This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131372e302f32342d3234203d3e203538333936.roa
File:                     32372e35342e3131372e302f32342d3234203d3e203538333936.roa (raw, json)
Hash identifier:          k7mCh/V5YVLHeWfm4YNRz3kUy7wdS8SY2ttWOxrYovI=
Subject key identifier:   11:FC:73:F8:C5:4F:B5:B6:B2:D2:39:43:84:AA:B6:5A:F6:23:51:2D
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       724FA9B0368D671F0BC7111ACB3DC9A28E364599
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131372e302f32342d3234203d3e203538333936.roa
Signing time:             Wed 05 Nov 2025 10:03:04 +0000
ROA not before:           Wed 05 Nov 2025 09:58:04 +0000
ROA not after:            Wed 04 Nov 2026 10:03:04 +0000
asID:                     58396
IP address blocks:        27.54.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
                          rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4f:a9:b0:36:8d:67:1f:0b:c7:11:1a:cb:3d:c9:a2:8e:36:45:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: Nov  5 09:58:04 2025 GMT
            Not After : Nov  4 10:03:04 2026 GMT
        Subject: CN=11FC73F8C54FB5B6B2D2394384AAB65AF623512D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:7e:f3:07:52:e7:64:ab:ca:71:74:9d:39:
                    37:4f:79:48:7b:4e:9d:02:bb:51:59:6b:ec:c0:84:
                    a8:76:6a:56:6e:e6:19:02:68:6f:e4:76:5e:f3:42:
                    27:44:24:4e:fa:e3:21:da:6c:39:31:3c:0e:99:fb:
                    8e:bd:fd:19:a6:ca:1a:21:c5:d1:9b:df:a9:ad:6d:
                    bf:48:6e:4a:30:8a:93:df:55:2f:d3:76:16:5a:e8:
                    34:54:96:84:f2:19:29:e3:34:0c:7a:eb:5c:04:ed:
                    b1:a4:b7:56:02:e2:22:2a:67:e7:e9:e7:d4:f0:d1:
                    68:0f:0f:90:3b:18:cb:66:ba:50:7b:73:21:1d:25:
                    1f:da:b2:75:be:dc:34:9f:8a:e2:0d:db:08:98:88:
                    70:34:02:2a:fd:60:2b:6d:15:53:74:21:d7:42:95:
                    f4:53:b6:1c:a5:90:91:21:b1:96:e4:8c:5b:aa:fb:
                    95:a3:57:8b:5a:48:7e:01:51:03:f9:a6:38:10:80:
                    d3:55:e9:9a:10:b4:6f:18:97:a8:4c:10:53:e6:79:
                    87:d8:be:19:9e:61:95:12:ae:5b:99:27:12:a8:2a:
                    85:5d:bb:10:48:f4:02:bd:50:1f:11:6d:bf:f5:eb:
                    2f:ce:d3:87:f8:8c:cc:e7:6c:fa:b6:96:6c:5c:b8:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FC:73:F8:C5:4F:B5:B6:B2:D2:39:43:84:AA:B6:5A:F6:23:51:2D
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131372e302f32342d3234203d3e203538333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:5e:10:bd:c5:98:0b:5d:38:5c:5a:a3:cb:3d:aa:02:46:6e:
         24:c1:d6:5e:27:36:87:00:c1:6e:35:db:36:32:0b:03:bb:ba:
         05:d8:f7:04:ef:e6:5d:ff:bc:2b:21:c5:17:ea:26:20:35:c0:
         1e:5f:d3:bf:67:c5:c8:1c:e8:28:b6:31:96:de:37:2b:a0:83:
         27:80:98:bc:84:9f:be:41:3f:e7:ff:71:b2:dd:4b:bc:67:0f:
         38:ac:75:5a:93:ab:b1:d6:e7:f8:15:84:6f:7d:eb:d9:f5:3e:
         9d:6e:76:7b:a3:9b:27:e6:39:00:c8:e2:e5:85:e3:67:5c:3b:
         17:da:01:be:c5:8f:2e:f8:a1:6c:21:fb:d3:83:5d:75:bc:68:
         29:d4:c8:0c:09:af:ee:4f:38:e8:28:dc:90:7a:81:4b:b9:f1:
         65:d6:a1:da:7a:46:87:9d:80:b8:7d:f8:42:f3:86:b7:90:bb:
         39:9c:ad:38:b4:d6:90:3e:78:b0:b3:a6:db:ab:4b:5c:0b:20:
         de:d7:d9:6c:85:30:9e:09:8f:3b:9e:eb:3b:27:d7:a4:ed:f7:
         16:3d:5d:ab:38:f6:76:5a:78:ba:04:45:b5:c7:ce:a9:cc:0c:
         f1:a4:8c:2b:92:88:68:b7:a8:2f:4d:47:34:c7:c4:4e:ce:d3:
         78:90:ea:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:56:11 2025 by rpki-client