This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/afZuoXECvWXWH_W59VFx5ccDOGo.roa File: afZuoXECvWXWH_W59VFx5ccDOGo.roa (raw, json) Hash identifier: xZ71fSqztJTYJL5ZrdcVR2VXlVuJ/nwc2vF3fdqVWsQ= Subject key identifier: 69:F6:6E:A1:71:02:BD:65:D6:1F:F5:B9:F5:51:71:E5:C7:03:38:6A Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 0196268087D204E28CEE6E34A541EBD86C3C Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/afZuoXECvWXWH_W59VFx5ccDOGo.roa Signing time: Fri 11 Apr 2025 20:17:59 +0000 ROA not before: Fri 11 Apr 2025 20:17:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 28753 IP address blocks: 2.59.21.0/24 maxlen: 24 45.9.116.0/24 maxlen: 24 45.9.122.0/24 maxlen: 24 45.94.46.0/24 maxlen: 24 45.128.76.0/24 maxlen: 24 45.154.58.0/24 maxlen: 24 93.190.244.0/24 maxlen: 24 2a04:9f40::/29 maxlen: 29 2a06:1184:101::/48 maxlen: 48 2a06:3bc0::/29 maxlen: 29 2a07:8a40::/29 maxlen: 29 2a09:17c1:66::/48 maxlen: 48 2a09:17c1:77::/48 maxlen: 48 2a0a:2d06:102::/48 maxlen: 48 2a0a:2d06:103::/48 maxlen: 48 2a0c:7886:99::/48 maxlen: 48 2a0c:7886:100::/48 maxlen: 48 2a0e:15c7:88::/48 maxlen: 48 2a0e:15c7:99::/48 maxlen: 48 2a0e:1a83:77::/48 maxlen: 48 2a0e:f603:66::/48 maxlen: 48 2a0f:140::/29 maxlen: 29 2a0f:1206:55::/48 maxlen: 48 2a0f:1206:66::/48 maxlen: 48 2a0f:2500::/29 maxlen: 29 2a0f:3d86:88::/48 maxlen: 48 2a0f:3d86:99::/48 maxlen: 48 2a0f:7d06:88::/48 maxlen: 48 2a0f:7d06:99::/48 maxlen: 48 2a0f:cc00::/29 maxlen: 29 2a0f:d200::/29 maxlen: 29 2a0f:da40::/29 maxlen: 29 2a0f:db40::/29 maxlen: 29 2a0f:dfc0::/29 maxlen: 29 2a0f:e040::/29 maxlen: 29 2a0f:e1c1:22::/48 maxlen: 48 2a0f:e202:44::/48 maxlen: 48 2a0f:e202:55::/48 maxlen: 48 2a0f:e4c0::/29 maxlen: 29 2a0f:e6c6:100::/48 maxlen: 48 2a0f:e6c6:101::/48 maxlen: 48 2a0f:e7c6:66::/48 maxlen: 48 2a0f:e7c6:77::/48 maxlen: 48 2a0f:e7c6:88::/48 maxlen: 48 2a0f:e844:22::/48 maxlen: 48 2a0f:e844:33::/48 maxlen: 48 2a0f:ea44:66::/48 maxlen: 48 2a0f:ea44:77::/48 maxlen: 48 2a0f:fc00::/29 maxlen: 29 2a12:ac46:77::/48 maxlen: 48 2a12:ecc0:168::/48 maxlen: 48 2a12:ecc0:178::/48 maxlen: 48 2a13:18c6:55::/48 maxlen: 48 2a13:18c6:77::/48 maxlen: 48 2a13:18c6:88::/48 maxlen: 48 2a13:7d80::/29 maxlen: 29 2a13:8c86:10a::/48 maxlen: 48 2a13:8c86:120::/48 maxlen: 48 2a13:8c86:130::/48 maxlen: 48 2a13:c900:88::/48 maxlen: 48 2a13:c900:99::/48 maxlen: 48 2a13:e107:99::/48 maxlen: 48 2a13:e107:9c::/48 maxlen: 48 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:26:80:87:d2:04:e2:8c:ee:6e:34:a5:41:eb:d8:6c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Apr 