This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mFdLy941aCUMJIOweHZKQIy7xPg.roa File: mFdLy941aCUMJIOweHZKQIy7xPg.roa (raw, json) Hash identifier: FqCgJUzg6zPP74PvUFTYeZoezqqZph2HjThPmu2a9aw= Subject key identifier: 98:57:4B:CB:DE:35:68:25:0C:24:83:B0:78:76:4A:40:8C:BB:C4:F8 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 0190E86EAAD9FBF7C5269FC3DEA73127F0EB Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mFdLy941aCUMJIOweHZKQIy7xPg.roa Signing time: Thu 25 Jul 2024 05:48:05 +0000 ROA not before: Thu 25 Jul 2024 05:48:05 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 202685 IP address blocks: 87.121.58.0/24 maxlen: 24 87.121.69.0/24 maxlen: 24 94.103.125.0/24 maxlen: 24 147.78.102.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:e8:6e:aa:d9:fb:f7:c5:26:9f:c3:de:a7:31:27:f0:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jul 25 05:48:05 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=98574bcbde3568250c2483b078764a408cbbc4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:88:7d:4b:0d:e0:5b:15:ca:40:d0:60:d6:09: b8:83:ef:c9:70:4e:d8:98:79:5b:2b:1f:ad:34:d6: d3:be:f4:d5:32:41:b4:43:ca:8e:9e:23:ad:eb:12: bd:17:fc:31:07:d7:41:a9:93:b3:ef:1c:7e:74:0c: f0:cc:cb:aa:21:4e:fb:4d:d8:d8:fa:c3:2c:0e:21: e7:5d:e4:23:12:e3:d0:5c:29:c0:b6:63:c4:a2:31: 33:e8:1b:2c:2a:0d:be:31:4e:52:b9:6b:44:28:9b: f5:91:a7:ba:2a:d3:b7:b8:c4:03:ed:fe:57:6e:c5: 82:9c:74:4b:39:9b:33:31:48:cf:d1:5b:2b:64:c5: 14:8e:4e:ec:8e:d0:01:f6:08:32:5f:48:84:cc:bc: cb:87:b4:7e:7d:3b:1c:79:a5:63:6f:2c:f2:4a:8e: 6b:08:8a:34:96:51:e0:80:e8:fc:5b:4f:54:4d:a8: 49:6b:a4:07:f2:58:cc:2e:d2:71:83:01:d0:55:04: 90:24:86:ba:4d:fb:a4:d4:94:ed:8b:2a:8b:ef:2b: a5:24:06:d2:d7:4e:fd:a8:1f:4f:93:cf:4b:79:da: 83:9e:95:3d:88:3b:88:f5:2d:6c:69:be:c9:e9:6d: 0e:3d:df:82:eb:1c:d4:e4:ad:e3:96:cf:2e:32:f9: bc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:57:4B:CB:DE:35:68:25:0C:24:83:B0:78:76:4A:40:8C:BB:C4:F8 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mFdLy941aCUMJIOweHZKQIy7xPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.58.0/24 87.121.69.0/24 94.103.125.0/24 147.78.102.0/24 Signature Algorithm: sha256WithRSAEncryption 12:da:91:39:24:5c:62:28:8e:01:52:9b:b5:20:b4:51:e6:9f: f9:ed:15:97:84:cd:df:71:54:7f:62:a7:21:05:fe:04:e7:8f: c6:dd:d0:bc:b1:21:eb:05:0d:91:a3:8a:3f:f2:ce:70:8d:1e: 20:49:86:a1:f3:38:a2:ec:68:b4:b0:38:fc:c5:c3:e3:b5:2d: 22:1b:5f:ce:29:ec:b4:c2:5a:32:a2:f1:6b:7a:8a:f4:9f:f0: 9b:34:87:d9:f2:0d:c7:c2:02:83:55:02:ce:a8:75:cc:ad:45: c9:6c:7c:cd:c4:a9:47:0d:57:b2:43:ca:fa:46:f6:84:78:c9: 35:aa:80:f1:2d:cf:c6:78:f3:c8:bc:71:63:3a:58:c6:3f:3c: 30:6b:c0:19:00:15:3b:49:ae:ef:3b:cb:db:4a:f8:28:ee:84: 64:ce:fc:83:32:f5:ea:41:4d:29:2c:21:9e:a6:c3:ab:82:fc: 94:ce:86:60:78:89:9e:56:ac:99:86:5d:53:95:59:5b:e6:b2: 00:10:9f:9a:3c:f4:d3:cc:32:43:a2:8e:86:d7:78:33:23:6b: c0:c6:51:74:1d:1c:05:6d:f6:8c:60:c4:b6:7f:a1:35:dc:31: 0f:54:66:0b:8f:4c:dc:56:b4:e5:12:ee:c8:ad:f8:6c:6a:8b: 9b:d5:a5:37 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZDobqrZ+/fFJp/D3qcxJ/DrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjQwNzI1MDU0ODA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODU3NGJjYmRlMzU2ODI1MGMyNDgzYjA3ODc2NGE0MDhjYmJjNGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Yh9Sw3gWxXKQNBg1gm4g+/JcE7Y mHlbKx+tNNbTvvTVMkG0Q8qOniOt6xK9F/wxB9dBqZOz7xx+dAzwzMuqIU77TdjY +sMsDiHnXeQjEuPQXCnAtmPEojEz6BssKg2+MU5SuWtEKJv1kae6KtO3uMQD7f5X bsWCnHRLOZszMUjP0VsrZMUUjk7sjtAB9ggyX0iEzLzLh7R+fTsceaVjbyzySo5r CIo0llHggOj8W09UTahJa6QH8ljMLtJxgwHQVQSQJIa6Tfuk1JTtiyqL7yulJAbS 1079qB9Pk89LedqDnpU9iDuI9S1sab7J6W0OPd+C6xzU5K3jls8uMvm8PQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJhXS8veNWglDCSDsHh2SkCMu8T4MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbUZkTHk5NDFhQ1VNSklPd2VIWktRSXk3eFBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV3k6AwQA V3lFAwQAXmd9AwQAk05mMA0GCSqGSIb3DQEBCwUAA4IBAQAS2pE5JFxiKI4BUpu1 ILRR5p/57RWXhM3fcVR/YqchBf4E54/G3dC8sSHrBQ2Ro4o/8s5wjR4gSYah8zii 7Gi0sDj8xcPjtS0iG1/OKey0wloyovFreor0n/CbNIfZ8g3HwgKDVQLOqHXMrUXJ bHzNxKlHDVeyQ8r6RvaEeMk1qoDxLc/GePPIvHFjOljGPzwwa8AZABU7Sa7vO8vb Svgo7oRkzvyDMvXqQU0pLCGepsOrgvyUzoZgeImeVqyZhl1TlVlb5rIAEJ+aPPTT zDJDoo6G13gzI2vAxlF0HRwFbfaMYMS2f6E13DEPVGYLj0zcVrTlEu7Irfhsaoub 1aU3 -----END CERTIFICATE-----Generated at Fri Dec 19 09:59:20 2025 by rpki-client