This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/3135372e36362e33382e302f32342d3234203d3e203435333035.roa
File:                     3135372e36362e33382e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          HKyeZGWabp6YfJUwjDFhsWbo0T55m8huqonU6rGdOys=
Subject key identifier:   53:58:F6:DC:92:B0:37:62:B4:AF:A6:63:80:1B:53:4A:9F:8C:9F:D2
Certificate issuer:       /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36
Certificate serial:       43BB638746EDF2C582E0B32D54FEE154F21F426E
Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/3135372e36362e33382e302f32342d3234203d3e203435333035.roa
Signing time:             Sun 18 Jan 2026 05:00:02 +0000
ROA not before:           Sun 18 Jan 2026 04:55:02 +0000
ROA not after:            Sun 17 Jan 2027 05:00:02 +0000
asID:                     45305
IP address blocks:        157.66.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl
                          rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 21:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bb:63:87:46:ed:f2:c5:82:e0:b3:2d:54:fe:e1:54:f2:1f:42:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36
        Validity
            Not Before: Jan 18 04:55:02 2026 GMT
            Not After : Jan 17 05:00:02 2027 GMT
        Subject: CN=5358F6DC92B03762B4AFA663801B534A9F8C9FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:00:98:ef:f7:77:e6:eb:a7:62:a3:dc:9d:f7:
                    f6:d4:3b:f0:5c:bd:e0:97:10:b7:77:99:fc:db:c9:
                    12:bd:bb:18:b1:42:ba:59:06:a5:53:96:b1:14:f3:
                    cb:9c:9f:0c:db:d2:ee:9f:bf:4a:59:b3:de:67:fd:
                    88:44:33:30:85:2b:04:73:7c:24:50:c0:92:66:29:
                    bb:0a:bd:2e:64:8e:23:54:97:be:4a:da:64:29:e7:
                    5a:7b:77:56:0c:10:1f:df:22:66:f6:8f:ad:f3:a5:
                    38:3a:aa:d4:7d:5d:fd:9e:4b:f0:52:f4:da:14:c8:
                    a9:62:e2:57:28:b5:80:49:ab:26:8d:98:bd:36:4d:
                    68:90:16:ef:ee:2b:f8:31:2c:5f:c8:7e:a3:48:c4:
                    eb:52:56:24:6f:30:64:6f:18:33:ab:c0:88:e2:f4:
                    48:ff:aa:5c:d9:23:95:09:29:62:52:90:46:c1:63:
                    62:69:3c:44:8b:33:e9:3b:b7:11:56:d7:7a:9a:e1:
                    26:e2:74:39:0d:f9:66:30:10:68:6d:c9:06:30:1d:
                    ff:47:d3:32:cd:a7:a6:2d:ec:4a:4c:49:76:d5:d7:
                    6b:55:6c:23:07:fb:ae:cf:1c:a5:f8:a8:dc:e8:77:
                    3d:ba:24:61:29:1c:05:c9:91:18:cf:a2:05:a6:33:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:58:F6:DC:92:B0:37:62:B4:AF:A6:63:80:1B:53:4A:9F:8C:9F:D2
            X509v3 Authority Key Identifier:
                keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/3135372e36362e33382e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:86:9a:09:54:42:d3:44:d4:24:c0:af:4c:1e:f6:e2:9c:75:
         cf:1d:4a:54:e1:4d:66:82:c2:0b:d8:b8:9d:3e:31:a4:5c:31:
         b0:3b:8a:6b:70:ac:44:37:47:a2:9e:81:eb:64:d5:17:ce:5d:
         75:aa:85:cd:5c:4a:ac:0c:a3:22:19:70:1a:39:e9:44:8d:ad:
         a4:73:e8:a8:30:e1:22:94:7a:39:d7:4c:89:eb:30:df:04:1d:
         30:0e:a7:b0:5b:15:4b:75:70:83:c7:f4:74:5d:87:5e:ec:4a:
         73:50:d0:36:76:c4:f6:ed:93:49:81:47:2a:d6:cb:3c:ad:20:
         a2:7e:5f:97:c0:45:4d:e1:69:d4:50:c6:9a:8b:86:70:6b:0a:
         26:48:ff:53:65:d2:6e:71:17:ca:4c:b0:b0:7a:01:50:22:24:
         83:ba:e1:22:85:e1:b7:b7:24:c1:9d:20:95:4b:1f:dd:5e:71:
         74:3a:ba:30:6b:6f:68:d6:10:22:36:4b:50:f3:a0:e6:a8:57:
         02:76:61:ca:81:b9:3c:44:5c:ce:0d:c2:c6:73:14:b6:b3:a2:
         19:5a:d5:cb:99:31:10:d1:63:11:e4:b9:4c:1a:76:ab:1c:01:
         b1:99:07:77:7b:14:4e:01:95:1a:2d:38:09:48:26:e4:7b:21:
         46:61:e5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:38:44 2026 by rpki-client