This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5-C-HUq0Vx1VsjLWeVl9DTHt5-Y.roa File: 5-C-HUq0Vx1VsjLWeVl9DTHt5-Y.roa (raw, json) Hash identifier: j3GFteQCNA2XFcwCRQ3C+GahIYgle6pBS4SUhcqXchQ= Subject key identifier: E7:E0:BE:1D:4A:B4:57:1D:55:B2:32:D6:79:59:7D:0D:31:ED:E7:E6 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 01973B01B8E9F94BC7EF8F68371B0CE48A75 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5-C-HUq0Vx1VsjLWeVl9DTHt5-Y.roa Signing time: Wed 04 Jun 2025 12:54:18 +0000 ROA not before: Wed 04 Jun 2025 12:54:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2.59.253.0/24 maxlen: 24 5.252.132.0/22 maxlen: 24 31.13.211.0/24 maxlen: 24 45.8.93.0/24 maxlen: 24 45.9.157.0/24 maxlen: 24 45.12.253.0/24 maxlen: 24 45.66.228.0/24 maxlen: 24 45.66.231.0/24 maxlen: 24 45.81.39.0/24 maxlen: 24 45.88.64.0/24 maxlen: 24 45.89.247.0/24 maxlen: 24 45.90.89.0/24 maxlen: 24 45.139.106.0/24 maxlen: 24 45.141.158.0/24 maxlen: 24 45.141.159.0/24 maxlen: 24 45.151.90.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 83.219.97.0/24 maxlen: 24 84.54.48.0/24 maxlen: 24 87.120.87.0/24 maxlen: 24 87.120.89.0/24 maxlen: 24 87.120.126.0/23 maxlen: 24 87.120.166.0/24 maxlen: 24 87.121.22.0/24 maxlen: 24 87.121.38.0/24 maxlen: 24 87.121.45.0/24 maxlen: 24 87.121.87.0/24 maxlen: 24 87.121.165.0/24 maxlen: 24 91.92.70.0/24 maxlen: 24 92.119.196.0/23 maxlen: 24 92.249.50.0/24 maxlen: 24 93.123.45.0/24 maxlen: 24 93.123.47.0/24 maxlen: 24 93.123.85.0/24 maxlen: 24 93.123.109.0/24 maxlen: 24 93.123.117.0/24 maxlen: 24 93.123.119.0/24 maxlen: 24 94.103.125.0/24 maxlen: 24 94.154.160.0/23 maxlen: 24 94.154.161.0/24 maxlen: 24 94.154.162.0/23 maxlen: 24 94.156.64.0/21 maxlen: 32 94.156.105.0/24 maxlen: 24 94.156.167.0/24 maxlen: 24 94.156.232.0/24 maxlen: 24 94.156.239.0/24 maxlen: 24 141.98.1.0/24 maxlen: 24 141.98.6.0/24 maxlen: 24 171.22.73.0/24 maxlen: 24 171.22.74.0/23 maxlen: 24 178.215.227.0/24 maxlen: 24 185.216.84.0/22 maxlen: 24 185.222.162.0/24 maxlen: 24 193.25.216.0/24 maxlen: 24 193.35.18.0/24 maxlen: 24 193.222.96.0/24 maxlen: 24 193.222.98.0/24 maxlen: 24 194.55.186.0/24 maxlen: 24 194.169.175.0/24 maxlen: 24 195.178.111.0/24 maxlen: 24 212.115.41.