This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Qn8dWxLG2eQoXTM7rAhY9XazaMY.roa File: Qn8dWxLG2eQoXTM7rAhY9XazaMY.roa (raw, json) Hash identifier: CGpl6HqfKbLS867St9XI6IFIqUxX423M5NKsP3+QX7Q= Subject key identifier: 42:7F:1D:5B:12:C6:D9:E4:28:5D:33:3B:AC:08:58:F5:76:B3:68:C6 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 01930738C6A10DA918EE46433EBCD3B12F70 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Qn8dWxLG2eQoXTM7rAhY9XazaMY.roa Signing time: Thu 07 Nov 2024 15:23:01 +0000 ROA not before: Thu 07 Nov 2024 15:23:01 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 49505 IP address blocks: 85.142.0.0/21 maxlen: 24 85.142.40.0/21 maxlen: 24 85.142.48.0/22 maxlen: 24 85.142.64.0/22 maxlen: 24 85.142.72.0/21 maxlen: 24 85.142.80.0/20 maxlen: 24 85.142.96.0/22 maxlen: 24 85.142.100.0/23 maxlen: 24 85.142.112.0/22 maxlen: 24 85.142.128.0/20 maxlen: 24 85.142.212.0/23 maxlen: 24 85.142.215.0/24 maxlen: 24 85.142.240.0/23 maxlen: 24 85.142.242.0/24 maxlen: 24 85.142.244.0/23 maxlen: 24 85.142.246.0/24 maxlen: 24 85.142.250.0/24 maxlen: 24 85.142.252.0/22 maxlen: 24 85.143.40.0/21 maxlen: 24 85.143.48.0/20 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:07:38:c6:a1:0d:a9:18:ee:46:43:3e:bc:d3:b1:2f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Nov 7 15:23:01 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=427f1d5b12c6d9e4285d333bac0858f576b368c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:83:69:91:4f:8f:3e:9f:57:dc:25:cf:df:65: fa:1e:a1:96:ef:30:bf:63:6e:14:04:46:ae:2b:5e: bd:38:db:3b:94:69:66:8f:92:ae:1b:e0:c9:f0:3b: 00:bf:f0:29:15:6b:6e:fd:19:d3:2f:80:64:4e:55: ee:73:b2:c0:01:6f:6a:fe:d8:e1:c3:c4:7a:45:d0: 23:71:50:56:dd:55:4c:c1:4d:57:a6:2e:6e:91:3e: 01:6c:fc:c7:a7:e1:52:01:6e:6d:14:7c:8f:d3:99: e4:f9:0c:d0:70:23:8b:b0:a6:8b:17:19:d1:a3:54: a3:89:1e:d8:b5:83:e7:37:cf:4a:f2:0f:62:28:77: a6:72:5c:3f:7c:21:66:72:3b:2a:e1:4a:12:b5:27: 0a:0d:12:b2:50:4a:4e:7d:cb:71:01:3e:33:04:41: 47:cb:4e:e0:fc:cc:9c:04:82:ef:95:0d:86:6e:9f: 3a:a1:ef:09:d3:19:05:15:ca:ee:b6:9e:2e:c9:ea: 58:90:2b:aa:58:08:f3:00:b3:47:c7:f2:ec:68:a5: b5:43:18:f5:3c:26:82:9e:b3:f2:ad:18:45:0e:e3: 54:3e:6e:60:8b:cc:e2:45:44:53:ee:03:c8:74:82: bc:3d:42:b8:93:7d:38:0b:07:c3:5e:01:01:db:80: 08:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7F:1D:5B:12:C6:D9:E4:28:5D:33:3B:AC:08:58:F5:76:B3:68:C6 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Qn8dWxLG2eQoXTM7rAhY9XazaMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.0.0/21 85.142.40.0-85.142.51.255 