This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2033323538.roa File: 323430333a373163303a3a2f33322d3438203d3e2033323538.roa (raw, json) Hash identifier: A+n33m7aMq8dWmlNODuImDbmHluR0nRCgY8pOPk9SGU= Subject key identifier: 93:B0:22:C3:DC:BF:8C:17:10:89:49:DF:D3:24:7B:63:7F:F2:87:B3 Certificate issuer: /CN=A91FD4CC0000/serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Certificate serial: 3297EEE81D8F014E40EE4C9B819DBDA7C587C440 Authority key identifier: A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2033323538.roa Signing time: Tue 02 Dec 2025 20:44:16 +0000 ROA not before: Tue 02 Dec 2025 20:39:16 +0000 ROA not after: Tue 01 Dec 2026 20:44:16 +0000 asID: 3258 IP address blocks: 2403:71c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 18:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:97:ee:e8:1d:8f:01:4e:40:ee:4c:9b:81:9d:bd:a7:c5:87:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4CC0000, serialNumber=A3CE6EB531A8951D24A37DF27A01EB39651D7ECA Validity Not Before: Dec 2 20:39:16 2025 GMT Not After : Dec 1 20:44:16 2026 GMT Subject: CN=93B022C3DCBF8C17108949DFD3247B637FF287B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:dd:95:19:78:14:27:03:e3:57:1d:b6:94: 83:b2:c8:71:d9:19:1e:9d:43:c6:2b:22:d6:08:c3: 78:fc:78:80:91:f4:1b:f8:e6:69:58:94:28:3e:be: 17:d0:3d:2a:68:ae:fe:2f:9e:06:67:2a:9e:b0:7e: d5:12:75:86:1b:ca:df:51:dd:59:0c:7f:66:29:a1: b1:ff:d1:d7:b0:be:84:3f:b7:3c:cf:01:78:f3:53: fc:67:0c:c7:18:a2:e9:b2:94:16:76:b1:d8:2f:ba: 94:21:1b:f7:18:8f:38:87:b9:53:e0:10:1b:8d:49: b8:d2:6b:de:7e:13:b1:ba:31:ec:83:d1:f6:f2:46: c3:a2:09:88:72:0b:7a:6d:e4:a7:a7:cb:60:68:21: c6:33:51:0a:eb:d2:6e:6d:ef:c9:5e:d5:d6:22:28: 19:de:90:c6:96:c5:8c:0f:ff:11:f6:56:85:29:ef: 19:bc:cb:44:83:d4:b3:b5:6e:7f:24:5d:48:7f:7a: fa:fe:f1:9d:0a:41:fa:23:08:2d:7a:f1:0f:e8:35: 81:73:20:c9:19:2d:ff:78:0f:d6:3a:bd:9f:38:b4: c0:fa:39:00:02:04:24:83:a1:cd:98:67:10:0d:ff: 10:94:72:8c:d0:47:0f:ed:cd:e2:97:70:85:fa:23: 5f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B0:22:C3:DC:BF:8C:17:10:89:49:DF:D3:24:7B:63:7F:F2:87:B3 X509v3 Authority Key Identifier: keyid:A3:CE:6E:B5:31:A8:95:1D:24:A3:7D:F2:7A:01:EB:39:65:1D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/59/A3CE6EB531A8951D24A37DF27A01EB39651D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o85utTGolR0ko33yegHrOWUdfso.