This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/58/3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa File: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (raw, json) Hash identifier: HjkZEK+ijp+3GCC4izGKPCe8HT2XcT7uY3Y9S6FXiZQ= Subject key identifier: 43:41:72:4D:BE:E1:77:61:71:A3:80:34:D1:66:79:A8:37:4C:80:11 Certificate issuer: /CN=A91FFE3F0000/serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Certificate serial: 26F54C72EFA12D92C9F3A070BE6040A9A73500B0 Authority key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/58/3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa Signing time: Tue 02 Dec 2025 20:34:37 +0000 ROA not before: Tue 02 Dec 2025 20:29:37 +0000 ROA not after: Tue 01 Dec 2026 20:34:37 +0000 asID: 4785 IP address blocks: 103.201.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 22:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f5:4c:72:ef:a1:2d:92:c9:f3:a0:70:be:60:40:a9:a7:35:00:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Validity Not Before: Dec 2 20:29:37 2025 GMT Not After : Dec 1 20:34:37 2026 GMT Subject: CN=4341724DBEE1776171A38034D16679A8374C8011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:10:ca:66:14:e9:c4:fd:12:52:6c:ff:73:1d: 71:5d:1e:38:bb:df:82:cf:65:32:c2:8d:af:bb:06: d3:1c:9d:35:0b:e3:12:c7:44:47:36:b8:f8:4f:d6: 64:91:e2:af:df:d2:ab:93:57:fc:41:3d:10:7b:d8: 8e:fd:38:bf:5d:ba:a8:7c:08:8a:ca:f9:83:54:be: 38:9e:84:08:25:c1:1f:9a:2e:31:06:8e:14:e5:2d: aa:05:29:14:16:de:8d:61:61:2c:00:80:ed:e2:e3: 85:eb:6c:f0:62:cb:ee:3c:4a:81:10:bc:2f:75:81: 1c:39:25:0c:5c:80:80:32:46:a8:71:1b:e7:5a:d0: e1:52:35:4c:62:60:8c:a0:fe:90:ac:20:db:56:80: a3:9d:4d:23:f8:ae:bc:90:bd:2a:ed:34:11:e3:26: 91:aa:5d:0a:aa:df:4f:68:3f:ed:4c:a4:fc:b7:43: 7e:e9:cd:c7:72:bd:92:66:1d:5a:1a:25:03:56:a8: 13:93:24:7f:5d:e1:ad:a2:e0:10:1a:4f:3a:9c:b6: 58:5c:8f:20:bc:26:39:a9:f1:d6:cf:53:1c:f2:0d: 74:2f:65:e1:4c:e5:92:46:44:a7:23:7c:84:ec:df: 06:df:b5:48:fa:cc:27:ab:a8:63:b9:5c:2e:1b:cf: a1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:41:72:4D:BE:E1:77:61:71:A3:80:34:D1:66:79:A8:37:4C:80:11 X509v3 Authority Key Identifier: keyid:5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/58/3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.201.128.0/22 Signature Algorithm: sha256WithRSAEncryption 45:5e:df:b7:67:82:e2:99:2a:7d:a4:ae:d8:81:b0:32:92:4a: 74:f7:4d:c6:06:83:af:fa:88:94:e7:66:34:e1:43:ab:14:e0: 9d:de:92:2f:44:a8:36:55:56:d4:03:75:1d:87:8a:f6:2f:96: 92:f4:b3:c9:82:76:f1:61:c9:1e:58:77:4d:1e:31:86:ac:c2: 41:80:84:2b:1f:5a:4d:6f:90:07:44:a4:b4:4b:eb:26:8b:e3: 9f:d4:6a:df:8d:e1:cb:5e:8a:41:a9:69:6b:ed:5a:28:e1:c5: 20:c0:1b:5e:13:e4:f5:0e:0a:65:e6:3b:65:4a:48:15:46:d5: 4a:94:e6:6c:0f:ef:c5:5a:a4:b8:76:f7:f1:bd:dc:6d:db:35: 6f:68:56:f9:18:7a:c2:c1:87:07:c5:17:5b:8c:71:c8:c4:71: ed:db:55:09:56:99:98:e0:13:42:9e:6e:55:1e:08:ed:83:11: e5:ae:1e:5c:ae:8f:ef:53:5c:55:f3:9e:52:7b:90:34:84:5e: d0:69:1c:b8:5a:24:89:29:fe:57:d2:c3:78:c1:94:d2:37:56: 93:43:5c:18:f0:9c:52:10:d2:c1:1b:28:5e:78:2a:dd:2c:77: e4:fd:b0:54:d0:d8:d3:3f:b7:af:a1:19:02:1b:6d:b4:96:ed: e1:63:21:40 -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUJvVMcu+hLZLJ86BwvmBAqac1ALAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1QjFBRDgyRjBF N0RDNzcxODE5QTlBMjY2NzQ5OTJBMzk1MUI5MzczMB4XDTI1MTIwMjIwMjkzN1oX DTI2MTIwMTIwMzQzN1owMzExMC8GA1UEAxMoNDM0MTcyNERCRUUxNzc2MTcxQTM4 MDM0RDE2Njc5QTgzNzRDODAxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAP8QymYU6cT9ElJs/3MdcV0eOLvfgs9lMsKNr7sG0xydNQvjEsdERza4+E/W ZJHir9/Sq5NX/EE9EHvYjv04v126qHwIisr5g1S+OJ6ECCXBH5ouMQaOFOUtqgUp FBbejWFhLACA7eLjhets8GLL7jxKgRC8L3WBHDklDFyAgDJGqHEb51rQ4VI1TGJg jKD+kKwg21aAo51NI/iuvJC9Ku00EeMmkapdCqrfT2g/7Uyk/LdDfunNx3K9kmYd WholA1aoE5Mkf13hraLgEBpPOpy2WFyPILwmOanx1s9THPINdC9l4UzlkkZEpyN8 hOzfBt+1SPrMJ6uoY7lcLhvPoW0CAwEAAaOCAeowggHmMB0GA1UdDgQWBBRDQXJN vuF3YXGjgDTRZnmoN0yAETAfBgNVHSMEGDAWgBRbGtgvDn3HcYGamiZnSZKjlRuT czAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU4LzVCMUFEODJGMEU3REM3NzE4MTlBOUEyNjY3 NDk5MkEzOTUxQjkzNzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1d4cllMdzU5eDNHQm1wb21aMG1TbzVVYmszTS5j ZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTgvMzEzMDMzMmUzMjMwMzEyZTMxMzIzODJlMzAyZjMy MzIyZDMyMzQyMDNkM2UyMDM0MzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ8mAMA0GCSqGSIb3 DQEBCwUAA4IBAQBFXt+3Z4LimSp9pK7YgbAykkp0903GBoOv+oiU52Y04UOrFOCd 3pIvRKg2VVbUA3Udh4r2L5aS9LPJgnbxYckeWHdNHjGGrMJBgIQrH1pNb5AHRKS0 S+smi+Of1GrfjeHLXopBqWlr7Voo4cUgwBteE+T1Dgpl5jtlSkgVRtVKlOZsD+/F WqS4dvfxvdxt2zVvaFb5GHrCwYcHxRdbjHHIxHHt21UJVpmY4BNCnm5VHgjtgxHl rh5cro/vU1xV855Se5A0hF7QaRy4WiSJKf5X0sN4wZTSN1aTQ1wY8JxSENLBGyhe eCrdLHfk/bBU0NjTP7evoRkCG220lu3hYyFA -----END CERTIFICATE-----Generated at Sat Dec 6 06:48:06 2025 by rpki-client