This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2038383838.roa
File:                     34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (raw, json)
Hash identifier:          nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=
Subject key identifier:   BA:FB:73:9B:0E:85:08:F2:3C:D2:DC:47:3E:5E:72:4E:8B:DE:3A:66
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       6895212994C553BB0C85416233E39A927386DB49
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2038383838.roa
Signing time:             Thu 13 Nov 2025 06:53:00 +0000
ROA not before:           Thu 13 Nov 2025 06:48:00 +0000
ROA not after:            Thu 12 Nov 2026 06:53:00 +0000
asID:                     8888
IP address blocks:        45.124.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 11:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:95:21:29:94:c5:53:bb:0c:85:41:62:33:e3:9a:92:73:86:db:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Nov 13 06:48:00 2025 GMT
            Not After : Nov 12 06:53:00 2026 GMT
        Subject: CN=BAFB739B0E8508F23CD2DC473E5E724E8BDE3A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:35:e9:c8:49:f1:93:33:61:ff:1f:7e:d4:08:
                    c1:11:17:0b:f4:3e:24:6d:6f:f4:74:5d:ba:c1:48:
                    6e:47:e6:05:08:13:bf:49:1a:06:d5:49:f3:6a:0d:
                    14:4f:7a:08:bd:49:a7:a0:2c:f9:94:f2:08:50:5a:
                    b8:3f:6f:64:c4:41:35:11:41:e3:3a:da:8a:13:d3:
                    1c:29:b6:20:97:86:9d:ce:88:96:11:b3:62:69:8b:
                    84:3e:95:7b:a6:7d:aa:09:12:a5:e2:3d:2a:d1:85:
                    ab:5b:26:da:a6:47:ee:2c:9a:02:aa:39:b1:e3:f7:
                    2a:7d:96:11:9e:60:0b:ef:b1:ff:49:84:0b:e8:99:
                    be:d8:f7:61:18:be:52:b6:0b:15:ff:0a:11:46:9d:
                    59:16:f0:85:19:69:0b:74:d1:32:49:91:9f:8a:4c:
                    32:50:6c:07:95:12:c1:65:58:af:17:02:c6:11:bf:
                    47:31:cd:6d:ee:ef:69:f8:7d:eb:f7:3e:f9:40:ee:
                    bd:19:18:f7:ad:e3:6d:88:4a:3e:62:2c:c1:e6:fe:
                    62:ef:f3:e9:51:0c:a8:29:7b:57:88:1e:08:f5:5e:
                    56:de:0f:c3:d2:3e:1e:1c:75:6f:80:e9:20:3b:ae:
                    e2:fd:96:89:22:7c:ac:13:12:f8:59:4a:18:0f:c9:
                    1f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FB:73:9B:0E:85:08:F2:3C:D2:DC:47:3E:5E:72:4E:8B:DE:3A:66
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:e1:8d:d0:9d:8b:c9:24:b4:3f:ae:04:e8:5a:cf:80:a7:dd:
         79:23:e4:98:a7:ca:7f:08:80:1d:b3:b0:92:95:46:95:19:00:
         6d:90:08:49:52:24:da:90:f6:f9:ad:91:59:46:80:49:55:b1:
         34:9a:1e:4c:a4:5b:84:1d:75:f4:80:ea:2d:08:54:50:8e:1d:
         40:a7:09:8c:01:45:a5:9f:b3:23:e9:6e:5e:35:ef:01:de:3a:
         4e:c0:79:14:f7:bf:0f:55:5a:b2:50:b5:c2:95:1b:dd:7c:92:
         ea:f6:af:ba:e1:3f:02:59:d0:ae:03:ea:cc:b4:c3:a1:31:9c:
         91:a6:4e:d9:aa:ae:ab:9c:36:82:2d:55:20:cc:0c:43:ca:7f:
         8f:90:6f:00:10:0a:4a:06:5e:54:58:e5:02:b8:00:41:d1:73:
         ba:13:45:d5:48:6b:49:76:61:f3:a9:0d:b4:4e:1c:0c:86:26:
         96:19:23:75:90:42:ce:35:50:05:06:83:e9:c4:24:2a:3b:02:
         a0:41:b1:75:3d:a8:a2:07:5a:5a:67:7e:05:20:0c:19:8c:17:
         d9:65:4a:d8:f4:dd:d8:0f:a9:14:ed:b2:f6:a9:3f:32:3f:a8:
         33:57:1b:90:34:75:9d:ec:fa:d1:9e:28:96:04:ac:e3:6b:9a:
         6e:12:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:05:53 2025 by rpki-client