This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cG66S8IhLqKezV-WzXT9MwipkRg.roa File: cG66S8IhLqKezV-WzXT9MwipkRg.roa (raw, json) Hash identifier: 6KuYD0BrbATaSGzGPq3+JBKOQ5K3p6xjxaRl1PBDDx4= Subject key identifier: 70:6E:BA:4B:C2:21:2E:A2:9E:CD:5F:96:CD:74:FD:33:08:A9:91:18 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 0195FA8F4BFD23B64C6F47B07D83E1C88A13 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cG66S8IhLqKezV-WzXT9MwipkRg.roa Signing time: Thu 03 Apr 2025 07:30:49 +0000 ROA not before: Thu 03 Apr 2025 07:30:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 28753 IP address blocks: 2.59.21.0/24 maxlen: 24 45.9.116.0/24 maxlen: 24 45.9.122.0/24 maxlen: 24 45.94.46.0/24 maxlen: 24 45.128.76.0/24 maxlen: 24 45.154.58.0/24 maxlen: 24 93.190.244.0/24 maxlen: 24 2a04:9f40::/29 maxlen: 29 2a06:1184:101::/48 maxlen: 48 2a06:3bc0::/29 maxlen: 29 2a07:8a40::/29 maxlen: 29 2a09:17c1:66::/48 maxlen: 48 2a09:17c1:77::/48 maxlen: 48 2a0a:2d06:102::/48 maxlen: 48 2a0a:2d06:103::/48 maxlen: 48 2a0c:7886:99::/48 maxlen: 48 2a0c:7886:100::/48 maxlen: 48 2a0e:15c7:88::/48 maxlen: 48 2a0e:15c7:99::/48 maxlen: 48 2a0e:1a83:77::/48 maxlen: 48 2a0e:f603:66::/48 maxlen: 48 2a0f:140::/29 maxlen: 29 2a0f:1206:55::/48 maxlen: 48 2a0f:1206:66::/48 maxlen: 48 2a0f:2500::/29 maxlen: 29 2a0f:3d86:88::/48 maxlen: 48 2a0f:3d86:99::/48 maxlen: 48 2a0f:7d06:88::/48 maxlen: 48 2a0f:7d06:99::/48 maxlen: 48 2a0f:cc00::/29 maxlen: 29 2a0f:d200::/29 maxlen: 29 2a0f:da40::/29 maxlen: 29 2a0f:db40::/29 maxlen: 29 2a0f:dfc0::/29 maxlen: 29 2a0f:e040::/29 maxlen: 29 2a0f:e1c1:22::/48 maxlen: 48 2a0f:e202:44::/48 maxlen: 48 2a0f:e202:55::/48 maxlen: 48 2a0f:e202:100::/48 maxlen: 48 2a0f:e4c0::/29 maxlen: 29 2a0f:e6c6:100::/48 maxlen: 48 2a0f:e6c6:101::/48 maxlen: 48 2a0f:e7c6:66::/48 maxlen: 48 2a0f:e7c6:77::/48 maxlen: 48 2a0f:e7c6:88::/48 maxlen: 48 2a0f:e844:22::/48 maxlen: 48 2a0f:e844:33::/48 maxlen: 48 2a0f:ea44:66::/48 maxlen: 48 2a0f:ea44:77::/48 maxlen: 48 2a0f:fc00::/29 maxlen: 29 2a12:ac46:77::/48 maxlen: 48 2a12:ecc0:168::/48 maxlen: 48 2a12:ecc0:178::/48 maxlen: 48 2a13:18c6:55::/48 maxlen: 48 2a13:18c6:77::/48 maxlen: 48 2a13:18c6:88::/48 maxlen: 48 2a13:7d80::/29 maxlen: 29 2a13:8c86:10a::/48 maxlen: 48 2a13:8c86:120::/48 maxlen: 48 2a13:8c86:130::/48 maxlen: 48 2a13:c900:88::/48 maxlen: 48 2a13:c900:99::/48 maxlen: 48 2a13:e107:99::/48 maxlen: 48 2a13:e107:9c::/48 maxlen: 48 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:fa:8f:4b:fd:23:b6:4c:6f:47:b0:7d:83:e1:c8:8a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Apr 