This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e35372e302f32342d3234203d3e203338333230.roa
File:                     3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier:          V9Mppv9SlbFw56ep+HO54EeH/ulvHDySp4xMGMMMAGE=
Subject key identifier:   53:F3:26:9C:45:28:CA:60:F3:17:9C:B1:60:60:12:48:50:FA:9E:2C
Certificate issuer:       /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial:       42B6F88E305E330271EE53D2EE4250595257DF0B
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e35372e302f32342d3234203d3e203338333230.roa
Signing time:             Mon 29 Dec 2025 07:00:00 +0000
ROA not before:           Mon 29 Dec 2025 06:55:00 +0000
ROA not after:            Mon 28 Dec 2026 07:00:00 +0000
asID:                     38320
IP address blocks:        175.103.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
                          rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 14:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b6:f8:8e:30:5e:33:02:71:ee:53:d2:ee:42:50:59:52:57:df:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
        Validity
            Not Before: Dec 29 06:55:00 2025 GMT
            Not After : Dec 28 07:00:00 2026 GMT
        Subject: CN=53F3269C4528CA60F3179CB16060124850FA9E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ed:db:23:06:78:25:36:1e:1a:b4:ea:a3:52:
                    58:81:b7:26:ec:53:c5:58:cd:f6:86:6f:11:96:8c:
                    ee:47:8f:b3:ed:7a:2c:4d:3b:cb:4d:70:53:a9:33:
                    7c:d1:48:d6:6c:6f:b8:91:57:1d:50:55:ae:4e:90:
                    cc:e4:0a:70:67:65:5f:4a:52:e6:68:44:06:57:9f:
                    43:0e:83:db:da:d2:33:31:1a:32:77:6e:ea:b2:50:
                    f5:63:8f:52:c7:23:f2:7a:a8:e2:53:84:7a:b0:ad:
                    7a:be:65:61:75:5e:8d:c3:92:53:c3:db:3f:b4:4f:
                    74:88:4f:e6:e4:a3:ab:16:14:d1:96:f5:39:74:5f:
                    b6:50:f4:1a:29:8a:2c:bf:90:04:8d:3c:f2:43:e9:
                    d8:eb:1c:c5:56:b9:1a:83:8e:da:17:8e:6b:43:eb:
                    66:9d:47:fa:19:fa:27:8d:17:9f:e7:03:fc:86:20:
                    e3:cd:57:d6:92:5e:2a:8e:55:e0:4d:e5:34:6c:7f:
                    45:f6:64:fa:d2:f2:ae:13:6a:b4:b5:8c:90:dc:7d:
                    a0:8c:87:de:c2:40:21:b5:d9:de:cd:8e:ac:ef:d2:
                    41:00:06:c4:d2:03:bb:52:cd:e5:c0:d9:c5:94:7f:
                    eb:e1:9e:65:d3:53:0e:57:0e:99:50:b5:5b:82:ed:
                    37:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F3:26:9C:45:28:CA:60:F3:17:9C:B1:60:60:12:48:50:FA:9E:2C
            X509v3 Authority Key Identifier:
                keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e35372e302f32342d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:60:db:eb:24:c1:1b:b9:c5:5e:ae:67:41:98:a0:42:51:c9:
         3a:a2:c4:42:d3:76:49:3e:ec:83:0e:2f:80:46:ed:80:a4:c3:
         13:1d:78:d1:84:09:9b:ba:6f:16:d5:b7:0e:d5:90:32:94:55:
         65:1b:96:44:dc:ae:5b:27:7f:c3:1d:9c:b0:92:e8:0e:76:72:
         ff:25:71:8c:11:60:3f:4a:34:75:8f:c9:59:0d:bb:c8:de:da:
         a4:e7:27:23:cd:f3:72:8b:86:e3:d2:fa:91:e9:58:28:94:bc:
         16:02:c1:cc:58:c1:3b:5c:ca:d0:2d:ae:99:be:ae:e8:a2:62:
         77:38:b3:38:c3:c4:e1:77:71:5b:e1:c5:4c:6c:40:26:1a:05:
         53:1a:60:d1:47:57:e6:1b:b1:78:f9:04:ee:74:34:ba:4d:50:
         fd:10:33:cb:68:be:1f:2d:25:31:da:99:15:8c:29:37:2e:e0:
         ac:11:c6:c3:8c:e3:59:1c:5f:80:b9:12:99:41:db:ec:2a:21:
         78:51:3f:97:e3:17:b2:63:ac:5c:83:3f:36:de:78:f1:7f:1d:
         37:9b:fb:bd:09:d5:85:12:fc:4d:85:b8:e7:e5:45:70:6d:5e:
         17:2d:f1:74:64:61:12:93:eb:11:0c:a0:90:71:58:af:9f:3f:
         03:36:72:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:21:21 2026 by rpki-client