This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p8Iw5MLWRi-5C8dgG1jpAElL74E.roa File: p8Iw5MLWRi-5C8dgG1jpAElL74E.roa (raw, json) Hash identifier: a9vCZ9TFRghdoGJrAm8Raxb2YQCpKV10leGej+Abcw8= Subject key identifier: A7:C2:30:E4:C2:D6:46:2F:B9:0B:C7:60:1B:58:E9:00:49:4B:EF:81 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 018C2437BBF604BDE9AD2B6D43CAB8CDE6F7 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p8Iw5MLWRi-5C8dgG1jpAElL74E.roa Signing time: Fri 01 Dec 2023 07:11:21 +0000 ROA not before: Fri 01 Dec 2023 07:11:21 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 211760 IP address blocks: 185.221.67.0/24 maxlen: 24 95.214.26.0/24 maxlen: 24 95.214.25.0/24 maxlen: 24 194.169.175.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:24:37:bb:f6:04:bd:e9:ad:2b:6d:43:ca:b8:cd:e6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 1 07:11:21 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=a7c230e4c2d6462fb90bc7601b58e900494bef81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:5a:fc:eb:68:61:59:85:ae:14:4a:2f:40: a6:ab:f8:f7:01:3e:0b:cf:17:1f:46:5c:9c:16:af: b1:13:f5:05:ac:b9:c3:6b:98:d0:54:ce:fe:2c:01: d1:59:8e:0e:d9:87:25:58:ed:d3:7d:6a:59:90:67: 94:92:c4:7c:f2:1a:83:65:9b:a1:fa:97:98:36:f7: ba:07:0d:85:4f:9a:fa:31:19:5c:58:9a:49:77:c1: 39:b0:db:30:1f:6b:3e:78:b9:de:e1:2e:dc:43:f4: 00:19:fc:dc:e7:78:dc:da:6a:9e:24:71:a7:bb:7e: 55:54:3a:91:8d:87:f9:3c:ee:ad:25:01:e3:c0:9a: 1f:7a:a8:e6:18:e0:60:ac:14:8a:67:32:a5:c6:3d: 40:a9:3c:3d:73:58:4b:17:22:a3:d3:4d:3a:dd:0d: 56:7b:ff:cc:98:6b:4b:e6:9c:a9:ed:7e:f1:9c:24: a4:c7:38:48:98:6f:69:83:6c:dc:58:ce:c1:b5:d2: 60:31:35:56:e1:68:d3:7c:89:c9:44:f8:54:98:27: 0c:63:88:22:0d:99:49:45:f8:bf:25:5c:60:c6:5d: e2:31:f3:78:ba:20:02:d5:dc:06:67:e7:d3:54:40: 3b:47:7b:db:f2:fb:70:01:58:f4:10:07:1f:b7:91: 3d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C2:30:E4:C2:D6:46:2F:B9:0B:C7:60:1B:58:E9:00:49:4B:EF:81 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p8Iw5MLWRi-5C8dgG1jpAElL74E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.25.0-95.214.26.255 185.221.67.0/24 194.169.175.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:5b:6c:19:32:57:3b:dd:6e:33:51:9b:08:6a:bd:2a:ba:e0: 15:33:a5:04:9c:de:c6:45:d0:54:4a:e0:1d:39:9d:7c:f6:8b: dd:d5:ce:45:41:34:33:ca:78:4d:0b:cf:94:3e:61:e4:06:5d: 4e:6d:ca:2a:9b:d4:11:83:0e:32:f9:c5:23:2e:2e:26:f7:c9: 62:fc:b8:30:d2:29:fa:65:be:4a:69:35:db:80:0a:02:e2:b4: 98:1d:76:c6:a0:1d:f4:c9:1d:84:e3:16:31:94:f2:a4:66:f1: 42:e5:53:32:d0:e2:04:02:e5:20:91:65:9a:93:21:ba:a7:bf: fb:e4:f5:01:9d:61:9a:f2:9f:10:8e:ad:a3:a1:14:a5:54:f8: d0:d6:c8:4a:e9:55:03:80:86:17:b1:64:d4:f5:26:8e:15:26: 30:60:18:20:1d:30:a3:87:a4:f8:ab:0f:cd:35:e7:c6:b6:bb: fc:ed:b5:34:09:aa:da:52:0e:69:7a:5b:c9:96:a3:bb:fe:e5: b1:59:54:39:03:43:d9:fb:7e:fd:24:a9:e1:27:e6:b6:c7:06: 8f:c9:a4:d3:13:54:eb:a6:73:10:fd:11:d8:6c:68:9f:5d:bf: 5f:62:6c:82:c0:5c:0c:41:f0:95:27:9c:87:48:2f:8f:44:28: 7c:42:88:19 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAYwkN7v2BL3prSttQ8q4zeb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjMxMjAxMDcxMTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2MyMzBlNGMyZDY0NjJmYjkwYmM3NjAxYjU4ZTkwMDQ5NGJlZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFxa/OtoYVmFrhRKL0Cmq/j3AT4L zxcfRlycFq+xE/UFrLnDa5jQVM7+LAHRWY4O2YclWO3TfWpZkGeUksR88hqDZZuh +peYNve6Bw2FT5r6MRlcWJpJd8E5sNswH2s+eLne4S7cQ/QAGfzc53jc2mqeJHGn u35VVDqRjYf5PO6tJQHjwJofeqjmGOBgrBSKZzKlxj1AqTw9c1hLFyKj00063Q1W e//MmGtL5pyp7X7xnCSkxzhImG9pg2zcWM7BtdJgMTVW4WjTfInJRPhUmCcMY4gi DZlJRfi/JVxgxl3iMfN4uiAC1dwGZ+fTVEA7R3vb8vtwAVj0EAcft5E9lwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFKfCMOTC1kYvuQvHYBtY6QBJS++BMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcDhJdzVNTFdSaS01QzhkZ0cxanBBRWxMNzRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABf1hkD BABf1hoDBAC53UMDBADCqa8wDQYJKoZIhvcNAQELBQADggEBABpbbBkyVzvdbjNR mwhqvSq64BUzpQSc3sZF0FRK4B05nXz2i93VzkVBNDPKeE0Lz5Q+YeQGXU5tyiqb 1BGDDjL5xSMuLib3yWL8uDDSKfplvkppNduACgLitJgddsagHfTJHYTjFjGU8qRm 8ULlUzLQ4gQC5SCRZZqTIbqnv/vk9QGdYZrynxCOraOhFKVU+NDWyErpVQOAhhex ZNT1Jo4VJjBgGCAdMKOHpPirD80158a2u/zttTQJqtpSDml6W8mWo7v+5bFZVDkD Q9n7fv0kqeEn5rbHBo/JpNMTVOumcxD9EdhsaJ9dv19ibILAXAxB8JUnnIdIL49E KHxCiBk= -----END CERTIFICATE-----Generated at Sat Dec 27 02:16:55 2025 by rpki-client