This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36322e302f32332d3233203d3e20313532333733.roa
File:                     3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (raw, json)
Hash identifier:          Us649gKgLXgCXiwIAPzSRfT2vwc2Xrs3/JnrzSYazTY=
Subject key identifier:   B7:7C:2B:FC:57:BB:8D:2D:30:33:2F:5D:8C:52:6B:FF:86:3E:E7:AE
Certificate issuer:       /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8
Certificate serial:       3F210BB323C4209E61F68BD73CF502F36F74112C
Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36322e302f32332d3233203d3e20313532333733.roa
Signing time:             Thu 22 Jan 2026 20:00:01 +0000
ROA not before:           Thu 22 Jan 2026 19:55:01 +0000
ROA not after:            Thu 21 Jan 2027 20:00:01 +0000
asID:                     152373
IP address blocks:        157.15.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl
                          rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 03:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:21:0b:b3:23:c4:20:9e:61:f6:8b:d7:3c:f5:02:f3:6f:74:11:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8
        Validity
            Not Before: Jan 22 19:55:01 2026 GMT
            Not After : Jan 21 20:00:01 2027 GMT
        Subject: CN=B77C2BFC57BB8D2D30332F5D8C526BFF863EE7AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:de:2f:dc:0f:4d:5f:ac:81:d9:3e:58:5c:
                    a0:06:a9:d6:c3:d3:47:60:07:6b:49:7a:3e:81:00:
                    d9:8f:81:b7:55:7c:fe:6e:33:e2:0e:fc:6a:ff:25:
                    57:bc:7a:47:b4:ea:85:14:b9:70:52:4c:40:da:5f:
                    b0:60:e3:bd:05:99:4d:ce:30:db:f7:a3:ba:26:29:
                    2d:ec:21:75:0c:d9:38:b8:df:97:87:89:2b:e9:6f:
                    4d:62:77:bc:42:fe:eb:4d:4b:f8:a7:bc:f2:29:d0:
                    e4:36:45:cb:3c:44:98:1c:b0:bf:bc:c4:1a:47:09:
                    20:ad:c0:a5:61:3a:27:64:a5:fc:ab:c8:7e:ff:9f:
                    a2:2f:97:57:3a:93:fa:68:73:77:a4:1a:9a:49:8e:
                    2f:bb:4c:e2:70:50:b5:07:5a:4b:97:64:e3:dc:37:
                    31:0c:11:25:50:5c:11:bc:b9:98:c9:ab:ce:66:6c:
                    1e:43:7b:8c:cc:da:1c:38:80:d4:00:ea:fe:ac:b7:
                    ff:f0:fe:05:59:13:8b:43:5d:a4:5c:02:db:1f:f3:
                    1d:e0:55:da:31:3e:58:1b:54:65:3c:6a:df:00:4e:
                    91:56:89:b9:d5:a4:f9:4f:6d:18:88:c0:16:fa:5d:
                    49:af:37:54:8a:ce:9b:f4:1e:1b:d0:41:ea:bb:88:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7C:2B:FC:57:BB:8D:2D:30:33:2F:5D:8C:52:6B:FF:86:3E:E7:AE
            X509v3 Authority Key Identifier:
                keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36322e302f32332d3233203d3e20313532333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:fc:53:be:68:8a:5b:c4:aa:d4:48:fa:92:b3:d3:b6:c2:0f:
         b9:db:e9:11:26:35:90:51:22:1d:14:8d:a0:30:60:cc:71:4c:
         58:13:ab:fe:7a:dd:51:7e:3f:9c:c7:a5:23:90:4c:1f:98:e2:
         cb:6f:36:d3:2d:a2:46:86:88:84:bc:c0:ac:20:34:39:46:82:
         1b:59:1a:ac:2b:fb:71:d5:68:e7:9d:c9:79:91:9a:6f:40:d4:
         93:5f:3d:8b:35:27:02:16:90:64:e5:5d:8b:2c:6b:cd:bf:68:
         a1:01:89:92:75:7f:5c:7f:5d:27:e5:b7:0b:15:3c:da:60:c1:
         15:51:ed:fe:4d:39:22:dd:4e:36:f8:69:54:b5:59:00:69:cb:
         43:6f:73:c5:07:07:f9:07:29:a7:12:7a:4c:04:b1:90:fd:60:
         49:6c:b0:98:ac:c6:5f:05:b2:5c:44:b5:57:18:2f:0d:17:f5:
         9f:a4:ad:99:55:ec:61:61:c8:fe:d0:02:00:89:71:a4:d0:21:
         dd:cd:32:3f:21:fa:38:bf:a1:8a:d8:b6:95:94:63:32:8e:5e:
         b5:ce:63:23:3a:1d:e8:e9:0d:94:13:00:c5:ce:5a:f4:1e:a9:
         33:d5:21:7c:b1:56:ab:81:0b:b0:3e:59:89:a6:a0:23:fd:cd:
         a2:bc:10:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:40:52 2026 by rpki-client