This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/34352e3133322e3139302e302f32342d3234203d3e2033393730.roa
File: 34352e3133322e3139302e302f32342d3234203d3e2033393730.roa (raw, json)
Hash identifier: zbEHl08UO9uE1ceod4FYJ7t9jZwTwERqUKA0XAolpWc=
Subject key identifier: 62:DB:5F:47:C0:D3:39:C6:2A:47:FD:7E:1E:24:9E:3E:62:4C:2B:0C
Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92
Certificate serial: 395EB780A797593446F4081AC312A9FF09A1C1FD
Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/34352e3133322e3139302e302f32342d3234203d3e2033393730.roa
Signing time: Sat 07 Jun 2025 19:27:26 +0000
ROA not before: Sat 07 Jun 2025 19:22:26 +0000
ROA not after: Sat 06 Jun 2026 19:27:26 +0000
asID: 3970
IP address blocks: 45.132.190.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:5e:b7:80:a7:97:59:34:46:f4:08:1a:c3:12:a9:ff:09:a1:c1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92
Validity
Not Before: Jun 7 19:22:26 2025 GMT
Not After : Jun 6 19:27:26 2026 GMT
Subject: CN=62DB5F47C0D339C62A47FD7E1E249E3E624C2B0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:a7:8b:62:81:5b:d5:b0:8f:30:13:df:91:
2a:08:1e:3c:64:3e:96:2e:7c:01:1b:a6:1b:98:e0:
2d:41:40:13:5f:17:98:0b:10:9d:a6:f0:ac:eb:53:
a1:f7:e7:f2:6c:37:fe:85:af:ad:68:19:68:ac:3b:
d4:89:a1:68:75:e1:50:a0:23:92:6e:0b:40:8f:1d:
e0:96:2a:56:83:1a:0a:81:25:34:53:b4:2b:b5:98:
60:ba:96:81:d5:3c:ca:4e:b4:fc:7a:02:4a:90:6f:
4d:93:19:63:50:c5:64:39:ba:57:b9:0b:58:dc:5a:
ad:af:0a:2a:fa:72:c7:74:4d:32:47:e7:74:66:c7:
ac:28:61:3b:32:fc:fd:37:35:66:10:90:38:5f:e8:
68:56:9d:16:7f:6f:10:ff:7b:db:d9:55:aa:e9:3d:
08:16:63:cd:c9:15:1a:0c:e6:40:ee:fe:eb:ed:8c:
b4:48:ff:21:c1:82:9c:fe:5c:1c:fe:61:d8:8e:aa:
c5:cf:43:25:1d:00:51:4a:ad:b3:29:20:e1:44:ee:
50:10:35:d0:0d:ca:0f:61:1a:d3:6f:82:de:28:88:
3f:b2:65:46:c5:b1:14:34:1e:07:70:ab:8b:85:1b:
86:34:77:f6:c8:11:dc:92:ac:a7:2d:74:d2:81:f0:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DB:5F:47:C0:D3:39:C6:2A:47:FD:7E:1E:24:9E:3E:62:4C:2B:0C
X509v3 Authority Key Identifier:
keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject Information Access:
Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/34352e3133322e3139302e302f32342d3234203d3e2033393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.190.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:1e:4d:05:cc:85:64:bd:04:b8:7c:fe:8d:19:66:50:d5:a7:
4a:20:b8:ce:1c:c4:6a:f0:b3:fc:03:42:4f:51:c1:9b:03:cc:
93:95:1d:a6:1d:36:39:02:3c:db:ae:69:0a:b0:64:a0:29:d2:
fc:c9:1e:21:6a:22:94:20:e3:c5:d4:ba:c0:2d:51:55:d5:2f:
58:f4:31:97:32:c0:7a:5c:1e:a0:99:8c:62:7f:56:29:1c:f1:
62:6b:37:70:5f:27:ab:f1:29:2b:97:b7:e3:c6:7f:77:00:c0:
da:8d:c8:25:99:2c:cd:f8:97:e4:df:c3:e9:00:9f:76:b2:d0:
c1:f3:6b:b3:61:55:12:ae:2f:cb:da:90:9a:6a:14:4f:7a:cf:
11:7a:6d:04:71:52:29:68:30:4b:77:8d:bf:9d:22:a0:73:cb:
9c:31:3e:b5:04:29:8d:4f:23:a8:97:d1:b8:d4:5b:fb:e7:5c:
af:d4:c9:d8:39:44:fb:d0:97:51:51:6f:fe:87:fc:38:e4:13:
b9:2b:8c:24:44:2b:9e:b2:da:45:8c:8a:1b:69:6b:18:5c:c5:
e1:7e:3d:9b:71:75:7c:ca:cd:66:5e:be:23:06:25:4a:08:71:
3c:15:3b:c1:93:39:1d:bc:90:e1:13:25:bb:6c:fc:f6:9e:b1:
50:70:fd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 16:01:43 2026 by rpki-client