This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa
File:                     3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (raw, json)
Hash identifier:          pcrYcQfetv/rc/0VTi5Yuk7X3ubcBjWkKo4wzgdZiSs=
Subject key identifier:   66:FE:20:0F:0B:D6:8B:3F:83:BD:29:22:A9:D6:05:61:80:33:80:FC
Certificate issuer:       /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
Certificate serial:       4DD5ABC2FA222F6D383ED7D15AB2C77375C6517B
Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa
Signing time:             Thu 13 Nov 2025 05:02:30 +0000
ROA not before:           Thu 13 Nov 2025 04:57:30 +0000
ROA not after:            Thu 12 Nov 2026 05:02:30 +0000
asID:                     153157
IP address blocks:        160.191.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl
                          rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 21:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d5:ab:c2:fa:22:2f:6d:38:3e:d7:d1:5a:b2:c7:73:75:c6:51:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
        Validity
            Not Before: Nov 13 04:57:30 2025 GMT
            Not After : Nov 12 05:02:30 2026 GMT
        Subject: CN=66FE200F0BD68B3F83BD2922A9D60561803380FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:b3:57:89:e2:f5:c2:fa:39:96:41:7b:bc:
                    89:fb:4b:b1:64:58:0f:74:ca:ae:12:e5:b4:3c:8f:
                    05:08:ca:df:90:c3:b0:ca:80:e8:a2:8d:ca:00:90:
                    b7:b4:80:a8:85:a5:00:b8:9a:39:67:1d:5c:d9:70:
                    ab:73:47:5e:9c:0e:5f:e1:ee:f4:14:cc:82:6a:69:
                    f7:e7:b3:fe:f3:36:47:13:c8:b8:e1:14:9a:d4:50:
                    47:35:49:67:35:a8:a5:7d:7f:c3:a8:a1:ea:3f:dc:
                    83:7c:1e:d5:ee:66:59:3e:d7:2b:f1:1c:b5:f9:e0:
                    de:5a:73:4f:37:c3:33:bc:2d:e8:e2:ad:bf:16:90:
                    aa:31:37:80:ff:be:3f:e2:87:b7:f8:c0:69:ad:b7:
                    c2:cb:ef:d5:96:bc:ce:43:35:39:13:2e:bc:04:c5:
                    01:27:ce:bc:25:9f:5d:58:d0:32:5b:d7:e8:3a:1f:
                    fb:af:5c:33:7b:b5:16:f8:1d:40:4c:d9:10:50:f5:
                    09:9a:4b:56:48:e6:94:a9:79:79:e1:59:6d:46:bd:
                    b4:ea:08:89:7c:53:3e:88:7c:6f:18:27:e0:ad:f5:
                    ed:f4:cd:df:88:de:6d:57:dd:50:a6:e9:2a:a1:ab:
                    4f:7c:fc:da:64:72:e0:42:0c:83:18:72:30:08:92:
                    c8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FE:20:0F:0B:D6:8B:3F:83:BD:29:22:A9:D6:05:61:80:33:80:FC
            X509v3 Authority Key Identifier:
                keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:bd:96:14:68:03:b3:7a:c2:3b:4a:4f:73:fb:ca:83:e3:98:
         a2:76:8d:f1:cc:c0:37:a6:b8:55:c3:b7:4c:3d:27:e6:be:44:
         d3:6d:b0:14:6b:dd:49:7e:b9:06:49:f8:5b:36:bf:71:67:b8:
         fa:c0:25:5c:de:16:87:c8:8e:a5:f7:57:61:91:f2:d5:cf:44:
         ce:52:50:b0:a7:be:c0:4b:34:14:9b:5d:84:e3:20:6d:4c:06:
         fc:07:52:56:ba:66:ae:d5:cc:f8:d4:d8:fa:c2:cb:65:89:85:
         e5:35:78:2f:3f:2d:6c:a6:de:1a:3f:52:b4:29:40:b7:50:79:
         ea:ac:ec:28:ec:f7:7b:cd:71:a1:d8:19:01:c7:04:4f:dc:83:
         41:33:d1:b1:9e:dd:fd:05:8a:4e:8a:1b:41:dc:f6:9e:b9:38:
         6f:90:35:37:86:42:e8:7d:1d:81:c2:76:24:4f:1b:99:de:2a:
         ea:50:71:7a:19:2e:e4:04:b7:ae:ec:01:47:5d:44:e6:b6:c3:
         e0:60:e2:47:ac:a7:3b:6d:62:fd:5c:d9:a3:67:8b:6a:54:a8:
         92:fd:2c:a1:e7:41:27:d2:77:d2:af:a6:f6:81:88:e4:84:37:
         d7:78:78:3a:4c:18:e7:a9:cb:b7:0d:17:01:15:0e:0b:62:0f:
         7a:fb:b9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:41:51 2025 by rpki-client