This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lRi0i47tRi6CW-45K_loMdh5O38.roa File: lRi0i47tRi6CW-45K_loMdh5O38.roa (raw, json) Hash identifier: VPbGajrekaHM/MlvF6VLl2jqrI7wgkNKb/t4f2Ga5h4= Subject key identifier: 95:18:B4:8B:8E:ED:46:2E:82:5B:EE:39:2B:F9:68:31:D8:79:3B:7F Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 0190A1165A3CFFE8A7FFC376D936688023A7 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lRi0i47tRi6CW-45K_loMdh5O38.roa Signing time: Thu 11 Jul 2024 09:18:34 +0000 ROA not before: Thu 11 Jul 2024 09:18:34 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 834 IP address blocks: 45.8.21.0/24 maxlen: 24 185.126.82.0/24 maxlen: 24 185.220.250.0/23 maxlen: 24 185.225.0.0/23 maxlen: 23 185.226.104.0/24 maxlen: 24 185.227.146.0/23 maxlen: 24 185.227.147.0/24 maxlen: 24 185.251.230.0/24 maxlen: 24 193.8.112.0/23 maxlen: 24 193.58.146.0/23 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:a1:16:5a:3c:ff:e8:a7:ff:c3:76:d9:36:68:80:23:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jul 11 09:18:34 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=9518b48b8eed462e825bee392bf96831d8793b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:4d:0c:ac:ca:3f:ce:69:3e:fa:f8:4d:b3: bc:8c:a2:7f:f8:ae:44:aa:3a:f6:aa:98:f4:d0:86: 0b:01:77:3c:13:18:6c:42:cb:5e:22:c3:3b:0f:d2: 0c:14:7a:15:45:87:d7:39:f0:e0:a6:84:d4:6b:fa: 8f:12:95:da:8f:72:02:b3:c6:fe:dc:db:9e:bf:b8: 69:dd:da:e0:c6:08:2f:30:65:2b:22:9e:f9:c3:d2: 37:6b:72:96:fc:a5:33:1c:ea:76:1b:04:a8:66:c0: 6e:bb:c4:e4:85:ea:9b:ef:c4:72:90:66:97:e8:ff: ba:7c:ff:b7:88:00:76:48:2d:bf:b0:0f:6c:e1:12: f5:0a:20:d7:1c:49:83:10:23:12:72:21:53:56:7f: 2c:52:b7:be:75:97:4a:33:be:35:c4:2b:ef:4a:dc: ee:be:5c:be:a9:b6:b9:53:70:81:65:0e:12:ee:15: dd:57:8a:3c:3a:7d:0a:ae:2b:1a:30:49:a9:78:9c: df:ff:a0:7e:c9:8f:5b:da:06:ba:36:0f:85:95:c2: 11:56:32:91:ab:e8:e3:9e:f2:a1:a5:66:f1:aa:ba: 74:8f:4c:75:2d:6e:78:9e:a8:66:6b:96:4f:e7:75: a9:a0:09:2b:df:b7:eb:99:b6:96:8c:76:8d:89:c7: a3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:18:B4:8B:8E:ED:46:2E:82:5B:EE:39:2B:F9:68:31:D8:79:3B:7F X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/lRi0i47tRi6CW-45K_loMdh5O38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.21.0/24 185.126.82.0/24 185.220.250.0/23 185.225.0.0/23 185.226.104.0/24 185.227.146.0/23 185.251.230.0/24 193.8.112.0/23 193.58.146.0/23 Signature Algorithm: sha256WithRSAEncryption 11:27:de:b8:14:4a:39:09:a6:b3:31:47:25:c7:44:76:36:23: 5a:46:66:28:da:0e:a8:66:34:f0:61:7f:2d:df:4d:8c:be:c2: 2b:fe:0c:de:7f:38:3f:b8:34:5a:a4:bc:29:85:d5:10:57:80: dd:41:e4:84:54:93:8f:f8:35:25:0f:e0:c0:2e:5d:f8:3d:ad: 20:4a:23:a2:28:01:31:c8:c9:68:92:d2:a9:38:0a:e6:3c:fb: f9:5d:3b:c1:bc:ac:04:f9:bb:84:a5:1a:9c:b4:51:68:33:6f: bf:35:49:1a:e4:55:03:87:6b:6d:b7:be:f6:05:eb:1e:ab:fc: 58:0e:05:15:d2:df:b8:1d:0c:5b:fd:e0:b2:61:5b:e0:78:69: df:4c:56:bf:9f:b2:26:ac:f6:a2:6c:e1:87:e3:b5:e5:1c:9e: 24:17:94:f1:c9:7a:8f:3e:b3:c5:b4:50:55:1d:b1:e0:7e:59: f4:18:91:e7:4b:9c:0b:8d:f1:69:2b:31:26:cf:1d:c3:ff:51: e4:54:d9:8a:4f:90:d1:5b:4e:65:f8:44:44:d3:45:26:3f:f4: 5c:fd:02:2c:e7:97:1a:cf:b6:60:03:63:da:1a:3b:dc:5a:44: 87:5e:34:3e:9d:3a:a6:69:49:0e:31:69:10:c3:f0:d2:97:c7: fe:b2:8a:1b -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZChFlo8/+in/8N22TZogCOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjQwNzExMDkxODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTE4YjQ4YjhlZWQ0NjJlODI1YmVlMzkyYmY5NjgzMWQ4NzkzYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiBNDKzKP85pPvr4TbO8jKJ/+K5E qjr2qpj00IYLAXc8ExhsQsteIsM7D9IMFHoVRYfXOfDgpoTUa/qPEpXaj3ICs8b+ 3Nuev7hp3drgxggvMGUrIp75w9I3a3KW/KUzHOp2GwSoZsBuu8Tkheqb78RykGaX 6P+6fP+3iAB2SC2/sA9s4RL1CiDXHEmDECMSciFTVn8sUre+dZdKM741xCvvStzu vly+qba5U3CBZQ4S7hXdV4o8On0KrisaMEmpeJzf/6B+yY9b2ga6Ng+FlcIRVjKR q+jjnvKhpWbxqrp0j0x1LW54nqhma5ZP53WpoAkr37frmbaWjHaNicejUQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFJUYtIuO7UYuglvuOSv5aDHYeTt/MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvbFJpMGk0N3RSaTZDVy00NUtfbG9NZGg1TzM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALQgVAwQA uX5SAwQBudz6AwQBueEAAwQAueJoAwQBueOSAwQAufvmAwQBwQhwAwQBwTqSMA0G CSqGSIb3DQEBCwUAA4IBAQARJ964FEo5CaazMUclx0R2NiNaRmYo2g6oZjTwYX8t 302MvsIr/gzefzg/uDRapLwphdUQV4DdQeSEVJOP+DUlD+DALl34Pa0gSiOiKAEx yMloktKpOArmPPv5XTvBvKwE+buEpRqctFFoM2+/NUka5FUDh2ttt772Beseq/xY DgUV0t+4HQxb/eCyYVvgeGnfTFa/n7ImrPaibOGH47XlHJ4kF5TxyXqPPrPFtFBV HbHgfln0GJHnS5wLjfFpKzEmzx3D/1HkVNmKT5DRW05l+ERE00UmP/Rc/QIs55ca z7ZgA2PaGjvcWkSHXjQ+nTqmaUkOMWkQw/DSl8f+soob -----END CERTIFICATE-----Generated at Wed Dec 24 10:04:28 2025 by rpki-client