This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aYAIHWoguC5h6tBrLDgsPFCGdm4.roa
File: aYAIHWoguC5h6tBrLDgsPFCGdm4.roa (raw, json)
Hash identifier: YXMD31wKLPVeipTbSRzZJUD3TgeEP9D1qPsmDYDGlNA=
Subject key identifier: 69:80:08:1D:6A:20:B8:2E:61:EA:D0:6B:2C:38:2C:3C:50:86:76:6E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D77DB488D433DA24DD78386401F0B5051
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aYAIHWoguC5h6tBrLDgsPFCGdm4.roa
Signing time: Mon 05 Feb 2024 06:01:16 +0000
ROA not before: Mon 05 Feb 2024 06:01:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 62.76.226.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
193.124.2.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.49.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.85.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.117.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.121.0/24 maxlen: 24
194.87.133.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.205.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
194.87.230.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.37.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
195.133.8.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.14.0/23 maxlen: 23
195.133.19.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.58.0/24 maxlen: 24
195.133.59.0/24 maxlen: 24
195.133.60.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.210.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.217.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
212.192.247.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
212.193.24.0/24 maxlen: 24
212.193.30.0/24 maxlen: 24
212.193.31.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:77:db:48:8d:43:3d:a2:4d:d7:83:86:40:1f:0b:50:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 5 06:01:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6980081d6a20b82e61ead06b2c382c3c5086766e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:0e:51:b0:12:c0:51:02:ea:85:31:0f:51:
57:91:33:28:bd:fc:f7:a4:9c:90:94:43:f2:c8:35:
54:1e:23:b2:4f:db:d2:d1:fe:5c:f0:05:9f:76:d0:
63:3c:6e:2b:7d:d6:2d:45:02:92:f5:81:50:dd:e9:
2a:98:8b:91:b7:78:a7:a1:ea:87:57:00:61:5b:27:
24:cb:3f:77:ac:c4:87:81:24:3d:d7:2b:5e:de:d5:
f5:b0:ae:e1:3b:51:5f:c6:00:7b:66:b4:6b:27:3f:
de:16:e7:71:9e:a1:89:0d:dd:38:e4:ba:3f:2d:68:
7f:f9:bc:96:0d:d4:7d:69:27:a2:f9:5b:46:00:87:
30:70:6b:ae:aa:4c:8f:ef:2a:64:a1:ec:b7:73:34:
59:a6:23:81:cc:1f:73:16:71:ab:c7:d9:0e:a1:bf:
4e:07:da:09:cb:a5:04:87:cc:31:fb:93:75:b0:ff:
28:86:e3:3c:57:6d:cb:76:54:ad:e9:5e:d2:e0:e6:
f6:a6:3e:c5:56:8d:0a:3e:38:4c:53:36:3d:fe:05:
58:cf:35:a7:fe:17:8b:91:f4:ce:86:32:37:26:b6:
1b:1b:d2:c8:8a:bf:69:61:f6:e2:c1:4e:1d:c6:56:
87:5a:80:65:70:0a:6a:63:33:a7:cb:68:64:3a:c1:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:80:08:1D:6A:20:B8:2E:61:EA:D0:6B:2C:38:2C:3C:50:86:76:6E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aYAIHWoguC5h6tBrLDgsPFCGdm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
62.76.231.0/24
62.76.235.0/24
193.108.115.0/24
193.124.2.0/23
193.124.6.0/24
193.124.8.0/24
193.124.17.0-193.124.18.255
193.124.44.0/24
193.124.47.0/24
193.124.49.0/24
193.124.91.0/24
193.124.94.0/24
193.124.201.0/24
193.124.204.0/24
193.124.226.0/23
194.58.38.0/24
194.58.43.0/24
194.58.46.0/24
194.58.58.0-194.58.60.255
194.58.66.0/23
194.58.154.0/24
194.87.3.0/24
194.87.6.0/23
194.87.16.0/24
194.87.23.0/24
194.87.34.0/24
194.87.36.0/24
194.87.42.0/23
194.87.49.0/24
194.87.51.0/24
194.87.53.0/24
194.87.63.0/24
194.87.78.0/24
194.87.85.0/24
194.87.105.0/24
194.87.116.0-194.87.121.255
194.87.133.0/24
194.87.140.0/24
194.87.143.0/24
194.87.151.0/24
194.87.160.0/24
194.87.163.0/24
194.87.165.0-194.87.166.255
194.87.176.0/23
194.87.180.0-194.87.182.255
194.87.190.0/24
194.87.202.0/24
194.87.205.0/24
194.87.215.0/24
194.87.230.0/24
194.87.240.0/24
194.87.243.0/24
194.135.23.0-194.135.24.255
194.135.38.0/24
194.135.46.0/24
194.135.105.0/24
195.58.34.0/24
195.58.36.0/23
195.58.55.0-195.58.56.255
195.58.59.0/24
195.58.62.0/23
195.133.8.0/23
195.133.12.0/24
195.133.14.0/23
195.133.19.0/24
195.133.21.0-195.133.22.255
195.133.58.0-195.133.60.255
195.133.80.0-195.133.82.255
195.133.94.0/24
195.133.194.0/23
212.192.0.0/24
212.192.7.0/24
212.192.10.0/24
212.192.30.0/24
212.192.210.0/23
212.192.214.0/23
212.192.217.0/24
212.192.223.0/24
212.192.241.0/24
212.192.246.0/23
212.193.10.0/24
212.193.15.0/24
212.193.24.0/24
212.193.30.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:fd:77:56:48:07:46:43:1d:3d:ff:4f:c6:19:78:bc:26:c7:
9b:4d:d2:49:31:a1:53:84:62:b5:02:cf:8e:c3:66:7b:93:60:
23:2a:8c:fe:3f:13:00:a0:3f:b7:93:e9:3d:57:4e:31:43:a8:
0f:9f:44:85:08:2a:aa:31:75:36:4f:53:92:f3:1c:5b:09:c2:
bd:13:14:9a:fe:9c:57:c9:0b:2e:7b:bf:c3:6a:60:f2:87:d7:
64:ca:6f:39:a3:ab:ae:f7:8d:2b:51:6a:53:04:5a:5d:47:bf:
f3:32:5d:a8:a8:42:c8:66:2e:6a:91:d5:09:99:cb:b3:a0:ce:
dc:7f:b6:40:fe:89:1b:8f:72:45:28:4e:56:69:7f:cf:97:24:
27:8c:c8:c0:83:98:3a:d6:53:22:78:42:78:67:6e:c7:73:58:
09:92:5c:ac:c7:aa:14:4f:88:b9:62:7c:65:d0:4f:e2:d7:03:
97:d3:ed:8c:00:e3:d0:97:c8:4b:19:fe:cf:46:84:32:7e:68:
89:ca:8e:0f:61:b4:41:54:9b:85:d6:16:7b:23:42:af:ed:13:
1c:ff:06:2f:4f:b4:57:bb:92:85:bc:0f:7c:62:b0:f8:d6:77:
18:4e:71:e0:b1:98:c6:3d:ad:46:37:a9:4d:2e:67:31:d6:b8:
92:45:de:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 15:17:11 2025 by rpki-client