85.142.64.0/22 85.142.72.0-85.142.101.255 85.142.112.0/22 85.142.128.0/20 85.142.212.0/23 85.142.215.0/24 85.142.240.0-85.142.242.255 85.142.244.0-85.142.246.255 85.142.250.0/24 85.142.252.0/22 85.143.40.0-85.143.63.255 Signature Algorithm: sha256WithRSAEncryption 2d:5c:20:90:84:8f:3a:b6:16:00:3b:29:ee:aa:b8:90:e4:77: 7b:23:76:2b:d6:d8:7e:7a:ec:85:a4:c8:48:22:b1:8d:d4:03: 31:51:4c:c8:0a:a3:d9:a5:83:2e:f5:e9:ca:4c:ec:c0:a3:77: 44:86:90:27:65:12:1d:42:a3:25:bc:80:52:5f:44:7c:6c:d9: d8:9b:da:92:af:e6:b5:a2:a6:60:4e:46:c7:2e:b8:06:1f:38: f1:37:4f:b8:c8:a9:6e:83:77:85:84:7c:3b:17:ce:a4:16:32: 0d:07:02:90:f5:f2:4e:47:45:39:04:60:ee:92:f2:b1:7b:06: 6b:3b:99:8d:00:09:55:01:59:3c:38:f3:23:6f:51:d3:f9:bc: 76:26:a9:a6:e2:a1:4f:7e:11:49:8d:7d:42:a8:3e:33:be:73: 20:b8:cf:d9:fc:e2:7d:47:7f:f8:8d:1a:7d:16:ea:0e:d8:29: 7a:81:68:61:2c:33:40:52:f5:a5:15:72:f0:d8:f6:f3:03:1a: 37:d4:04:dd:81:90:2b:46:c5:a1:82:94:5a:8d:dc:ae:05:9f: ae:25:55:e1:bf:75:3f:f0:20:6f:2c:fb:9e:4f:33:68:bb:52: a7:73:6c:4f:f9:37:8d:81:d2:f5:61:a1:eb:31:49:7d:83:2e: 50:27:ad:4f -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZMHOMahDakY7kZDPrzTsS9wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjQxMTA3MTUyMzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MjdmMWQ1YjEyYzZkOWU0Mjg1ZDMzM2JhYzA4NThmNTc2YjM2OGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oNpkU+PPp9X3CXP32X6HqGW7zC/ Y24UBEauK169ONs7lGlmj5KuG+DJ8DsAv/ApFWtu/RnTL4BkTlXuc7LAAW9q/tjh w8R6RdAjcVBW3VVMwU1Xpi5ukT4BbPzHp+FSAW5tFHyP05nk+QzQcCOLsKaLFxnR o1SjiR7YtYPnN89K8g9iKHemclw/fCFmcjsq4UoStScKDRKyUEpOfctxAT4zBEFH y07g/MycBILvlQ2Gbp86oe8J0xkFFcrutp4uyepYkCuqWAjzALNHx/LsaKW1Qxj1 PCaCnrPyrRhFDuNUPm5gi8ziRURT7gPIdIK8PUK4k304CwfDXgEB24AIWQIDAQAB o4ICezCCAncwHQYDVR0OBBYEFEJ/HVsSxtnkKF0zO6wIWPV2s2jGMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvUW44ZFd4TEcyZVFvWFRNN3JBaFk5WGF6YU1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBANVjgAw DAMEA1WOKAMEAlWOMAMEAlWOQDAMAwQDVY5IAwQBVY5kAwQCVY5wAwQEVY6AAwQB VY7UAwQAVY7XMAwDBARVjvADBABVjvIwDAMEAlWO9AMEAFWO9gMEAFWO+gMEAlWO /DAMAwQDVY8oAwQGVY8AMA0GCSqGSIb3DQEBCwUAA4IBAQAtXCCQhI86thYAOynu qriQ5Hd7I3Yr1th+euyFpMhIIrGN1AMxUUzICqPZpYMu9enKTOzAo3dEhpAnZRId QqMlvIBSX0R8bNnYm9qSr+a1oqZgTkbHLrgGHzjxN0+4yKlug3eFhHw7F86kFjIN BwKQ9fJOR0U5BGDukvKxewZrO5mNAAlVAVk8OPMjb1HT+bx2Jqmm4qFPfhFJjX1C qD4zvnMguM/Z/OJ9R3/4jRp9FuoO2Cl6gWhhLDNAUvWlFXLw2PbzAxo31ATdgZAr RsWhgpRajdyuBZ+uJVXhv3U/8CBvLPueTzNou1Knc2xP+TeNgdL1YaHrMUl9gy5Q J61P -----END CERTIFICATE-----Generated at Wed Dec 24 18:05:19 2025 by rpki-client