This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3137312e302f32342d3234203d3e20313335363239.roa
File:                     35322e38322e3137312e302f32342d3234203d3e20313335363239.roa (raw, json)
Hash identifier:          V2IsTTD+YBLjIpGCWch8npi5V+LVGlQ6eiiuQMfl+0A=
Subject key identifier:   94:CC:32:D5:E8:70:41:A6:98:CB:1C:17:D0:39:B4:8E:86:2C:A7:DB
Certificate issuer:       /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial:       6D53ED7B42355EF283E9709DD40B2E5656796533
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3137312e302f32342d3234203d3e20313335363239.roa
Signing time:             Tue 20 Jan 2026 02:15:33 +0000
ROA not before:           Tue 20 Jan 2026 02:10:33 +0000
ROA not after:            Tue 19 Jan 2027 02:15:33 +0000
asID:                     135629
IP address blocks:        52.82.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 09:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:53:ed:7b:42:35:5e:f2:83:e9:70:9d:d4:0b:2e:56:56:79:65:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
        Validity
            Not Before: Jan 20 02:10:33 2026 GMT
            Not After : Jan 19 02:15:33 2027 GMT
        Subject: CN=94CC32D5E87041A698CB1C17D039B48E862CA7DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8b:0f:70:4d:39:bf:9b:20:0e:04:4c:76:50:
                    77:2d:79:c4:a7:ba:75:6d:cf:4c:b7:ac:8d:11:08:
                    b5:1b:7e:98:9c:76:da:ff:90:b2:ca:bb:9d:bc:1e:
                    76:00:64:b1:d3:31:b5:57:69:28:c7:d1:c9:54:18:
                    4e:33:7a:8d:82:fd:1f:24:27:c8:de:2d:bf:b7:e6:
                    4b:4f:76:71:3a:d1:2b:e9:65:4b:d1:c4:6a:c1:e5:
                    eb:8b:cf:20:4a:b3:9d:84:c5:63:d1:cb:02:0c:07:
                    5b:e1:34:71:13:38:99:94:39:a6:f8:0b:35:2d:ed:
                    d1:50:ab:eb:cb:e5:43:80:2a:bb:82:51:f1:e8:88:
                    54:f4:fd:6e:52:93:f6:5b:b8:f2:0c:92:7d:ff:3f:
                    43:82:95:c9:96:19:27:72:9a:60:c0:19:44:0e:8f:
                    59:9d:43:67:40:0e:c2:bc:bf:50:f8:47:6b:c9:82:
                    ca:8b:01:38:bb:85:c8:e0:a7:e8:e2:33:ba:18:3f:
                    74:d6:0f:ff:a9:e7:7b:2c:21:6a:37:12:ea:b0:fa:
                    6a:fb:13:6a:48:1f:53:71:ef:a0:2e:3a:26:bb:fb:
                    3f:00:45:57:5d:cc:7a:81:ce:61:2f:25:8c:0a:0a:
                    67:23:a3:eb:05:a1:ca:a9:46:af:9c:1f:fd:cb:70:
                    3e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CC:32:D5:E8:70:41:A6:98:CB:1C:17:D0:39:B4:8E:86:2C:A7:DB
            X509v3 Authority Key Identifier:
                keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/35322e38322e3137312e302f32342d3234203d3e20313335363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.82.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:0b:05:75:86:eb:04:42:38:26:14:e4:b1:63:5b:d6:cd:a7:
         af:3f:54:59:7f:ee:22:e6:de:82:90:ea:57:95:1a:2b:6c:27:
         ba:c1:ae:5e:71:1d:3d:5d:3e:1c:bf:a6:65:12:ec:15:17:7b:
         6f:f3:51:bf:92:66:9b:1e:19:6b:53:e1:0f:4d:0e:c1:84:f4:
         cf:00:84:24:86:5f:d2:2f:25:1b:0a:8b:bd:ab:ae:c4:aa:6d:
         ca:64:56:db:ef:61:b6:ea:f7:60:7e:09:42:4f:8e:8b:84:5f:
         67:ff:36:44:27:bf:81:a9:a5:b6:8e:be:5e:43:b3:e8:44:17:
         ae:cc:8d:a3:d1:73:09:1e:04:bc:27:0d:f2:75:a4:03:eb:57:
         16:60:ee:f6:a5:4f:e1:a7:b6:a5:90:84:25:2f:de:13:33:b3:
         8a:be:10:85:49:8f:6b:99:9d:5a:ca:8f:20:47:7d:98:5f:82:
         be:b1:83:33:0c:a6:1e:43:ed:91:f4:54:f7:31:ea:a0:36:fc:
         93:2c:c7:bd:8f:5c:1a:59:ac:92:87:d7:11:b9:33:32:95:3d:
         a9:91:cf:0f:66:a4:61:7c:19:89:35:b5:fa:5b:15:a2:2f:79:
         88:c2:bc:5d:ff:11:c6:5b:dd:25:70:a3:76:9d:70:8d:ed:84:
         3b:80:ca:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:17:08 2026 by rpki-client