This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/Q5Ac6EVAa831zWkXWQpZh5F8YZM.roa File: Q5Ac6EVAa831zWkXWQpZh5F8YZM.roa (raw, json) Hash identifier: v+96rg711l5Vp5ca/22kJludM0yXrM5BIpwH7KI4lJs= Subject key identifier: 43:90:1C:E8:45:40:6B:CD:F5:CD:69:17:59:0A:59:87:91:7C:61:93 Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25 Certificate serial: 019292C7100636715E4445C574A182616454 Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/Q5Ac6EVAa831zWkXWQpZh5F8YZM.roa Signing time: Wed 16 Oct 2024 00:42:52 +0000 ROA not before: Wed 16 Oct 2024 00:42:52 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 58280 IP address blocks: 45.129.224.0/22 maxlen: 22 45.129.224.0/23 maxlen: 23 2a0e:5040::/29 maxlen: 29 2a0f:fd03::/32 maxlen: 32 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:92:92:c7:10:06:36:71:5e:44:45:c5:74:a1:82:61:64:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25 Validity Not Before: Oct 16 00:42:52 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=43901ce845406bcdf5cd6917590a5987917c6193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b9:72:9c:d0:5c:29:92:f2:cd:54:50:f1:d5: 20:3d:de:ad:c9:50:5a:8e:e6:67:d0:a5:c1:e3:4c: 7a:0f:a9:34:f7:e4:6e:7e:e0:b2:2e:ca:b4:88:98: 3f:6a:f9:90:39:06:1d:c8:7c:81:b5:17:85:f9:38: 90:4a:ea:15:bd:9d:2c:4c:bd:a5:a6:e3:70:ce:3f: 55:72:37:a4:17:3c:f8:e9:b7:a6:d8:94:38:d8:f9: 3a:aa:fe:52:06:e3:03:91:bb:8e:65:2b:a9:ed:75: 8a:9c:f8:2f:67:f7:9d:58:0f:37:90:7d:0d:37:b6: 1e:25:c4:03:f6:0a:08:33:16:bc:58:28:70:ec:eb: 11:15:f9:b2:02:e4:cd:e0:ee:75:ab:ee:c6:7c:7e: ef:bc:fe:5e:49:2c:f4:07:77:35:e7:b1:7a:64:58: 4c:27:da:6b:08:95:10:63:65:03:0c:4f:08:6f:0a: ff:dd:4a:59:08:cb:7c:d6:00:73:ff:f0:4b:7e:30: 2b:67:fe:f2:d4:ff:8e:6b:3b:5a:d5:e0:17:9b:39: 1e:18:52:73:67:93:fb:79:f8:03:0b:a4:98:04:31: aa:eb:a1:05:a4:94:5e:d8:c0:7e:8f:4e:05:7d:3c: 37:de:82:04:7e:31:29:78:90:fa:bc:28:57:a2:52: e6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:90:1C:E8:45:40:6B:CD:F5:CD:69:17:59:0A:59:87:91:7C:61:93 X509v3 Authority Key Identifier: keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/Q5Ac6EVAa831zWkXWQpZh5F8YZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.224.0/22 IPv6: 2a0e:5040::/29 2a0f:fd03::/32 Signature Algorithm: sha256WithRSAEncryption 2d:3f:a6:5c:97:42:15:40:1b:bd:a3:59:8b:d8:04:23:87:1f: 61:20:32:98:8c:39:a9:4c:77:b6:1c:20:86:71:3d:5f:af:2f: 7b:82:2a:60:98:48:23:3f:a9:0e:85:27:fc:50:2f:d5:7d:64: 46:24:ed:8b:eb:86:17:9f:44:39:25:b1:a2:b3:55:70:ea:f7: 88:62:ba:79:26:40:d6:58:a4:dc:9e:69:da:ee:31:12:93:b0: f9:10:28:61:8e:ca:59:97:a6:8b:80:1d:d5:bd:95:8b:da:a4: af:dd:16:82:62:28:51:6a:53:a1:53:ed:5a:bb:80:dc:ff:42: f9:94:6a:98:2b:52:2f:b7:02:f2:a7:4d:54:2f:e5:92:68:71: b7:83:d8:c1:85:f2:de:f7:85:2c:90:e2:47:b4:85:50:c6:23: aa:06:a8:7f:ad:5c:3a:a6:82:72:8e:e7:c7:3c:4e:cb:cf:42: 5c:41:ba:59:15:e6:33:e8:77:8d:69:3f:2c:02:83:c3:e5:0b: b1:78:58:63:a2:3f:65:7b:a5:90:0a:cb:1b:50:55:1d:2e:d7: 0b:0d:22:a6:fe:28:f2:6d:ef:5e:7d:71:73:18:87:b2:06:48: 30:9e:3f:d9:46:7d:31:a4:8b:99:e6:4b:bc:e0:c1:35:95:b1: 6b:d4:6d:b4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZKSxxAGNnFeREXFdKGCYWRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYxZTNiODA1NTFlOThhMTZmYzJiYmNiN2RkODdjOWEw ZWZlMjUwHhcNMjQxMDE2MDA0MjUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzkwMWNlODQ1NDA2YmNkZjVjZDY5MTc1OTBhNTk4NzkxN2M2MTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7lynNBcKZLyzVRQ8dUgPd6tyVBa juZn0KXB40x6D6k09+RufuCyLsq0iJg/avmQOQYdyHyBtReF+TiQSuoVvZ0sTL2l puNwzj9VcjekFzz46bem2JQ42Pk6qv5SBuMDkbuOZSup7XWKnPgvZ/edWA83kH0N N7YeJcQD9goIMxa8WChw7OsRFfmyAuTN4O51q+7GfH7vvP5eSSz0B3c157F6ZFhM J9prCJUQY2UDDE8Ibwr/3UpZCMt81gBz//BLfjArZ/7y1P+Oazta1eAXmzkeGFJz Z5P7efgDC6SYBDGq66EFpJRe2MB+j04FfTw33oIEfjEpeJD6vChXolLm5QIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFEOQHOhFQGvN9c1pF1kKWYeRfGGTMB8GA1UdIwQY MBaAFDWfHjuAVR6YoW/Cu8t92HyaDv4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEt M2YzYTAyNzQ4YzJhLzEvUTVBYzZFVkFhODMxeldrWFdRcFpoNUY4WVpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEtM2YzYTAyNzQ4YzJh LzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQCLYHgMBQE AgACMA4DBQMqDlBAAwUAKg/9AzANBgkqhkiG9w0BAQsFAAOCAQEALT+mXJdCFUAb vaNZi9gEI4cfYSAymIw5qUx3thwghnE9X68ve4IqYJhIIz+pDoUn/FAv1X1kRiTt i+uGF59EOSWxorNVcOr3iGK6eSZA1lik3J5p2u4xEpOw+RAoYY7KWZemi4Ad1b2V i9qkr90WgmIoUWpToVPtWruA3P9C+ZRqmCtSL7cC8qdNVC/lkmhxt4PYwYXy3veF LJDiR7SFUMYjqgaof61cOqaCco7nxzxOy89CXEG6WRXmM+h3jWk/LAKDw+ULsXhY Y6I/ZXulkArLG1BVHS7XCw0ipv4o8m3vXn1xcxiHsgZIMJ4/2UZ9MaSLmeZLvODB NZWxa9RttA== -----END CERTIFICATE-----Generated at Sun Dec 28 22:13:11 2025 by rpki-client