This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/xOjfmjqFn5NTsDKu447QJCc6wUU.roa File: xOjfmjqFn5NTsDKu447QJCc6wUU.roa (raw, json) Hash identifier: IddvoIPTkCgX+jwQztXiulgUp5nrBvKZVZOalVREL9w= Subject key identifier: C4:E8:DF:9A:3A:85:9F:93:53:B0:32:AE:E3:8E:D0:24:27:3A:C1:45 Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25 Certificate serial: 0192982544777BAF8DC8B02E722CA1210474 Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/xOjfmjqFn5NTsDKu447QJCc6wUU.roa Signing time: Thu 17 Oct 2024 01:43:52 +0000 ROA not before: Thu 17 Oct 2024 01:43:52 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 58280 IP address blocks: 45.129.224.0/22 maxlen: 22 45.129.224.0/23 maxlen: 23 2a0e:5040::/29 maxlen: 29 2a0f:fd03::/32 maxlen: 32 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:92:98:25:44:77:7b:af:8d:c8:b0:2e:72:2c:a1:21:04:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25 Validity Not Before: Oct 17 01:43:52 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=c4e8df9a3a859f9353b032aee38ed024273ac145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:37:05:85:50:50:a0:d2:52:d2:b6:77:d9: a0:d1:46:7a:7a:3a:36:63:6f:83:05:ed:c3:c5:94: d0:40:48:5a:47:00:e2:d4:93:4f:32:94:c5:9b:52: 72:6d:7a:18:16:ab:f0:36:1a:28:14:c4:1a:18:99: 4a:6d:ec:cd:76:02:5d:c0:60:44:ba:35:4c:dc:7d: 65:6b:40:4d:a6:62:66:89:08:92:48:2d:f9:d1:b6: e6:65:86:dc:ae:4f:c2:ce:5b:e6:01:51:4f:31:7a: 24:19:ea:0c:01:81:94:b7:40:4b:56:de:93:e8:bd: cb:05:f5:fe:99:65:fa:c0:ec:e6:83:ac:00:9e:a1: 9f:be:d8:17:6a:b6:13:a4:78:1d:63:05:34:ca:9e: bb:79:68:a1:c4:6a:5e:b1:1e:45:75:dc:bd:5a:2d: c4:d9:2f:02:9d:7e:e7:bf:7a:2c:65:af:10:15:44: 0e:dd:87:cc:ec:01:5a:14:ef:e8:e7:fb:8b:c9:81: 30:a8:85:95:d7:15:84:ca:57:5a:9c:56:d5:99:e1: ff:86:ca:70:07:e2:d9:a3:a9:7b:be:33:c0:c4:8f: b7:7a:e5:9f:33:05:80:f6:67:64:65:45:ef:dc:f5: 77:ea:d7:79:69:6a:fe:88:be:62:cd:06:9a:2c:b1: e5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E8:DF:9A:3A:85:9F:93:53:B0:32:AE:E3:8E:D0:24:27:3A:C1:45 X509v3 Authority Key Identifier: keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/xOjfmjqFn5NTsDKu447QJCc6wUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.224.0/22 IPv6: 2a0e:5040::/29 2a0f:fd03::/32 Signature Algorithm: sha256WithRSAEncryption 1d:56:b1:83:1a:4d:09:e9:95:cc:88:ad:6a:5f:82:3d:50:9f: