This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6261303a3a2f34342d3434203d3e2034373631.roa
File:                     323430303a386230303a6261303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier:          vL52EsMEAng15KiWXWSuSzdexuh//MCMKo+klhne9YA=
Subject key identifier:   32:20:A8:BC:A1:3E:62:E7:25:42:A9:6D:B5:25:63:46:7A:38:56:29
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       5349C6D55F5AB0438A7C87AD7F248F6BD2245EA2
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6261303a3a2f34342d3434203d3e2034373631.roa
Signing time:             Tue 03 Dec 2024 20:56:38 +0000
ROA not before:           Tue 03 Dec 2024 20:51:38 +0000
ROA not after:            Tue 02 Dec 2025 20:56:38 +0000
asID:                     4761
IP address blocks:        2400:8b00:ba0::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:49:c6:d5:5f:5a:b0:43:8a:7c:87:ad:7f:24:8f:6b:d2:24:5e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 20:51:38 2024 GMT
            Not After : Dec  2 20:56:38 2025 GMT
        Subject: CN=3220A8BCA13E62E72542A96DB52563467A385629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:96:47:07:7d:63:37:91:81:c9:1f:3c:1d:
                    8c:27:ca:35:72:9d:80:cd:68:d5:c1:7d:f0:6d:d6:
                    04:e9:2e:4b:a8:c6:2d:61:36:b3:78:e8:47:c1:0f:
                    85:ba:fe:79:53:08:52:0e:27:67:20:ad:92:cb:0e:
                    8f:d8:ad:8e:9f:4c:1d:5e:7a:25:f2:39:6a:9c:21:
                    e5:21:aa:09:05:cc:2f:89:94:d5:c5:61:1c:c2:52:
                    2d:21:39:2f:86:27:52:ea:85:58:13:2a:d7:a2:a1:
                    d7:eb:c8:4c:ac:02:6c:86:37:5a:9a:53:4b:84:8a:
                    6a:60:ee:6d:f7:92:72:35:c1:45:1d:ed:20:68:e7:
                    3e:a4:7a:8e:3b:d8:16:7e:b8:67:f1:e6:41:08:d7:
                    14:d1:83:cc:2f:5a:d1:d8:7f:58:66:94:3b:76:f9:
                    72:f6:28:c9:e8:b0:2f:24:42:ce:6d:14:b2:98:e4:
                    53:c6:f5:b9:21:31:87:ff:b2:1d:5e:e2:dd:64:69:
                    d2:6f:62:7d:e0:9d:8b:d5:a1:61:53:41:26:70:db:
                    05:bf:cb:76:97:c7:7e:da:d0:2b:be:f3:39:c2:c7:
                    75:50:85:9f:c6:18:33:8a:ee:bc:6f:84:3e:f4:84:
                    34:8f:b0:51:2e:f7:4f:f3:de:cd:82:40:13:5e:91:
                    0f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:20:A8:BC:A1:3E:62:E7:25:42:A9:6D:B5:25:63:46:7A:38:56:29
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6261303a3a2f34342d3434203d3e2034373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8b00:ba0::/44

    Signature Algorithm: sha256WithRSAEncryption
         1e:0e:1e:8b:ca:0f:88:11:b3:3a:4e:ba:f5:ad:37:5d:30:45:
         3e:5b:c0:42:ee:97:d9:b4:5c:13:fb:89:5e:7f:b9:6a:58:58:
         a7:01:8c:9e:e6:92:ae:40:13:01:2f:ec:3e:9b:b2:57:44:57:
         81:1b:e3:5b:3a:b5:d5:5c:78:ab:8a:55:3a:02:d7:a8:2e:fa:
         6e:93:d9:78:b4:6a:89:35:35:48:40:68:36:f5:49:20:18:c0:
         45:8b:52:60:33:17:df:5d:65:cb:a2:d5:b9:c6:76:56:3d:68:
         e6:aa:00:32:b1:57:d0:ea:a1:e1:1e:57:09:16:15:9e:b5:33:
         a9:ec:0f:f7:f2:00:27:70:4c:40:46:84:5b:b9:1e:c5:e1:0b:
         44:be:32:94:1c:3c:44:42:13:a8:1f:06:69:36:36:eb:5b:9b:
         3f:06:f9:58:c7:74:82:97:bf:ae:79:63:0e:73:d7:2a:68:f6:
         b1:ac:d2:69:71:65:1f:4d:e0:3a:a1:03:b8:33:22:e0:2d:89:
         63:7d:e2:a7:5e:92:9d:3c:fa:98:e1:54:ce:9a:a5:6d:ad:9b:
         9d:1a:30:5a:dc:ad:3e:ff:3a:d4:10:a1:1a:ba:db:f3:df:68:
         ee:57:98:b3:eb:04:fa:60:53:bd:81:12:99:16:ac:7f:cb:25:
         f7:ad:18:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:16:33 2025 by rpki-client