This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa
File:                     3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (raw, json)
Hash identifier:          NML/79jB4zZF/SxB4ZqIyV4CbjHtpeNZ0f57zrhrbmM=
Subject key identifier:   83:81:9E:7A:94:0F:26:48:4C:19:E8:81:D4:75:42:CC:DF:15:F0:7D
Certificate issuer:       /CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF
Certificate serial:       6FCBA41902662C309EADFED62AFBC5DBF0A4566C
Authority key identifier: 2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa
Signing time:             Mon 22 Dec 2025 02:00:03 +0000
ROA not before:           Mon 22 Dec 2025 01:55:03 +0000
ROA not after:            Mon 21 Dec 2026 02:00:03 +0000
asID:                     149676
IP address blocks:        103.184.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl
                          rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 17:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:cb:a4:19:02:66:2c:30:9e:ad:fe:d6:2a:fb:c5:db:f0:a4:56:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF
        Validity
            Not Before: Dec 22 01:55:03 2025 GMT
            Not After : Dec 21 02:00:03 2026 GMT
        Subject: CN=83819E7A940F26484C19E881D47542CCDF15F07D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:d1:61:4b:2b:cb:7e:58:55:fc:6d:05:40:
                    cb:36:dd:0a:64:a3:00:5c:fa:72:1b:b6:88:1e:a9:
                    32:cd:4c:fa:66:20:16:49:86:f3:73:bc:ba:43:78:
                    df:84:71:a2:68:3a:fd:cc:0e:2a:2b:26:9a:95:22:
                    c1:60:ea:20:08:b5:1a:96:19:24:65:8c:53:95:e7:
                    c2:11:95:4f:bf:29:ce:1c:52:8d:cd:e6:e5:33:8d:
                    b1:f6:2d:63:c4:cb:b2:b8:72:53:df:eb:a3:7f:28:
                    bd:8f:ec:5f:7e:0c:fe:02:55:4c:a4:70:bc:96:ff:
                    92:87:5c:52:52:35:ae:d2:c9:5d:7f:7d:c5:31:df:
                    17:79:13:57:7e:8e:b6:a8:54:df:b3:28:da:3f:3e:
                    c8:a8:96:80:78:9b:81:0d:61:83:00:39:1a:f0:f5:
                    eb:74:22:dc:26:2d:59:cb:76:13:04:6f:0d:22:86:
                    a2:0c:45:6e:5a:d4:b9:c7:66:ba:8c:44:96:fd:4b:
                    09:bc:83:15:7f:fc:e4:c8:84:ca:98:56:67:30:f9:
                    97:49:50:c1:73:99:eb:a7:d7:18:81:25:f4:91:8d:
                    75:7a:15:05:35:49:49:9e:28:50:e8:36:af:db:e1:
                    f8:b7:94:b5:9a:2b:d9:a1:09:a9:b2:30:6b:cf:ef:
                    36:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:81:9E:7A:94:0F:26:48:4C:19:E8:81:D4:75:42:CC:DF:15:F0:7D
            X509v3 Authority Key Identifier:
                keyid:2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:c8:f2:0f:ac:fa:89:fe:4a:7d:de:5b:bb:20:73:5b:bd:19:
         2c:b8:25:82:de:6c:ee:76:98:71:c2:4b:1d:c8:9b:7e:3a:b3:
         f9:ff:67:b5:eb:dd:3a:a8:3a:e3:67:2b:1f:1f:09:e9:4b:cf:
         5e:1e:cc:53:a8:31:aa:19:56:fd:2e:7a:90:0c:f1:69:2c:ab:
         0b:b3:21:6a:da:6e:70:65:1c:9f:e4:fe:31:f7:99:8f:11:fa:
         12:3b:1d:e8:ec:17:c1:71:08:bc:8f:d0:7e:38:b0:3b:3a:dd:
         06:0d:4b:63:7e:c5:b1:4f:28:be:00:ba:0a:bb:f6:95:a9:61:
         74:d2:a2:b6:f1:08:4f:b6:36:ac:a5:b9:1e:da:d6:40:4b:a6:
         cf:33:39:82:33:00:53:17:95:b3:a1:c8:e2:89:2c:a0:a9:41:
         eb:96:b5:11:67:27:b4:f2:1a:25:bf:5f:e8:3a:ed:0a:b6:33:
         37:05:bb:0a:6a:70:bb:d0:46:a6:06:51:94:12:0b:7c:85:2f:
         57:50:bd:ec:65:49:cc:c2:20:a6:e9:17:06:39:70:dd:10:91:
         15:f8:ad:15:97:96:e3:d8:89:a2:7d:62:c0:ad:9c:96:d1:1e:
         35:ba:6c:a2:b2:d5:c7:75:93:51:86:69:1e:67:ea:0b:1e:fb:
         b4:e4:24:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:06:56 2025 by rpki-client