This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36362e302f32342d3234203d3e20313532333737.roa
File:                     3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (raw, json)
Hash identifier:          fxONR0UgQfuA8uLufmdVhYcok48YZDVOTWo+bGUHEd4=
Subject key identifier:   3B:06:E9:BA:3A:33:B2:67:F4:4A:73:2A:A5:EE:2A:D7:71:5B:04:5C
Certificate issuer:       /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B
Certificate serial:       40EB091F6BA4C993E52429AE31B8D64FCF7C2372
Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36362e302f32342d3234203d3e20313532333737.roa
Signing time:             Mon 22 Dec 2025 07:02:34 +0000
ROA not before:           Mon 22 Dec 2025 06:57:34 +0000
ROA not after:            Mon 21 Dec 2026 07:02:34 +0000
asID:                     152377
IP address blocks:        157.15.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl
                          rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 12:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:eb:09:1f:6b:a4:c9:93:e5:24:29:ae:31:b8:d6:4f:cf:7c:23:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B
        Validity
            Not Before: Dec 22 06:57:34 2025 GMT
            Not After : Dec 21 07:02:34 2026 GMT
        Subject: CN=3B06E9BA3A33B267F44A732AA5EE2AD7715B045C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3e:bb:cb:96:8b:fc:1d:c4:98:b8:19:ec:87:
                    fe:09:3a:65:61:12:af:60:24:a9:34:0a:7f:f5:1a:
                    83:37:23:18:6c:3b:8d:b1:fd:f5:fe:f5:02:bb:4a:
                    b2:88:37:2a:bf:7f:1f:cb:f2:ba:48:6d:f2:3b:77:
                    2c:61:57:88:d8:d1:cd:d8:db:c5:33:7e:33:49:f7:
                    36:23:c3:61:ca:29:8b:2a:21:89:da:f6:a9:ac:2b:
                    72:dc:ee:42:14:d5:c4:63:95:e2:3b:7f:43:0f:c2:
                    5e:0a:fb:3a:8d:17:7b:cf:23:c8:10:c4:94:0f:e1:
                    03:d8:00:c8:ff:c4:b9:72:4f:b9:dd:5f:17:54:03:
                    e6:fc:68:16:21:7f:4d:13:67:fa:e6:f2:20:71:7c:
                    e2:9d:30:41:e0:f9:13:4f:7f:e8:a2:50:29:2e:67:
                    d1:d5:d9:4e:1d:d2:b6:87:06:22:27:14:94:68:46:
                    6e:3c:8a:ff:b7:3e:d1:32:9d:71:72:f8:19:92:46:
                    77:72:75:1b:09:e2:7f:65:cd:32:66:ca:4e:ff:23:
                    62:4a:23:9c:14:41:50:e0:ee:26:7c:8f:53:7d:84:
                    4e:6c:d2:20:74:11:d2:90:37:eb:8a:c3:f6:aa:00:
                    7d:95:7d:b0:db:5a:1b:57:79:b3:cc:ef:bd:55:18:
                    b3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:06:E9:BA:3A:33:B2:67:F4:4A:73:2A:A5:EE:2A:D7:71:5B:04:5C
            X509v3 Authority Key Identifier:
                keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36362e302f32342d3234203d3e20313532333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:e2:cd:2e:60:5a:7b:22:8f:b7:6a:82:d1:3f:11:c4:77:a7:
         a9:78:47:a3:1e:86:ec:f0:25:71:e4:94:a0:16:d2:78:a4:7d:
         1a:7d:61:dc:15:f4:b3:cf:e8:06:04:c3:8e:7c:97:19:f8:3a:
         34:53:87:0d:56:fb:b5:52:09:b6:5f:47:af:62:71:dd:4a:ba:
         d0:18:c7:8a:db:00:05:31:69:c6:d2:b0:9e:62:10:01:2a:0f:
         59:aa:f6:3f:3b:68:8a:84:ea:b8:7b:e2:37:ac:82:1f:a7:e2:
         d0:20:e0:24:58:bb:87:9b:40:37:3c:ef:3b:9e:4e:93:32:01:
         3b:e6:43:c4:8c:f1:d4:85:ca:27:48:0e:d6:d9:77:bc:4e:56:
         eb:05:7f:93:0f:53:c7:38:7b:05:e4:38:58:a3:4e:76:c0:cc:
         03:2c:39:ad:79:96:ec:a1:7a:13:09:8a:b8:f2:00:ec:48:20:
         8c:11:6c:dc:79:97:dd:b0:12:86:90:eb:82:5a:59:7d:5d:e3:
         84:3b:30:90:4a:8e:f6:cf:c9:8e:c2:83:ed:33:66:33:9d:db:
         80:e5:8b:43:fa:89:d5:d1:0e:56:da:32:34:1d:b3:34:5e:f1:
         4f:92:1c:0a:a2:33:8b:cb:df:03:cf:34:37:b6:d6:50:73:f2:
         12:08:fa:0a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQOsJH2ukyZPlJCmuMbjWT898I3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUx
NTYzRjY3QjAeFw0yNTEyMjIwNjU3MzRaFw0yNjEyMjEwNzAyMzRaMDMxMTAvBgNV
BAMTKDNCMDZFOUJBM0EzM0IyNjdGNDRBNzMyQUE1RUUyQUQ3NzE1QjA0NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePrvLlov8HcSYuBnsh/4JOmVh
Eq9gJKk0Cn/1GoM3IxhsO42x/fX+9QK7SrKINyq/fx/L8rpIbfI7dyxhV4jY0c3Y
28UzfjNJ9zYjw2HKKYsqIYna9qmsK3Lc7kIU1cRjleI7f0MPwl4K+zqNF3vPI8gQ
xJQP4QPYAMj/xLlyT7ndXxdUA+b8aBYhf00TZ/rm8iBxfOKdMEHg+RNPf+iiUCku
Z9HV2U4d0raHBiInFJRoRm48iv+3PtEynXFy+BmSRndydRsJ4n9lzTJmyk7/I2JK
I5wUQVDg7iZ8j1N9hE5s0iB0EdKQN+uKw/aqAH2VfbDbWhtXebPM771VGLPDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUOwbpujozsmf0SnMqpe4q13FbBFwwHwYDVR0j
BBgwFoAUNQuuhsp7VPG55TrGDuK6pRVj9nswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ODRlODc5Zi0zYTU2LTRkOGQtODNlOC0wZTljYzY1NzcwZWEvMC8zNTBCQUU4NkNB
N0I1NEYxQjlFNTNBQzYwRUUyQkFBNTE1NjNGNjdCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMzUwQkFFODZDQTdCNTRGMUI5RTUzQUM2MEVFMkJBQTUxNTYz
RjY3Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4NGU4NzlmLTNhNTYtNGQ4ZC04
M2U4LTBlOWNjNjU3NzBlYS8wLzMxMzUzNzJlMzEzNTJlMzYzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PQjANBgkqhkiG
9w0BAQsFAAOCAQEAZuLNLmBaeyKPt2qC0T8RxHenqXhHox6G7PAlceSUoBbSeKR9
Gn1h3BX0s8/oBgTDjnyXGfg6NFOHDVb7tVIJtl9Hr2Jx3Uq60BjHitsABTFpxtKw
nmIQASoPWar2PztoioTquHviN6yCH6fi0CDgJFi7h5tANzzvO55OkzIBO+ZDxIzx
1IXKJ0gO1tl3vE5W6wV/kw9Txzh7BeQ4WKNOdsDMAyw5rXmW7KF6EwmKuPIA7Egg
jBFs3HmX3bAShpDrglpZfV3jhDswkEqO9s/JjsKD7TNmM53bgOWLQ/qJ1dEOVtoy
NB2zNF7xT5IcCqIzi8vfA880N7bWUHPyEgj6Cg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:12:53 2026 by rpki-client