This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/58/AS138038.asa File: AS138038.asa (raw, json) Hash identifier: KKmPldYXt3ysMW1zmkDcuHEwZVj+9YLqpnHPpNiZ6wI= Subject key identifier: 39:A5:17:1D:DC:E9:8C:C6:21:BD:B5:54:BB:F2:DC:0E:7D:C4:33:CD Certificate issuer: /CN=A91FFE3F0000/serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Certificate serial: 67A41D598466206B6BF8B915F74FB8C405E0A2BE Authority key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/58/AS138038.asa Signing time: Tue 02 Dec 2025 20:45:12 +0000 ASPA not before: Tue 02 Dec 2025 20:40:12 +0000 ASPA not after: Tue 01 Dec 2026 20:45:12 +0000 Customer ASID: 138038 Providers: AS: 4785 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 22:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a4:1d:59:84:66:20:6b:6b:f8:b9:15:f7:4f:b8:c4:05:e0:a2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373 Validity Not Before: Dec 2 20:40:12 2025 GMT Not After : Dec 1 20:45:12 2026 GMT Subject: CN=39A5171DDCE98CC621BDB554BBF2DC0E7DC433CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c6:7d:92:4e:79:cb:a6:7e:a3:57:41:6f:a6: ee:21:82:23:af:57:1c:eb:5f:ab:4a:d6:63:43:55: 2f:f4:78:b3:7a:92:b6:8b:44:ee:9c:76:14:9d:06: a7:c4:fb:76:46:6b:b3:95:ae:d2:4b:a4:b8:bb:5f: cb:0b:6c:2b:c6:00:b5:05:e9:ce:95:1d:b2:58:0d: 9f:a9:b6:07:50:a3:fd:9b:cc:3b:46:c7:32:18:62: 5c:c6:b8:7c:10:cd:00:9f:2f:ec:77:c5:2e:ad:36: a0:5e:a5:1e:ed:46:98:77:56:9e:f3:19:ed:3c:0f: 0b:fa:a8:c8:82:26:e1:a4:1c:b2:39:26:4a:a7:d4: cf:b2:00:b2:7b:1f:bc:85:ea:b3:2a:40:3e:da:de: f8:c8:eb:87:12:5a:49:c4:8d:77:49:56:db:76:a7: d8:20:18:a0:3a:27:4a:c7:43:7d:bd:19:2e:6f:d7: 39:8e:1b:a9:c2:42:b3:e0:4a:b8:0d:b9:97:e2:63: cc:b1:f6:2e:d1:de:1d:0b:d1:04:3e:46:40:06:b9: b3:35:4a:53:48:92:86:2f:4d:ec:9f:8f:a3:17:ce: c6:92:78:bb:91:f7:1c:50:52:49:b7:3e:25:e1:36: 35:42:31:b6:e8:1c:78:cf:12:74:e4:a8:78:b1:02: fb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A5:17:1D:DC:E9:8C:C6:21:BD:B5:54:BB:F2:DC:0E:7D:C4:33:CD X509v3 Authority Key Identifier: keyid:5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/58/AS138038.asa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 138038 Signature Algorithm: sha256WithRSAEncryption 73:1b:43:7b:74:b4:cc:6c:3c:24:a5:b9:a6:e5:87:75:70:29: 08:21:7f:cc:54:0b:f6:a6:d5:e6:e8:a6:f9:ca:70:8d:d1:68: 