This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa
File:                     3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (raw, json)
Hash identifier:          8FTUTVLO/YGnLimJUKup/f1xejq/xLXEMBRhc3g7tzY=
Subject key identifier:   4E:5D:C0:76:19:91:17:FF:51:E2:71:07:16:6D:AD:31:62:9F:E2:A7
Certificate issuer:       /CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD
Certificate serial:       1A5AA112AB1C1562627656128A49430281D31538
Authority key identifier: 17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa
Signing time:             Mon 05 Jan 2026 05:00:00 +0000
ROA not before:           Mon 05 Jan 2026 04:55:00 +0000
ROA not after:            Mon 04 Jan 2027 05:00:00 +0000
asID:                     58824
IP address blocks:        103.242.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl
                          rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:5a:a1:12:ab:1c:15:62:62:76:56:12:8a:49:43:02:81:d3:15:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD
        Validity
            Not Before: Jan  5 04:55:00 2026 GMT
            Not After : Jan  4 05:00:00 2027 GMT
        Subject: CN=4E5DC076199117FF51E27107166DAD31629FE2A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:01:e9:bb:d2:c9:e9:07:64:68:c9:a7:41:
                    fb:4a:e1:a2:16:44:6d:0e:f5:5a:60:d1:25:f3:b8:
                    5f:8d:43:35:a4:8a:77:09:9d:9b:72:fe:78:0a:8e:
                    7a:5d:a4:e1:ec:8a:de:f4:9a:e3:fe:2b:de:a7:e2:
                    ed:3d:39:25:a6:8d:cd:f9:34:95:a6:f0:e0:56:70:
                    49:20:ef:1e:f5:3b:40:ce:69:64:b4:4b:0a:31:53:
                    a2:07:60:79:36:1b:c6:9b:ae:75:f2:95:6a:b0:30:
                    7a:2e:3b:75:2e:35:64:d5:ce:3a:5a:19:d0:c2:f7:
                    37:28:db:f9:b7:fd:4d:3b:16:84:d6:6c:ef:c6:26:
                    11:3b:7d:59:db:50:f7:c6:09:a1:a8:ac:d5:16:5d:
                    1f:17:d3:1a:6f:2f:13:90:08:07:7f:80:d7:38:a8:
                    9c:67:04:80:7b:00:1b:d5:15:a8:13:ad:4e:ef:3f:
                    c9:b8:de:9b:f6:1a:fb:b5:11:31:68:09:f8:90:f7:
                    7f:08:97:5b:fe:96:af:3a:1d:b1:7d:f3:df:c5:22:
                    01:8b:4d:3d:d8:05:cb:b7:91:23:b0:5b:ac:65:be:
                    12:02:0d:1f:d7:9d:2d:51:40:05:6d:df:88:48:25:
                    c7:be:18:e7:f6:94:40:49:9b:6e:7e:3b:5a:d6:6e:
                    17:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5D:C0:76:19:91:17:FF:51:E2:71:07:16:6D:AD:31:62:9F:E2:A7
            X509v3 Authority Key Identifier:
                keyid:17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:8c:ea:3e:14:67:b9:77:e8:0e:c4:25:63:0c:d4:13:67:4e:
         5f:77:9e:36:51:31:09:dd:ba:b2:0d:2e:b3:92:14:96:b8:37:
         c0:88:f1:ad:82:59:4d:b6:cd:9a:ce:a5:2a:bd:b5:1b:51:27:
         6e:b3:41:e7:26:3c:e9:8e:f1:38:49:89:e5:9f:de:82:5d:6a:
         35:fb:ed:bc:81:91:e8:1e:7e:d2:65:3c:a8:0a:94:7c:50:f5:
         29:d3:30:b9:cc:a6:55:9f:9e:27:d4:d9:ae:e3:b0:67:f5:ef:
         0a:a3:7e:79:ce:9e:ea:28:be:01:37:84:50:b4:b9:7c:a4:91:
         aa:b9:2e:d7:e5:1d:1c:c2:9a:da:14:8e:fa:0f:95:e4:b2:b9:
         a7:7e:aa:30:e8:69:8f:0b:63:da:6c:79:07:75:e0:d4:0d:f0:
         30:35:03:17:e5:57:d5:ce:3e:8f:eb:e9:66:0c:ec:10:95:a7:
         fc:6b:18:84:a9:5b:91:9f:67:2c:79:50:0c:07:fb:f9:59:f5:
         d3:ed:e4:29:13:bf:6b:b5:02:9b:66:18:b0:f9:b2:54:38:87:
         61:87:2b:b1:6c:6a:92:d1:7e:9e:e3:22:df:82:37:4a:d7:fd:
         36:59:4c:4e:80:9e:86:56:0c:5d:6a:77:b5:7f:b4:ec:5e:95:
         78:15:07:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:43:38 2026 by rpki-client