This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136322e302f32332d3233203d3e203536323432.roa
File:                     3133372e35392e3136322e302f32332d3233203d3e203536323432.roa (raw, json)
Hash identifier:          f5hHen+W1VXCRis0jyLYMREhK7yiYlp/e1Oke9ZJemI=
Subject key identifier:   7E:C6:A2:6B:60:08:8E:21:40:C2:2F:FF:BE:E7:0C:4E:3C:E7:9C:B7
Certificate issuer:       /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial:       4C1F78C6F88AED907955DBFE1A72E34B189A2B50
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136322e302f32332d3233203d3e203536323432.roa
Signing time:             Sat 13 Dec 2025 09:00:00 +0000
ROA not before:           Sat 13 Dec 2025 08:55:00 +0000
ROA not after:            Sat 12 Dec 2026 09:00:00 +0000
asID:                     56242
IP address blocks:        137.59.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
                          rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 04:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1f:78:c6:f8:8a:ed:90:79:55:db:fe:1a:72:e3:4b:18:9a:2b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
        Validity
            Not Before: Dec 13 08:55:00 2025 GMT
            Not After : Dec 12 09:00:00 2026 GMT
        Subject: CN=7EC6A26B60088E2140C22FFFBEE70C4E3CE79CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:8b:1c:3c:a2:8b:24:79:37:17:b7:c2:f7:
                    71:10:9d:b7:92:e8:01:8e:f7:06:f3:a9:26:0f:73:
                    5c:74:c7:31:9b:5e:e6:55:5f:04:e8:9b:1f:2a:36:
                    64:84:99:2c:bd:86:10:3b:ee:d3:2f:4d:ab:6f:e4:
                    78:10:da:2e:d0:0b:8c:77:cb:2e:97:7c:68:35:97:
                    0c:28:ef:70:f1:90:6e:1b:2c:00:02:11:2f:e9:48:
                    18:85:b3:9d:25:92:46:9e:dc:3c:04:af:aa:cd:5f:
                    f8:cb:1c:a1:36:3b:d8:7c:fe:37:42:7b:c7:c7:fd:
                    7f:45:19:99:16:8c:9f:fe:29:ec:7f:f5:8e:69:49:
                    52:9c:4d:28:f5:c9:50:56:40:8a:13:57:55:e3:34:
                    35:1f:49:42:39:60:36:9d:7d:72:1c:f4:14:05:6f:
                    6b:36:9d:72:b3:a7:34:08:17:a8:6c:14:e4:e0:78:
                    12:84:b1:e3:2d:a5:f6:23:fc:38:41:94:2f:45:0f:
                    b7:87:d6:cd:d3:b8:c3:7c:f7:10:ac:92:a9:b0:8f:
                    aa:29:cf:79:56:eb:e3:1a:ea:23:78:f6:d0:84:8e:
                    65:78:aa:0d:30:a0:ce:21:be:d5:b2:e8:c4:4b:12:
                    34:c8:97:71:84:8c:22:f8:7e:c2:53:1e:48:5c:22:
                    24:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C6:A2:6B:60:08:8E:21:40:C2:2F:FF:BE:E7:0C:4E:3C:E7:9C:B7
            X509v3 Authority Key Identifier:
                keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3133372e35392e3136322e302f32332d3233203d3e203536323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.59.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:01:d3:00:8f:fa:b6:da:bf:27:4a:53:d4:51:b4:b8:d2:86:
         1c:02:f1:6b:1a:1c:c4:75:92:61:47:d1:3a:6f:cb:bc:c0:56:
         ed:0a:f0:fb:a6:11:6b:6b:52:ec:43:e3:f9:4d:70:bf:26:2f:
         a8:2a:a5:6a:3f:5d:2c:6a:e7:28:81:20:e6:94:7a:b5:c5:32:
         5c:c8:ba:7f:48:8e:8b:e5:9e:c8:76:4b:c9:f2:43:f5:c2:4a:
         05:0f:4a:28:28:c0:97:3b:e1:61:7d:40:5a:63:d5:f2:d4:27:
         46:0f:d5:8d:0e:c7:62:e1:cf:1c:58:6e:6a:4b:3d:34:09:e2:
         61:d4:cf:a4:05:0d:20:70:a5:86:84:e4:ca:11:5c:f7:6d:d7:
         d3:e2:6a:1b:d5:2b:3e:d8:3b:74:6f:f0:2c:34:1d:88:43:87:
         a2:34:61:d3:ae:39:52:e6:98:d6:93:c8:e2:ac:2a:0c:49:73:
         30:f9:ff:d3:25:a1:64:5d:8b:47:fd:8a:5f:52:86:34:5c:27:
         5c:ff:e0:2b:d9:6d:37:c5:90:86:54:5d:78:2c:d2:ea:de:57:
         41:6a:a2:27:a0:08:1f:2a:1f:53:06:60:99:3a:4f:ad:ab:25:
         b3:29:d8:80:99:7a:51:50:64:bb:67:02:20:00:c5:e4:75:8d:
         2e:e6:ec:15
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTB94xviK7ZB5Vdv+GnLjSxiaK1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0
ODUzMEU5RTAeFw0yNTEyMTMwODU1MDBaFw0yNjEyMTIwOTAwMDBaMDMxMTAvBgNV
BAMTKDdFQzZBMjZCNjAwODhFMjE0MEMyMkZGRkJFRTcwQzRFM0NFNzlDQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/L4scPKKLJHk3F7fC93EQnbeS
6AGO9wbzqSYPc1x0xzGbXuZVXwTomx8qNmSEmSy9hhA77tMvTatv5HgQ2i7QC4x3
yy6XfGg1lwwo73DxkG4bLAACES/pSBiFs50lkkae3DwEr6rNX/jLHKE2O9h8/jdC
e8fH/X9FGZkWjJ/+Kex/9Y5pSVKcTSj1yVBWQIoTV1XjNDUfSUI5YDadfXIc9BQF
b2s2nXKzpzQIF6hsFOTgeBKEseMtpfYj/DhBlC9FD7eH1s3TuMN89xCskqmwj6op
z3lW6+Ma6iN49tCEjmV4qg0woM4hvtWy6MRLEjTIl3GEjCL4fsJTHkhcIiQjAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUfsaia2AIjiFAwi//vucMTjznnLcwHwYDVR0j
BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy
NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz
MEU5RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3YTJkMjViLWNiMTgtNDViZS05
ZmExLTE1NGNhMTU3OTIyMy8wLzMxMzMzNzJlMzUzOTJlMzEzNjMyMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzUzNjMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAYk7ojANBgkqhkiG
9w0BAQsFAAOCAQEAoAHTAI/6ttq/J0pT1FG0uNKGHALxaxocxHWSYUfROm/LvMBW
7Qrw+6YRa2tS7EPj+U1wvyYvqCqlaj9dLGrnKIEg5pR6tcUyXMi6f0iOi+WeyHZL
yfJD9cJKBQ9KKCjAlzvhYX1AWmPV8tQnRg/VjQ7HYuHPHFhuaks9NAniYdTPpAUN
IHClhoTkyhFc923X0+JqG9UrPtg7dG/wLDQdiEOHojRh0645UuaY1pPI4qwqDElz
MPn/0yWhZF2LR/2KX1KGNFwnXP/gK9ltN8WQhlRdeCzS6t5XQWqiJ6AIHyofUwZg
mTpPraslsynYgJl6UVBku2cCIADF5HWNLubsFQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:57:21 2025 by rpki-client