This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/W7fuTujfz9uqbtCPGTfelI0SaEM.roa File: W7fuTujfz9uqbtCPGTfelI0SaEM.roa (raw, json) Hash identifier: oOi7Qd4zsqhuFkhIx2n/7cfRKyamXxF/oxtPWkfDo5w= Subject key identifier: 5B:B7:EE:4E:E8:DF:CF:DB:AA:6E:D0:8F:19:37:DE:94:8D:12:68:43 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 0187524A037C4F391699ACBB71C77147F248 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/W7fuTujfz9uqbtCPGTfelI0SaEM.roa Signing time: Wed 05 Apr 2023 16:39:54 +0000 ROA not before: Wed 05 Apr 2023 16:39:54 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 398343 IP address blocks: 194.135.104.0/24 maxlen: 24 195.133.9.0/24 maxlen: 24 194.135.32.0/24 maxlen: 24 195.133.21.0/24 maxlen: 24 195.133.26.0/23 maxlen: 23 195.133.59.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:87:52:4a:03:7c:4f:39:16:99:ac:bb:71:c7:71:47:f2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Apr 5 16:39:54 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=5bb7ee4ee8dfcfdbaa6ed08f1937de948d126843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:51:c9:f2:a0:ed:c6:42:1c:df:1e:82:85: 9c:2c:e9:be:f7:94:d3:f1:8d:0f:bd:88:fb:26:0d: 51:3c:7a:4c:ff:de:dd:57:77:92:80:ec:08:0f:8b: be:7b:32:bd:3c:d8:33:6b:cc:df:79:aa:df:fd:39: d0:10:e6:d9:6c:2e:73:c6:64:22:d6:04:f8:df:3f: aa:00:36:21:19:f8:de:f4:b6:e3:ba:4d:63:d2:0b: bd:f1:f1:b4:e1:29:46:1c:aa:ce:47:45:67:18:12: 2f:a6:43:22:6d:49:a1:5c:dc:90:84:62:94:91:93: 5e:5c:cc:6f:45:cc:38:48:43:f3:55:f6:5c:5c:09: 87:80:0c:96:3d:e4:92:c3:5a:7f:a8:bd:46:f6:b5: 56:4a:c7:23:ef:d7:e3:96:d3:25:9a:ad:2c:5f:ea: 87:55:e0:5b:ae:22:01:e1:9b:bf:77:8b:de:87:c4: df:06:8a:5b:18:cd:4a:36:ef:98:b3:8f:ad:33:07: cb:21:91:3a:91:d1:91:c0:a8:e3:40:6d:3c:3c:c5: 30:36:82:c7:1c:3b:92:c6:19:24:36:6d:7a:a9:1a: d9:b6:7f:49:dd:13:9f:e1:17:5b:52:e0:db:f7:e8: 2f:e6:23:ba:d6:2d:14:94:56:51:e9:b1:fc:57:17: 10:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B7:EE:4E:E8:DF:CF:DB:AA:6E:D0:8F:19:37:DE:94:8D:12:68:43 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/W7fuTujfz9uqbtCPGTfelI0SaEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.135.32.0/24 194.135.104.0/24 195.133.9.0/24 195.133.21.0/24 195.133.26.0/23 195.133.59.0/24 Signature Algorithm: sha256WithRSAEncryption 86:eb:b8:d9:e1:fb:f7:2e:5f:57:d1:a8:09:7c:43:d8:ee:4f: 00:58:5f:7e:83:24:21:3a:c8:0d:52:5a:69:03:ed:d3:c9:73: b5:63:29:f9:c7:92:45:98:76:9d:69:d5:df:25:7c:6c:78:87: f8:bf:72:f5:fb:21:11:9a:2c:9b:af:0e:3a:55:c4:c7:b5:67: c7:f8:a5:b2:c8:e3:44:c5:f5:dd:4a:bb:c6:f7:58:a8:2b:10: 42:24:84:c9:a4:5b:23:1b:f4:7b:d8:74:f1:d2:23:00:4b:d3: 10:a1:21:3f:5f:30:ee:7a:ef:bc:44:ad:b6:c9:ec:a4:7d:dc: 02:f6:84:5a:e2:86:27:53:63:62:8b:e0:d0:24:b2:26:18:ce: e9:26:32:b3:d1:ac:f5:43:0f:77:01:d7:e4:78:65:c5:e7:3a: 58:c7:1c:87:a6:8a:79:bb:96:c1:15:e9:9b:7e:44:23:2b:fb: c1:40:01:fa:7b:3c:e6:8c:4f:07:1b:b7:b8:77:8d:ac:2c:a2: cc:89:83:0f:0c:a5:72:a3:d2:f6:e1:be:5b:d5:a1:b9:e1:ae: b4:4f:b3:17:4c:bf:23:5d:f6:34:8d:e1:c3:d3:3e:97:ce:a0: b3:31:36:86:07:2d:5c:95:89:31:b1:97:c5:bc:a9:59:93:1d: f0:87:78:84 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAYdSSgN8TzkWmay7ccdxR/JIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjMwNDA1MTYzOTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmI3ZWU0ZWU4ZGZjZmRiYWE2ZWQwOGYxOTM3ZGU5NDhkMTI2ODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZdRyfKg7cZCHN8egoWcLOm+95TT 8Y0PvYj7Jg1RPHpM/97dV3eSgOwID4u+ezK9PNgza8zfearf/TnQEObZbC5zxmQi 1gT43z+qADYhGfje9Lbjuk1j0gu98fG04SlGHKrOR0VnGBIvpkMibUmhXNyQhGKU kZNeXMxvRcw4SEPzVfZcXAmHgAyWPeSSw1p/qL1G9rVWSscj79fjltMlmq0sX+qH VeBbriIB4Zu/d4veh8TfBopbGM1KNu+Ys4+tMwfLIZE6kdGRwKjjQG08PMUwNoLH HDuSxhkkNm16qRrZtn9J3ROf4RdbUuDb9+gv5iO61i0UlFZR6bH8VxcQBQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFFu37k7o38/bqm7Qjxk33pSNEmhDMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvVzdmdVR1amZ6OXVxYnRDUEdUZmVsSTBTYUVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwocgAwQA wodoAwQAw4UJAwQAw4UVAwQBw4UaAwQAw4U7MA0GCSqGSIb3DQEBCwUAA4IBAQCG 67jZ4fv3Ll9X0agJfEPY7k8AWF9+gyQhOsgNUlppA+3TyXO1Yyn5x5JFmHadadXf JXxseIf4v3L1+yERmiybrw46VcTHtWfH+KWyyONExfXdSrvG91ioKxBCJITJpFsj G/R72HTx0iMAS9MQoSE/XzDueu+8RK22yeykfdwC9oRa4oYnU2Nii+DQJLImGM7p JjKz0az1Qw93AdfkeGXF5zpYxxyHpop5u5bBFembfkQjK/vBQAH6ezzmjE8HG7e4 d42sLKLMiYMPDKVyo9L24b5b1aG54a60T7MXTL8jXfY0jeHD0z6XzqCzMTaGBy1c lYkxsZfFvKlZkx3wh3iE -----END CERTIFICATE-----Generated at Thu Dec 25 22:26:42 2025 by rpki-client