3 07:30:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=706eba4bc2212ea29ecd5f96cd74fd3308a99118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:42:b2:2e:48:e2:c3:c5:e3:4c:1e:70:fb:31: f6:46:a1:0d:3a:f8:61:b7:64:e5:64:47:82:08:6b: e9:af:45:ae:4d:2d:93:fd:5e:3d:e8:60:29:8f:3b: 7b:f7:a6:61:e2:42:f1:9a:14:3b:e3:00:88:81:1e: 99:e6:f9:99:ac:76:1d:d4:ec:98:30:98:e1:9f:76: a2:2c:60:76:22:da:bc:46:8b:96:fa:92:0c:98:18: d9:75:48:d2:90:37:6b:29:66:a6:94:a8:1c:2e:f4: 20:12:27:dd:dc:70:a9:e3:56:f5:b9:c6:5d:7e:94: 78:fb:a6:ac:bc:03:88:94:8c:e0:62:25:04:13:53: 39:f3:f5:22:90:3b:7e:8b:41:f3:0a:56:a2:97:b8: 8d:a1:cf:b3:28:49:6c:c9:a2:2e:27:5d:e4:b7:36: 66:6c:94:df:67:69:d6:e2:e0:48:39:d5:d0:f8:29: 77:4e:5a:54:39:7c:67:e5:b1:f9:a2:63:e6:7d:a3: 82:59:9d:48:78:cd:9c:a9:ed:ce:14:9d:31:e6:10: 8c:f6:11:58:7e:08:a7:da:73:d6:2c:51:30:39:64: f4:6c:78:d6:9b:2f:aa:1f:98:53:eb:28:84:5f:7e: cb:b9:f7:bb:13:fc:5e:25:f5:1c:94:c9:b0:39:74: e1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6E:BA:4B:C2:21:2E:A2:9E:CD:5F:96:CD:74:FD:33:08:A9:91:18 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cG66S8IhLqKezV-WzXT9MwipkRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.21.0/24 45.9.116.0/24 45.9.122.0/24 45.94.46.0/24 45.128.76.0/24 45.154.58.0/24 93.190.244.0/24 IPv6: 2a04:9f40::/29 2a06:1184:101::/48 2a06:3bc0::/29 2a07:8a40::/29 2a09:17c1:66::/48 2a09:17c1:77::/48 2a0a:2d06:102::/47 2a0c:7886:99::/48 2a0c:7886:100::/48 2a0e:15c7:88::/48 2a0e:15c7:99::/48 2a0e:1a83:77::/48 2a0e:f603:66::/48 2a0f:140::/29 2a0f:1206:55::/48 2a0f:1206:66::/48 2a0f:2500::/29 2a0f:3d86:88::/48 2a0f:3d86:99::/48 2a0f:7d06:88::/48 2a0f:7d06:99::/48 2a0f:cc00::/29 2a0f:d200::/29 2a0f:da40::/29 2a0f:db40::/29 2a0f:dfc0::/29 2a0f:e040::/29 2a0f:e1c1:22::/48 2a0f:e202:44::/48 2a0f:e202:55::/48 2a0f:e202:100::/48 2a0f:e4c0::/29 2a0f:e6c6:100::/47 2a0f:e7c6:66::/48 2a0f:e7c6:77::/48 2a0f:e7c6:88::/48 2a0f:e844:22::/48 2a0f:e844:33::/48 2a0f:ea44:66::/48 2a0f:ea44:77::/48 2a0f:fc00::/29 2a12:ac46:77::/48 2a12:ecc0:168::/48 2a12:ecc0:178::/48 2a13:18c6:55::/48 2a13:18c6:77::/48 2a13:18c6:88::/48 2a13:7d80::/29 2a13:8c86:10a::/48 2a13:8c86:120::/48 2a13:8c86:130::/48 2a13:c900:88::/48 2a13:c900:99::/48 2a13:e107:99::/48 2a13:e107:9c::/48 Signature Algorithm: sha256WithRSAEncryption ae:8c:66:46:43:56:64:96:a7:0b:bd:a7:69:c7:89:fe:33:57: f8:35:75:90:d8:d7:00:b6:26:a6:54:e2:88:db:7b:17:28:ce: ed:0a:8d:46:e2:bc:3f:e5:c5:b0:4f:eb:72:f7:7e:e9:5f:7f: da:68:b0:46:c9:9e:ff:4c:18:31:2f:30:3c:1c:3f:94:ca:f2: e1:c4:00:2f:a9:ae:03:e6:d3:74:23:fa:7c:8c:9e:1a:ee:39: