This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/arbBUkskSOgOWKozG05lYRUh2vs.roa File: arbBUkskSOgOWKozG05lYRUh2vs.roa (raw, json) Hash identifier: SpRflKSCy8pTFzgxz7nC8WYYL3DtJB1UudQWkIeIrq0= Subject key identifier: 6A:B6:C1:52:4B:24:48:E8:0E:58:AA:33:1B:4E:65:61:15:21:DA:FB Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 01877A37AC55E021390146C2D281D9ED74D5 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/arbBUkskSOgOWKozG05lYRUh2vs.roa Signing time: Thu 13 Apr 2023 10:44:41 +0000 ROA not before: Thu 13 Apr 2023 10:44:41 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 834 IP address blocks: 84.32.214.0/23 maxlen: 24 84.32.218.0/24 maxlen: 24 84.32.221.0/24 maxlen: 24 84.32.223.0/24 maxlen: 24 84.32.224.0/24 maxlen: 24 84.32.232.0/24 maxlen: 24 84.32.239.0/24 maxlen: 24 84.32.240.0/24 maxlen: 24 84.32.244.0/23 maxlen: 24 84.32.242.0/24 maxlen: 24 84.32.243.0/24 maxlen: 24 84.32.252.0/23 maxlen: 24 84.32.250.0/24 maxlen: 24 84.32.251.0/24 maxlen: 24 84.32.57.0/24 maxlen: 24 84.32.60.0/24 maxlen: 24 84.32.67.0/24 maxlen: 24 84.32.77.0/24 maxlen: 24 84.32.79.0/24 maxlen: 24 84.32.88.0/24 maxlen: 24 84.32.8.0/24 maxlen: 24 84.32.24.0/22 maxlen: 24 84.32.30.0/24 maxlen: 24 84.32.40.0/24 maxlen: 24 84.32.46.0/24 maxlen: 24 84.32.174.0/24 maxlen: 24 84.32.175.0/24 maxlen: 24 84.32.177.0/24 maxlen: 24 84.32.178.0/24 maxlen: 24 84.32.179.0/24 maxlen: 24 84.32.212.0/24 maxlen: 24 84.32.108.0/23 maxlen: 24 84.32.148.0/23 maxlen: 24 84.32.150.0/23 maxlen: 24 84.32.159.0/24 maxlen: 24 84.32.158.0/24 maxlen: 24 88.216.185.0/24 maxlen: 24 88.216.189.0/24 maxlen: 24 88.216.212.0/22 maxlen: 24 88.216.212.0/24 maxlen: 24 88.216.128.0/24 maxlen: 24 88.216.132.0/24 maxlen: 24 88.216.130.0/23 maxlen: 24 88.216.215.0/24 maxlen: 24 88.216.220.0/24 maxlen: 24 88.216.232.0/22 maxlen: 24 88.216.57.0/24 maxlen: 24 88.216.93.0/24 maxlen: 24 88.216.3.0/24 maxlen: 24 88.216.1.0/24 maxlen: 24 88.216.16.0/24 maxlen: 24 88.216.21.0/24 maxlen: 24 88.216.32.0/24 maxlen: 24 88.216.44.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:87:7a:37:ac:55:e0:21:39:01:46:c2:d2:81:d9:ed:74:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Apr 13 10:44:41 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6ab6c1524b2448e80e58aa331b4e65611521dafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:49:0f:90:18:1c:c3:4c:4d:ea:ec:c5:1a:0f: 9f:41:d2:6d:c3:c3:bc:ae:e6:59:0e:34:74:2d:9c: 65:6a:69:d8:91:0f:dc:77:b5:1f:0b:a4:c3:fe:b3: 7e:51:56:5b:15:e6:72:2c:4d:c6:31:89:ee:13:4e: 36:25:7d:e5:c2:2c:77:cd:c1:d3:75:18:db:81:5e: d5:74:54:e0:9c:df:1d:b9:c2:be:7c:15:4a:e4:87: 72:62:c8:ee:a8:90:fe:e1:8d:c4:f0:f5:5f:3f:c3: 49:b8:dc:c4:c7:a9:55:17:df:4a:eb:92:1b:69:03: 93:a0:95:ee:4e:e2:3b:ff:0d:d4:9d:06:1c:5d:c1: 5a:dd:57:d1:e3:43:a5:67:2c:47:02:1e:a5:72:13: 3a:90:5d:fd:be:51:d0:9c:7d:6a:d4:e6:7b:b0:c7: 08:39:b8:76:11:4f:02:d0:a1:96:d7:1a:8e:a8:71: 42:00:32:e2:3d:b0:0f:cd:f6:0a:83:47:f1:dc:2a: 5e:c8:8b:d9:a1:71:a4:52:22:96:69:21:37:ed:a9: 33:3e:9e:8e:19:6c:57:29:53:bb:48:27:e0:9f:98: b9:de:66:cc:21:8f:09:22:4b:c1:2e:cf:71:1e:18: b8:da:3e:d0:2d:ae:e6:66:fd:1c:ed:57:01:4f:52: 95:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B6:C1:52:4B:24:48:E8:0E:58:AA:33:1B:4E:65:61:15:21:DA:FB