This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/kx6GpPoVMrrRsDVuT9gEGnyvh20.roa File: kx6GpPoVMrrRsDVuT9gEGnyvh20.roa (raw, json) Hash identifier: Neh3va1Hpps+4leZciRw7KOuhk+w3lFOC0E9tVtBPfw= Subject key identifier: 93:1E:86:A4:FA:15:32:BA:D1:B0:35:6E:4F:D8:04:1A:7C:AF:87:6D Certificate issuer: /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268 Certificate serial: 018AD757731A028879E9E3E4D62EFBD24FF6 Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/kx6GpPoVMrrRsDVuT9gEGnyvh20.roa Signing time: Wed 27 Sep 2023 15:52:27 +0000 ROA not before: Wed 27 Sep 2023 15:52:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 19905 IP address blocks: 185.69.118.0/24 maxlen: 24 194.35.1.0/24 maxlen: 24 194.35.5.0/24 maxlen: 24 194.35.9.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:d7:57:73:1a:02:88:79:e9:e3:e4:d6:2e:fb:d2:4f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268 Validity Not Before: Sep 27 15:52:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=931e86a4fa1532bad1b0356e4fd8041a7caf876d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5c:42:e4:cc:5e:37:de:10:d8:12:37:9a:ff: 68:d4:cd:d5:b9:90:3d:cb:59:43:e7:9f:ec:64:51: af:31:8a:93:6d:0a:4f:7e:a4:cb:0d:f2:28:c1:75: 08:4d:c3:9d:7a:7a:e4:f6:a9:0e:01:f8:5e:16:b4: 9f:ab:20:e6:f1:3d:b4:4e:9e:d6:c6:ea:4f:fd:39: bd:ff:08:ee:af:9f:89:24:be:ff:ae:e6:ff:fe:c2: ea:38:90:e6:d8:aa:b1:7e:1b:2c:ed:89:fc:b6:1b: 47:f3:6a:a6:c0:7d:70:0e:ab:59:7a:ad:95:c9:01: ec:b5:d2:77:df:a0:eb:d0:01:79:15:98:67:9d:df: 73:a3:e1:ee:05:f6:e0:5f:fc:1e:c2:27:49:7a:f3: 17:85:54:59:bf:31:f6:ac:2e:3f:12:80:1a:d3:e7: 5f:22:ec:b7:a0:9a:22:23:d9:63:e6:ac:a6:87:a0: 2b:13:11:5a:c1:6f:c6:e5:91:d6:88:7c:5b:84:10: 7f:48:ea:a2:de:7b:5f:9f:92:b6:45:de:40:4c:7f: 02:fc:c1:9b:ab:a8:97:ed:51:7c:c9:88:32:fb:a0: d5:c3:0b:bf:ae:eb:f1:16:b2:1b:7f:6e:e6:0e:90: d5:66:1c:80:d1:c0:c0:88:04:3e:0a:1a:bb:2f:c4: b3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1E:86:A4:FA:15:32:BA:D1:B0:35:6E:4F:D8:04:1A:7C:AF:87:6D X509v3 Authority Key Identifier: keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/kx6GpPoVMrrRsDVuT9gEGnyvh20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.118.0/24 194.35.1.0/24 194.35.5.0/24 194.35.9.0/24 Signature Algorithm: sha256WithRSAEncryption 51:4e:82:74:b1:b0:bd:b5:e0:61:f4:5c:df:9c:df:36:c8:17: 67:61:83:1a:3d:dc:a6:51:2a:4e:29:c9:2a:b5:0b:e3:62:eb: 92:5a:9f:2f:b6:96:1c:bf:cd:d5:84:81:15:6e:fc:f1:a3:2b: ed:88:f0:bc:5d:d2:93:7b:92:2a:68:1f:90:71:ef:47:ed:79: e2:53:c0:6c:5c:b1:83:d9:71:03:81:60:86:2a:8c:f3:ed:10: b5:a5:4b:b1:a8:5a:a2:ca:ee:d0:48:de:69:b5:f7:a3:26:d3: c7:50:d6:f7:bb:6a:da:cd:17:44:5f:18:53:50:7b:53:ef:17: 8e:11:2c:13:82:b7:9b:d4:df:bd:f7:08:f1:09:90:46:76:3e: ed:42:90:81:9f:aa:e1:d3:d9:00:bc:4e:7b:44:65:cf:5b:7d: d2:b1:c5:9f:45:d6:47:04:f2:12:73:e1:98:61:df:2b:a8:ee: b4:ab:e1:df:96:41:b5:e9:f6:b2:05:33:23:01:14:06:df:87: c3:dc:f0:e9:d7:29:78:6c:20:67:1d:11:03:e0:4c:85:39:18: 81:00:9c:8d:29:92:e5:1f:d4:06:c3:82:ba:73:d1:39:5e:8b: 0f:80:7b:c1:a5:56:db:a7:c7:97:f6:34:56:c1:17:ad:f8:45: ee:77:5a:2d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAYrXV3MaAoh56ePk1i770k/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NTA0NmQ4NWVjZjIwMWZiZWY1MWU4YmVhMWM0ZWQzM2Y5 NWIyNjgwHhcNMjMwOTI3MTU1MjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzFlODZhNGZhMTUzMmJhZDFiMDM1NmU0ZmQ4MDQxYTdjYWY4NzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFxC5MxeN94Q2BI3mv9o1M3VuZA9 y1lD55/sZFGvMYqTbQpPfqTLDfIowXUITcOdenrk9qkOAfheFrSfqyDm8T20Tp7W xupP/Tm9/wjur5+JJL7/rub//sLqOJDm2Kqxfhss7Yn8thtH82qmwH1wDqtZeq2V yQHstdJ336Dr0AF5FZhnnd9zo+HuBfbgX/wewidJevMXhVRZvzH2rC4/EoAa0+df Iuy3oJoiI9lj5qymh6ArExFawW/G5ZHWiHxbhBB/SOqi3ntfn5K2Rd5ATH8C/MGb q6iX7VF8yYgy+6DVwwu/ruvxFrIbf27mDpDVZhyA0cDAiAQ+Chq7L8SzlwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJMehqT6FTK60bA1bk/YBBp8r4dtMB8GA1UdIwQY MBaAFKZQRthezyAfvvUei+ocTtM/lbJoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUt YmNjZDMyYWY5N2ZlLzEva3g2R3BQb1ZNcnJSc0RWdVQ5Z0VHbnl2aDIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUtYmNjZDMyYWY5N2Zl LzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuUV2AwQA wiMBAwQAwiMFAwQAwiMJMA0GCSqGSIb3DQEBCwUAA4IBAQBRToJ0sbC9teBh9Fzf nN82yBdnYYMaPdymUSpOKckqtQvjYuuSWp8vtpYcv83VhIEVbvzxoyvtiPC8XdKT e5IqaB+Qce9H7XniU8BsXLGD2XEDgWCGKozz7RC1pUuxqFqiyu7QSN5ptfejJtPH UNb3u2razRdEXxhTUHtT7xeOESwTgreb1N+99wjxCZBGdj7tQpCBn6rh09kAvE57 RGXPW33SscWfRdZHBPISc+GYYd8rqO60q+HflkG16fayBTMjARQG34fD3PDp1yl4 bCBnHRED4EyFORiBAJyNKZLlH9QGw4K6c9E5XosPgHvBpVbbp8eX9jRWwRet+EXu d1ot -----END CERTIFICATE-----Generated at Thu Jan 1 03:55:14 2026 by rpki-client