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/59/323430333a373163303a3a2f33322d3438203d3e2033323538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:71c0::/32 Signature Algorithm: sha256WithRSAEncryption 73:60:9e:a8:37:1a:70:06:0c:5c:ea:7f:15:0e:8f:15:31:96: bf:34:64:b3:e5:0d:77:bc:2d:ad:00:1d:ba:e3:14:6e:6f:ef: 8b:87:0e:83:cc:f6:1c:0f:1b:fa:46:d6:ba:17:63:e5:39:2c: aa:88:08:ad:3f:17:24:49:05:20:c3:70:10:7b:98:ca:be:3b: dd:42:4f:f0:12:3d:16:e2:af:e4:b7:fc:7d:01:67:74:18:de: 2e:fb:52:65:f4:c3:17:4a:40:60:4b:84:7c:bd:eb:b8:13:1f: 32:4b:06:b0:5c:f9:02:51:9a:dd:c6:a1:9f:a1:a3:78:09:75: 6f:09:39:3d:9c:31:b1:79:f4:20:1a:76:18:16:f4:cc:47:f8: 86:87:25:d0:f1:4a:74:63:45:02:56:c8:0b:3a:19:ce:70:d9: 05:95:f8:df:de:98:aa:d9:b1:61:37:2b:7f:aa:bf:44:c4:b7: c7:d1:96:35:ce:41:5b:11:41:b6:2a:c3:7b:f0:25:4a:c0:9e: 93:22:8a:0b:cd:a1:71:13:42:0d:15:d8:ae:cb:d3:de:14:42: ff:27:13:70:86:62:01:cd:87:c6:48:ab:96:f8:29:77:81:b1: 6d:ae:19:d3:75:2a:bc:a4:9f:63:d7:9f:75:f4:29:98:bc:7a: 44:7e:ec:dd -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIUMpfu6B2PAU5A7kybgZ29p8WHxEAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkQ0Q0MwMDAwMTEwLwYDVQQFEyhBM0NFNkVCNTMx QTg5NTFEMjRBMzdERjI3QTAxRUIzOTY1MUQ3RUNBMB4XDTI1MTIwMjIwMzkxNloX DTI2MTIwMTIwNDQxNlowMzExMC8GA1UEAxMoOTNCMDIyQzNEQ0JGOEMxNzEwODk0 OURGRDMyNDdCNjM3RkYyODdCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIH3ZUZeBQnA+NXHbaUg7LIcdkZHp1Dxisi1gjDePx4gJH0G/jmaViUKD6+ F9A9Kmiu/i+eBmcqnrB+1RJ1hhvK31HdWQx/Zimhsf/R17C+hD+3PM8BePNT/GcM xxii6bKUFnax2C+6lCEb9xiPOIe5U+AQG41JuNJr3n4Tsbox7IPR9vJGw6IJiHIL em3kp6fLYGghxjNRCuvSbm3vyV7V1iIoGd6QxpbFjA//EfZWhSnvGbzLRIPUs7Vu fyRdSH96+v7xnQpB+iMILXrxD+g1gXMgyRkt/3gP1jq9nzi0wPo5AAIEJIOhzZhn EA3/EJRyjNBHD+3N4pdwhfojX88CAwEAAaOCAecwggHjMB0GA1UdDgQWBBSTsCLD 3L+MFxCJSd/TJHtjf/KHszAfBgNVHSMEGDAWgBSjzm61MaiVHSSjffJ6Aes5ZR1+ yjAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp LnJvYS5uZXQvcnJkcC94VG9tLzU5L0EzQ0U2RUI1MzFBODk1MUQyNEEzN0RGMjdB MDFFQjM5NjUxRDdFQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx RTJCQjQ2OEY3QzcyRkQxRkYyL284NXV0VEdvbFIwa28zM3llZ0hyT1dVZGZzby5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL3Jwa2kucm9h Lm5ldC9ycmRwL3hUb20vNTkvMzIzNDMwMzMzYTM3MzE2MzMwM2EzYTJmMzMzMjJk MzQzODIwM2QzZTIwMzMzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkA3HAMA0GCSqGSIb3DQEB CwUAA4IBAQBzYJ6oNxpwBgxc6n8VDo8VMZa/NGSz5Q13vC2tAB264xRub++Lhw6D zPYcDxv6Rta6F2PlOSyqiAitPxckSQUgw3AQe5jKvjvdQk/wEj0W4q/kt/x9AWd0 GN4u+1Jl9MMXSkBgS4R8veu4Ex8ySwawXPkCUZrdxqGfoaN4CXVvCTk9nDGxefQg GnYYFvTMR/iGhyXQ8Up0Y0UCVsgLOhnOcNkFlfjf3piq2bFhNyt/qr9ExLfH0ZY1 zkFbEUG2KsN78CVKwJ6TIooLzaFxE0INFdiuy9PeFEL/JxNwhmIBzYfGSKuW+Cl3 gbFtrhnTdSq8pJ9j15919CmYvHpEfuzd -----END CERTIFICATE-----Generated at Sat Dec 6 19:44:27 2025 by rpki-client