This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a3164353a3a2f34382d3438203d3e20313339343137.roa
File:                     323430343a636163303a3164353a3a2f34382d3438203d3e20313339343137.roa (raw, json)
Hash identifier:          CX8B1mfhdsQDS9zQa9oKoJyxv1N2NZ8tGCcdQTHRuuE=
Subject key identifier:   75:E5:74:80:E3:D9:7D:B9:4D:67:4B:25:6D:FC:C2:30:B8:64:BC:8B
Certificate issuer:       /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
Certificate serial:       08DEAAD5C43C01A6259940B6ED2AD47DD20B47D2
Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a3164353a3a2f34382d3438203d3e20313339343137.roa
Signing time:             Tue 30 Dec 2025 05:02:33 +0000
ROA not before:           Tue 30 Dec 2025 04:57:33 +0000
ROA not after:            Tue 29 Dec 2026 05:02:33 +0000
asID:                     139417
IP address blocks:        2404:cac0:1d5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl
                          rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 17:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:de:aa:d5:c4:3c:01:a6:25:99:40:b6:ed:2a:d4:7d:d2:0b:47:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
        Validity
            Not Before: Dec 30 04:57:33 2025 GMT
            Not After : Dec 29 05:02:33 2026 GMT
        Subject: CN=75E57480E3D97DB94D674B256DFCC230B864BC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e4:a1:e2:75:c0:0f:7e:c4:ef:ca:18:ee:1a:
                    a9:df:b2:13:32:8b:5b:17:14:9b:e6:65:67:a0:cc:
                    e1:c9:60:f0:cb:61:41:1a:3e:21:d2:b7:c1:9d:34:
                    4c:d6:fd:c0:58:bf:ed:b8:7d:cc:cc:47:dc:be:16:
                    3a:16:ae:ab:c7:5a:55:8d:40:af:ac:ad:23:48:21:
                    32:96:18:ed:c4:10:df:5a:ea:87:b3:29:02:27:f7:
                    1d:03:74:2b:44:bb:d0:db:0a:87:1e:39:b7:91:e1:
                    4d:83:ec:3b:23:7e:29:c2:6e:e5:08:81:05:c1:d3:
                    c3:c1:ec:cc:ae:99:c5:db:a9:c2:2b:51:2f:7f:57:
                    3c:1b:1f:cb:94:bb:4e:cd:e6:0e:24:04:5c:2d:7c:
                    68:10:c6:f6:36:20:1e:fd:80:52:e8:40:fa:5b:c1:
                    bd:59:7a:22:79:2f:a6:79:04:c8:1a:be:8c:8c:c7:
                    0e:93:d1:54:74:0c:90:4b:2a:5d:45:ae:88:ca:4e:
                    1b:97:9c:d1:54:e3:66:54:ea:81:1e:d2:d6:47:1e:
                    7a:1a:c3:46:06:fb:34:41:cb:b3:f2:66:36:90:8d:
                    a9:1a:ee:8c:5b:3a:8b:03:e5:af:88:ea:33:a3:14:
                    27:11:db:24:6a:47:f6:ef:f1:ef:91:c9:33:63:c3:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E5:74:80:E3:D9:7D:B9:4D:67:4B:25:6D:FC:C2:30:B8:64:BC:8B
            X509v3 Authority Key Identifier:
                keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/323430343a636163303a3164353a3a2f34382d3438203d3e20313339343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:cac0:1d5::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:78:ec:d5:1b:cc:fe:b4:77:a9:b2:d1:7b:c1:36:6f:bd:02:
         f5:02:1d:dc:b9:72:83:20:19:4b:7c:99:94:29:ba:34:83:b2:
         ee:6d:56:d4:58:40:ea:dc:e6:4c:26:0d:78:67:45:f4:8c:90:
         84:9e:31:bf:bd:7d:56:12:eb:db:ac:df:b0:c6:a7:47:fe:44:
         f5:9e:02:5f:7c:ab:0b:cb:0a:73:b8:f2:ca:41:33:fd:63:c2:
         40:4f:4c:14:bd:7f:3c:03:b3:06:85:bd:d9:9c:a1:b4:bb:b4:
         64:bd:2f:eb:e3:ff:af:f0:fa:b7:f8:dc:5a:5a:ee:5d:8f:05:
         56:8e:95:c3:ff:cb:83:90:3d:e2:78:d7:e1:0c:30:90:07:35:
         84:9c:da:61:ac:d2:59:95:5b:31:c4:4e:d2:58:0f:79:cc:fa:
         c5:5b:74:e0:ac:96:82:49:b4:ed:91:9a:4d:62:c8:06:b3:b6:
         05:38:2f:5e:48:14:9d:1d:04:47:5a:30:b5:6c:75:98:d7:5a:
         50:65:13:80:ed:0a:6d:bf:b1:47:f2:2b:1d:94:1d:64:cc:74:
         2d:8c:4f:74:18:9c:95:be:ed:c7:51:d0:97:99:59:a3:ad:46:
         1d:65:65:00:6d:c4:69:af:52:03:33:73:1c:d1:06:ad:aa:81:
         fc:a0:07:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:38:56 2026 by rpki-client