This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa
File:                     3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier:          Ns6H3H3Nc54kf7m3PtJQFx4e5ADEAHGqtA32kCelEUM=
Subject key identifier:   27:5A:3D:41:F1:96:6E:6D:23:1C:76:B6:2F:DF:98:D5:22:08:B4:65
Certificate issuer:       /CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4
Certificate serial:       4EE68841BAE66059A3A3B22116884C7B684D76DC
Authority key identifier: 62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa
Signing time:             Thu 06 Nov 2025 04:00:00 +0000
ROA not before:           Thu 06 Nov 2025 03:55:00 +0000
ROA not after:            Thu 05 Nov 2026 04:00:00 +0000
asID:                     138089
IP address blocks:        160.191.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl
                          rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 06:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e6:88:41:ba:e6:60:59:a3:a3:b2:21:16:88:4c:7b:68:4d:76:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4
        Validity
            Not Before: Nov  6 03:55:00 2025 GMT
            Not After : Nov  5 04:00:00 2026 GMT
        Subject: CN=275A3D41F1966E6D231C76B62FDF98D52208B465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:0b:6d:65:e6:46:c5:b4:ee:2a:e1:95:ae:
                    ef:b0:1e:2d:63:ea:9f:f2:6f:80:87:0a:f5:28:98:
                    54:8f:65:29:6b:59:df:8a:ac:ca:e6:e0:31:ed:20:
                    ef:1b:13:2e:a2:a2:36:b6:fa:50:82:2c:db:1e:98:
                    61:42:eb:51:cc:34:07:8e:81:77:09:c7:f1:d5:72:
                    a4:39:c2:bd:e0:e8:eb:20:1f:f2:36:60:67:6b:2d:
                    63:6d:50:09:8f:d7:79:39:bb:b6:a9:f9:83:13:58:
                    d3:99:27:3f:03:1b:39:61:6f:31:ec:eb:00:b6:82:
                    43:7d:3a:f6:81:ef:ac:d6:9b:6c:50:61:0d:99:15:
                    99:e8:3d:72:22:bf:64:7b:04:6b:0c:2d:ff:f6:7a:
                    a1:2b:92:96:dc:10:f4:38:be:b9:5a:49:8b:79:08:
                    ce:05:48:a1:90:06:47:d1:4c:09:88:07:a4:82:3d:
                    07:d3:db:a0:6b:ba:a1:94:60:3a:f3:2f:db:a0:39:
                    28:3f:b3:cf:bf:65:8a:4f:29:0c:1d:7e:f0:a4:85:
                    f3:b2:26:9a:e5:f8:0d:52:53:75:09:27:34:08:86:
                    f4:26:e9:a3:0d:6a:d3:e0:91:3e:38:20:c2:96:f4:
                    44:2b:2d:82:55:e9:87:01:4e:15:41:41:62:2a:f3:
                    ab:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5A:3D:41:F1:96:6E:6D:23:1C:76:B6:2F:DF:98:D5:22:08:B4:65
            X509v3 Authority Key Identifier:
                keyid:62:47:D1:AA:F3:B1:5B:50:D3:A7:3E:44:E5:9E:2C:00:0B:94:F8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6247D1AAF3B15B50D3A73E44E59E2C000B94F8A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/0/3136302e3139312e3138302e302f32342d3234203d3e20313338303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e5:ee:5d:3c:4c:21:ba:0c:98:f6:bf:ff:ce:e3:ce:64:5e:a9:
         90:a6:61:5f:04:b6:12:52:45:11:ce:e5:12:bd:89:a3:45:75:
         d3:b7:5f:81:02:e7:d7:7c:66:75:40:68:b9:aa:d5:47:f4:78:
         a1:24:ee:ca:dc:00:0c:b6:ca:41:f2:8e:cf:0d:63:6e:bc:98:
         49:e2:61:cb:87:1b:6a:78:05:4e:c2:4f:bc:96:c8:84:69:46:
         75:f6:45:e8:ec:bc:a4:46:5b:3f:c6:52:23:d7:d1:61:11:9e:
         13:8f:95:ce:13:ee:e6:8f:c3:63:e6:af:1f:6d:4e:93:1d:4d:
         ed:f8:e0:35:cc:97:b2:9c:36:be:0e:63:12:9d:da:cf:16:92:
         b9:40:fe:81:02:fa:0a:12:4a:78:9d:51:27:f5:54:f9:44:a6:
         42:97:0f:e7:15:5f:4e:7f:70:5f:0e:a8:c8:b6:c1:ee:a3:5a:
         f4:51:4d:0a:6a:86:55:32:1c:4c:9a:56:e0:04:0b:f3:6f:31:
         6d:b1:f0:1d:50:42:8b:fe:31:c0:e7:0a:5d:dc:3b:8d:3d:99:
         de:93:66:b1:56:48:a4:0e:a9:d3:35:86:b6:d4:af:e5:9e:fe:
         e3:4f:f4:fe:73:b9:73:9c:b1:e2:51:df:f9:29:6b:5d:1a:31:
         24:30:7e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:29:44 2025 by rpki-client