This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa
File:                     3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (raw, json)
Hash identifier:          qxzoMqzV7R6VwY7lQGbublsoy4JkXAcRbir5LyE2mk4=
Subject key identifier:   B9:49:EC:72:89:DC:16:85:62:8C:37:E4:E4:FF:B5:2C:AD:AD:83:D7
Certificate issuer:       /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5
Certificate serial:       31E607F64C043128F6A9C1382CE8FCD2FE5A52EC
Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa
Signing time:             Wed 24 Dec 2025 13:01:41 +0000
ROA not before:           Wed 24 Dec 2025 12:56:41 +0000
ROA not after:            Wed 23 Dec 2026 13:01:41 +0000
asID:                     141065
IP address blocks:        103.155.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl
                          rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 10:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e6:07:f6:4c:04:31:28:f6:a9:c1:38:2c:e8:fc:d2:fe:5a:52:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5
        Validity
            Not Before: Dec 24 12:56:41 2025 GMT
            Not After : Dec 23 13:01:41 2026 GMT
        Subject: CN=B949EC7289DC1685628C37E4E4FFB52CADAD83D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fb:c2:50:9c:2c:43:58:6d:42:64:30:95:86:
                    f2:67:e3:8c:8a:ca:41:41:28:50:73:bc:22:76:12:
                    90:76:24:32:47:42:2f:9f:94:b4:9b:31:27:c9:65:
                    2a:d3:ca:a8:3a:7b:a2:ef:a6:e3:97:d9:c5:eb:24:
                    c0:90:c6:73:5a:28:70:33:61:df:a0:7a:a3:45:22:
                    25:ad:37:d8:56:4b:3d:3e:b6:fa:fc:8a:d8:0d:01:
                    47:ff:0d:b5:24:2d:5d:21:02:d2:8b:06:88:b2:f5:
                    a9:85:22:55:89:25:80:c0:dc:37:1d:ac:9f:dd:be:
                    c1:e3:f0:fd:d9:50:4c:0f:11:35:a0:95:65:fb:a5:
                    15:0a:ad:19:0b:31:e3:f8:9e:78:0b:81:fe:0c:0c:
                    49:7e:9a:7b:1f:bb:75:c5:9a:85:43:1a:c3:96:70:
                    49:f0:d8:d8:15:0d:7e:93:0e:60:73:a4:95:b4:c7:
                    51:aa:5e:98:50:80:ab:35:42:6b:1a:9a:a1:23:46:
                    e9:6a:9e:ae:d2:21:94:c3:8a:53:19:e4:1b:86:a1:
                    af:e7:6f:e2:e9:52:4f:9e:4e:2c:67:1a:d4:9c:57:
                    e1:ed:e7:5e:2c:b7:96:b3:c0:b2:1e:01:4d:b4:8a:
                    e9:f4:b8:47:c6:5b:cc:a0:6b:e7:cc:80:66:6a:16:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:49:EC:72:89:DC:16:85:62:8C:37:E4:E4:FF:B5:2C:AD:AD:83:D7
            X509v3 Authority Key Identifier:
                keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:26:be:77:54:7c:9e:0b:64:75:33:ac:95:5b:9f:67:03:81:
         26:2e:ea:bb:10:40:89:1f:4e:65:77:0d:13:b4:28:2b:b7:2e:
         27:32:cd:54:eb:b5:8f:3a:2d:ed:06:ff:87:ef:c1:57:95:c1:
         7e:aa:2d:b5:7e:78:05:c5:d5:1b:fd:43:36:6f:ee:b7:0a:f8:
         c4:1a:6f:40:8b:2f:c2:7b:73:9c:0b:ed:58:45:d2:1e:cd:3c:
         6e:d8:c3:9f:02:f3:fa:53:41:b5:78:29:8a:99:77:bd:c6:0b:
         ad:3c:b2:5f:4d:68:91:93:f5:be:05:06:95:61:13:d8:c0:97:
         52:37:21:e8:fb:03:ce:cb:75:97:bf:61:0d:92:fe:7c:38:15:
         0c:19:5a:e6:4e:17:09:d4:f0:7b:01:99:aa:45:81:55:6a:f0:
         e2:1d:8b:76:9c:d4:e1:73:4c:c6:d8:76:b0:ff:d5:f3:3a:9d:
         4c:b1:e0:09:1e:e7:56:3c:96:e9:63:4d:c3:de:69:56:ed:2b:
         c3:af:7d:5d:2d:6a:c1:ed:4b:b3:7a:f2:06:5e:31:80:b4:da:
         1a:79:81:5e:79:a0:e1:a9:d1:57:10:a6:6f:1c:38:93:fd:b7:
         a3:80:16:35:b6:0e:22:fc:70:44:85:06:b2:9f:a9:c8:b8:3b:
         98:02:4d:b7
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUMeYH9kwEMSj2qcE4LOj80v5aUuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5
MTU1MDJGNTAeFw0yNTEyMjQxMjU2NDFaFw0yNjEyMjMxMzAxNDFaMDMxMTAvBgNV
BAMTKEI5NDlFQzcyODlEQzE2ODU2MjhDMzdFNEU0RkZCNTJDQURBRDgzRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe+8JQnCxDWG1CZDCVhvJn44yK
ykFBKFBzvCJ2EpB2JDJHQi+flLSbMSfJZSrTyqg6e6LvpuOX2cXrJMCQxnNaKHAz
Yd+geqNFIiWtN9hWSz0+tvr8itgNAUf/DbUkLV0hAtKLBoiy9amFIlWJJYDA3Dcd
rJ/dvsHj8P3ZUEwPETWglWX7pRUKrRkLMeP4nngLgf4MDEl+mnsfu3XFmoVDGsOW
cEnw2NgVDX6TDmBzpJW0x1GqXphQgKs1QmsamqEjRulqnq7SIZTDilMZ5BuGoa/n
b+LpUk+eTixnGtScV+Ht514st5azwLIeAU20iun0uEfGW8yga+fMgGZqFv//AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUuUnsconcFoVijDfk5P+1LK2tg9cwHwYDVR0j
BBgwFoAU3Xc4K9noY0rvnpPXY7AUnZFVAvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZmY4ZjRhYi0xYWI4LTQ4OTQtYjc1OC1kOWJjZTM4MDNlNGMvMC9ERDc3MzgyQkQ5
RTg2MzRBRUY5RTkzRDc2M0IwMTQ5RDkxNTUwMkY1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5MTU1
MDJGNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmZjhmNGFiLTFhYjgtNDg5NC1i
NzU4LWQ5YmNlMzgwM2U0Yy8wLzMxMzAzMzJlMzEzNTM1MmUzMTM2MzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnm6kwDQYJ
KoZIhvcNAQELBQADggEBADkmvndUfJ4LZHUzrJVbn2cDgSYu6rsQQIkfTmV3DRO0
KCu3LicyzVTrtY86Le0G/4fvwVeVwX6qLbV+eAXF1Rv9QzZv7rcK+MQab0CLL8J7
c5wL7VhF0h7NPG7Yw58C8/pTQbV4KYqZd73GC608sl9NaJGT9b4FBpVhE9jAl1I3
Iej7A87LdZe/YQ2S/nw4FQwZWuZOFwnU8HsBmapFgVVq8OIdi3ac1OFzTMbYdrD/
1fM6nUyx4Ake51Y8luljTcPeaVbtK8OvfV0tasHtS7N68gZeMYC02hp5gV55oOGp
0VcQpm8cOJP9t6OAFjW2DiL8cESFBrKfqci4O5gCTbc=
-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:41 2026 by rpki-client