This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa
File: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (raw, json)
Hash identifier: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=
Subject key identifier: D4:A6:A0:5A:D2:CA:28:DB:BF:31:C6:62:3B:13:07:3A:B8:4A:01:58
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 37372F0CA275C95DCB3CC6E13CCB7C2E3A9CF1E5
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa
Signing time: Thu 23 Oct 2025 13:51:30 +0000
ROA not before: Thu 23 Oct 2025 13:46:30 +0000
ROA not after: Thu 22 Oct 2026 13:51:30 +0000
asID: 8888
IP address blocks: 157.119.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 11:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:37:2f:0c:a2:75:c9:5d:cb:3c:c6:e1:3c:cb:7c:2e:3a:9c:f1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: Oct 23 13:46:30 2025 GMT
Not After : Oct 22 13:51:30 2026 GMT
Subject: CN=D4A6A05AD2CA28DBBF31C6623B13073AB84A0158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:db:79:59:3d:9c:e3:5e:53:c6:4c:d5:4b:
52:d3:f8:4b:3b:ce:5f:10:38:4f:99:88:4f:96:37:
4e:96:19:b1:6c:df:98:f6:74:e4:cf:3f:af:c2:bc:
3c:5c:fa:69:73:76:ac:74:73:75:16:6c:94:80:66:
b0:b6:dc:3a:a6:de:94:35:84:1b:56:9e:3e:9e:7f:
fa:62:40:4c:d9:a4:3a:56:32:cc:2f:d1:b6:6f:9b:
a7:b8:25:1b:f4:f9:e5:e4:c1:22:fe:9f:31:ad:ba:
13:78:a5:17:9a:41:da:a0:25:a5:ba:5f:22:07:d3:
6c:54:83:bd:c0:0c:00:cf:a8:04:47:7e:bf:63:f3:
88:3d:fd:aa:e2:b9:0b:0d:09:91:55:d1:19:55:15:
d2:5c:2a:73:e1:24:42:2f:4a:75:1e:29:a7:63:c5:
80:df:78:66:ad:0b:2b:dc:73:f2:d1:4c:8d:3e:b0:
82:fb:29:09:ce:08:a5:ff:af:5a:2c:5c:9e:e4:53:
43:fe:c4:96:bb:b7:5a:40:28:53:7e:b0:6c:f1:ff:
7b:79:46:be:07:e5:11:c1:a9:cd:c5:4f:f2:f7:5f:
c7:59:a4:63:5f:92:67:a1:b7:96:73:12:d7:bb:d1:
47:52:8f:59:39:9c:06:87:83:0d:09:b9:59:60:ee:
ae:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A6:A0:5A:D2:CA:28:DB:BF:31:C6:62:3B:13:07:3A:B8:4A:01:58
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.119.100.0/22
Signature Algorithm: sha256WithRSAEncryption
68:b2:3a:9c:64:41:48:e1:25:98:1f:37:1c:2c:2a:4c:ce:1d:
ab:08:19:17:c5:56:45:46:b9:29:79:e5:17:fe:30:fe:34:4d:
81:55:e7:ac:34:cf:ee:82:47:35:c0:b6:dd:9c:8c:ee:0f:fd:
20:70:bd:56:36:08:52:91:3b:35:d8:91:3e:37:af:82:fb:df:
04:72:26:bd:05:33:02:39:62:87:ed:c1:68:55:68:96:a2:36:
ec:e0:4d:67:22:82:56:b6:97:c1:cf:1a:03:13:de:b5:1d:ca:
65:e9:eb:4e:f0:8b:88:d6:fc:f6:36:15:71:20:58:d5:fe:7b:
f5:ca:59:aa:85:f9:f7:de:ed:d3:b5:50:50:de:c3:d4:fc:14:
56:a5:f6:f9:69:46:0c:7a:da:25:fd:50:2d:41:29:64:e8:19:
40:0c:e1:81:98:c6:15:e2:2e:7c:70:b7:f4:8c:c0:03:aa:f7:
14:11:6b:68:5c:96:e0:ec:44:10:54:69:32:b9:a3:32:58:a9:
e4:ef:ae:5d:d3:7d:eb:9c:6e:64:70:4b:1a:e8:fc:c4:07:e3:
d0:78:e3:3a:2c:08:e5:b3:ef:df:b0:4d:f1:ce:51:5e:f5:aa:
29:9b:56:90:1b:44:66:33:f0:35:6c:9e:b7:fd:08:65:bd:bd:
84:40:e2:39
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIUNzcvDKJ1yV3LPMbhPMt8Ljqc8eUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB
NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI1MTAyMzEzNDYzMFoX
DTI2MTAyMjEzNTEzMFowMzExMC8GA1UEAxMoRDRBNkEwNUFEMkNBMjhEQkJGMzFD
NjYyM0IxMzA3M0FCODRBMDE1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKMS23lZPZzjXlPGTNVLUtP4SzvOXxA4T5mIT5Y3TpYZsWzfmPZ05M8/r8K8
PFz6aXN2rHRzdRZslIBmsLbcOqbelDWEG1aePp5/+mJATNmkOlYyzC/Rtm+bp7gl
G/T55eTBIv6fMa26E3ilF5pB2qAlpbpfIgfTbFSDvcAMAM+oBEd+v2PziD39quK5
Cw0JkVXRGVUV0lwqc+EkQi9KdR4pp2PFgN94Zq0LK9xz8tFMjT6wgvspCc4Ipf+v
WixcnuRTQ/7Elru3WkAoU36wbPH/e3lGvgflEcGpzcVP8vdfx1mkY1+SZ6G3lnMS
17vRR1KPWTmcBoeDDQm5WWDurn0CAwEAAaOCAeowggHmMB0GA1UdDgQWBBTUpqBa
0soo278xxmI7Ewc6uEoBWDAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He
GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE
NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j
ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNDIvMzEzNTM3MmUzMTMxMzkyZTMxMzAzMDJlMzAyZjMy
MzIyZDMyMzQyMDNkM2UyMDM4MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnXdkMA0GCSqGSIb3
DQEBCwUAA4IBAQBosjqcZEFI4SWYHzccLCpMzh2rCBkXxVZFRrkpeeUX/jD+NE2B
VeesNM/ugkc1wLbdnIzuD/0gcL1WNghSkTs12JE+N6+C+98Ecia9BTMCOWKH7cFo
VWiWojbs4E1nIoJWtpfBzxoDE961Hcpl6etO8IuI1vz2NhVxIFjV/nv1ylmqhfn3
3u3TtVBQ3sPU/BRWpfb5aUYMetol/VAtQSlk6BlADOGBmMYV4i58cLf0jMADqvcU
EWtoXJbg7EQQVGkyuaMyWKnk765d033rnG5kcEsa6PzEB+PQeOM6LAjls+/fsE3x
zlFe9aopm1aQG0RmM/A1bJ63/Qhlvb2EQOI5
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:53 2025 by rpki-client