This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa File: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (raw, json) Hash identifier: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0= Subject key identifier: 52:AD:C7:C2:7C:31:5B:05:A7:A0:41:F9:43:14:EF:5C:90:F9:12:1D Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Certificate serial: 3AC76526F06B9B9477401FB0C242016270ADBFFB Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa Signing time: Thu 13 Nov 2025 06:53:00 +0000 ROA not before: Thu 13 Nov 2025 06:48:00 +0000 ROA not after: Thu 12 Nov 2026 06:53:00 +0000 asID: 8888 IP address blocks: 180.235.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 11:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c7:65:26:f0:6b:9b:94:77:40:1f:b0:c2:42:01:62:70:ad:bf:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B Validity Not Before: Nov 13 06:48:00 2025 GMT Not After : Nov 12 06:53:00 2026 GMT Subject: CN=52ADC7C27C315B05A7A041F94314EF5C90F9121D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9d:5d:cc:01:8d:b3:ff:c6:63:f9:b6:a7:78: 0e:1f:9d:f9:bc:4e:2e:8e:59:c2:f9:c2:a0:2f:c3: 24:64:06:b8:35:37:cc:05:ff:2e:9a:5c:96:cb:f0: c9:5f:74:4a:ea:62:20:04:2c:2a:a0:e2:0e:22:9d: 46:ca:b7:f6:cd:ab:60:1c:16:a2:64:2f:68:79:05: 7c:36:42:9a:52:ae:c5:0c:cd:56:df:04:66:0f:3e: e7:72:a7:be:eb:ee:8e:b2:fc:12:15:c6:93:bb:e7: 1b:7c:95:79:86:4a:3e:74:7d:ff:87:22:6c:65:a6: 60:1f:2b:da:22:c9:f0:49:02:a3:02:60:46:26:a5: 18:a1:7d:02:d7:ca:0d:87:57:48:e1:2c:82:d9:9a: 1e:2d:37:77:a4:78:23:26:c6:2c:3c:5b:72:be:86: e9:f2:e5:24:aa:87:62:6f:2a:fa:35:3c:b4:7f:41: 04:5e:da:ab:a8:02:3b:c6:7d:6c:cf:9c:92:2b:38: 48:7e:c9:4e:cb:fe:b4:5c:c5:fc:7d:c6:1c:19:b8: cc:c4:2d:34:a5:64:74:ad:85:c7:15:02:79:f8:37: 61:91:25:d0:37:59:d1:6d:1d:a7:a5:7d:5a:3c:9d: e4:b7:d2:f6:47:02:8b:79:d7:c7:04:71:d0:19:40: 0a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AD:C7:C2:7C:31:5B:05:A7:A0:41:F9:43:14:EF:5C:90:F9:12:1D X509v3 Authority Key Identifier: keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.235.136.0/22 Signature Algorithm: sha256WithRSAEncryption 88:53:23:ba:14:f2:90:35:59:d7:8e:a3:4a:ce:5a:b6:d2:67: 66:68:46:3f:73:ec:d5:12:ec:73:66:6f:13:8d:59:94:25:ed: 86:c0:ac:3e:05:95:eb:4b:1c:6a:ca:d2:ef:e1:51:7d:a2:2d: 8c:8a:6a:1f:89:7f:a2:b4:e7:a9:e4:95:d1:5e:fa:c4:92:16: eb:2f:12:44:46:4c:56:48:81:13:f4:e5:b0:82:ed:bb:54:c6: a1:b5:2c:00:8e:d5:73:15:e5:49:af:5b:cf:15:67:3e:28:15: e9:3e:09:dc:27:e6:c6:25:bf:05:44:3e:e7:02:e9:21:96:32: ed:ef:88:6e:9b:b3:f8:01:6e:b0:8e:ea:88:e6:50:e8:bb:73: 7e:dd:63:f6:bc:48:a2:4a:7b:34:80:e3:9e:3f:9e:93:04:c7: 5c:06:b2:8e:16:de:13:a4:d1:34:df:01:75:eb:ad:eb:e2:6b: 1d:f8:fc:41:c4:f0:04:48:a0:7c:40:52:fe:2b:df:ca:1f:a5: 95:9f:f0:75:bc:a8:75:5b:39:e5:f9:bd:28:c9:4e:54:36:af: 87:66:5f:b0:95:64:1e:a8:80:cf:6e:c6:bc:53:31:df:e3:df: 06:2a:e3:a0:b9:11:ac:bc:e7:44:e0:1b:f8:c1:09:ee:46:8d: 95:14:92:0f -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUOsdlJvBrm5R3QB+wwkIBYnCtv/swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI1MTExMzA2NDgwMFoX DTI2MTExMjA2NTMwMFowMzExMC8GA1UEAxMoNTJBREM3QzI3QzMxNUIwNUE3QTA0 MUY5NDMxNEVGNUM5MEY5MTIxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANSdXcwBjbP/xmP5tqd4Dh+d+bxOLo5ZwvnCoC/DJGQGuDU3zAX/Lppclsvw yV90SupiIAQsKqDiDiKdRsq39s2rYBwWomQvaHkFfDZCmlKuxQzNVt8EZg8+53Kn vuvujrL8EhXGk7vnG3yVeYZKPnR9/4cibGWmYB8r2iLJ8EkCowJgRialGKF9AtfK DYdXSOEsgtmaHi03d6R4IybGLDxbcr6G6fLlJKqHYm8q+jU8tH9BBF7aq6gCO8Z9 bM+ckis4SH7JTsv+tFzF/H3GHBm4zMQtNKVkdK2FxxUCefg3YZEl0DdZ0W0dp6V9 Wjyd5LfS9kcCi3nXxwRx0BlACikCAwEAAaOCAeowggHmMB0GA1UdDgQWBBRSrcfC fDFbBaegQflDFO9ckPkSHTAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNDIvMzEzODMwMmUzMjMzMzUyZTMxMzMzNjJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDM4MzgzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCtOuIMA0GCSqGSIb3 DQEBCwUAA4IBAQCIUyO6FPKQNVnXjqNKzlq20mdmaEY/c+zVEuxzZm8TjVmUJe2G wKw+BZXrSxxqytLv4VF9oi2MimofiX+itOep5JXRXvrEkhbrLxJERkxWSIET9OWw gu27VMahtSwAjtVzFeVJr1vPFWc+KBXpPgncJ+bGJb8FRD7nAukhljLt74hum7P4 AW6wjuqI5lDou3N+3WP2vEiiSns0gOOeP56TBMdcBrKOFt4TpNE03wF1663r4msd +PxBxPAESKB8QFL+K9/KH6WVn/B1vKh1Wznl+b0oyU5UNq+HZl+wlWQeqIDPbsa8 UzHf498GKuOguRGsvOdE4Bv4wQnuRo2VFJIP -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:53 2025 by rpki-client