This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66323a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a66323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          jeshbxs8VRhSokIKY0jMOUKPSlWE6ar848pihSz7Spc=
Subject key identifier:   EA:93:4A:8F:57:1D:5C:CA:AB:07:30:F2:AF:FB:71:18:C9:3D:57:2A
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       143773D1B4CC8697C47BA9D131E79465493252BF
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66323a3a2f34382d3438203d3e203539323832.roa
Signing time:             Sun 13 Jul 2025 11:46:10 +0000
ROA not before:           Sun 13 Jul 2025 11:41:10 +0000
ROA not after:            Sun 12 Jul 2026 11:46:10 +0000
asID:                     59282
IP address blocks:        2400:d680:f2::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 17 Dec 2025 21:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:37:73:d1:b4:cc:86:97:c4:7b:a9:d1:31:e7:94:65:49:32:52:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Jul 13 11:41:10 2025 GMT
            Not After : Jul 12 11:46:10 2026 GMT
        Subject: CN=EA934A8F571D5CCAAB0730F2AFFB7118C93D572A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9b:49:b5:e9:f3:af:e6:bb:bf:9d:6f:4c:63:
                    c3:5f:61:49:0a:97:ed:44:fc:61:73:e4:61:25:ba:
                    ac:9c:b5:bc:9b:38:5f:be:b3:72:0b:86:b1:80:25:
                    eb:ea:85:9c:54:2d:9f:9b:9e:87:dd:27:42:09:dd:
                    99:17:d7:f9:84:04:66:69:83:88:61:c7:33:6b:dd:
                    b7:f2:58:34:96:02:61:4a:69:ed:c5:d7:d1:fd:57:
                    5a:d6:91:1e:5d:43:d2:1d:98:f9:10:8c:6a:1c:72:
                    f6:07:d9:33:70:98:20:3e:7e:15:a0:e6:09:e9:04:
                    2c:9b:37:0e:5d:4e:05:79:cf:1a:0e:41:1c:11:50:
                    b5:d1:31:83:75:43:8e:e3:fd:e0:31:7a:2f:34:6e:
                    cc:9a:0b:be:5d:7c:5c:35:58:3e:ef:ac:0a:30:4b:
                    c4:78:2a:b8:a6:80:e6:e6:b5:57:a2:95:a8:5e:c7:
                    42:9d:ad:5b:1f:6b:ed:a3:ed:db:14:72:94:8d:2d:
                    d4:4b:9f:8d:99:0a:82:65:8b:60:9a:47:e2:f6:b0:
                    56:27:ba:02:0b:f3:92:e6:c4:80:09:52:e8:6a:3d:
                    0b:50:9b:97:4e:3f:49:6c:6f:b5:79:a2:58:8d:35:
                    ab:0e:55:c0:a8:55:1f:cb:d2:4f:17:a7:db:9d:96:
                    5b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:93:4A:8F:57:1D:5C:CA:AB:07:30:F2:AF:FB:71:18:C9:3D:57:2A
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66323a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:f2::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:7a:2e:07:29:36:77:f2:cf:82:8c:45:50:4d:6e:29:c6:
         72:7f:cc:f2:08:22:d5:2e:8f:ca:02:15:87:37:42:fa:59:d7:
         70:07:09:4e:39:3f:1c:4f:6b:c5:ca:43:27:03:18:af:10:19:
         9f:c6:93:15:eb:de:91:bb:dc:31:52:bb:e5:a8:30:cb:e1:5d:
         aa:e6:d6:b4:17:94:ea:57:cd:99:df:a8:08:1f:99:05:48:cc:
         d2:2c:ee:70:d5:3d:a5:d0:f4:50:a6:f7:6c:4e:b3:1b:93:33:
         61:35:3a:28:3b:09:a0:ad:0e:41:31:af:ae:d3:fc:64:78:9f:
         c9:9c:b1:e0:1f:26:9d:1a:95:23:f3:d2:39:c5:18:f4:c0:7b:
         1d:06:66:81:d4:ef:71:9e:ed:c8:bf:64:c3:6a:cc:0c:26:ca:
         b4:1b:a2:dc:cd:c8:d9:41:0d:1f:9e:ad:67:27:92:ae:2e:1e:
         5f:79:8b:0f:6a:06:86:b5:98:5e:1f:56:3d:16:ca:f0:66:3d:
         2b:b2:82:bb:8b:74:b4:b6:c9:7c:f6:b4:6e:5e:f3:36:96:e2:
         1c:df:ff:48:ec:8f:b0:fc:92:c1:02:17:f8:b9:8b:70:73:c3:
         19:24:e0:f3:e3:7e:d6:0c:b0:65:7e:82:8f:0d:62:8e:78:7a:
         07:f9:0e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:25:14 2025 by rpki-client