This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa
File:                     3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (raw, json)
Hash identifier:          UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=
Subject key identifier:   D4:A6:A0:5A:D2:CA:28:DB:BF:31:C6:62:3B:13:07:3A:B8:4A:01:58
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       37372F0CA275C95DCB3CC6E13CCB7C2E3A9CF1E5
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa
Signing time:             Thu 23 Oct 2025 13:51:30 +0000
ROA not before:           Thu 23 Oct 2025 13:46:30 +0000
ROA not after:            Thu 22 Oct 2026 13:51:30 +0000
asID:                     8888
IP address blocks:        157.119.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 11:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:37:2f:0c:a2:75:c9:5d:cb:3c:c6:e1:3c:cb:7c:2e:3a:9c:f1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Oct 23 13:46:30 2025 GMT
            Not After : Oct 22 13:51:30 2026 GMT
        Subject: CN=D4A6A05AD2CA28DBBF31C6623B13073AB84A0158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:12:db:79:59:3d:9c:e3:5e:53:c6:4c:d5:4b:
                    52:d3:f8:4b:3b:ce:5f:10:38:4f:99:88:4f:96:37:
                    4e:96:19:b1:6c:df:98:f6:74:e4:cf:3f:af:c2:bc:
                    3c:5c:fa:69:73:76:ac:74:73:75:16:6c:94:80:66:
                    b0:b6:dc:3a:a6:de:94:35:84:1b:56:9e:3e:9e:7f:
                    fa:62:40:4c:d9:a4:3a:56:32:cc:2f:d1:b6:6f:9b:
                    a7:b8:25:1b:f4:f9:e5:e4:c1:22:fe:9f:31:ad:ba:
                    13:78:a5:17:9a:41:da:a0:25:a5:ba:5f:22:07:d3:
                    6c:54:83:bd:c0:0c:00:cf:a8:04:47:7e:bf:63:f3:
                    88:3d:fd:aa:e2:b9:0b:0d:09:91:55:d1:19:55:15:
                    d2:5c:2a:73:e1:24:42:2f:4a:75:1e:29:a7:63:c5:
                    80:df:78:66:ad:0b:2b:dc:73:f2:d1:4c:8d:3e:b0:
                    82:fb:29:09:ce:08:a5:ff:af:5a:2c:5c:9e:e4:53:
                    43:fe:c4:96:bb:b7:5a:40:28:53:7e:b0:6c:f1:ff:
                    7b:79:46:be:07:e5:11:c1:a9:cd:c5:4f:f2:f7:5f:
                    c7:59:a4:63:5f:92:67:a1:b7:96:73:12:d7:bb:d1:
                    47:52:8f:59:39:9c:06:87:83:0d:09:b9:59:60:ee:
                    ae:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A6:A0:5A:D2:CA:28:DB:BF:31:C6:62:3B:13:07:3A:B8:4A:01:58
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.119.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:b2:3a:9c:64:41:48:e1:25:98:1f:37:1c:2c:2a:4c:ce:1d:
         ab:08:19:17:c5:56:45:46:b9:29:79:e5:17:fe:30:fe:34:4d:
         81:55:e7:ac:34:cf:ee:82:47:35:c0:b6:dd:9c:8c:ee:0f:fd:
         20:70:bd:56:36:08:52:91:3b:35:d8:91:3e:37:af:82:fb:df:
         04:72:26:bd:05:33:02:39:62:87:ed:c1:68:55:68:96:a2:36:
         ec:e0:4d:67:22:82:56:b6:97:c1:cf:1a:03:13:de:b5:1d:ca:
         65:e9:eb:4e:f0:8b:88:d6:fc:f6:36:15:71:20:58:d5:fe:7b:
         f5:ca:59:aa:85:f9:f7:de:ed:d3:b5:50:50:de:c3:d4:fc:14:
         56:a5:f6:f9:69:46:0c:7a:da:25:fd:50:2d:41:29:64:e8:19:
         40:0c:e1:81:98:c6:15:e2:2e:7c:70:b7:f4:8c:c0:03:aa:f7:
         14:11:6b:68:5c:96:e0:ec:44:10:54:69:32:b9:a3:32:58:a9:
         e4:ef:ae:5d:d3:7d:eb:9c:6e:64:70:4b:1a:e8:fc:c4:07:e3:
         d0:78:e3:3a:2c:08:e5:b3:ef:df:b0:4d:f1:ce:51:5e:f5:aa:
         29:9b:56:90:1b:44:66:33:f0:35:6c:9e:b7:fd:08:65:bd:bd:
         84:40:e2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:53 2025 by rpki-client