0f:0b:9d:df:93:fe:2f:92:70:be:b3:39:7f:98:a4:0b:72:81: 97:ff:94:2b:05:0e:4c:90:51:a7:5f:db:f0:fc:b8:5c:ab:7f: b1:72:1d:69:74:f8:85:6a:80:48:28:85:8e:89:79:31:0d:6b: 77:cc:b5:0f:6f:5d:a2:60:fe:d7:4f:a1:2a:62:52:89:bb:67: e3:7f:e3:f7:4f:98:03:c0:19:b9:37:d2:36:4d:0b:8b:93:4e: 38:6d:97:c3:df:f6:d6:9c:92:e5:98:43:44:cf:91:b4:f8:4a: 54:cf:22:1e:bd:ca:10:3c:3c:c1:7a:1a:a3:66:1c:c0:93:55: 36:57:a2:a1:12:73:62:28:73:49:03:29:8b:a6:00:17:b7:22: 75:74:f5:2f:70:61:db:99:c5:5b:a7:c0:d0:3f:a4:fb:a3:1f: 34:13:ec:40:fe:94:32:36:b4:5f:22:de:30:fc:d1:1b:a6:f0: 40:cf:3d:23:b3:c2:ad:18:ff:6f:c9:05:6d:ec:1b:83:b5:fd: b2:18:de:95:93:bb:d3:80:b6:e1:32:e2:25:49:38:15:e4:0f: 92:58:cd:26 -----BEGIN CERTIFICATE----- MIIExDCCA6ygAwIBAgIUZ6QdWYRmIGtr+LkV90+4xAXgor4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1QjFBRDgyRjBF N0RDNzcxODE5QTlBMjY2NzQ5OTJBMzk1MUI5MzczMB4XDTI1MTIwMjIwNDAxMloX DTI2MTIwMTIwNDUxMlowMzExMC8GA1UEAxMoMzlBNTE3MUREQ0U5OENDNjIxQkRC NTU0QkJGMkRDMEU3REM0MzNDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfGfZJOecumfqNXQW+m7iGCI69XHOtfq0rWY0NVL/R4s3qStotE7px2FJ0G p8T7dkZrs5Wu0kukuLtfywtsK8YAtQXpzpUdslgNn6m2B1Cj/ZvMO0bHMhhiXMa4 fBDNAJ8v7HfFLq02oF6lHu1GmHdWnvMZ7TwPC/qoyIIm4aQcsjkmSqfUz7IAsnsf vIXqsypAPtre+MjrhxJaScSNd0lW23an2CAYoDonSsdDfb0ZLm/XOY4bqcJCs+BK uA25l+JjzLH2LtHeHQvRBD5GQAa5szVKU0iShi9N7J+PoxfOxpJ4u5H3HFBSSbc+ JeE2NUIxtugceM8SdOSoeLEC+6ECAwEAAaOCAbcwggGzMB0GA1UdDgQWBBQ5pRcd 3OmMxiG9tVS78twOfcQzzTAfBgNVHSMEGDAWgBRbGtgvDn3HcYGamiZnSZKjlRuT czAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU4LzVCMUFEODJGMEU3REM3NzE4MTlBOUEyNjY3 NDk5MkEzOTUxQjkzNzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL1d4cllMdzU5eDNHQm1wb21aMG1TbzVVYmszTS5j ZXIwSgYIKwYBBQUHAQsEPjA8MDoGCCsGAQUFBzALhi5yc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTgvQVMxMzgwMzguYXNhMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAhs2MA0GCSqGSIb3DQEB CwUAA4IBAQBzG0N7dLTMbDwkpbmm5Yd1cCkIIX/MVAv2ptXm6Kb5ynCN0WgPC53f k/4vknC+szl/mKQLcoGX/5QrBQ5MkFGnX9vw/Lhcq3+xch1pdPiFaoBIKIWOiXkx DWt3zLUPb12iYP7XT6EqYlKJu2fjf+P3T5gDwBm5N9I2TQuLk044bZfD3/bWnJLl mENEz5G0+EpUzyIevcoQPDzBehqjZhzAk1U2V6KhEnNiKHNJAymLpgAXtyJ1dPUv cGHbmcVbp8DQP6T7ox80E+xA/pQyNrRfIt4w/NEbpvBAzz0js8KtGP9vyQVt7BuD tf2yGN6Vk7vTgLbhMuIlSTgV5A+SWM0m -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:40 2025 by rpki-client