This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa File: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (raw, json) Hash identifier: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc= Subject key identifier: 94:94:42:9B:E0:9A:55:7A:57:22:9F:C5:C6:F4:AE:D9:99:59:AC:91 Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 3B0797DAA10FF0D8A96D3FDA6E42265336856A48 Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa Signing time: Tue 11 Nov 2025 07:52:00 +0000 ROA not before: Tue 11 Nov 2025 07:47:00 +0000 ROA not after: Tue 10 Nov 2026 07:52:00 +0000 asID: 3258 IP address blocks: 157.119.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:07:97:da:a1:0f:f0:d8:a9:6d:3f:da:6e:42:26:53:36:85:6a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Nov 11 07:47:00 2025 GMT Not After : Nov 10 07:52:00 2026 GMT Subject: CN=9494429BE09A557A57229FC5C6F4AED99959AC91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:2e:cb:f6:9c:a5:ef:66:91:c8:bc:74:48: d7:f9:f4:64:1a:ee:f9:82:ca:93:e6:ee:10:ee:02: 41:2e:13:09:3f:05:2e:6d:1e:45:9f:f1:a8:8f:97: ff:7e:c8:5c:df:e3:a8:82:81:31:86:46:bc:80:81: 5d:83:e4:1d:e4:13:74:4a:97:4c:5f:e0:bf:85:14: 4a:1b:53:2b:c6:57:47:62:8e:68:7d:f6:57:b0:27: 05:3b:8a:3c:c1:78:91:b5:39:29:d9:53:d5:bc:b3: 7a:6d:22:64:ed:58:cc:2e:7d:8c:ec:8c:9f:58:b5: 5d:d5:f9:bc:35:a7:42:9d:3f:25:75:25:00:cb:41: 39:06:16:4c:2f:5a:e5:fb:e7:c7:db:82:c4:43:96: 5e:00:63:9e:04:13:f5:43:d8:07:1d:7a:bf:39:6b: 5d:52:5e:ff:e9:ca:6e:5a:1a:4f:42:e1:7e:63:73: 21:4a:a8:f1:3a:7b:51:67:2f:0f:7f:63:03:f1:78: 91:1e:23:cc:63:a4:a5:08:f4:99:62:62:be:67:69: 76:7e:c2:a9:7a:b0:0a:3f:c4:f3:51:b8:97:03:72: 2a:28:c8:f5:01:d1:26:07:28:80:a5:ad:3c:a0:2e: 8c:9c:2b:fb:77:3f:5b:de:6b:04:1b:df:12:70:4d: 8b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:94:42:9B:E0:9A:55:7A:57:22:9F:C5:C6:F4:AE:D9:99:59:AC:91 X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.119.100.0/22 Signature Algorithm: sha256WithRSAEncryption 25:d8:fc:11:cf:e0:03:3f:46:39:ab:55:d8:94:33:72:ed:f0: 7a:18:51:2f:3e:cc:82:96:3a:a5:90:f0:3b:82:a6:49:21:00: 07:cc:d7:d6:d6:50:83:06:d2:60:1e:a3:30:e6:ac:7b:3b:17: 38:20:91:a4:bf:f5:59:bd:de:01:fc:62:4f:a1:b1:ef:3f:c7: bc:70:69:21:3b:ce:e3:fa:33:04:37:e4:59:a8:44:c0:52:92: 75:c5:47:b9:1d:68:8a:53:04:08:0f:d0:0f:4a:01:41:5f:25: 70:f1:3c:11:90:24:dd:dd:69:ea:18:4a:70:a0:a5:36:98:f2: 10:dc:05:95:0f:35:a1:c1:5d:4d:5a:90:d8:16:6b:7b:fe:c6: 55:c2:f7:7a:90:72:60:c8:cb:bc:ea:1e:4c:fc:0c:c1:24:6c: 8a:5d:c9:e3:1c:a9:95:54:c7:8f:0b:fe:95:ff:d2:31:8d:9e: 74:00:9d:12:27:e3:10:9c:6a:ed:57:2c:0c:59:7b:d5:c6:ef: c6:b6:6d:ed:bf:29:42:e7:95:97:cc:58:67:be:2a:08:6e:b8: c0:27:de:65:76:a6:14:e2:32:51:74:7d:a5:cf:67:2b:76:a4: b9:a5:26:96:d5:c9:1a:a8:72:ff:23:14:9c:87:eb:1d:1d:2c: b9:72:87:fa -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUOweX2qEP8NipbT/abkImUzaFakgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI1MTExMTA3NDcwMFoX DTI2MTExMDA3NTIwMFowMzExMC8GA1UEAxMoOTQ5NDQyOUJFMDlBNTU3QTU3MjI5 RkM1QzZGNEFFRDk5OTU5QUM5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7qLsv2nKXvZpHIvHRI1/n0ZBru+YLKk+buEO4CQS4TCT8FLm0eRZ/xqI+X /37IXN/jqIKBMYZGvICBXYPkHeQTdEqXTF/gv4UUShtTK8ZXR2KOaH32V7AnBTuK PMF4kbU5KdlT1byzem0iZO1YzC59jOyMn1i1XdX5vDWnQp0/JXUlAMtBOQYWTC9a 5fvnx9uCxEOWXgBjngQT9UPYBx16vzlrXVJe/+nKbloaT0LhfmNzIUqo8Tp7UWcv D39jA/F4kR4jzGOkpQj0mWJivmdpdn7CqXqwCj/E81G4lwNyKijI9QHRJgcogKWt PKAujJwr+3c/W95rBBvfEnBNi8ECAwEAAaOCAeowggHmMB0GA1UdDgQWBBSUlEKb 4JpVelcin8XG9K7ZmVmskTAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzNTM3MmUzMTMxMzkyZTMxMzAzMDJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDMzMzIzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnXdkMA0GCSqGSIb3 DQEBCwUAA4IBAQAl2PwRz+ADP0Y5q1XYlDNy7fB6GFEvPsyCljqlkPA7gqZJIQAH zNfW1lCDBtJgHqMw5qx7Oxc4IJGkv/VZvd4B/GJPobHvP8e8cGkhO87j+jMEN+RZ qETAUpJ1xUe5HWiKUwQID9APSgFBXyVw8TwRkCTd3WnqGEpwoKU2mPIQ3AWVDzWh wV1NWpDYFmt7/sZVwvd6kHJgyMu86h5M/AzBJGyKXcnjHKmVVMePC/6V/9IxjZ50 AJ0SJ+MQnGrtVywMWXvVxu/Gtm3tvylC55WXzFhnvioIbrjAJ95ldqYU4jJRdH2l z2crdqS5pSaW1ckaqHL/IxSch+sdHSy5cof6 -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:19 2025 by rpki-client