This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2033323538.roa
File:                     34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (raw, json)
Hash identifier:          O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=
Subject key identifier:   3A:87:C3:A6:A5:19:08:D1:C3:8B:A4:A9:6C:2F:2B:7E:A6:8E:16:1F
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       0C282BD2421C70FEAD0524B71F54DA43AEB78DEE
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2033323538.roa
Signing time:             Thu 13 Nov 2025 06:53:00 +0000
ROA not before:           Thu 13 Nov 2025 06:48:00 +0000
ROA not after:            Thu 12 Nov 2026 06:53:00 +0000
asID:                     3258
IP address blocks:        45.124.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 11:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:28:2b:d2:42:1c:70:fe:ad:05:24:b7:1f:54:da:43:ae:b7:8d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Nov 13 06:48:00 2025 GMT
            Not After : Nov 12 06:53:00 2026 GMT
        Subject: CN=3A87C3A6A51908D1C38BA4A96C2F2B7EA68E161F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:0d:1e:ea:15:d0:52:70:3f:54:09:fd:62:
                    b1:49:a2:dd:71:2e:f4:a7:11:43:46:bc:b4:76:47:
                    24:b2:28:c3:00:a4:12:2b:b8:1d:1f:4c:29:a6:fd:
                    bd:17:8f:bf:75:d9:4d:ce:03:df:81:90:f6:e6:56:
                    27:74:f0:d5:62:5a:0d:57:f6:04:7b:5f:86:2b:5e:
                    b3:bd:b3:d1:ac:8f:ee:db:60:8b:04:9c:b9:30:26:
                    b2:9b:7d:b5:b5:b8:34:de:bd:30:29:60:cf:49:a4:
                    14:54:87:16:b3:cd:11:18:e5:d2:7c:e6:c2:c0:b7:
                    2f:b3:cd:78:3b:bf:f1:91:ad:9a:93:b7:33:cb:df:
                    ad:f9:a4:2f:b1:db:35:d0:75:fa:b3:db:df:a0:f4:
                    d7:39:b4:ea:34:b4:6e:1e:1d:2c:20:1d:57:91:ef:
                    5c:b3:66:10:d7:91:6a:c6:93:65:8d:cf:ad:0c:bd:
                    94:48:20:22:62:ac:65:7e:31:ff:32:9b:57:6a:f7:
                    f8:f4:dc:0f:c0:d3:e1:0d:75:1a:e3:4b:54:aa:b3:
                    9e:46:94:3e:e4:07:f1:0d:dd:72:8e:f9:98:b7:8c:
                    72:d0:8d:f4:ca:e9:02:4a:db:67:e4:96:28:a3:9b:
                    3d:d1:6e:6a:7e:ae:92:9f:e4:ac:b9:5d:0a:c7:c9:
                    57:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:87:C3:A6:A5:19:08:D1:C3:8B:A4:A9:6C:2F:2B:7E:A6:8E:16:1F
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2033323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:a4:da:bb:c6:59:31:9b:20:fd:05:60:69:86:94:40:3f:5d:
         9b:10:ea:4a:ce:2d:c1:ad:9f:30:92:1c:43:3d:ff:93:53:64:
         ff:db:d6:aa:6d:da:40:92:9b:a9:58:5f:8e:83:4d:81:7e:0c:
         d9:e1:a4:b3:85:86:43:89:b6:b8:02:28:5a:48:32:a4:7e:bc:
         71:d1:08:11:2d:5f:36:1d:fe:a7:6e:9d:01:ca:ca:10:a9:4b:
         4a:01:66:f8:54:55:77:c3:ac:02:a1:19:23:c6:0a:ca:1f:b8:
         81:26:9e:75:20:f0:6b:55:79:ce:ee:4e:69:4d:d3:42:c4:98:
         d4:90:9c:fc:04:f6:59:62:a1:13:eb:b5:21:20:32:df:73:1b:
         82:19:66:9a:84:a3:49:d4:c7:06:ad:43:d9:49:8b:a8:ce:09:
         85:9a:44:92:ad:58:ab:e3:2c:00:0d:13:a1:34:07:5d:84:eb:
         0a:13:14:76:11:e0:32:ef:cd:be:73:9f:04:8f:11:6e:a4:fd:
         c7:1d:05:22:07:92:8d:54:93:26:29:13:75:b5:25:30:16:95:
         6d:9e:64:d0:3e:99:56:e6:f0:c4:55:78:b6:bf:af:bf:61:d8:
         b1:40:3d:90:29:5a:ed:bb:32:6d:d1:36:a5:f3:9d:f3:d3:04:
         19:61:27:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:43:06 2025 by rpki-client