This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/84GSpiO-OIAv7Jl9eUqNBTWcuXM.roa File: 84GSpiO-OIAv7Jl9eUqNBTWcuXM.roa (raw, json) Hash identifier: tfRvKCWWUSLqswCqNVWuaOfFtOcmmY8qQ9ReglGFaPQ= Subject key identifier: F3:81:92:A6:23:BE:38:80:2F:EC:99:7D:79:4A:8D:05:35:9C:B9:73 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 01869CB2D4F70C1E25D7ACB9C3D324BFF6D9 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/84GSpiO-OIAv7Jl9eUqNBTWcuXM.roa Signing time: Wed 01 Mar 2023 10:23:30 +0000 ROA not before: Wed 01 Mar 2023 10:23:30 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 203790 IP address blocks: 45.148.116.0/24 maxlen: 24 194.50.111.0/24 maxlen: 24 2a0e:97c0:460::/44 maxlen: 48 2a0e:b107:12a0::/44 maxlen: 48 2a10:cc40:1d0::/44 maxlen: 48 2a0e:b101::/32 maxlen: 48 2a10:cc41:110::/44 maxlen: 48 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:9c:b2:d4:f7:0c:1e:25:d7:ac:b9:c3:d3:24:bf:f6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Mar 1 10:23:30 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=f38192a623be38802fec997d794a8d05359cb973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a6:91:77:df:49:78:ed:7c:66:2e:5a:81:98: c8:25:41:16:ad:6e:04:8b:1e:22:47:e3:ac:d6:dc: fe:6e:6a:9d:15:e0:40:ca:24:81:2d:e4:7a:88:1b: 02:c7:74:99:72:d7:3a:73:e4:d6:bf:4e:db:81:19: ab:e8:df:1f:6e:bb:87:84:dd:ea:ba:a1:ad:a1:03: 98:ff:7f:52:d1:11:b6:6e:e6:99:d2:10:b7:3e:57: 4b:2c:5f:ee:65:e5:b2:52:ba:70:ab:77:6e:e0:1e: 55:9b:ce:82:0c:4f:35:1d:27:e5:1d:af:01:0d:fd: a3:14:04:d2:cf:55:76:fa:3c:82:cb:9e:cb:3c:a6: 0d:e7:eb:c1:e2:5a:81:2d:21:c7:d7:9d:d8:83:a2: 92:d7:7e:99:a5:3b:3b:ef:6c:a2:85:d6:67:9f:ca: 0b:92:a4:da:14:9b:66:45:73:7a:b4:49:25:c2:64: 23:c1:28:b3:07:aa:7f:c4:7d:94:ab:ae:e2:5f:9f: 0d:dc:c7:e2:2e:6e:bf:0d:05:60:69:73:b1:4b:09: a9:da:64:e3:c7:06:5f:5a:97:fa:1e:f4:9c:45:bc: a5:3d:32:17:3a:3a:9c:d5:55:46:dd:71:2a:a1:bd: 72:3c:8a:a6:ac:8b:83:e8:8f:8b:1b:21:c5:ec:05: 96:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:81:92:A6:23:BE:38:80:2F:EC:99:7D:79:4A:8D:05:35:9C:B9:73 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/84GSpiO-OIAv7Jl9eUqNBTWcuXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.116.0/24 194.50.111.0/24 IPv6: 2a0e:97c0:460::/44 2a0e:b101::/32 2a0e:b107:12a0::/44 2a10:cc40:1d0::/44 2a10:cc41:110::/44 Signature Algorithm: sha256WithRSAEncryption 67:3b:29:5b:8c:f0:ca:6f:b1:93:75:b3:09:2f:12:69:ce:19: 8a:91:f2:e2:ec:c1:e3:c0:52:5f:ea:b9:47:51:f3:69:45:53: bd:8c:25:52:d4:37:35:90:df:25:95:8e:9b:c9:c9:79:9c:c4: 93:5a:61:76:86:43:51:2a:97:1f:1e:16:82:11:4f:49:fc:53: b3:f4:7e:af:90:d7:8b:74:84:ad:0a:25:71:bc:4b:90:a4:f2: eb:a7:c8:9d:61:f6:31:4a:5b:3d:a7:69:30:e5:8a:10:4d:e9: 08:bc:12:51:f3:57:02:66:97:87:83:40:68:6a:18:45:eb:69: 4b:8f:78:06:a3:7b:7d:d5:72:6b:b7:b7:30:3b:5b:12:08:29: 00:22:51:15:21:75:78:6d:39:71:c0:39:f4:13:1b:6e:0d:c5: ac:82:23:4a:fb:fd:8d:a3:2f:1e:47:a6:52:aa:55:af:db:af: 25:e3:72:a3:9e:7a:44:e9:d5:45:e3:c5:af:28:16:17:ac:06: d3:0a:73:d8:bb:e7:b0:65:b2:64:a3:20:b3:ee:0e:42:2e:6b: ac:8b:89:a9:ed:05:a1:db:75:48:27:22:13:c1:ad:4f:05:e7: 56:8b:cc:00:8b:30:22:1e:7b:50:b2:3c:3c:2d:c2:0a:d5:9b: bc:46:fd:46 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAYacstT3DB4l16y5w9Mkv/bZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjMwMzAxMTAyMzMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzgxOTJhNjIzYmUzODgwMmZlYzk5N2Q3OTRhOGQwNTM1OWNiOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaaRd99JeO18Zi5agZjIJUEWrW4E ix4iR+Os1tz+bmqdFeBAyiSBLeR6iBsCx3SZctc6c+TWv07bgRmr6N8fbruHhN3q uqGtoQOY/39S0RG2buaZ0hC3PldLLF/uZeWyUrpwq3du4B5Vm86CDE81HSflHa8B Df2jFATSz1V2+jyCy57LPKYN5+vB4lqBLSHH153Yg6KS136ZpTs772yihdZnn8oL kqTaFJtmRXN6tEklwmQjwSizB6p/xH2Uq67iX58N3MfiLm6/DQVgaXOxSwmp2mTj xwZfWpf6HvScRbylPTIXOjqc1VVG3XEqob1yPIqmrIuD6I+LGyHF7AWW0QIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFPOBkqYjvjiAL+yZfXlKjQU1nLlzMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvODRHU3BpTy1PSUF2N0psOWVVcU5CVFdjdVhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzASBAIAATAMAwQALZR0AwQA wjJvMDEEAgACMCsDBwQqDpfABGADBQAqDrEBAwcEKg6xBxKgAwcEKhDMQAHQAwcE KhDMQQEQMA0GCSqGSIb3DQEBCwUAA4IBAQBnOylbjPDKb7GTdbMJLxJpzhmKkfLi 7MHjwFJf6rlHUfNpRVO9jCVS1Dc1kN8llY6bycl5nMSTWmF2hkNRKpcfHhaCEU9J /FOz9H6vkNeLdIStCiVxvEuQpPLrp8idYfYxSls9p2kw5YoQTekIvBJR81cCZpeH g0BoahhF62lLj3gGo3t91XJrt7cwO1sSCCkAIlEVIXV4bTlxwDn0ExtuDcWsgiNK +/2Noy8eR6ZSqlWv268l43KjnnpE6dVF48WvKBYXrAbTCnPYu+ewZbJkoyCz7g5C Lmusi4mp7QWh23VIJyITwa1PBedWi8wAizAiHntQsjw8LcIK1Zu8Rv1G -----END CERTIFICATE-----Generated at Wed Dec 31 00:23:12 2025 by rpki-client