This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383838383a3a2f34382d3438203d3e203233363739.roa
File:                     323430313a323930303a383838383a3a2f34382d3438203d3e203233363739.roa (raw, json)
Hash identifier:          IaP+9crAPYdusPNA+T0uigUeDuOaSTpSpzGs2yhRh/o=
Subject key identifier:   FB:05:15:A1:07:04:11:7E:E4:7A:1B:A5:00:07:DC:8C:0E:28:19:8E
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       47D866972967CDD639D2643DA15B5CB68004A955
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383838383a3a2f34382d3438203d3e203233363739.roa
Signing time:             Wed 03 Dec 2025 04:01:48 +0000
ROA not before:           Wed 03 Dec 2025 03:56:48 +0000
ROA not after:            Wed 02 Dec 2026 04:01:48 +0000
asID:                     23679
IP address blocks:        2401:2900:8888::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d8:66:97:29:67:cd:d6:39:d2:64:3d:a1:5b:5c:b6:80:04:a9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Dec  3 03:56:48 2025 GMT
            Not After : Dec  2 04:01:48 2026 GMT
        Subject: CN=FB0515A10704117EE47A1BA50007DC8C0E28198E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5e:28:15:1a:28:56:67:f4:ff:57:7c:3f:e0:
                    7c:78:34:89:90:f8:dc:6a:46:16:8a:fe:40:1f:c4:
                    ee:67:cd:b4:16:fe:83:3e:1b:30:28:f7:0d:bd:56:
                    32:11:3a:ab:58:59:d4:21:93:1d:35:1f:71:6a:2d:
                    d8:a3:d3:57:82:b6:c5:85:c9:f4:28:b5:f1:c1:49:
                    19:b0:7e:1c:33:bf:72:8b:9a:c4:31:6d:68:dc:9f:
                    0d:65:a7:29:b8:0a:c2:74:bc:61:76:37:d0:60:50:
                    88:10:e1:be:59:da:97:d0:24:c8:3d:3a:42:3e:c5:
                    b2:56:50:d5:1b:73:00:59:cc:0c:11:a5:3e:bb:89:
                    fb:2a:10:81:2f:e9:82:06:4e:f8:91:3e:4f:aa:69:
                    6d:1f:9c:16:33:17:40:66:dc:ed:29:e2:67:29:ac:
                    9d:20:a0:aa:a7:2a:96:1d:17:ec:e8:90:24:be:21:
                    8f:31:77:3b:41:65:b6:e6:0b:39:4d:c3:87:d3:60:
                    1e:a7:d7:a0:31:5a:af:fe:0c:9f:15:65:dc:44:14:
                    7a:cb:57:d4:bc:ef:50:66:1c:1c:93:dd:f8:f2:60:
                    ea:49:16:c4:12:c4:38:1c:78:8e:76:40:3e:7f:b2:
                    51:02:37:56:5a:d8:af:f9:7b:c9:f7:3d:76:cb:e2:
                    b7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:05:15:A1:07:04:11:7E:E4:7A:1B:A5:00:07:DC:8C:0E:28:19:8E
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383838383a3a2f34382d3438203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2900:8888::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:48:bc:a7:cd:0a:8e:60:1d:8b:af:d2:86:df:8a:4b:bb:15:
         dd:15:72:18:5e:1b:b8:f2:99:26:2a:a6:02:3f:00:77:9e:1a:
         32:0d:5a:61:0e:b0:b1:3d:6c:70:1e:ad:7c:c5:e3:e8:c2:50:
         a6:37:b4:8b:aa:70:7d:0e:00:ac:fa:67:9f:f4:a8:c6:92:2e:
         5f:62:27:24:b5:7f:69:b4:73:39:41:00:c0:3c:82:dc:a1:6e:
         ff:e6:32:c7:9e:37:20:d3:f2:26:a3:6f:52:cc:e7:ed:d6:f8:
         a5:36:b6:b0:53:da:c2:3b:9f:df:53:d0:ca:68:67:60:8c:db:
         31:6d:19:ef:5e:53:ee:68:7e:dd:57:a5:0e:cc:d4:e3:c0:6d:
         63:2f:41:68:fa:26:1b:9e:98:3c:a9:29:0b:ba:33:68:f1:90:
         c9:28:2b:18:59:4c:52:cd:7e:32:cc:cb:cb:c8:ac:78:36:87:
         ea:f6:b1:14:df:3d:03:53:bd:44:9d:a3:6f:02:2c:a5:ab:3f:
         2f:df:dc:c3:b0:5f:f0:90:00:4f:7d:59:06:38:fc:84:2b:aa:
         b0:ef:00:52:a0:09:80:ad:c0:be:42:21:ba:88:0c:6d:8e:8a:
         56:0f:94:5a:ce:7e:2d:cb:14:79:aa:a1:6d:6e:99:ca:0c:a7:
         d1:56:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:13:34 2025 by rpki-client