This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32382e302f32332d3234203d3e203538333738.roa
File:                     3230332e38332e32382e302f32332d3234203d3e203538333738.roa (raw, json)
Hash identifier:          /XG3071XWZMkpDs317+jcskExZ2YMBWnbeGIwYNHihY=
Subject key identifier:   0F:E4:2D:E2:B1:DD:E4:4D:1C:54:95:5F:32:09:0D:8A:E2:A6:30:39
Certificate issuer:       /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial:       4884B219B9D6DA282594E5B25E9240F0C0EEFAE8
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32382e302f32332d3234203d3e203538333738.roa
Signing time:             Tue 16 Dec 2025 08:00:02 +0000
ROA not before:           Tue 16 Dec 2025 07:55:02 +0000
ROA not after:            Tue 15 Dec 2026 08:00:02 +0000
asID:                     58378
IP address blocks:        203.83.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
                          rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 18:28:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:84:b2:19:b9:d6:da:28:25:94:e5:b2:5e:92:40:f0:c0:ee:fa:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
        Validity
            Not Before: Dec 16 07:55:02 2025 GMT
            Not After : Dec 15 08:00:02 2026 GMT
        Subject: CN=0FE42DE2B1DDE44D1C54955F32090D8AE2A63039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6b:d6:f2:cf:c3:a9:e9:9a:01:5f:36:d7:ab:
                    c2:8e:49:46:9c:72:04:f0:22:8c:73:10:bc:35:7f:
                    02:40:e8:c5:3b:59:cb:a1:57:2b:f9:0a:a6:b4:57:
                    34:ec:29:ea:e2:b3:e3:56:9c:14:58:33:ce:1b:74:
                    33:cf:e7:65:9c:79:ef:1b:c1:fa:b7:00:ca:61:1b:
                    2c:e9:1f:25:40:81:80:56:2b:8e:c4:fc:2c:b6:4f:
                    e0:1b:62:3c:ba:fe:69:f1:7a:16:30:98:26:85:43:
                    8b:8b:2c:ee:3f:e9:a3:36:6b:cc:c6:b0:94:c9:5e:
                    a6:24:4e:eb:b6:d8:30:b4:54:ff:63:40:23:c5:a5:
                    51:4e:d1:dd:8a:21:82:ea:72:6a:b8:69:4c:7c:17:
                    51:1b:4b:68:fa:21:78:45:5c:e5:d1:17:49:1c:80:
                    25:e0:1d:c6:b4:e4:30:ac:d3:b6:28:f7:51:9a:c7:
                    65:72:6d:a3:a1:45:8a:61:e7:fe:3e:e0:70:67:31:
                    e3:ca:15:27:13:c8:74:33:52:aa:48:38:55:75:61:
                    50:e2:1e:45:e1:74:c8:77:ce:10:6b:d5:03:5c:f7:
                    f6:ac:ef:42:9e:68:4b:8c:ef:e8:3e:2c:6f:86:b7:
                    26:e5:c6:ca:2e:bb:6e:f2:d9:d5:0a:04:8a:bd:7e:
                    34:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E4:2D:E2:B1:DD:E4:4D:1C:54:95:5F:32:09:0D:8A:E2:A6:30:39
            X509v3 Authority Key Identifier:
                keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32382e302f32332d3234203d3e203538333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.83.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:ec:21:6e:69:72:74:0f:0d:fa:11:41:2e:56:59:22:95:55:
         7d:0f:47:c6:89:7e:55:5e:ec:62:e1:46:a4:41:d4:74:46:52:
         9e:33:e0:b6:fe:f8:33:a2:d6:f7:c6:c1:a8:a5:82:1e:e2:ba:
         bd:4d:5c:90:56:48:dd:ce:e6:0e:a5:de:d1:fe:9e:fd:3c:a8:
         ad:ab:c0:76:29:45:c5:37:35:7b:b4:9c:11:88:dd:92:35:e0:
         fe:1e:4b:d3:c4:8e:b4:a6:05:7b:94:54:82:38:dc:6f:f7:26:
         64:af:cc:44:b0:c6:87:48:e1:78:5d:0b:ad:a7:29:d1:e1:c4:
         21:70:42:64:34:05:85:df:39:2a:1d:b5:5e:7b:13:49:f8:c4:
         0d:46:60:73:06:87:5b:1d:7a:04:74:53:93:93:c2:ef:a1:e8:
         ec:82:23:97:25:37:83:ed:fe:64:b4:78:2d:2d:7c:05:92:17:
         2f:ea:0d:02:76:d5:f3:e1:fb:e7:12:09:03:14:a2:03:93:f2:
         8b:8a:cd:fe:46:23:32:8f:3d:3a:e1:79:4d:4b:72:9e:e7:d2:
         3a:c7:7d:b8:43:cb:89:d5:3c:c9:b9:2d:bd:ea:f1:f6:11:da:
         d8:4e:07:44:f1:bc:11:d0:fc:7f:0c:f8:ad:1f:ae:8a:fa:fa:
         12:a9:9b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:27:47 2025 by rpki-client