This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa
File:                     3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (raw, json)
Hash identifier:          i70g+GwD21YDsMW+4LKOIJvPDqgsobV0afp0wj+r5HM=
Subject key identifier:   62:A1:A3:93:7E:A8:50:F6:61:FD:BE:BA:C5:E7:71:ED:05:92:36:53
Certificate issuer:       /CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567
Certificate serial:       0B4DD64DF2AC83B8FF969CC575C277AE897CF98D
Authority key identifier: 6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa
Signing time:             Fri 28 Nov 2025 04:02:51 +0000
ROA not before:           Fri 28 Nov 2025 03:57:51 +0000
ROA not after:            Fri 27 Nov 2026 04:02:51 +0000
asID:                     153124
IP address blocks:        160.187.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl
                          rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4d:d6:4d:f2:ac:83:b8:ff:96:9c:c5:75:c2:77:ae:89:7c:f9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567
        Validity
            Not Before: Nov 28 03:57:51 2025 GMT
            Not After : Nov 27 04:02:51 2026 GMT
        Subject: CN=62A1A3937EA850F661FDBEBAC5E771ED05923653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:8b:29:8a:7f:9f:8f:a7:03:f8:f4:dd:29:
                    90:cd:a5:6a:26:95:b8:10:b1:d5:27:18:d2:05:6e:
                    6d:2c:47:a6:fa:5d:27:9d:94:3c:eb:e6:f4:d9:d6:
                    04:44:e5:bf:ac:61:48:59:47:0a:3f:a7:32:68:44:
                    27:41:e0:af:e2:38:54:bc:cc:cb:20:06:b9:9b:09:
                    97:27:40:d7:83:dd:a3:f2:c0:1b:fb:af:ac:1a:5a:
                    d1:48:13:68:f4:56:d8:c9:64:53:45:e0:5c:c0:3a:
                    cd:b8:9b:a6:68:04:0b:52:e5:05:e7:ab:01:90:fb:
                    a6:b8:40:3e:0d:66:78:47:5a:b8:28:b3:c2:3d:e4:
                    c5:14:b8:12:ff:7f:81:f7:e0:ce:86:50:6b:ab:61:
                    88:81:b6:9e:16:14:88:70:4e:a7:1b:67:1c:ad:1e:
                    0c:f9:2e:e3:75:a8:f8:71:f8:26:46:06:1b:97:ac:
                    d6:51:c6:46:13:80:23:0a:7d:42:41:d4:e9:5b:6d:
                    91:ca:88:49:e3:ec:04:b4:ef:02:5c:0c:38:7d:e5:
                    72:6c:b5:d4:34:5f:cb:95:3a:a1:bf:24:be:c4:32:
                    c0:12:8b:6a:6f:e8:dc:8a:47:a8:30:7a:ee:41:f6:
                    34:ca:45:f1:05:e4:cd:72:93:d4:9a:6f:49:89:38:
                    86:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A1:A3:93:7E:A8:50:F6:61:FD:BE:BA:C5:E7:71:ED:05:92:36:53
            X509v3 Authority Key Identifier:
                keyid:6B:D4:5C:D9:12:D4:19:2B:CD:EB:9F:6B:73:B0:23:9C:A2:BD:45:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6BD45CD912D4192BCDEB9F6B73B0239CA2BD4567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:85:0b:a0:c8:9e:04:b8:43:c5:11:07:3c:ff:63:57:24:19:
         3d:89:da:e1:cc:b5:f6:aa:5b:3a:d7:d7:42:04:77:3c:b9:d0:
         97:4b:79:83:34:44:68:1d:f3:e8:f7:01:b5:e5:b4:af:83:68:
         11:f1:1e:d3:15:d8:60:ae:0b:12:22:8f:8b:b2:9f:4b:63:da:
         c8:d4:b4:0d:d7:14:24:15:1c:3a:4d:69:20:9a:88:a8:76:49:
         78:e3:80:81:b2:e0:89:a1:b8:35:52:b5:16:55:16:14:b2:32:
         cf:f6:d2:86:da:c3:0a:23:10:67:a6:eb:37:cd:b6:e9:45:20:
         49:06:df:00:2c:ef:8f:2c:e7:df:f0:75:bb:ac:9d:cc:94:18:
         3b:82:40:e0:88:15:e7:8f:33:04:a1:61:29:7c:86:b1:a0:45:
         1a:7b:05:76:11:20:fb:f8:63:b2:c8:6a:e9:10:ad:93:31:f3:
         ba:ca:2a:3b:65:4a:3a:f8:e0:24:03:33:df:39:ea:e8:6c:46:
         3e:0a:14:6a:e0:1c:51:4b:6f:98:93:ae:d3:3b:c5:55:3b:d4:
         e0:d7:b2:df:69:f1:c3:34:5d:f9:34:d9:3c:f9:9e:d4:c1:14:
         3f:8c:91:ca:ce:20:6a:c4:5a:f5:3f:de:a4:0e:9c:75:a5:b9:
         dc:bf:12:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:34:51 2025 by rpki-client