This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/323430353a363063303a3a2f33322d3332203d3e20313332363337.roa
File:                     323430353a363063303a3a2f33322d3332203d3e20313332363337.roa (raw, json)
Hash identifier:          T7pT3m50bD1TtJQnSE7uRmUGoMQoMkMp3Yiyl2FWmEI=
Subject key identifier:   45:5C:5A:BB:C1:72:02:3F:8A:77:5E:CD:DC:D1:1C:81:96:24:A9:BA
Certificate issuer:       /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
Certificate serial:       51E247233F391554C2E3BD288776DC72DEBBD225
Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/323430353a363063303a3a2f33322d3332203d3e20313332363337.roa
Signing time:             Thu 15 Jan 2026 07:52:06 +0000
ROA not before:           Thu 15 Jan 2026 07:47:06 +0000
ROA not after:            Thu 14 Jan 2027 07:52:06 +0000
asID:                     132637
IP address blocks:        2405:60c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl
                          rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 09:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e2:47:23:3f:39:15:54:c2:e3:bd:28:87:76:dc:72:de:bb:d2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
        Validity
            Not Before: Jan 15 07:47:06 2026 GMT
            Not After : Jan 14 07:52:06 2027 GMT
        Subject: CN=455C5ABBC172023F8A775ECDDCD11C819624A9BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7d:e0:90:3d:db:19:14:61:83:a7:02:4b:8e:
                    26:21:09:2e:f3:5e:20:a6:61:08:ce:fc:c6:15:22:
                    b0:c9:8d:48:56:4b:96:ab:5e:98:23:bc:09:ef:fa:
                    ac:58:4d:1e:7f:f6:1f:53:2d:8f:87:d1:26:e3:cf:
                    19:a1:3a:0b:9f:f4:bd:14:35:a9:b4:cd:63:16:9b:
                    04:06:93:30:dc:4d:f6:14:24:af:f4:a0:dd:0b:58:
                    42:a0:fc:44:5a:f0:32:ca:ad:bc:4d:36:4a:45:80:
                    6a:d6:15:4e:1e:08:03:2b:8a:9d:1e:1f:8e:69:40:
                    b1:e8:8f:ed:df:a2:54:1e:fb:62:56:d0:2c:7a:7d:
                    66:37:16:ce:44:7a:2f:26:ce:82:52:45:ef:eb:6e:
                    09:13:f2:f5:79:c7:9a:11:4d:f3:9c:7c:30:7b:17:
                    33:5c:00:be:f7:c6:36:5e:8a:45:2d:14:0f:6a:3c:
                    40:5f:2e:c0:79:21:04:b4:04:8b:b3:69:af:48:30:
                    65:56:6b:e5:a6:ea:b6:85:58:53:a0:89:7d:fb:7a:
                    5e:43:ae:bb:18:08:35:66:80:90:cf:f2:b9:4b:54:
                    f1:0f:1d:86:f8:46:ab:aa:8e:5b:ae:2b:93:d6:f3:
                    d5:7c:da:5b:31:bd:d9:5a:77:8e:99:9c:fd:78:00:
                    21:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5C:5A:BB:C1:72:02:3F:8A:77:5E:CD:DC:D1:1C:81:96:24:A9:BA
            X509v3 Authority Key Identifier:
                keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/323430353a363063303a3a2f33322d3332203d3e20313332363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:60c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:71:81:4d:55:fe:40:d2:99:ac:15:7c:f1:c3:e9:09:81:d5:
         6b:95:f4:3d:24:0a:6d:1e:06:a2:ce:6a:19:23:88:7b:5a:92:
         53:77:78:25:2d:90:ec:4f:0a:dd:11:da:27:ba:53:27:00:63:
         35:36:53:c6:ee:c5:2c:a8:3c:22:e6:90:a4:00:d1:a0:f9:a9:
         42:7d:9b:b0:9f:d3:26:06:ed:f6:20:51:32:08:1d:b4:99:40:
         32:00:60:6c:0f:f0:a0:ec:da:20:fc:0c:20:6c:87:4a:3d:27:
         fc:62:e4:dd:3c:45:7a:4d:e1:81:c2:8a:cb:e1:61:60:54:98:
         17:c1:f1:e4:95:61:f5:21:14:70:c0:93:3a:1a:e7:b0:7d:b3:
         fa:c6:37:ad:5d:5a:8d:01:c2:57:3a:c5:2c:fd:d9:06:66:12:
         a7:8d:51:2b:fd:cf:d5:9d:f4:36:7d:f3:bb:96:fc:91:6d:e9:
         fb:fe:dd:f3:8c:62:05:89:a0:71:e7:2d:4f:05:03:26:fb:49:
         99:35:7d:dd:93:2c:84:2a:76:6c:86:63:2b:d9:55:51:86:bc:
         ec:72:a1:d5:21:e7:77:a5:c2:71:fd:8b:42:df:37:f1:82:0e:
         be:e3:a9:6a:cc:70:fb:fc:6d:47:a1:9e:08:90:86:68:ef:1a:
         3e:dd:cc:05
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUUeJHIz85FVTC470oh3bcct670iUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMy
MTZCMUVEMTAeFw0yNjAxMTUwNzQ3MDZaFw0yNzAxMTQwNzUyMDZaMDMxMTAvBgNV
BAMTKDQ1NUM1QUJCQzE3MjAyM0Y4QTc3NUVDRERDRDExQzgxOTYyNEE5QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQfeCQPdsZFGGDpwJLjiYhCS7z
XiCmYQjO/MYVIrDJjUhWS5arXpgjvAnv+qxYTR5/9h9TLY+H0SbjzxmhOguf9L0U
Nam0zWMWmwQGkzDcTfYUJK/0oN0LWEKg/ERa8DLKrbxNNkpFgGrWFU4eCAMrip0e
H45pQLHoj+3folQe+2JW0Cx6fWY3Fs5Eei8mzoJSRe/rbgkT8vV5x5oRTfOcfDB7
FzNcAL73xjZeikUtFA9qPEBfLsB5IQS0BIuzaa9IMGVWa+Wm6raFWFOgiX37el5D
rrsYCDVmgJDP8rlLVPEPHYb4RquqjluuK5PW89V82lsxvdlad46ZnP14ACGxAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQURVxau8FyAj+Kd17N3NEcgZYkqbowHwYDVR0j
BBgwFoAUnqOrQi2CT92aJWIvhJJCAyFrHtEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZjZkNTU4Mi05YTYzLTQxZTUtODk2OS1kYjkxOTI3N2E1ZTUvMC85RUEzQUI0MjJE
ODI0RkREOUEyNTYyMkY4NDkyNDIwMzIxNkIxRUQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUVBM0FCNDIyRDgyNEZERDlBMjU2MjJGODQ5MjQyMDMyMTZC
MUVEMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmNmQ1NTgyLTlhNjMtNDFlNS04
OTY5LWRiOTE5Mjc3YTVlNS8wLzMyMzQzMDM1M2EzNjMwNjMzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzMzMjM2MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFYMAwDQYJKoZI
hvcNAQELBQADggEBAH9xgU1V/kDSmawVfPHD6QmB1WuV9D0kCm0eBqLOahkjiHta
klN3eCUtkOxPCt0R2ie6UycAYzU2U8buxSyoPCLmkKQA0aD5qUJ9m7Cf0yYG7fYg
UTIIHbSZQDIAYGwP8KDs2iD8DCBsh0o9J/xi5N08RXpN4YHCisvhYWBUmBfB8eSV
YfUhFHDAkzoa57B9s/rGN61dWo0Bwlc6xSz92QZmEqeNUSv9z9Wd9DZ987uW/JFt
6fv+3fOMYgWJoHHnLU8FAyb7SZk1fd2TLIQqdmyGYyvZVVGGvOxyodUh53elwnH9
i0LfN/GCDr7jqWrMcPv8bUehngiQhmjvGj7dzAU=
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:02:30 2026 by rpki-client