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:3b:01:b8:e9:f9:4b:c7:ef:8f:68:37:1b:0c:e4:8a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jun 4 12:54:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e7e0be1d4ab4571d55b232d679597d0d31ede7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:06:01:95:8b:2d:fe:0a:3f:57:8b:ea:0f:a4: d9:4b:0a:7c:17:68:fb:64:27:da:39:b1:fa:24:42: 5f:c2:9b:22:7d:21:2d:b0:d0:d6:bb:8c:06:89:bc: 6d:c0:2c:3b:a1:bf:d7:0a:d7:55:0b:81:3d:bf:f3: a2:cd:09:e0:fb:a7:3c:5e:5a:9d:a9:f6:79:82:00: ba:2b:97:e6:92:69:cd:36:5a:bf:cc:a2:ca:0c:a2: 66:93:1b:39:38:23:1e:84:9d:10:4d:01:49:f2:c0: a5:6d:d1:1b:d5:db:da:78:03:53:52:3d:6f:58:04: 08:74:47:f4:48:ae:65:98:1b:99:9f:2e:d6:b8:6c: 20:a6:4a:2e:09:9f:0b:08:02:f7:c8:6b:f6:8a:27: 66:35:a6:b3:b2:3f:ee:bb:63:c1:35:bd:cb:bd:8a: 6b:e9:f5:fa:99:55:32:18:f2:44:4a:44:bd:1c:b9: 9b:3a:7d:97:c5:6e:c1:41:50:fe:33:ce:de:d9:80: 0f:6d:76:f9:a6:27:e6:93:91:90:71:3b:9f:49:12: 23:c5:c1:bc:b5:1a:19:d2:9a:69:87:f0:05:20:a8: 0a:5a:9e:7e:d1:a1:02:f9:ac:51:96:5b:fd:a4:16: 10:cf:86:4e:7e:aa:e4:c1:6e:b4:4e:1c:e7:40:c6: 21:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E0:BE:1D:4A:B4:57:1D:55:B2:32:D6:79:59:7D:0D:31:ED:E7:E6 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5-C-HUq0Vx1VsjLWeVl9DTHt5-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.253.0/24 5.252.132.0/22 31.13.211.0/24 45.8.93.0/24 45.9.157.0/24 45.12.253.0/24 45.66.228.0/24 45.66.231.0/24 45.81.39.0/24 45.88.64.0/24 45.89.247.0/24 45.90.89.0/24 45.139.106.0/24 45.141.158.0/23 45.151.90.0/24 81.161.238.0/24 83.219.97.0/24 84.54.48.0/24 87.120.87.0/24 87.120.89.0/24 87.120.126.0/23 87.120.166.0/24 87.121.22.0/24 87.121.38.0/24 87.121.45.0/24 87.121.87.0/24 87.121.165.0/24 91.92.70.0/24 92.119.196.0/23 92.249.50.0/24 93.123.45.0/24 93.123.47.0/24 93.123.85.0/24 93.123.109.0/24 93.123.117.0/24 93.123.119.0/24 94.103.125.0/24 94.154.160.0/22 94.156.64.0/21 94.156.105.0/24 94.156.167.0/24 94.156.232.0/24 94.156.239.0/24 141.98.1.0/24 141.98.6.0/24 171.22.73.0-171.22.75.255 178.215.227.0/24 185.216.84.0/22 185.222.162.0/24 193.25.216.0/24 193.35.18.0/24 193.222.96.0/24 193.222.98.0/24 194.55.186.0/24 194.169.175.0/24 195.178.111.0/24 212.115.41.