71:d5:c1:5a:f1:ef:
                    c0:cb:e5:4f:c0:d8:06:78:6d:15:75:b9:5e:cc:f5:
                    4d:52:21:bc:a2:6f:d3:14:6b:8a:09:bb:26:8b:b5:
                    f3:01:73:81:3f:b8:54:08:e8:01:87:ea:fd:66:49:
                    3f:07:a3:4a:39:a0:7c:1c:23:db:85:02:9a:bf:cb:
                    0c:d2:99:23:25:7d:3f:8f:3d:a0:13:23:9f:3f:82:
                    10:76:9e:72:e1:3d:c1:99:f4:92:2f:3a:c0:69:6a:
                    09:09:bf:53:8a:9f:70:62:49:9e:e4:5f:00:0e:fe:
                    13:c8:c3:b2:e6:9a:31:cd:a4:98:6c:54:f3:b5:4e:
                    de:60:a1:fd:4e:6b:1b:3c:1a:31:e2:d9:70:4f:f1:
                    8b:e9:60:87:04:27:19:54:d3:d0:81:f1:24:bb:f9:
                    d1:50:0f:4a:46:dc:5d:a0:02:6c:87:b7:57:fd:6f:
                    1a:0d:13:90:a6:17:50:3a:3b:a6:ed:23:fa:e2:78:
                    75:86:17:b0:4d:3e:f5:c1:6c:e6:ee:b5:6e:aa:64:
                    37:2a:16:02:39:f0:df:5a:17:7b:71:33:6d:f1:51:
                    c2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C0:86:44:FC:5E:7B:FB:8E:F0:AD:1E:3C:58:26:9F:1B:A6:AB:6B
            X509v3 Authority Key Identifier:
                keyid:E3:80:AA:52:67:46:66:F5:E0:74:BF:51:1B:B7:2F:A0:71:3E:52:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/E380AA52674666F5E074BF511BB72FA0713E5270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E380AA52674666F5E074BF511BB72FA0713E5270.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/33362e35302e34372e302f32342d3234203d3e20313338383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:49:08:f9:e9:81:d9:f0:92:61:00:38:6c:46:66:06:86:26:
         cc:44:81:e4:4d:f4:13:9d:0d:d5:7e:dc:27:7a:9c:82:bd:24:
         da:14:d5:98:37:88:30:f5:01:58:22:fa:2c:ee:90:79:84:75:
         60:fe:52:18:38:a7:c0:ad:62:03:f3:52:d1:d0:9f:0b:f6:39:
         7c:0a:55:f0:10:94:36:d2:df:13:cb:67:c1:6b:1d:46:5f:9d:
         c2:1e:d4:82:67:9d:0d:78:e6:7c:7e:3b:fc:d5:40:68:22:f4:
         99:1a:9d:11:2d:43:68:8f:28:8b:7d:1a:cd:10:ab:71:8f:c9:
         95:55:9f:ab:7c:c9:b7:e9:da:e8:0b:0d:ee:26:f0:c3:41:be:
         b5:1a:df:f5:00:f1:59:2b:5a:f5:f7:13:75:12:f6:7d:44:24:
         d7:c1:11:67:7d:4c:fc:8d:ec:c6:ff:05:54:11:53:c2:5a:c0:
         d7:a2:7c:f8:01:05:9d:5b:d0:29:fe:ef:31:d0:81:49:4b:6d:
         d1:c8:13:31:4f:b4:59:42:9d:45:e5:fe:a0:0f:0c:76:9b:ec:
         65:73:0b:a1:3b:c4:2b:0a:6d:20:c6:86:34:f9:83:f0:c5:7a:
         d1:b1:56:30:47:63:95:72:69:0f:d4:7d:44:a2:9a:08:42:c5:
         9e:03:cf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:44:48 2025 by rpki-client