X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/arbBUkskSOgOWKozG05lYRUh2vs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.8.0/24 84.32.24.0/22 84.32.30.0/24 84.32.40.0/24 84.32.46.0/24 84.32.57.0/24 84.32.60.0/24 84.32.67.0/24 84.32.77.0/24 84.32.79.0/24 84.32.88.0/24 84.32.108.0/23 84.32.148.0/22 84.32.158.0/23 84.32.174.0/23 84.32.177.0-84.32.179.255 84.32.212.0/24 84.32.214.0/23 84.32.218.0/24 84.32.221.0/24 84.32.223.0-84.32.224.255 84.32.232.0/24 84.32.239.0-84.32.240.255 84.32.242.0-84.32.245.255 84.32.250.0-84.32.253.255 88.216.1.0/24 88.216.3.0/24 88.216.16.0/24 88.216.21.0/24 88.216.32.0/24 88.216.44.0/24 88.216.57.0/24 88.216.93.0/24 88.216.128.0/24 88.216.130.0-88.216.132.255 88.216.185.0/24 88.216.189.0/24 88.216.212.0/22 88.216.220.0/24 88.216.232.0/22 Signature Algorithm: sha256WithRSAEncryption 27:87:55:89:cf:fb:b9:b0:3f:26:fe:c1:e1:8e:50:ec:2b:d6: 7e:0c:72:67:e1:08:73:05:cf:7b:b6:32:6b:fc:10:c0:44:93: 05:81:8f:2d:1d:77:cb:b0:57:15:c2:85:93:40:86:c4:3d:25: 4a:fd:41:44:b7:3b:c2:67:c3:4a:c3:b2:5f:78:14:64:91:d6: d8:2b:74:09:cd:c5:88:4d:7c:e2:cd:b7:a8:11:90:02:0b:10: fe:c6:74:07:0b:f6:a0:fd:fd:8d:f2:23:9a:8f:58:6a:f6:ce: 0c:fc:f7:02:16:fb:76:16:75:44:89:cc:c0:4c:f4:ac:bb:96: d0:b4:59:e9:ea:df:62:5f:e7:8d:58:32:a6:88:fd:73:44:2e: 8f:68:3f:81:86:3a:63:06:65:59:4f:6d:47:81:96:e0:e3:1c: 22:63:4d:6d:1d:de:46:68:ad:82:33:d0:47:22:c4:f3:08:8d: 69:e6:80:21:0a:41:33:7d:29:de:bd:cc:d2:07:91:49:3f:eb: 5b:49:f8:4e:1d:a7:ee:3d:27:13:25:c8:be:72:85:52:21:37: 29:0e:a5:bf:a8:14:18:6c:2b:19:00:b3:28:37:70:f2:2d:34: ea:04:b3:80:47:9f:52:d5:4a:b2:d8:6e:37:ca:75:15:ea:79: 72:ff:aa:22 -----BEGIN CERTIFICATE----- MIIGITCCBQmgAwIBAgISAYd6N6xV4CE5AUbC0oHZ7XTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjMwNDEzMTA0NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWI2YzE1MjRiMjQ0OGU4MGU1OGFhMzMxYjRlNjU2MTE1MjFkYWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUkPkBgcw0xN6uzFGg+fQdJtw8O8 ruZZDjR0LZxlamnYkQ/cd7UfC6TD/rN+UVZbFeZyLE3GMYnuE042JX3lwix3zcHT dRjbgV7VdFTgnN8ducK+fBVK5IdyYsjuqJD+4Y3E8PVfP8NJuNzEx6lVF99K65Ib aQOToJXuTuI7/w3UnQYcXcFa3VfR40OlZyxHAh6lchM6kF39vlHQnH1q1OZ7sMcI Obh2EU8C0KGW1xqOqHFCADLiPbAPzfYKg0fx3CpeyIvZoXGkUiKWaSE37akzPp6O GWxXKVO7SCfgn5i53mbMIY8JIkvBLs9xHhi42j7QLa7mZv0c7VcBT1KVvwIDAQAB o4IDLTCCAykwHQYDVR0OBBYEFGq2wVJLJEjoDliqMxtOZWEVIdr7MB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvYXJiQlVrc2tTT2dPV0tvekcwNWxZUlVoMnZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBQQYIKwYBBQUHAQcBAf8EggEwMIIBLDCCASgEAgABMIIB IAMEAFQgCAMEAlQgGAMEAFQgHgMEAFQgKAMEAFQgLgMEAFQgOQMEAFQgPAMEAFQg QwMEAFQgTQMEAFQgTwMEAFQgWAMEAVQgbAMEAlQglAMEAVQgngMEAVQgrjAMAwQA VCCxAwQCVCCwAwQAVCDUAwQBVCDWAwQAVCDaAwQAVCDdMAwDBABUIN8DBABUIOAD BABUIOgwDAMEAFQg7wMEAFQg8DAMAwQBVCDyAwQBVCD0MAwDBAFUIPoDBAFUIPwD BABY2AEDBABY2AMDBABY2BADBABY2BUDBABY2CADBABY2CwDBABY2DkDBABY2F0D BABY2IAwDAMEAVjYggMEAFjYhAMEAFjYuQMEAFjYvQMEAljY1AMEAFjY3AMEAljY 6DANBgkqhkiG9w0BAQsFAAOCAQEAJ4dVic/7ubA/Jv7B4Y5Q7CvWfgxyZ+EIcwXP e7Yya/wQwESTBYGPLR13y7BXFcKFk0CGxD0lSv1BRLc7wmfDSsOyX3gUZJHW2Ct0 Cc3FiE184s23qBGQAgsQ/sZ0Bwv2oP39jfIjmo9YavbODPz3Ahb7dhZ1RInMwEz0 rLuW0LRZ6erfYl/njVgypoj9c0Quj2g/gYY6YwZlWU9tR4GW4OMcImNNbR3eRmit gjPQRyLE8wiNaeaAIQpBM30p3r3M0geRST/rW0n4Th2n7j0nEyXIvnKFUiE3KQ6l v6gUGGwrGQCzKDdw8i006gSzgEefUtVKsthuN8p1Fep5cv+qIg== -----END CERTIFICATE-----Generated at Wed Dec 24 23:27:08 2025 by rpki-client