d0:6e:73:be:82:61:eb:51:7a:ab:29:2e:3b:b9:62:78:e7:5f: 63:8e:24:ba:13:40:bd:98:c3:43:16:ea:5f:f5:9b:20:56:11: 2c:c7:49:4f:68:eb:1b:a2:1e:d4:cf:85:67:ab:f6:e4:bf:e0: 04:4d:21:d5:ac:76:a1:48:11:c3:8c:f5:d3:62:7b:ca:cd:93: 27:7d:5c:43:1a:54:46:07:87:fb:01:f0:08:bc:e9:ef:e8:3f: e9:ea:e8:47:0d:d8:14:2c:02:76:33:9d:17:96:f7:b3:ad:69: d6:66:2c:fa:8a:53:63:30:93:6f:16:9e:ce:8b:5a:b5:a2:27: 12:2b:8a:03:f4:97:53:69:fd:25:28:76:5f:70:01:3a:f8:bf: e2:bb:61:e4:00:92:2e:d1:2b:b7:51:6a:6b:db:3f:51:d8:6a: a2:3d:a3:ce -----BEGIN CERTIFICATE----- MIIHBjCCBe6gAwIBAgISAZX6j0v9I7ZMb0ewfYPhyIoTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUwNDAzMDczMDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDZlYmE0YmMyMjEyZWEyOWVjZDVmOTZjZDc0ZmQzMzA4YTk5MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EKyLkjiw8XjTB5w+zH2RqENOvhh t2TlZEeCCGvpr0WuTS2T/V496GApjzt796Zh4kLxmhQ74wCIgR6Z5vmZrHYd1OyY MJjhn3aiLGB2Itq8RouW+pIMmBjZdUjSkDdrKWamlKgcLvQgEifd3HCp41b1ucZd fpR4+6asvAOIlIzgYiUEE1M58/UikDt+i0HzClail7iNoc+zKElsyaIuJ13ktzZm bJTfZ2nW4uBIOdXQ+Cl3TlpUOXxn5bH5omPmfaOCWZ1IeM2cqe3OFJ0x5hCM9hFY fgin2nPWLFEwOWT0bHjWmy+qH5hT6yiEX37Lufe7E/xeJfUclMmwOXThywIDAQAB o4IEEjCCBA4wHQYDVR0OBBYEFHBuukvCIS6ins1fls10/TMIqZEYMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvY0c2NlM4SWhMcUtlelYtV3pYVDlNd2lwa1JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICJgYIKwYBBQUHAQcBAf8EggIVMIICETAwBAIAATAqAwQA AjsVAwQALQl0AwQALQl6AwQALV4uAwQALYBMAwQALZo6AwQAXb70MIIB2wQCAAIw ggHTAwUDKgSfQAMHACoGEYQBAQMFAyoGO8ADBQMqB4pAAwcAKgkXwQBmAwcAKgkX wQB3AwcBKgotBgECAwcAKgx4hgCZAwcAKgx4hgEAAwcAKg4VxwCIAwcAKg4VxwCZ AwcAKg4agwB3AwcAKg72AwBmAwUDKg8BQAMHACoPEgYAVQMHACoPEgYAZgMFAyoP JQADBwAqDz2GAIgDBwAqDz2GAJkDBwAqD30GAIgDBwAqD30GAJkDBQMqD8wAAwUD Kg/SAAMFAyoP2kADBQMqD9tAAwUDKg/fwAMFAyoP4EADBwAqD+HBACIDBwAqD+IC AEQDBwAqD+ICAFUDBwAqD+ICAQADBQMqD+TAAwcBKg/mxgEAAwcAKg/nxgBmAwcA Kg/nxgB3AwcAKg/nxgCIAwcAKg/oRAAiAwcAKg/oRAAzAwcAKg/qRABmAwcAKg/q RAB3AwUDKg/8AAMHACoSrEYAdwMHACoS7MABaAMHACoS7MABeAMHACoTGMYAVQMH ACoTGMYAdwMHACoTGMYAiAMFAyoTfYADBwAqE4yGAQoDBwAqE4yGASADBwAqE4yG ATADBwAqE8kAAIgDBwAqE8kAAJkDBwAqE+EHAJkDBwAqE+EHAJwwDQYJKoZIhvcN AQELBQADggEBAK6MZkZDVmSWpwu9p2nHif4zV/g1dZDY1wC2JqZU4ojbexcozu0K jUbivD/lxbBP63L3fulff9posEbJnv9MGDEvMDwcP5TK8uHEAC+prgPm03Qj+nyM nhruOdBuc76CYetReqspLju5YnjnX2OOJLoTQL2Yw0MW6l/1myBWESzHSU9o6xui HtTPhWer9uS/4ARNIdWsdqFIEcOM9dNie8rNkyd9XEMaVEYHh/sB8Ai86e/oP+nq 6EcN2BQsAnYznReW97OtadZmLPqKU2Mwk28Wns6LWrWiJxIrigP0l1Np/SUodl9w ATr4v+K7YeQAki7RK7dRamvbP1HYaqI9o84= -----END CERTIFICATE-----Generated at Sat Dec 20 21:30:54 2025 by rpki-client