11 20:17:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69f66ea17102bd65d61ff5b9f55171e5c703386a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:9a:45:b2:df:e9:30:3d:cb:fd:fe:a4:e7: bf:c1:fe:a6:74:10:6c:6c:cc:06:ce:b8:4c:c4:da: a5:c0:45:d1:cb:15:56:3e:61:a6:d8:be:67:9c:2c: 8d:f7:7a:fc:0f:75:79:dc:d4:6b:4b:8b:70:5d:9c: 18:37:95:77:cc:04:d4:75:cf:e7:89:f0:2b:f1:8a: 55:e0:35:80:27:1d:fc:0b:9d:29:71:7e:57:ba:a1: a1:6c:03:bd:36:f5:97:d0:c3:bb:19:7d:1d:52:55: c5:5f:c1:c6:4c:62:db:0b:95:a9:5c:4e:bd:15:67: be:67:93:a6:18:c7:10:3a:cf:75:6b:f3:f4:0d:a6: 66:1a:53:17:a8:08:9c:13:ed:39:65:fc:38:54:3d: 68:b1:da:62:d8:e7:23:b6:96:49:81:48:07:b5:fa: 6d:ac:50:3c:f4:40:4b:27:7a:82:6b:b1:55:b0:b7: f5:6c:b8:a7:c3:87:dc:9f:2d:b2:56:e3:3a:c3:d9: 95:a0:c7:0a:23:9e:c1:5d:8c:70:06:0a:7c:54:e7: 89:84:b6:b9:24:d2:b5:8c:3e:2f:83:b1:40:05:18: e6:3b:7b:d3:d3:89:67:91:b3:4b:33:fb:72:8e:a9: 00:3c:f8:6d:e1:a2:5f:14:90:78:37:26:64:4b:4b: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F6:6E:A1:71:02:BD:65:D6:1F:F5:B9:F5:51:71:E5:C7:03:38:6A X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/afZuoXECvWXWH_W59VFx5ccDOGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.21.0/24 45.9.116.0/24 45.9.122.0/24 45.94.46.0/24 45.128.76.0/24 45.154.58.0/24 93.190.244.0/24 IPv6: 2a04:9f40::/29 2a06:1184:101::/48 2a06:3bc0::/29 2a07:8a40::/29 2a09:17c1:66::/48 2a09:17c1:77::/48 2a0a:2d06:102::/47 2a0c:7886:99::/48 2a0c:7886:100::/48 2a0e:15c7:88::/48 2a0e:15c7:99::/48 2a0e:1a83:77::/48 2a0e:f603:66::/48 2a0f:140::/29 2a0f:1206:55::/48 2a0f:1206:66::/48 2a0f:2500::/29 2a0f:3d86:88::/48 2a0f:3d86:99::/48 2a0f:7d06:88::/48 2a0f:7d06:99::/48 2a0f:cc00::/29 2a0f:d200::/29 2a0f:da40::/29 2a0f:db40::/29 2a0f:dfc0::/29 2a0f:e040::/29 2a0f:e1c1:22::/48 2a0f:e202:44::/48 2a0f:e202:55::/48 2a0f:e4c0::/29 2a0f:e6c6:100::/47 2a0f:e7c6:66::/48 2a0f:e7c6:77::/48 2a0f:e7c6:88::/48 2a0f:e844:22::/48 2a0f:e844:33::/48 2a0f:ea44:66::/48 2a0f:ea44:77::/48 2a0f:fc00::/29 2a12:ac46:77::/48 2a12:ecc0:168::/48 2a12:ecc0:178::/48 2a13:18c6:55::/48 2a13:18c6:77::/48 2a13:18c6:88::/48 2a13:7d80::/29 2a13:8c86:10a::/48 2a13:8c86:120::/48 2a13:8c86:130::/48 2a13:c900:88::/48 2a13:c900:99::/48 2a13:e107:99::/48 2a13:e107:9c::/48 Signature Algorithm: sha256WithRSAEncryption 30:bd:80:9b:23:55:57:c5:e7:1b:a1:02:63:68:9e:d1:f6:7b: c9:a6:9b:16:1c:e0:88:58:e2:61:bc:e9:c3:3f:b7:2e:f0:f0: dc:73:a2:c9:3d:77:56:07:8d:59:e9:3f:7e:e5:6c:b1:70:b1: 22:f1:8c:a0:e8:b7:be:6c:db:9c:d7:63:6f:20:4b:48:a4:b8: 10:a9:42:9b:76:51:99:95:9d:c6:bf:68:8c:dc:36:0f:84:55: 