This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/PfWWpCMMm4ZF2cTnVj6q-EvMjD0.roa
File: PfWWpCMMm4ZF2cTnVj6q-EvMjD0.roa (raw, json)
Hash identifier: hai/mYxJqT5MMFmWgD9oMF48G4Bs1UV3FIaIDGborzM=
Subject key identifier: 3D:F5:96:A4:23:0C:9B:86:45:D9:C4:E7:56:3E:AA:F8:4B:CC:8C:3D
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01899B559F02A4ED3EE98C7B9949A6AB3E23
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/PfWWpCMMm4ZF2cTnVj6q-EvMjD0.roa
Signing time: Fri 28 Jul 2023 07:10:26 +0000
ROA not before: Fri 28 Jul 2023 07:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:55:9f:02:a4:ed:3e:e9:8c:7b:99:49:a6:ab:3e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jul 28 07:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3df596a4230c9b8645d9c4e7563eaaf84bcc8c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:89:e5:51:d5:d6:de:7d:33:63:16:ca:e5:7e:
2c:4c:e4:a9:68:25:9d:a0:03:4d:61:10:b5:ea:73:
bc:a8:d5:4f:63:81:15:28:2b:57:fe:e8:45:ea:dc:
d0:08:85:df:ad:fa:02:dd:55:07:20:d1:bb:06:ee:
ca:ac:cf:4f:b5:c9:cb:a0:dc:65:06:e1:ac:22:3a:
ba:04:e8:d7:d6:6f:2f:b5:27:4d:7f:ea:66:b4:54:
e8:c4:e7:7a:39:0d:10:bb:95:a9:8b:c1:ea:dc:18:
86:fb:16:42:56:62:81:c9:05:dd:68:ac:fb:5e:49:
57:f0:7c:ca:3d:ef:1b:2e:89:18:6a:1e:e7:4d:a6:
bb:dc:c8:f4:f8:e4:6f:8d:23:5c:39:9f:0a:98:77:
c5:09:04:71:e2:bb:30:bf:c5:a3:51:90:3b:38:e1:
cc:32:e5:69:e7:89:e6:78:85:c5:57:4c:bc:67:04:
9a:41:ad:52:f6:f1:52:d4:7d:47:d1:e0:78:7e:82:
0c:77:c2:c9:03:5b:e2:6e:19:f2:38:50:5a:2a:89:
55:77:91:7f:61:c8:9f:d9:ac:87:67:9a:ab:2e:7f:
6e:ee:2c:4f:fb:3b:a6:c8:02:a2:fb:d6:b6:bd:91:
58:95:cf:1d:0a:c4:18:bc:0b:f7:65:ef:26:bb:b9:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F5:96:A4:23:0C:9B:86:45:D9:C4:E7:56:3E:AA:F8:4B:CC:8C:3D
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/PfWWpCMMm4ZF2cTnVj6q-EvMjD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0/23
212.116.252.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:96:a6:2f:9c:0c:c9:6b:f1:18:0a:e9:38:29:a1:ea:a7:99:
29:0a:f5:f3:8d:35:47:bc:b6:02:cf:da:06:b0:eb:4b:53:7d:
b2:84:35:eb:45:99:13:c6:99:2b:5e:06:70:bd:e1:14:43:58:
04:5e:bc:d0:5c:60:13:16:ab:71:ea:01:7e:a6:9e:3b:de:2b:
c9:82:8e:96:ce:ac:1c:9f:e6:70:28:6e:99:0c:8d:b8:7e:f8:
0c:1b:a2:c3:07:08:7d:6d:6e:de:d7:83:89:bf:1e:a6:3c:92:
4f:af:9c:86:a3:ea:af:b7:11:50:20:db:2a:fe:14:b4:75:64:
32:01:4e:4a:4c:8f:39:b4:bc:f4:8a:e0:4b:0c:f0:2c:60:50:
88:be:04:02:8b:51:2a:2d:3d:d5:40:98:65:2d:a2:4d:82:b6:
4d:12:a6:ed:04:b7:35:9c:33:c5:66:4b:2c:4d:29:c4:8b:c7:
b7:8d:ab:f9:77:57:0a:90:b3:4e:7d:fa:25:cc:00:06:76:36:
e2:3c:e1:0f:89:ed:81:76:10:3f:6d:51:fe:79:65:e5:4a:46:
4d:14:c1:cf:ae:e6:8d:bd:90:36:b6:82:8b:93:cb:62:29:1c:
ce:11:12:9a:b5:bf:c8:ff:98:05:c5:0e:b8:62:a7:72:71:5f:
69:00:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 22:15:08 2025 by rpki-client