This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa
File:                     323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (raw, json)
Hash identifier:          e44E7s4PRD9CCUk2jY7ZZ7l5t8KM/OqUwkHUrfkkOcg=
Subject key identifier:   61:61:DD:E6:F9:49:7B:05:3D:14:41:06:66:0D:0A:FE:B1:AE:43:22
Certificate issuer:       /CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
Certificate serial:       2F3B55471AE6BF794F72EA4ADF343E27828A3193
Authority key identifier: 39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa
Signing time:             Mon 19 Jan 2026 04:38:00 +0000
ROA not before:           Mon 19 Jan 2026 04:33:00 +0000
ROA not after:            Mon 18 Jan 2027 04:38:00 +0000
asID:                     55695
IP address blocks:        2405:2d40:92::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl
                          rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 22:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3b:55:47:1a:e6:bf:79:4f:72:ea:4a:df:34:3e:27:82:8a:31:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
        Validity
            Not Before: Jan 19 04:33:00 2026 GMT
            Not After : Jan 18 04:38:00 2027 GMT
        Subject: CN=6161DDE6F9497B053D144106660D0AFEB1AE4322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e2:f6:3e:8f:62:0e:78:ee:c1:06:f7:dd:99:
                    40:c1:10:d3:08:57:28:eb:8e:6f:d1:99:5b:a8:b4:
                    a7:44:24:4a:de:55:91:9a:91:53:1b:63:e1:f8:cb:
                    9d:e6:85:a9:fd:c4:c7:26:f1:cd:fb:ae:ab:e6:68:
                    fd:c5:7d:e1:65:da:d1:eb:c1:98:df:92:37:de:0d:
                    28:eb:3a:d1:52:d7:29:34:92:f5:92:cc:b9:0d:c2:
                    66:af:41:19:06:6b:a6:da:5b:e1:dd:74:72:19:f8:
                    68:8b:57:12:2b:cc:fb:e5:6e:e9:f4:75:04:76:6a:
                    fb:d1:18:54:6d:a5:c5:1c:98:d4:59:d0:17:05:cd:
                    a2:f3:f8:f9:37:9c:e2:93:23:a5:e6:7a:de:56:f8:
                    95:4c:fd:16:dd:89:55:e5:18:75:3a:8b:12:ac:69:
                    2e:94:6a:0a:2d:aa:34:a6:07:ab:90:3d:50:0d:bc:
                    2c:29:c9:cb:aa:52:af:90:34:b8:be:3a:80:bb:27:
                    0a:7f:22:6c:f0:b0:4a:8c:18:8c:db:39:37:ae:ba:
                    74:46:75:3d:d6:6a:6e:92:17:b4:00:04:9f:ab:14:
                    05:2a:02:6a:82:16:35:2c:1b:67:a4:78:cf:c3:f1:
                    68:af:cb:5a:f7:4c:84:15:83:b6:d0:da:e1:05:b7:
                    de:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:61:DD:E6:F9:49:7B:05:3D:14:41:06:66:0D:0A:FE:B1:AE:43:22
            X509v3 Authority Key Identifier:
                keyid:39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2d40:92::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:02:8a:69:a6:39:db:78:82:b4:33:23:61:b0:8b:37:84:54:
         87:c0:f2:ef:2a:53:af:e6:bf:1f:34:02:69:7c:ba:64:ed:4a:
         6d:23:b2:15:b5:14:c2:96:3f:13:3b:aa:13:1a:fc:fa:f0:03:
         08:c8:15:fa:90:3c:08:c8:69:fc:cb:14:98:9b:90:52:cd:64:
         f8:63:ab:87:7b:f8:5a:28:96:c1:b3:64:a2:f4:47:b2:48:cb:
         85:8f:df:51:c3:1f:0f:f1:18:72:6b:77:05:f0:58:c4:3f:79:
         86:7e:5e:7c:e4:62:b1:8d:6a:a9:34:8e:c6:23:aa:84:f9:0f:
         55:10:df:85:5e:3e:69:84:43:e8:79:7b:49:17:a4:b8:c5:d8:
         07:3d:4f:7d:9f:02:91:1e:ec:b3:16:d5:53:d7:31:9b:7f:4f:
         78:cd:b0:75:25:00:42:e6:0b:2e:00:09:5a:c9:5d:85:63:60:
         ee:63:1c:4f:73:86:15:f9:f7:00:d4:59:4b:21:fa:ac:e8:c5:
         b2:99:cb:f2:61:18:84:3b:fa:fe:80:b7:49:d6:c7:5c:98:3d:
         fd:d1:e2:00:87:22:5b:17:94:8f:fc:95:12:b3:09:1f:31:e8:
         51:76:01:c4:41:b2:bb:11:3a:6d:ad:62:3f:d5:3b:83:d1:c5:
         f5:7a:ad:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:04:30 2026 by rpki-client