This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2039333132.roa
File:                     34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (raw, json)
Hash identifier:          i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=
Subject key identifier:   5D:6F:A6:F9:CB:68:C6:78:2D:EC:1B:4D:CB:CE:E3:CB:F8:04:E3:67
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       65492F49F6BD87C1575000BED173B7450842055C
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2039333132.roa
Signing time:             Thu 13 Nov 2025 06:53:00 +0000
ROA not before:           Thu 13 Nov 2025 06:48:00 +0000
ROA not after:            Thu 12 Nov 2026 06:53:00 +0000
asID:                     9312
IP address blocks:        45.124.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 11:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:49:2f:49:f6:bd:87:c1:57:50:00:be:d1:73:b7:45:08:42:05:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Nov 13 06:48:00 2025 GMT
            Not After : Nov 12 06:53:00 2026 GMT
        Subject: CN=5D6FA6F9CB68C6782DEC1B4DCBCEE3CBF804E367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:a3:5c:80:27:1a:4e:93:47:b7:3b:a3:d6:
                    fa:b3:e7:be:8e:ac:82:1d:62:32:b9:85:c1:7f:5e:
                    e0:f0:aa:39:1e:e6:0a:36:e3:64:9c:8e:f8:73:47:
                    1c:d4:2f:92:c5:99:98:0d:48:48:f8:cd:6c:17:15:
                    0f:bb:16:34:94:93:53:80:bd:28:c2:78:d5:5d:f9:
                    70:67:ee:87:58:45:bd:ff:a5:c9:43:4a:e0:d6:ee:
                    2a:c4:43:f1:63:85:9f:a0:e2:61:70:f0:38:ae:be:
                    4d:26:92:8c:38:e8:ed:0c:e3:20:c0:09:ab:b7:f0:
                    da:6f:95:e0:b2:59:e5:47:e9:ce:5f:fb:48:91:00:
                    2b:a3:9d:70:03:f5:cf:25:b3:04:1e:b7:51:00:5f:
                    b6:68:3f:2e:c2:b6:12:63:1c:4d:6a:bc:19:89:46:
                    63:b3:3b:68:f0:93:73:fd:08:4b:ce:0b:65:6b:c0:
                    22:b0:f0:7b:c6:f0:eb:5a:61:2f:e3:24:a4:eb:f8:
                    4d:c7:30:cc:18:03:0b:85:51:d6:4f:67:15:7f:50:
                    f5:ca:a3:c2:bc:fe:2a:82:39:1e:55:16:70:05:a1:
                    8a:5a:16:96:c3:c9:df:6b:03:da:64:56:78:17:fe:
                    96:36:76:9a:1a:2d:c2:b8:84:b8:1b:91:ce:39:ea:
                    50:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6F:A6:F9:CB:68:C6:78:2D:EC:1B:4D:CB:CE:E3:CB:F8:04:E3:67
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3132342e3131322e302f32322d3234203d3e2039333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:c0:ef:90:89:28:a8:e6:66:03:e9:d4:b2:b7:69:3b:88:9a:
         c4:c6:b4:3c:0c:dc:56:8f:80:1e:bd:04:be:19:c9:df:d4:30:
         e9:7a:dd:36:9b:a8:f2:95:74:f7:83:20:1b:7b:f4:fc:68:c7:
         00:f2:31:f4:b3:ca:a6:a1:58:66:4c:44:08:51:8f:c4:d7:9a:
         1a:c0:38:ae:24:52:a0:56:cf:08:f9:00:d8:24:af:60:f7:a3:
         84:ad:a4:d5:ee:13:c9:cf:10:ab:bf:5e:af:17:b8:af:fc:ac:
         bc:5d:e5:0e:57:19:40:de:02:45:e5:89:4b:98:ef:2a:17:41:
         72:22:2f:48:db:8e:c1:58:15:11:84:d6:73:1a:e4:df:6b:5f:
         0e:97:20:c7:71:72:8e:34:80:82:14:99:63:98:f1:9c:d5:73:
         e0:d6:89:af:4c:43:4f:82:c9:0b:47:a1:2f:b6:48:7e:3c:a5:
         8a:2b:8f:d2:1b:68:6b:8b:4f:48:29:f3:10:ec:87:73:02:a4:
         eb:31:ae:76:61:89:86:22:e4:19:c1:28:25:bb:92:0f:20:11:
         56:45:31:16:c9:42:ad:24:cd:12:f4:24:92:32:b1:48:94:90:
         2b:e9:97:f1:d3:01:42:ba:63:4b:29:1c:71:2e:76:11:f8:ea:
         49:8d:59:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:50:08 2025 by rpki-client