This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/C0cF9LqOxbcipo7cWxqvhhNYLQY.roa File: C0cF9LqOxbcipo7cWxqvhhNYLQY.roa (raw, json) Hash identifier: UF+for1TXZ174LCCunX/k3/h+WaOAb2DzNgjj//dThM= Subject key identifier: 0B:47:05:F4:BA:8E:C5:B7:22:A6:8E:DC:5B:1A:AF:86:13:58:2D:06 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 018DC5B6FC8B8FE0D73503B22D77AB983ED0 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/C0cF9LqOxbcipo7cWxqvhhNYLQY.roa Signing time: Tue 20 Feb 2024 08:52:00 +0000 ROA not before: Tue 20 Feb 2024 08:52:00 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 198351 IP address blocks: 2a12:bec4:1020::/48 maxlen: 48 2a12:bec4:1021::/48 maxlen: 48 2a12:bec4:1022::/48 maxlen: 48 2a12:bec4:1023::/48 maxlen: 48 2a12:bec4:1024::/48 maxlen: 48 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:8d:c5:b6:fc:8b:8f:e0:d7:35:03:b2:2d:77:ab:98:3e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Feb 20 08:52:00 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=0b4705f4ba8ec5b722a68edc5b1aaf8613582d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:fb:9c:35:ba:5d:97:10:a7:24:04:d2:a6: 30:fd:4a:6e:ff:f7:27:9a:bc:5f:c2:04:af:af:46: 07:1f:95:e4:6b:ba:31:be:44:27:f3:8a:19:56:ab: 54:c2:97:3a:18:a6:03:f2:44:9b:6b:de:5c:27:57: f5:86:a7:5d:b7:61:33:1b:05:b5:17:8d:ff:88:c6: 6a:23:d9:58:89:a6:7f:7a:38:67:78:fe:c1:63:7f: 2a:bc:57:9b:d6:9a:41:46:77:b5:30:16:43:a6:94: e4:62:2c:9d:29:35:45:12:47:d3:36:32:b3:5e:ab: 5a:c8:dc:72:9d:2a:66:3a:c9:28:f8:6b:c7:98:d7: 41:29:ca:7c:a9:ed:5c:31:b6:e6:eb:72:42:8a:5a: d3:a3:64:89:e9:0d:4d:8f:c6:21:1a:4c:82:8b:4b: 54:64:c6:aa:00:84:46:82:2b:fa:49:71:a0:2b:e4: 14:4f:9c:ec:c4:15:3a:40:7a:49:07:c2:60:99:8b: c5:b0:db:f7:62:a6:62:b2:33:54:39:de:d0:43:61: b5:15:ba:3d:63:83:af:a4:61:30:2a:0e:e3:00:a1: 9c:02:f3:39:3f:5e:be:35:39:4e:ab:1d:16:9d:5c: d3:f4:ef:4b:e1:ff:23:53:0e:c1:8c:9e:29:fc:ed: d2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:47:05:F4:BA:8E:C5:B7:22:A6:8E:DC:5B:1A:AF:86:13:58:2D:06 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/C0cF9LqOxbcipo7cWxqvhhNYLQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1020::-2a12:bec4:1024:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 26:53:bc:47:de:e0:3d:bb:06:cf:1a:87:df:35:f9:0e:2f:00: a2:f6:86:a5:80:ad:d5:67:b0:be:e7:8d:3b:d2:1a:12:a3:a7: fb:f8:97:03:f3:3f:78:31:ec:68:45:9f:0a:28:1d:8e:ab:be: fb:c2:25:53:d2:3b:a6:36:1c:8d:56:ae:18:78:1a:66:a6:9a: bd:fd:b9:b4:a0:20:c8:7f:c4:bc:dc:d6:38:0d:c0:c5:b9:09: fd:c2:76:2d:49:09:a2:5d:cd:6c:9f:74:d4:20:11:de:35:83: 20:8f:f0:0f:c0:c7:0e:a1:4e:31:c9:04:b7:de:fc:c7:56:a0: 37:1d:f1:51:4b:6c:45:03:3c:24:67:a6:08:40:4d:d3:12:75: 9c:89:7c:76:36:63:1d:ce:dd:c4:39:86:a3:03:89:ed:93:a6: 43:ac:c3:32:79:87:d8:f3:73:cc:e2:00:37:84:7b:3a:25:31: 1d:5c:f8:0e:28:ca:9d:86:e8:00:f3:cd:cc:89:7b:13:7f:2a: 2a:cc:25:02:b4:18:a0:0c:27:07:d7:24:44:fd:c7:92:ad:ad: aa:8b:7b:e5:ad:2d:80:c0:a2:1d:86:a4:85:d9:9a:7c:b4:8a: 19:14:71:43:08:05:b1:e9:e1:1d:17:77:54:82:b3:0e:e7:8f: 31:28:35:d2 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAY3FtvyLj+DXNQOyLXermD7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjQwMjIwMDg1MjAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjQ3MDVmNGJhOGVjNWI3MjJhNjhlZGM1YjFhYWY4NjEzNTgyZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6j7nDW6XZcQpyQE0qYw/Upu//cn mrxfwgSvr0YHH5Xka7oxvkQn84oZVqtUwpc6GKYD8kSba95cJ1f1hqddt2EzGwW1 F43/iMZqI9lYiaZ/ejhneP7BY38qvFeb1ppBRne1MBZDppTkYiydKTVFEkfTNjKz XqtayNxynSpmOsko+GvHmNdBKcp8qe1cMbbm63JCilrTo2SJ6Q1Nj8YhGkyCi0tU ZMaqAIRGgiv6SXGgK+QUT5zsxBU6QHpJB8JgmYvFsNv3YqZisjNUOd7QQ2G1Fbo9 Y4OvpGEwKg7jAKGcAvM5P16+NTlOqx0WnVzT9O9L4f8jUw7BjJ4p/O3SBQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFAtHBfS6jsW3IqaO3Fsar4YTWC0GMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvQzBjRjlMcU94YmNpcG83Y1d4cXZoaE5ZTFFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwUqEr7E ECADBwAqEr7EECQwDQYJKoZIhvcNAQELBQADggEBACZTvEfe4D27Bs8ah981+Q4v AKL2hqWArdVnsL7njTvSGhKjp/v4lwPzP3gx7GhFnwooHY6rvvvCJVPSO6Y2HI1W rhh4Gmammr39ubSgIMh/xLzc1jgNwMW5Cf3Cdi1JCaJdzWyfdNQgEd41gyCP8A/A xw6hTjHJBLfe/MdWoDcd8VFLbEUDPCRnpghATdMSdZyJfHY2Yx3O3cQ5hqMDie2T pkOswzJ5h9jzc8ziADeEezolMR1c+A4oyp2G6ADzzcyJexN/KirMJQK0GKAMJwfX JET9x5KtraqLe+WtLYDAoh2GpIXZmny0ihkUcUMIBbHp4R0Xd1SCsw7njzEoNdI= -----END CERTIFICATE-----Generated at Thu Jan 1 05:45:16 2026 by rpki-client