This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0JvqOShVuIub_RkT8uKaycfGcT4.roa File: 0JvqOShVuIub_RkT8uKaycfGcT4.roa (raw, json) Hash identifier: W6TsFJrn68mZlvMaqLa3lvYtQZNvZ6NnxS54h+uV63s= Subject key identifier: D0:9B:EA:39:28:55:B8:8B:9B:FD:19:13:F2:E2:9A:C9:C7:C6:71:3E Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 018B294B32A355172813C5C18C337CB6C01A Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0JvqOShVuIub_RkT8uKaycfGcT4.roa Signing time: Fri 13 Oct 2023 13:47:55 +0000 ROA not before: Fri 13 Oct 2023 13:47:55 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 33922 IP address blocks: 88.216.164.0/24 maxlen: 24 88.216.165.0/24 maxlen: 24 88.216.166.0/24 maxlen: 24 88.216.167.0/24 maxlen: 24 88.216.76.0/22 maxlen: 24 84.32.116.0/23 maxlen: 24 84.32.114.0/23 maxlen: 24 88.216.148.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:29:4b:32:a3:55:17:28:13:c5:c1:8c:33:7c:b6:c0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Oct 13 13:47:55 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=d09bea392855b88b9bfd1913f2e29ac9c7c6713e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cd:6f:fb:15:c1:33:0c:ef:18:12:b3:9d:56: f2:b1:6b:30:23:9c:19:36:c9:ab:3f:fa:9c:90:2c: 85:d1:a6:dc:48:40:ab:51:e5:43:4e:13:09:be:a3: 70:89:73:1d:3d:b2:ff:ac:1e:c5:cb:c5:68:b0:00: 5c:50:4e:a0:7e:eb:0a:bd:f6:32:cc:86:fc:73:82: a2:5b:8f:44:e2:fa:aa:70:ca:e3:4e:6b:5b:aa:72: 9e:03:57:b3:a3:cf:c1:e1:80:9e:50:c1:00:8c:c4: d6:5a:c2:32:61:a6:5a:66:01:d8:ee:87:39:f4:1e: 91:8d:89:24:ac:5b:cf:43:8e:c2:54:34:cf:25:82: 50:17:f7:d5:b1:05:26:a7:80:7c:97:d8:48:38:b3: 67:3b:10:35:cc:ab:f8:be:84:fe:d8:5c:c2:8a:a9: 42:e3:4e:27:10:eb:56:3c:a1:06:bc:47:b3:92:2c: e3:2c:60:8e:f5:b6:70:20:7c:67:2e:78:1e:09:21: 53:a0:7b:a3:13:8c:57:48:85:32:1d:16:7c:dc:e7: 63:9c:7a:22:5f:95:24:83:a6:4b:b5:ed:ff:6e:2e: 3e:dd:e8:92:4b:56:aa:9b:a2:d0:fd:15:bc:2c:c3: 15:e2:5e:d6:e1:22:8a:a0:39:47:2a:5e:6e:9f:e4: 33:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9B:EA:39:28:55:B8:8B:9B:FD:19:13:F2:E2:9A:C9:C7:C6:71:3E X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/0JvqOShVuIub_RkT8uKaycfGcT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.114.0-84.32.117.255 88.216.76.0/22 88.216.148.0/24 88.216.164.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:38:66:61:98:d5:09:56:4a:6e:00:67:a1:5d:2c:30:31:5e: 49:57:b0:47:20:0a:46:e5:62:ae:7c:74:e4:4c:d1:15:1b:27: d6:41:eb:e9:02:b0:a9:d8:f2:6a:dd:ed:84:cb:8b:1b:33:2a: 4c:a8:b2:36:6e:e1:d5:55:0b:df:fb:99:c4:50:16:f4:81:08: db:19:74:b8:4d:86:82:a5:cb:5a:a9:77:26:73:9d:b5:90:ae: 30:4b:bc:99:ff:ff:71:45:7b:7a:ba:4b:62:18:b4:38:da:58: b8:63:01:e5:86:e1:6c:2c:f3:5a:6e:89:82:34:ae:46:d1:b8: 0e:d0:0e:fb:e8:ec:64:e7:79:53:aa:6e:5c:39:b9:1d:83:99: 97:3d:c7:df:c6:09:2b:d9:a2:2f:69:cb:19:8a:08:cf:48:38: 6e:82:f3:70:73:26:20:f1:dc:a6:95:7c:4e:66:eb:9a:0e:e9: 7c:cd:f5:31:6b:02:5d:64:44:50:60:21:11:6a:1a:ea:3c:00: 5f:25:ae:18:64:51:1b:e5:2b:ea:be:00:d5:66:4e:79:39:0f: 64:b5:db:c6:28:43:e3:95:f2:5d:1b:50:d5:4a:8d:c5:fc:61: 14:19:9f:e5:69:db:94:1e:08:93:b0:c6:cc:59:a2:5c:5a:00: ea:58:a4:0b -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAYspSzKjVRcoE8XBjDN8tsAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjMxMDEzMTM0NzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDliZWEzOTI4NTViODhiOWJmZDE5MTNmMmUyOWFjOWM3YzY3MTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM1v+xXBMwzvGBKznVbysWswI5wZ NsmrP/qckCyF0abcSECrUeVDThMJvqNwiXMdPbL/rB7Fy8VosABcUE6gfusKvfYy zIb8c4KiW49E4vqqcMrjTmtbqnKeA1ezo8/B4YCeUMEAjMTWWsIyYaZaZgHY7oc5 9B6RjYkkrFvPQ47CVDTPJYJQF/fVsQUmp4B8l9hIOLNnOxA1zKv4voT+2FzCiqlC 404nEOtWPKEGvEezkizjLGCO9bZwIHxnLngeCSFToHujE4xXSIUyHRZ83OdjnHoi X5Ukg6ZLte3/bi4+3eiSS1aqm6LQ/RW8LMMV4l7W4SKKoDlHKl5un+Qz+wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFNCb6jkoVbiLm/0ZE/LimsnHxnE+MB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvMEp2cU9TaFZ1SXViX1JrVDh1S2F5Y2ZHY1Q0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAFUIHID BAFUIHQDBAJY2EwDBABY2JQDBAJY2KQwDQYJKoZIhvcNAQELBQADggEBAEw4ZmGY 1QlWSm4AZ6FdLDAxXklXsEcgCkblYq58dORM0RUbJ9ZB6+kCsKnY8mrd7YTLixsz KkyosjZu4dVVC9/7mcRQFvSBCNsZdLhNhoKly1qpdyZznbWQrjBLvJn//3FFe3q6 S2IYtDjaWLhjAeWG4Wws81puiYI0rkbRuA7QDvvo7GTneVOqblw5uR2DmZc9x9/G CSvZoi9pyxmKCM9IOG6C83BzJiDx3KaVfE5m65oO6XzN9TFrAl1kRFBgIRFqGuo8 AF8lrhhkURvlK+q+ANVmTnk5D2S128YoQ+OV8l0bUNVKjcX8YRQZn+Vp25QeCJOw xsxZolxaAOpYpAs= -----END CERTIFICATE-----Generated at Mon Dec 22 15:42:56 2025 by rpki-client