This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/g2l5_tUqPULYFCiIPHSbOHIatto.roa
File: g2l5_tUqPULYFCiIPHSbOHIatto.roa (raw, json)
Hash identifier: P9zp7Y1l9V7x902o20HKM29dxpdfYGfCoNPJ52rzj24=
Subject key identifier: 83:69:79:FE:D5:2A:3D:42:D8:14:28:88:3C:74:9B:38:72:1A:B6:DA
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01870D86204AE9BC422EDA5C0A8B9E997DA0
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/g2l5_tUqPULYFCiIPHSbOHIatto.roa
Signing time: Thu 23 Mar 2023 08:11:46 +0000
ROA not before: Thu 23 Mar 2023 08:11:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202423
IP address blocks: 194.116.162.0/24 maxlen: 24
194.116.163.0/24 maxlen: 24
185.247.185.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:86:20:4a:e9:bc:42:2e:da:5c:0a:8b:9e:99:7d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Mar 23 08:11:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=836979fed52a3d42d81428883c749b38721ab6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:d9:65:b3:3a:4c:a7:af:a2:18:54:54:37:
27:7e:ac:d6:f6:1f:4c:02:f4:1c:03:fc:42:fd:30:
f5:a8:08:2b:19:ec:39:19:59:10:ca:cf:b3:02:a4:
e9:29:92:e6:e7:ed:74:cb:67:71:99:43:4f:89:cb:
b7:a2:b0:9f:2c:87:e6:ba:fe:d4:4f:8c:b8:c0:a5:
0a:cc:42:ca:34:10:50:a1:53:af:2b:30:30:00:d6:
6f:84:da:9e:be:84:82:9f:01:6b:fa:8d:f3:7c:02:
99:b8:4d:f3:fe:0b:00:ce:b4:d6:a0:c2:ed:6a:e1:
13:b7:28:4e:9c:9f:cc:2d:36:2b:48:62:fa:eb:80:
1e:90:c0:6c:d7:7f:77:6b:f3:fc:f9:69:36:18:37:
79:a7:4d:90:63:6d:d8:47:1c:4f:1d:77:ae:04:14:
3f:f7:5d:d1:22:b5:c2:8e:ea:50:2b:10:ff:9c:75:
38:b4:e4:ea:24:85:c2:6e:4c:34:b9:f7:a3:87:ca:
43:93:29:88:72:6a:ce:14:a8:a0:d0:ef:bc:62:76:
05:3a:65:64:a9:16:3a:84:30:92:56:88:5d:ab:bf:
90:9a:56:ac:14:9f:f3:e5:24:05:e6:0f:3f:62:ea:
84:e0:46:80:b9:e9:87:18:da:53:e5:7c:7c:14:56:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:69:79:FE:D5:2A:3D:42:D8:14:28:88:3C:74:9B:38:72:1A:B6:DA
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/g2l5_tUqPULYFCiIPHSbOHIatto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.185.0/24
194.116.162.0/23
Signature Algorithm: sha256WithRSAEncryption
71:80:77:2c:31:9c:fa:90:c4:ce:d2:e7:67:78:42:c9:e2:41:
b8:aa:ff:61:56:07:10:e8:d8:50:ac:1e:0f:57:1f:c6:bb:7c:
9f:93:8b:99:71:60:63:cd:3c:94:7c:64:37:ab:41:6a:39:8d:
16:34:fc:3b:4e:78:4e:d0:f4:ef:75:27:46:e2:3c:db:a4:26:
f8:00:1a:51:65:9c:f0:d3:f0:18:78:f8:36:e2:9f:ea:84:8f:
e7:c5:74:e9:d9:3b:1b:ae:03:80:30:d7:db:0f:ca:2c:fc:59:
f1:ec:7f:c1:74:c8:ef:25:f7:c7:6d:04:d9:f5:a4:c0:80:ed:
17:d1:84:1e:fe:ed:c6:33:9b:c3:d7:40:be:01:54:ee:10:a5:
12:a9:3c:34:41:b1:c1:71:f4:30:03:6e:2b:e3:a2:b6:95:51:
54:cc:8e:5c:38:9c:7b:b5:46:57:ab:0f:91:42:93:03:52:1b:
1a:04:57:55:26:56:b7:1d:c1:91:0e:e2:09:18:bf:d2:47:cf:
6f:88:1b:83:4e:ac:ec:51:4a:8f:70:c7:10:d8:66:d0:7e:51:
44:1a:0b:26:6d:8e:ba:e7:aa:85:e0:b5:c3:ca:95:5e:d8:9e:
8f:3d:e5:8f:66:7a:86:a5:b6:fb:d0:a8:b7:f9:4c:a1:d2:02:
e0:0e:dd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 07:53:05 2025 by rpki-client