This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/oshBkHb-DdnbiNr2cGCUZrKS4R4.roa File: oshBkHb-DdnbiNr2cGCUZrKS4R4.roa (raw, json) Hash identifier: TOCYdH6Sk+hD5BhpToT669kUexQxKPwxW3o+YyBqKdA= Subject key identifier: A2:C8:41:90:76:FE:0D:D9:DB:88:DA:F6:70:60:94:66:B2:92:E1:1E Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 018CB0D4153EBD762840C9E33B15BC8FBE9B Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/oshBkHb-DdnbiNr2cGCUZrKS4R4.roa Signing time: Thu 28 Dec 2023 14:28:58 +0000 ROA not before: Thu 28 Dec 2023 14:28:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 3267 IP address blocks: 82.137.137.0/24 maxlen: 24 86.110.96.0/19 maxlen: 19 86.110.96.0/22 maxlen: 22 86.110.101.0/24 maxlen: 24 86.110.102.0/24 maxlen: 24 86.110.103.0/24 maxlen: 24 86.110.112.0/20 maxlen: 20 82.137.176.0/22 maxlen: 22 82.137.184.0/22 maxlen: 22 82.137.180.0/22 maxlen: 22 82.137.188.0/22 maxlen: 22 85.143.96.0/22 maxlen: 24 85.143.112.0/22 maxlen: 24 85.143.124.0/22 maxlen: 24 194.190.241.0/24 maxlen: 24 194.190.242.0/23 maxlen: 23 194.190.244.0/22 maxlen: 22 194.190.248.0/21 maxlen: 21 85.143.224.0/21 maxlen: 21 85.143.239.0/24 maxlen: 24 188.93.107.0/24 maxlen: 24 194.190.224.0/19 maxlen: 24 194.190.232.0/21 maxlen: 24 194.190.240.0/24 maxlen: 24 85.142.148.0/23 maxlen: 24 85.142.153.0/24 maxlen: 24 85.142.162.0/23 maxlen: 24 193.27.214.0/23 maxlen: 24 85.142.96.0/19 maxlen: 24 194.85.32.0/20 maxlen: 20 82.179.128.0/17 maxlen: 17 194.149.64.0/24 maxlen: 24 194.85.174.0/23 maxlen: 23 85.143.0.0/20 maxlen: 24 83.149.192.0/18 maxlen: 24 85.143.18.0/23 maxlen: 24 85.143.26.0/24 maxlen: 24 80.250.160.0/19 maxlen: 24 80.250.172.0/23 maxlen: 23 80.250.170.0/23 maxlen: 23 80.250.176.0/20 maxlen: 20 80.250.175.0/24 maxlen: 24 194.85.160.0/21 maxlen: 21 194.85.168.0/22 maxlen: 22 185.71.96.0/22 maxlen: 22 82.179.64.0/18 maxlen: 18 85.142.64.0/24 maxlen: 24 85.142.78.0/24 maxlen: 24 85.142.8.0/21 maxlen: 21 82.179.32.0/19 maxlen: 19 2a07:a6c0::/29 maxlen: 29 2a07:a6c4::/32 maxlen: 32 2001:b08:22::/48 maxlen: 48 2a00:db8::/32 maxlen: 48 2001:b08:26::/48 maxlen: 48 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:b0:d4:15:3e:bd:76:28:40:c9:e3:3b:15:bc:8f:be:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Dec 28 14:28:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=a2c8419076fe0dd9db88daf670609466b292e11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:9d:5b:d9:8e:7b:a2:df:1e:e3:1a:00:c2: 77:3f:9d:68:8b:c5:60:4b:41:85:7a:80:c7:d3:fd: 88:ed:50:1f:fa:b0:46:a7:d9:5e:71:12:dd:ea:73: 78:82:69:e8:cd:94:4f:cc:c7:15:86:54:8a:6a:06: 0e:7e:46:ba:e3:41:5b:73:f2:f0:0f:cc:65:29:ea: fc:1c:10:a5:b9:5e:d3:0a:66:4d:d1:1c:83:00:c7: 10:ff:db:b6:8d:85:d3:89:45:26:08:34:52:a6:63: 79:f9:e3:63:b3:f3:8f:a2:b0:b7:10:2a:5b:91:ed: a8:1e:72:65:8f:7f:f4:66:ea:44:94:a5:cf:f7:9c: 7a:9d:f7:ef:c1:4f:31:9e:83:e5:2b:92:3c:c6:4b: d1:c5:2c:bb:c7:4b:f2:37:6e:09:bb:f0:20:a6:e1: f4:be:d5:e1:23:1a:4c:14:59:84:5c:e8:6b:10:6d: da:36:52:6f:4c:c4:90:a9:99:4f:b5:9e:78:6f:ff: 5f:38:8a:4e:20:c9:a0:a6:18:0c:4d:75:3a:15:47: d2:e6:ec:b3:82:ac:17:ed:f2:4e:94:dc:0e:ac:3e: be:ad:d0:34:f0:c6:64:b7:05:e0:a3:1d:77:e9:8f: 47:eb:01:2c:8f:65:be:11:fd:02:4c:82:08:e0:9f: b2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C8:41:90:76:FE:0D:D9:DB:88:DA:F6:70:60:94:66:B2:92:E1:1E X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/oshBkHb-DdnbiNr2cGCUZrKS4R4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.250.160.0/19 82.137.137.0/24 82.137.176.0/20 82.179.32.0-82.179.255.255 83.149.192.0/18 85.142.8.0/21 85.142.64.0/24 85.142.78.0/24 85.142.96.0/19 85.142.148.0/23 85.142.153.0/24 85.142.162.0/23 85.143.0.0/20 85.143.18.0/23 85.143.26.0/24 85.143.96.0/22 85.143.112.0/22 85.143.124.0/22 85.143.224.0/21 85.143.239.0/24 86.110.96.0/19 185.71.96.0/22 188.93.107.0/24 193.27.214.0/23 194.85.32.0/20 194.85.160.0-194.85.171.255 194.85.174.0/23 194.149.64.0/24 194.190.224.0/19 IPv6: 2001:b08:22::/48 2001:b08:26::/48 2a00:db8::/32 2a07:a6c0::/29 Signature Algorithm: sha256WithRSAEncryption 1d:aa:28:17:a7:15:b8:3e:69:44:dc:b3:02:26:e1:dc:e5:a7: b4:f2:77:e6:9a:5d:f9:5e:d1:b6:36:8b:05:a7:6a:c6:b5:04: 6b:b9:75:b6:69:4b:d4:97:0a:dd:30:76:ba:30:ec:07:e0:47: 4d:7d:08:67:41:b1:42:fd:0c:c3:d1:b1:dd:04:66:b5:bd:5d: 17:94:85:b9:48:37:21:d4:2a:22:5e:88:45:b7:23:bf:38:b0: e1:f4:5d:f9:5e:dc:14:cf:7d:cb:5b:90:3a:de:dc:98:b4:94: d8:2c:62:c3:06:c5:44:1f:e4:d3:90:2b:5f:32:79:48:6a:47: 79:a5:b6:49:22:09:41:f6:c9:8d:ed:a4:84:23:6e:f1:10:62: f5:3d:37:c8:2e:85:48:cc:b6:18:8c:72:c9:70:82:03:ce:96: bf:8d:ef:e4:41:c8:49:af:2e:74:2a:8a:5f:42:b5:2e:07:50: 40:24:74:46:f7:e4:5b:50:26:9e:88:5a:02:c9:31:c0:11:8a: 44:4f:b1:31:1d:21:f0:7a:c2:01:71:c5:bf:0e:35:35:13:1c: 61:08:99:67:f2:ad:47:e1:1e:27:3c:0a:bc:48:a0:15:3d:d7: 45:1d:53:c2:df:8d:6e:e4:09:db:6f:a3:05:e0:1b:e7:60:da: 4a:79:ef:27 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISAYyw1BU+vXYoQMnjOxW8j76bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjMxMjI4MTQyODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmM4NDE5MDc2ZmUwZGQ5ZGI4OGRhZjY3MDYwOTQ2NmIyOTJlMTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBCdW9mOe6LfHuMaAMJ3P51oi8Vg S0GFeoDH0/2I7VAf+rBGp9lecRLd6nN4gmnozZRPzMcVhlSKagYOfka640Fbc/Lw D8xlKer8HBCluV7TCmZN0RyDAMcQ/9u2jYXTiUUmCDRSpmN5+eNjs/OPorC3ECpb ke2oHnJlj3/0ZupElKXP95x6nffvwU8xnoPlK5I8xkvRxSy7x0vyN24Ju/AgpuH0 vtXhIxpMFFmEXOhrEG3aNlJvTMSQqZlPtZ54b/9fOIpOIMmgphgMTXU6FUfS5uyz gqwX7fJOlNwOrD6+rdA08MZktwXgox136Y9H6wEsj2W+Ef0CTIII4J+ylwIDAQAB o4IC7jCCAuowHQYDVR0OBBYEFKLIQZB2/g3Z24ja9nBglGaykuEeMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvb3NoQmtIYi1EZG5iaU5yMmNHQ1VacktTNFI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBAgYIKwYBBQUHAQcBAf8EgfIwge8wgcQEAgABMIG9AwQF UPqgAwQAUomJAwQEUomwMAsDBAVSsyADAwJSsAMEBlOVwAMEA1WOCAMEAFWOQAME AFWOTgMEBVWOYAMEAVWOlAMEAFWOmQMEAVWOogMEBFWPAAMEAVWPEgMEAFWPGgME AlWPYAMEAlWPcAMEAlWPfAMEA1WP4AMEAFWP7wMEBVZuYAMEArlHYAMEALxdawME AcEb1gMEBMJVIDAMAwQFwlWgAwQCwlWoAwQBwlWuAwQAwpVAAwQFwr7gMCYEAgAC MCADBwAgAQsIACIDBwAgAQsIACYDBQAqAA24AwUDKgemwDANBgkqhkiG9w0BAQsF AAOCAQEAHaooF6cVuD5pRNyzAibh3OWntPJ35ppd+V7RtjaLBadqxrUEa7l1tmlL 1JcK3TB2ujDsB+BHTX0IZ0GxQv0Mw9Gx3QRmtb1dF5SFuUg3IdQqIl6IRbcjvziw 4fRd+V7cFM99y1uQOt7cmLSU2CxiwwbFRB/k05ArXzJ5SGpHeaW2SSIJQfbJje2k hCNu8RBi9T03yC6FSMy2GIxyyXCCA86Wv43v5EHISa8udCqKX0K1LgdQQCR0Rvfk W1AmnohaAskxwBGKRE+xMR0h8HrCAXHFvw41NRMcYQiZZ/KtR+EeJzwKvEigFT3X RR1Twt+NbuQJ22+jBeAb52DaSnnvJw== -----END CERTIFICATE-----Generated at Mon Dec 22 10:38:36 2025 by rpki-client