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:61:ef:a7:51:f5:c0:54:b4:e4:4d:70:11:33:24:19:08:86: 63:f2:7f:9a:68:1a:d4:0e:15:1d:eb:82:92:ea:08:a2:3b:fa: 78:56:96:93:9c:b6:cb:53:01:00:96:84:74:eb:4e:bd:d0:3c: 1f:f4:a9:62:26:2b:49:5d:38:b8:f7:45:04:c3:06:6a:74:63: 3b:fa:cf:5a:67:7c:61:6b:5e:05:62:02:c4:0a:07:88:8b:20: d3:97:fe:cc:20:8a:02:d3:cb:5d:6f:60:8e:52:7c:64:73:0e: 8c:fb:b6:de:dd:44:c7:b3:b9:9a:25:11:c9:b4:73:51:df:c9: 42:40:25:83:7a:d9:df:3c:ae:f5:53:a4:66:8e:13:11:cb:8c: 25:d9:da:0c:56:6c:64:68:14:4f:23:71:f2:e1:a0:76:4c:2a: 7d:41:84:d1:63:6f:d8:f2:da:8f:c9:d6:3f:18:da:c2:6c:84: 0a:f9:87:cc:ab:7e:30:f0:62:12:79:54:be:9d:27:a7:64:72: a5:52:3d:dc:9e:be:d4:4d:b9:b1:de:af:d7:0a:be:43:69:21: a2:f3:64:37:30:fd:5d:50:c6:06:5b:2d:7f:69:31:b4:56:7a: 04:aa:25:a5:fb:6c:6b:c0:57:16:3e:cb:5c:53:c6:4a:b5:3f: 3d:a9:8b:4d -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgISAZc7Abjp+UvH749oNxsM5Ip1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUwNjA0MTI1NDE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2UwYmUxZDRhYjQ1NzFkNTViMjMyZDY3OTU5N2QwZDMxZWRlN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QYBlYst/go/V4vqD6TZSwp8F2j7 ZCfaObH6JEJfwpsifSEtsNDWu4wGibxtwCw7ob/XCtdVC4E9v/OizQng+6c8Xlqd qfZ5ggC6K5fmkmnNNlq/zKLKDKJmkxs5OCMehJ0QTQFJ8sClbdEb1dvaeANTUj1v WAQIdEf0SK5lmBuZny7WuGwgpkouCZ8LCAL3yGv2iidmNaazsj/uu2PBNb3LvYpr 6fX6mVUyGPJESkS9HLmbOn2XxW7BQVD+M87e2YAPbXb5pifmk5GQcTufSRIjxcG8 tRoZ0ppph/AFIKgKWp5+0aEC+axRllv9pBYQz4ZOfqrkwW60ThznQMYhYQIDAQAB o4IDazCCA2cwHQYDVR0OBBYEFOfgvh1KtFcdVbIy1nlZfQ0x7efmMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvNS1DLUhVcTBWeDFWc2pMV2VWbDlEVEh0NS1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBfwYIKwYBBQUHAQcBAf8EggFuMIIBajCCAWYEAgABMIIB XgMEAAI7/QMEAgX8hAMEAB8N0wMEAC0IXQMEAC0JnQMEAC0M/QMEAC1C5AMEAC1C 5wMEAC1RJwMEAC1YQAMEAC1Z9wMEAC1aWQMEAC2LagMEAS2NngMEAC2XWgMEAFGh 7gMEAFPbYQMEAFQ2MAMEAFd4VwMEAFd4WQMEAVd4fgMEAFd4pgMEAFd5FgMEAFd5 JgMEAFd5LQMEAFd5VwMEAFd5pQMEAFtcRgMEAVx3xAMEAFz5MgMEAF17LQMEAF17 LwMEAF17VQMEAF17bQMEAF17dQMEAF17dwMEAF5nfQMEAl6aoAMEA16cQAMEAF6c aQMEAF6cpwMEAF6c6AMEAF6c7wMEAI1iAQMEAI1iBjAMAwQAqxZJAwQCqxZIAwQA stfjAwQCudhUAwQAud6iAwQAwRnYAwQAwSMSAwQAwd5gAwQAwd5iAwQAwje6AwQA wqmvAwQAw7JvAwQA1HMpMA0GCSqGSIb3DQEBCwUAA4IBAQCfYe+nUfXAVLTkTXAR MyQZCIZj8n+aaBrUDhUd64KS6giiO/p4VpaTnLbLUwEAloR060690Dwf9KliJitJ XTi490UEwwZqdGM7+s9aZ3xha14FYgLECgeIiyDTl/7MIIoC08tdb2COUnxkcw6M +7be3UTHs7maJRHJtHNR38lCQCWDetnfPK71U6RmjhMRy4wl2doMVmxkaBRPI3Hy 4aB2TCp9QYTRY2/Y8tqPydY/GNrCbIQK+YfMq34w8GISeVS+nSenZHKlUj3cnr7U Tbmx3q/XCr5DaSGi82Q3MP1dUMYGWy1/aTG0VnoEqiWl+2xrwFcWPstcU8ZKtT89 qYtN -----END CERTIFICATE-----Generated at Thu Dec 25 05:17:54 2025 by rpki-client