This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/323430373a366634303a3a2f33322d3438203d3e203538383230.roa
File:                     323430373a366634303a3a2f33322d3438203d3e203538383230.roa (raw, json)
Hash identifier:          V9LLfdPKT1tW+siU8HIJ1OXl3Y1dtcMCrhPo+V7abfM=
Subject key identifier:   57:9C:68:8D:44:5E:24:73:62:5F:95:BD:A2:CF:F4:19:30:F9:5F:B0
Certificate issuer:       /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE
Certificate serial:       2018E3BA434DB741E5A3D50F7105C0A55626E52B
Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/323430373a366634303a3a2f33322d3438203d3e203538383230.roa
Signing time:             Thu 15 Jan 2026 16:00:01 +0000
ROA not before:           Thu 15 Jan 2026 15:55:01 +0000
ROA not after:            Thu 14 Jan 2027 16:00:01 +0000
asID:                     58820
IP address blocks:        2407:6f40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl
                          rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 16:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:18:e3:ba:43:4d:b7:41:e5:a3:d5:0f:71:05:c0:a5:56:26:e5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE
        Validity
            Not Before: Jan 15 15:55:01 2026 GMT
            Not After : Jan 14 16:00:01 2027 GMT
        Subject: CN=579C688D445E2473625F95BDA2CFF41930F95FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:0c:85:4b:3d:bf:96:a4:4b:59:69:05:de:
                    59:b3:f0:84:0c:f9:48:b1:47:52:4d:e2:13:31:15:
                    3b:16:53:a9:91:e2:16:c8:d8:be:54:69:da:18:1a:
                    ca:62:fd:66:a5:01:7a:8e:50:79:d9:15:17:91:f4:
                    f6:b7:a3:c7:23:da:1b:0b:56:e1:cc:c5:39:a7:e6:
                    f6:61:40:87:1b:f5:a4:e6:f0:f5:11:3e:9c:71:23:
                    89:51:d8:1f:85:57:47:31:b8:bc:28:c5:b4:4e:df:
                    35:19:d3:90:15:e7:23:65:ef:16:f3:c4:cd:a1:1f:
                    f9:96:e5:0b:31:ee:73:2c:28:24:9a:50:4f:8b:7d:
                    61:35:80:19:c8:a6:cf:01:fa:47:bd:24:ad:63:33:
                    cc:7f:74:aa:a4:42:cd:b4:ef:3b:de:98:5e:c3:fb:
                    7c:82:92:f7:5d:84:7f:cc:b0:ec:12:f4:58:1d:9c:
                    85:9c:d2:de:bb:72:98:79:bc:ac:c3:87:eb:12:fd:
                    7f:dc:c0:75:52:3b:71:13:d8:32:78:b0:1a:c4:73:
                    98:a2:51:82:90:83:52:e7:f4:d8:68:4f:18:c6:cd:
                    97:a9:a0:3c:27:f4:1a:dd:d5:2b:a0:f9:33:4e:40:
                    c8:c4:2d:0e:12:e6:cd:ba:5b:28:f6:1e:a0:e2:63:
                    e9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9C:68:8D:44:5E:24:73:62:5F:95:BD:A2:CF:F4:19:30:F9:5F:B0
            X509v3 Authority Key Identifier:
                keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/323430373a366634303a3a2f33322d3438203d3e203538383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:6f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:dc:be:2e:26:75:0a:05:10:32:95:0f:cc:7d:84:8a:3a:1d:
         ed:02:1c:28:3e:f3:9f:6f:f5:fa:61:ab:27:45:6e:31:ef:ef:
         0a:47:c9:1a:50:b9:05:ab:0c:62:ec:6b:b3:3d:a1:9c:c2:03:
         7e:94:e2:52:2d:2b:20:03:a5:26:df:20:e7:1d:92:b1:4f:4b:
         34:d2:4b:11:0a:94:a0:88:fc:c7:32:a1:89:dc:0d:79:7c:a8:
         37:69:4e:85:dc:21:dc:17:98:bf:b8:f9:5a:40:84:dc:cb:43:
         ef:13:76:d2:37:7b:f6:8d:ce:6b:ec:92:de:d5:11:a0:5b:54:
         18:74:9d:f1:a1:ee:fc:5d:e3:47:1c:fb:3c:fe:3a:55:79:9d:
         fe:86:5a:52:f2:7c:c1:24:54:1f:81:d1:8e:1b:0c:29:fe:ba:
         0f:9e:51:d3:1b:d7:ea:b0:57:39:a6:3f:28:a9:b7:26:c2:24:
         3a:74:86:c3:20:7d:9a:67:0e:d3:fe:66:e1:c9:33:10:05:41:
         c0:7e:5c:2d:1d:b9:dc:b4:25:47:c6:59:9a:07:21:72:ab:ae:
         64:9b:34:be:59:79:11:ef:9f:66:1a:7f:14:88:7c:64:8d:85:
         6c:37:8d:54:bf:2e:2b:ba:97:51:37:a6:2b:dc:02:3d:79:e2:
         c2:cb:e3:ac
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUIBjjukNNt0Hlo9UPcQXApVYm5SswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy
RTFBOTBDRTAeFw0yNjAxMTUxNTU1MDFaFw0yNzAxMTQxNjAwMDFaMDMxMTAvBgNV
BAMTKDU3OUM2ODhENDQ1RTI0NzM2MjVGOTVCREEyQ0ZGNDE5MzBGOTVGQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DgyFSz2/lqRLWWkF3lmz8IQM
+UixR1JN4hMxFTsWU6mR4hbI2L5UadoYGspi/WalAXqOUHnZFReR9Pa3o8cj2hsL
VuHMxTmn5vZhQIcb9aTm8PURPpxxI4lR2B+FV0cxuLwoxbRO3zUZ05AV5yNl7xbz
xM2hH/mW5Qsx7nMsKCSaUE+LfWE1gBnIps8B+ke9JK1jM8x/dKqkQs207zvemF7D
+3yCkvddhH/MsOwS9FgdnIWc0t67cph5vKzDh+sS/X/cwHVSO3ET2DJ4sBrEc5ii
UYKQg1Ln9NhoTxjGzZepoDwn9Brd1Sug+TNOQMjELQ4S5s26Wyj2HqDiY+kTAgMB
AAGjggIxMIICLTAdBgNVHQ4EFgQUV5xojUReJHNiX5W9os/0GTD5X7AwHwYDVR0j
BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4
RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB
OTBDRS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlZDQ3MjAyLWRlNjAtNDdmMy1h
MmE3LTYwOGE3NGExZTg3NC8wLzMyMzQzMDM3M2EzNjY2MzQzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDM1MzgzODMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB29AMA0GCSqGSIb3
DQEBCwUAA4IBAQBQ3L4uJnUKBRAylQ/MfYSKOh3tAhwoPvOfb/X6YasnRW4x7+8K
R8kaULkFqwxi7GuzPaGcwgN+lOJSLSsgA6Um3yDnHZKxT0s00ksRCpSgiPzHMqGJ
3A15fKg3aU6F3CHcF5i/uPlaQITcy0PvE3bSN3v2jc5r7JLe1RGgW1QYdJ3xoe78
XeNHHPs8/jpVeZ3+hlpS8nzBJFQfgdGOGwwp/roPnlHTG9fqsFc5pj8oqbcmwiQ6
dIbDIH2aZw7T/mbhyTMQBUHAflwtHbnctCVHxlmaByFyq65kmzS+WXkR759mGn8U
iHxkjYVsN41Uvy4rupdRN6Yr3AI9eeLCy+Os
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:41:02 2026 by rpki-client