This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/34352e3131362e31322e302f32322d3234203d3e2039333132.roa
File:                     34352e3131362e31322e302f32322d3234203d3e2039333132.roa (raw, json)
Hash identifier:          ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=
Subject key identifier:   AB:51:70:1E:F1:42:C2:3B:1C:24:18:DA:0E:42:4C:A0:86:E1:C6:D6
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       6F170B697C13725D38A7A9B4C950536F032CCF55
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/34352e3131362e31322e302f32322d3234203d3e2039333132.roa
Signing time:             Thu 13 Nov 2025 06:53:00 +0000
ROA not before:           Thu 13 Nov 2025 06:48:00 +0000
ROA not after:            Thu 12 Nov 2026 06:53:00 +0000
asID:                     9312
IP address blocks:        45.116.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 11:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:17:0b:69:7c:13:72:5d:38:a7:a9:b4:c9:50:53:6f:03:2c:cf:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Nov 13 06:48:00 2025 GMT
            Not After : Nov 12 06:53:00 2026 GMT
        Subject: CN=AB51701EF142C23B1C2418DA0E424CA086E1C6D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:63:a6:6d:33:67:df:89:b2:c3:d8:52:d7:cf:
                    18:d1:c7:3d:a1:d3:16:83:a1:5f:8c:00:8b:e2:b9:
                    96:dc:1c:0c:f1:cb:21:cf:ca:fb:c1:ef:e6:eb:5b:
                    c2:9d:a3:8f:b0:72:e0:f5:a9:7b:05:0d:61:13:c0:
                    88:1d:b6:9a:62:7a:e3:73:15:96:c7:2e:2e:6d:fb:
                    91:a4:ea:f3:dd:ea:db:a3:0c:73:62:85:fa:06:9b:
                    c6:92:4a:7b:e2:d8:48:e8:e9:8d:eb:1f:a6:b7:8b:
                    d7:03:07:46:5b:19:45:a1:a1:6c:6c:78:52:0d:de:
                    be:fa:bd:c8:07:90:64:14:69:bb:13:60:ae:6d:33:
                    6d:61:61:40:73:26:7c:00:a3:00:cd:a6:3c:26:96:
                    61:ff:15:05:58:c9:64:1d:2c:a1:cc:46:ed:07:18:
                    f1:8f:eb:03:74:cf:e4:e7:86:09:da:43:80:fc:f6:
                    e3:85:4a:b9:73:d3:47:e3:ea:17:be:4c:23:7b:14:
                    d7:8a:7d:04:8b:36:5e:dc:49:71:76:0e:c1:a9:07:
                    36:da:33:c3:8f:0c:c7:57:dd:7b:e1:d1:5a:2a:e0:
                    f7:39:e5:47:92:42:3a:d4:62:db:41:b0:96:99:57:
                    43:53:12:31:64:3f:ca:ee:39:a3:0a:84:b2:de:d8:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:51:70:1E:F1:42:C2:3B:1C:24:18:DA:0E:42:4C:A0:86:E1:C6:D6
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/34352e3131362e31322e302f32322d3234203d3e2039333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:65:c4:2e:37:6b:8c:13:5f:a7:fe:ae:1b:ee:f6:88:42:3b:
         6c:f7:a4:56:bf:a4:e4:e3:7f:d3:db:be:d2:77:c8:fe:6b:79:
         6a:97:7a:5e:7b:16:5c:45:64:db:56:0b:29:3f:0b:62:c4:12:
         53:80:dd:e4:13:a4:fc:ae:cb:20:f3:e1:30:fb:33:1e:e5:71:
         b7:d4:f8:73:3b:b2:93:00:d6:5c:67:86:57:57:d8:99:8a:1d:
         31:0f:c9:9c:4f:c7:a7:e0:62:fe:7e:3b:ae:d8:12:7d:be:f1:
         50:4a:56:23:9c:0f:ad:bc:ca:8f:6e:6f:8f:77:03:19:63:15:
         48:0c:8a:14:fa:fe:94:47:12:d0:76:71:e7:f4:1a:5b:b6:fe:
         88:31:13:ff:44:91:ea:9d:e6:65:29:d1:3a:ab:87:5a:7e:22:
         7f:12:e6:2d:58:6d:8d:b5:3b:8f:a3:3a:55:ab:ae:d4:3f:05:
         9e:fc:4d:96:7d:e3:0f:02:28:2d:e9:a5:b3:a1:a5:71:84:7c:
         26:99:2a:d0:59:29:ce:c7:fe:bc:ac:cd:d8:f8:90:ad:25:18:
         9e:b4:8d:bf:eb:84:29:5a:4e:f0:e3:e4:54:50:b6:86:02:06:
         40:1a:c6:0a:95:e4:f3:ef:13:b3:5c:3c:30:b0:8c:38:cf:46:
         1e:39:ee:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:37:34 2025 by rpki-client