This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa
File:                     323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (raw, json)
Hash identifier:          GA6rUIyaqIB58eM6Y3Tv2tAamvlNcofAYPow7jpjhqA=
Subject key identifier:   63:86:D1:B5:92:8D:97:21:3A:75:8B:9B:28:99:3B:BC:42:04:90:18
Certificate issuer:       /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
Certificate serial:       4E25FD53FC72546844DF5D0F7ECAD167C6B09FD0
Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa
Signing time:             Tue 20 Jan 2026 08:01:16 +0000
ROA not before:           Tue 20 Jan 2026 07:56:16 +0000
ROA not after:            Tue 19 Jan 2027 08:01:16 +0000
asID:                     139365
IP address blocks:        2001:df1:1d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl
                          rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 10:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:25:fd:53:fc:72:54:68:44:df:5d:0f:7e:ca:d1:67:c6:b0:9f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
        Validity
            Not Before: Jan 20 07:56:16 2026 GMT
            Not After : Jan 19 08:01:16 2027 GMT
        Subject: CN=6386D1B5928D97213A758B9B28993BBC42049018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7b:01:1e:d8:3d:6b:83:c0:9b:db:56:cc:ca:
                    5e:9e:6c:5b:39:19:d2:72:5c:37:f4:e4:d7:4a:b3:
                    0c:f5:0d:17:c3:5b:4c:c4:ad:dc:91:2f:c5:c6:4d:
                    ef:b3:72:72:d0:a9:39:7f:82:d3:e4:fc:ce:ad:e1:
                    78:12:79:70:d9:aa:8e:59:2f:03:12:58:6a:99:89:
                    6b:f1:53:6e:f6:d5:e6:85:ad:a8:6c:e6:75:a5:f4:
                    15:01:92:df:12:94:06:f6:f0:26:b0:2c:d1:6b:12:
                    60:6f:55:2c:22:3d:69:40:7e:6e:46:73:3a:0d:95:
                    ce:19:4b:c4:cf:30:99:62:ba:00:9c:f0:68:41:88:
                    7e:1b:87:5a:36:e1:bc:88:86:ce:2d:50:d9:3f:23:
                    77:f2:6c:fb:cb:59:83:9b:aa:b4:5c:59:ce:57:ba:
                    2b:32:18:ca:87:8d:13:95:aa:17:df:5c:0d:90:30:
                    db:24:f8:3e:c4:7f:75:14:64:92:f3:2f:07:4c:4d:
                    e8:45:b9:8e:7c:7f:e8:1f:ce:b6:d8:d2:d3:fb:9b:
                    52:d8:0d:b9:1d:2e:f7:62:d4:85:d3:92:56:a1:2b:
                    f0:be:45:18:bf:df:cd:d8:11:44:52:e4:b9:27:c0:
                    e1:67:84:b2:5a:7e:18:d2:7b:73:3d:04:63:dd:9b:
                    8f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:86:D1:B5:92:8D:97:21:3A:75:8B:9B:28:99:3B:BC:42:04:90:18
            X509v3 Authority Key Identifier:
                keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:1d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:2a:23:a8:91:89:25:93:d7:e2:c1:47:fc:42:64:39:1c:ff:
         d0:57:38:cf:43:dc:a2:a8:9d:d5:30:0e:4e:30:4d:ed:97:06:
         a2:2e:33:52:63:b5:66:35:5b:e7:58:a6:e6:d3:5f:fe:a0:b7:
         28:09:e5:3c:a3:d7:7e:c7:e1:ab:6f:71:ad:f4:b5:b7:7c:b7:
         d2:26:c4:12:37:8b:4c:75:a5:8c:cc:7e:a1:c6:97:ad:cb:ae:
         b6:96:f3:f5:7e:02:bb:0e:fb:c0:7a:56:1f:6c:54:38:89:26:
         40:7f:c0:17:58:fc:4c:19:41:3e:54:bf:9e:99:3f:f6:80:46:
         be:2a:b9:4b:e3:83:79:39:32:b7:11:dd:b5:d6:10:48:60:cb:
         c3:b0:79:9b:45:ce:64:05:f8:1d:00:98:1d:10:12:17:40:bf:
         c9:9d:59:31:7e:cd:6f:87:5b:a0:b3:ff:8b:91:04:63:57:7d:
         c2:ca:f3:89:92:eb:05:43:30:22:57:ef:eb:d6:29:97:73:7e:
         9a:99:52:28:a7:bc:e4:28:01:20:eb:fd:57:84:e7:21:77:d1:
         60:75:74:5e:07:8a:35:6c:a9:75:94:61:b9:a9:22:d9:3b:ef:
         4e:e6:b1:b3:c3:d9:2d:84:ff:31:c2:37:db:37:9a:59:08:89:
         69:b0:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:24:45 2026 by rpki-client