fd:91:2e:f4:b2:2f:2c:0a:27:ab:3f:b0:a6:a9:f7:4f:69:b1: dd:33:f4:a4:2d:57:ca:e1:85:ef:70:da:0c:9c:2c:4d:cf:e8: 83:d0:6e:d4:bf:fa:2a:9b:67:01:75:58:07:5a:b5:f5:4d:22: 4e:87:aa:2e:b0:9e:9d:f9:0e:75:6b:db:92:b0:57:43:b0:9f: a8:00:63:b3:7b:8b:f8:d1:5b:ec:26:eb:7f:87:e2:77:0b:74: 2e:03:86:01:81:b4:ab:28:6f:a1:0e:0a:4b:73:f0:7f:ec:4c: 73:cd:1e:99:3f:b7:33:cb:34:9f:6c:f4:71:df:72:1d:2d:18: a8:35:a6:09:e0:cc:12:a7:45:3e:9b:5e:a8:8b:f7:74:11:20: cd:72:49:e9:3d:80:c5:e7:66:79:29:d5:75:1b:de:21:b2:bf: 36:d2:a9:85:9f:c2:00:6d:1d:bc:28:30:08:ed:f2:3f:8e:d7: f2:a5:2c:03:35:24:11:1e:fe:3e:21:24:24:d2:08:80:57:3f: 05:11:34:46:d8:1c:52:30:3e:2f:9a:fc:33:cc:f6:33:db:6b: 10:76:87:c5:ed:fe:e7:53:3d:6a:9e:ba:09:2b:25:5e:5a:d3: fd:46:93:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZKYJUR3e6+NyLAuciyhIQR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OWYxZTNiODA1NTFlOThhMTZmYzJiYmNiN2RkODdjOWEw ZWZlMjUwHhcNMjQxMDE3MDE0MzUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGU4ZGY5YTNhODU5ZjkzNTNiMDMyYWVlMzhlZDAyNDI3M2FjMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrw3BYVQUKDSUtK2d9mg0UZ6ejo2 Y2+DBe3DxZTQQEhaRwDi1JNPMpTFm1JybXoYFqvwNhooFMQaGJlKbezNdgJdwGBE ujVM3H1la0BNpmJmiQiSSC350bbmZYbcrk/CzlvmAVFPMXokGeoMAYGUt0BLVt6T 6L3LBfX+mWX6wOzmg6wAnqGfvtgXarYTpHgdYwU0yp67eWihxGpesR5Fddy9Wi3E 2S8CnX7nv3osZa8QFUQO3YfM7AFaFO/o5/uLyYEwqIWV1xWEyldanFbVmeH/hspw B+LZo6l7vjPAxI+3euWfMwWA9mdkZUXv3PV36td5aWr+iL5izQaaLLHlZwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFMTo35o6hZ+TU7AyruOO0CQnOsFFMB8GA1UdIwQY MBaAFDWfHjuAVR6YoW/Cu8t92HyaDv4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEt M2YzYTAyNzQ4YzJhLzEveE9qZm1qcUZuNU5Uc0RLdTQ0N1FKQ2M2d1VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS84OWZkNDMtNTRmMC00YTE1LWIyYjEtM2YzYTAyNzQ4YzJh LzEvTlo4ZU80QlZIcGloYjhLN3kzM1lmSm9PX2lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQCLYHgMBQE AgACMA4DBQMqDlBAAwUAKg/9AzANBgkqhkiG9w0BAQsFAAOCAQEAHVaxgxpNCemV zIital+CPVCf/ZEu9LIvLAonqz+wpqn3T2mx3TP0pC1XyuGF73DaDJwsTc/og9Bu 1L/6KptnAXVYB1q19U0iToeqLrCenfkOdWvbkrBXQ7CfqABjs3uL+NFb7Cbrf4fi dwt0LgOGAYG0qyhvoQ4KS3Pwf+xMc80emT+3M8s0n2z0cd9yHS0YqDWmCeDMEqdF PpteqIv3dBEgzXJJ6T2AxedmeSnVdRveIbK/NtKphZ/CAG0dvCgwCO3yP47X8qUs AzUkER7+PiEkJNIIgFc/BRE0RtgcUjA+L5r8M8z2M9trEHaHxe3+51M9ap66CSsl XlrT/UaTcw== -----END CERTIFICATE-----Generated at Tue Dec 30 08:52:41 2025 by rpki-client