This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36322e302f32342d3234203d3e20313532333733.roa
File:                     3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (raw, json)
Hash identifier:          1dTygyk/7ehjmuKZCXq/8/I9EJofLtz0v42TURzqMFw=
Subject key identifier:   0F:F6:22:28:3F:DB:91:EA:D0:A4:95:D2:B2:94:E3:9B:E9:C3:87:CA
Certificate issuer:       /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8
Certificate serial:       79B66EB44B707451B1B5D98F6E54AE89E3E6C169
Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36322e302f32342d3234203d3e20313532333733.roa
Signing time:             Thu 22 Jan 2026 20:00:01 +0000
ROA not before:           Thu 22 Jan 2026 19:55:01 +0000
ROA not after:            Thu 21 Jan 2027 20:00:01 +0000
asID:                     152373
IP address blocks:        157.15.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl
                          rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 03:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b6:6e:b4:4b:70:74:51:b1:b5:d9:8f:6e:54:ae:89:e3:e6:c1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8
        Validity
            Not Before: Jan 22 19:55:01 2026 GMT
            Not After : Jan 21 20:00:01 2027 GMT
        Subject: CN=0FF622283FDB91EAD0A495D2B294E39BE9C387CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:bc:b1:91:ea:26:21:18:89:c9:23:f5:65:
                    68:31:64:c5:5e:8e:cc:9e:a2:55:9b:57:e9:75:f6:
                    64:e1:d6:b9:69:d6:19:2c:ee:02:99:b4:9d:4e:be:
                    73:53:b1:3f:da:28:f1:25:97:a7:c5:66:85:e3:8f:
                    3e:05:48:86:42:66:14:8b:5e:34:b3:63:f7:dc:f1:
                    6d:65:0f:0c:f6:33:f0:8d:c1:db:ce:4f:22:40:fc:
                    1b:1f:ac:f5:46:81:d5:7e:ee:ff:fb:23:39:fa:f3:
                    59:d2:32:08:95:06:10:b6:7d:1d:7a:f6:df:e6:79:
                    29:46:91:f6:8f:33:45:3a:db:54:20:09:bd:4b:19:
                    94:c4:dc:ce:43:48:5b:fe:c8:d3:4c:45:6f:e1:c6:
                    67:79:6d:4f:13:63:d7:7b:e3:46:92:db:3e:12:86:
                    17:95:d8:fe:b6:a4:05:ad:75:dd:44:d8:c0:12:5f:
                    2d:4b:34:0c:14:5b:73:fe:e6:ba:d4:d6:b1:57:ba:
                    00:8e:de:4d:6e:58:6a:7e:b6:52:53:80:fe:e7:1d:
                    1a:27:7e:97:7f:86:53:51:3c:7f:6f:c3:26:ac:16:
                    53:c3:d1:2b:95:18:5f:f2:a2:8d:b4:ef:03:da:cb:
                    e8:dc:f0:e2:b7:c9:17:11:cf:a5:ed:23:a5:67:5c:
                    ec:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F6:22:28:3F:DB:91:EA:D0:A4:95:D2:B2:94:E3:9B:E9:C3:87:CA
            X509v3 Authority Key Identifier:
                keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36322e302f32342d3234203d3e20313532333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:8c:53:2a:ba:88:d3:61:76:06:c1:2e:6a:74:0f:19:3d:66:
         3d:96:9c:e2:37:7d:4f:32:2c:9b:d0:7c:fc:59:78:be:40:3a:
         4f:a3:04:50:8d:cc:7e:3c:ba:21:9f:2d:cb:ba:07:30:13:cc:
         ea:74:12:b5:4b:e7:81:0a:1b:d2:5f:f6:32:37:2b:d4:7f:18:
         f0:7a:17:c9:fc:6f:a2:e9:a9:38:26:8a:2d:5b:b7:b1:7b:26:
         78:2a:28:21:fa:36:1a:09:71:74:17:08:36:52:79:fa:5a:0f:
         ed:be:d3:f0:f2:e5:25:bf:5b:f3:69:6f:b3:fc:58:d9:dc:59:
         d9:22:05:53:b5:17:53:b7:03:84:af:63:0a:fd:04:07:75:78:
         d9:d3:84:bb:2e:b4:cb:a8:6c:a9:cd:58:83:a6:c5:41:63:23:
         77:f2:8f:15:41:2c:d2:ff:2f:97:97:9d:e7:3d:c0:f6:06:b9:
         6d:a0:c9:84:6f:a8:66:b4:2d:1b:6d:24:26:67:c0:de:28:a6:
         5a:0a:37:a9:fd:35:42:34:87:92:4f:58:62:85:29:63:c7:48:
         a6:2b:e8:10:69:87:ea:1e:a6:cc:5e:45:c6:4e:a5:93:0e:c7:
         3d:51:80:61:f4:9a:00:02:68:08:fe:58:8a:1c:8d:14:39:65:
         27:1e:85:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:41:30 2026 by rpki-client