9a:89:78:a1:71:ba:43:b9:79:cd:ff:f3:eb:3f:56:e3:bd:c7: 7c:c6:aa:e6:03:83:24:11:45:40:b7:a5:cf:81:b4:91:fa:0f: 21:6a:2b:4d:17:3e:dd:db:72:e6:31:1e:00:b0:cc:97:5e:66: 6b:cd:c9:d9:9c:36:6c:a7:13:27:0a:d8:60:ff:fe:57:15:51: 0d:c0:f2:14:ae:c7:f1:bb:28:d6:e9:88:96:4b:fd:25:ed:2c: 20:6f:2d:3e:2f:b3:4b:c6:d5:53:0c:6b:c2:94:f2:39:6c:e6: 64:fd:93:55:d2:57:e5:0f:9a:5b:cc:4a:47:26:48:75:17:11: 9b:66:e2:ef:41:f6:12:bc:4c:e1:90:c1:4b:81:f6:b2:0b:6d: 49:b0:91:07:c1:ec:92:53:7e:c6:8a:31:91:cb:3c:c7:52:7b: e1:d1:a4:43 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgISAZYmgIfSBOKM7m40pUHr2Gw8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUwNDExMjAxNzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWY2NmVhMTcxMDJiZDY1ZDYxZmY1YjlmNTUxNzFlNWM3MDMzODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxCaRbLf6TA9y/3+pOe/wf6mdBBs bMwGzrhMxNqlwEXRyxVWPmGm2L5nnCyN93r8D3V53NRrS4twXZwYN5V3zATUdc/n ifAr8YpV4DWAJx38C50pcX5XuqGhbAO9NvWX0MO7GX0dUlXFX8HGTGLbC5WpXE69 FWe+Z5OmGMcQOs91a/P0DaZmGlMXqAicE+05Zfw4VD1osdpi2OcjtpZJgUgHtfpt rFA89EBLJ3qCa7FVsLf1bLinw4fcny2yVuM6w9mVoMcKI57BXYxwBgp8VOeJhLa5 JNK1jD4vg7FABRjmO3vT04lnkbNLM/tyjqkAPPht4aJfFJB4NyZkS0t51QIDAQAB o4IECTCCBAUwHQYDVR0OBBYEFGn2bqFxAr1l1h/1ufVRceXHAzhqMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvYWZadW9YRUN2V1hXSF9XNTlWRng1Y2NET0dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICHQYIKwYBBQUHAQcBAf8EggIMMIICCDAwBAIAATAqAwQA AjsVAwQALQl0AwQALQl6AwQALV4uAwQALYBMAwQALZo6AwQAXb70MIIB0gQCAAIw ggHKAwUDKgSfQAMHACoGEYQBAQMFAyoGO8ADBQMqB4pAAwcAKgkXwQBmAwcAKgkX wQB3AwcBKgotBgECAwcAKgx4hgCZAwcAKgx4hgEAAwcAKg4VxwCIAwcAKg4VxwCZ AwcAKg4agwB3AwcAKg72AwBmAwUDKg8BQAMHACoPEgYAVQMHACoPEgYAZgMFAyoP JQADBwAqDz2GAIgDBwAqDz2GAJkDBwAqD30GAIgDBwAqD30GAJkDBQMqD8wAAwUD Kg/SAAMFAyoP2kADBQMqD9tAAwUDKg/fwAMFAyoP4EADBwAqD+HBACIDBwAqD+IC AEQDBwAqD+ICAFUDBQMqD+TAAwcBKg/mxgEAAwcAKg/nxgBmAwcAKg/nxgB3AwcA Kg/nxgCIAwcAKg/oRAAiAwcAKg/oRAAzAwcAKg/qRABmAwcAKg/qRAB3AwUDKg/8 AAMHACoSrEYAdwMHACoS7MABaAMHACoS7MABeAMHACoTGMYAVQMHACoTGMYAdwMH ACoTGMYAiAMFAyoTfYADBwAqE4yGAQoDBwAqE4yGASADBwAqE4yGATADBwAqE8kA AIgDBwAqE8kAAJkDBwAqE+EHAJkDBwAqE+EHAJwwDQYJKoZIhvcNAQELBQADggEB ADC9gJsjVVfF5xuhAmNontH2e8mmmxYc4IhY4mG86cM/ty7w8Nxzosk9d1YHjVnp P37lbLFwsSLxjKDot75s25zXY28gS0ikuBCpQpt2UZmVnca/aIzcNg+EVZqJeKFx ukO5ec3/8+s/VuO9x3zGquYDgyQRRUC3pc+BtJH6DyFqK00XPt3bcuYxHgCwzJde ZmvNydmcNmynEycK2GD//lcVUQ3A8hSux/G7KNbpiJZL/SXtLCBvLT4vs0vG1VMM a8KU8jls5mT9k1XSV+UPmlvMSkcmSHUXEZtm4u9B9hK8TOGQwUuB9rILbUmwkQfB 7JJTfsaKMZHLPMdSe+HRpEM= -----END CERTIFICATE-----Generated at Sun Dec 21 15:51:59 2025 by rpki-client