This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33322e302f32342d3234203d3e203338333230.roa
File:                     3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier:          WYMvSvVQ7LmzdzI/Y9IjmjwPnuhAowKHbIWl+8CxoTM=
Subject key identifier:   B3:8B:26:55:49:85:F5:23:90:D6:18:B7:F8:FE:26:E0:7A:5E:F1:48
Certificate issuer:       /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial:       777F2B192039A338FC82A0EFA8574DE2FEE52A41
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33322e302f32342d3234203d3e203338333230.roa
Signing time:             Mon 29 Dec 2025 08:00:00 +0000
ROA not before:           Mon 29 Dec 2025 07:55:00 +0000
ROA not after:            Mon 28 Dec 2026 08:00:00 +0000
asID:                     38320
IP address blocks:        175.103.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
                          rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 14:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7f:2b:19:20:39:a3:38:fc:82:a0:ef:a8:57:4d:e2:fe:e5:2a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
        Validity
            Not Before: Dec 29 07:55:00 2025 GMT
            Not After : Dec 28 08:00:00 2026 GMT
        Subject: CN=B38B26554985F52390D618B7F8FE26E07A5EF148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:33:18:b3:de:7e:6d:56:34:37:62:f0:2a:
                    c5:0d:d3:4a:4c:fe:d5:30:b2:2c:6f:b2:d9:8f:a9:
                    b1:e9:25:e3:8a:dc:1b:c7:4e:bb:1c:94:ca:37:83:
                    20:dc:c0:6b:ef:5c:56:52:00:4d:f7:e0:2d:11:b9:
                    ab:61:7c:40:8b:f7:c2:93:25:4c:58:e7:66:da:04:
                    72:38:ff:7c:6f:9e:9a:bd:9b:61:93:62:a8:2f:47:
                    d0:00:1a:6c:cc:87:17:b3:4a:0f:d4:41:1d:09:f4:
                    1b:df:a6:ac:69:e2:c7:0f:d3:e0:68:e4:60:8a:f3:
                    05:59:11:9b:ba:f9:3e:64:0e:23:17:8e:d2:07:f9:
                    23:d1:8a:18:ee:a7:24:52:6d:3a:10:f7:48:b4:f4:
                    eb:8d:d6:a9:8a:e8:3f:e0:45:bf:6e:9f:7c:53:38:
                    82:09:0a:8f:59:ec:20:d4:70:86:19:32:dc:a4:0f:
                    9d:65:64:23:23:41:de:94:70:b6:ac:06:99:25:40:
                    0c:80:0a:b0:10:eb:8e:71:07:2c:1f:b2:29:22:f5:
                    85:ed:b0:c1:dd:45:56:5d:d6:58:f8:1e:da:b1:c3:
                    3d:3f:98:81:c6:fc:45:9f:5f:c5:a2:9e:db:80:48:
                    db:c6:77:ab:2f:bc:64:86:ca:10:70:50:62:33:8e:
                    3f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8B:26:55:49:85:F5:23:90:D6:18:B7:F8:FE:26:E0:7A:5E:F1:48
            X509v3 Authority Key Identifier:
                keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33322e302f32342d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:70:ff:81:67:1a:e5:e2:83:09:8f:8f:18:a1:b7:5c:f4:db:
         7a:ce:38:a9:e9:25:34:08:04:02:d2:09:d4:db:09:36:74:f6:
         b9:30:f9:88:57:c4:05:f8:c5:50:67:5a:53:7d:0a:40:bb:4d:
         51:c0:cb:92:3e:06:a7:a8:9e:af:b1:7d:78:05:f7:8e:6c:ec:
         72:e7:44:33:51:3a:29:98:ce:cc:81:f6:c6:46:67:7c:a7:56:
         51:d1:2a:d3:36:a4:eb:29:8d:7d:71:97:80:a9:75:94:40:39:
         29:ad:fc:e6:eb:f2:32:48:f7:02:1a:b5:eb:f4:19:ac:42:7d:
         28:cc:4b:bd:8b:a5:0b:a8:d3:40:a5:48:bf:a6:37:07:4d:36:
         79:f2:cf:47:1a:b6:9f:3b:64:54:0d:4c:74:cb:5c:e9:cf:be:
         b5:22:9b:a6:c7:e4:d1:a1:bc:4d:1e:e5:5f:b6:68:e2:e4:03:
         81:1a:e4:29:4f:e3:8f:cf:c9:cd:2d:16:12:bb:ff:fa:3a:35:
         78:4c:71:75:cc:5c:df:53:7b:aa:7b:3d:ad:40:b0:b5:74:e0:
         07:f9:1f:3a:a4:ad:f7:d4:d6:74:0b:7f:3e:03:84:e8:69:7b:
         11:fb:e6:72:bf:8c:5b:be:07:08:80:8c:98:3d:c1:a3:5d:67:
         74:8a:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:21:14 2026 by rpki-client