This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/AWNB5zBgI-e98F5-_HmYlmMwY7k.roa
File: AWNB5zBgI-e98F5-_HmYlmMwY7k.roa (raw, json)
Hash identifier: oQXFEVab4Ic9VOB0h0mzPvZYdqB5ZU6kfunBHGZ+AWA=
Subject key identifier: 01:63:41:E7:30:60:23:E7:BD:F0:5E:7E:FC:79:98:96:63:30:63:B9
Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial: 018A7F2603B5A13D91C2A7610030D912B397
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/AWNB5zBgI-e98F5-_HmYlmMwY7k.roa
Signing time: Sun 10 Sep 2023 12:51:52 +0000
ROA not before: Sun 10 Sep 2023 12:51:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39370
IP address blocks: 89.147.3.0/24 maxlen: 24
89.147.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7f:26:03:b5:a1:3d:91:c2:a7:61:00:30:d9:12:b3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Validity
Not Before: Sep 10 12:51:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=016341e7306023e7bdf05e7efc799896633063b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3a:13:db:d7:1b:da:c4:2d:fc:16:c0:f6:73:
bd:e6:65:9e:03:b3:ea:cc:dd:6d:45:b8:75:1f:de:
9b:5c:87:99:3d:9f:90:ea:b0:79:05:e9:55:fe:f1:
0c:7e:cd:1f:0d:b7:5e:f2:46:8b:40:36:10:df:c1:
0b:87:47:6c:1d:50:09:88:22:38:f6:a0:ad:13:bc:
62:60:f7:b9:4e:8b:47:cb:71:73:65:8b:5c:a5:9a:
cf:37:04:25:e8:5a:e8:2f:60:86:6b:25:42:e6:1a:
f4:dc:5f:42:c6:e2:3b:93:62:7e:66:aa:85:8c:f1:
d9:3e:b6:09:41:a1:7f:7d:e6:d2:82:6f:57:61:12:
ff:af:53:a3:3f:68:f0:b7:90:94:90:f5:c2:2f:3b:
94:80:a5:48:73:fe:97:fb:ff:75:3f:6a:92:84:b5:
f2:5c:fc:d6:06:e5:37:4d:67:ce:7e:83:cc:b3:b5:
7e:63:fd:49:5a:88:fb:01:ff:25:37:59:4c:9b:ab:
b8:0c:60:07:cb:a1:28:d7:1a:65:7f:51:18:6f:65:
f6:33:da:8e:3e:89:90:77:8b:a9:25:35:07:73:22:
55:c5:88:c3:a9:10:1e:0f:06:03:95:30:db:7a:9c:
8b:6e:8b:6f:24:9e:c2:68:8d:6e:70:c6:63:f9:ab:
62:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:41:E7:30:60:23:E7:BD:F0:5E:7E:FC:79:98:96:63:30:63:B9
X509v3 Authority Key Identifier:
keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/AWNB5zBgI-e98F5-_HmYlmMwY7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.3.0-89.147.4.255
Signature Algorithm: sha256WithRSAEncryption
2d:3f:5f:05:3c:dd:6a:5e:f0:96:90:f7:c2:c6:15:aa:35:01:
17:e2:67:80:51:43:91:25:19:ce:ec:a1:11:3d:9f:07:1f:5e:
f9:14:0d:1a:59:12:3a:5a:c8:21:53:f7:b7:dc:8f:51:1e:f1:
eb:31:e1:20:ce:32:f4:11:22:69:37:59:6a:72:28:93:e3:db:
f5:5a:08:43:43:93:6d:71:2d:73:f6:7d:f0:f2:e2:80:5e:1b:
26:ec:92:29:a5:4b:79:4d:9f:4a:9e:5b:70:e2:ce:0e:03:5d:
e8:c8:ca:1c:67:e8:7c:16:5c:bd:0e:15:0a:43:e5:36:ea:d9:
4d:60:82:bf:c2:e6:ab:57:84:f3:fe:9c:26:c5:bb:c6:53:9d:
46:21:f9:55:e4:39:dd:08:a6:d9:8e:19:07:48:69:8d:71:e2:
bd:bc:17:ca:c2:93:ac:37:a0:a5:33:f2:b6:0a:ac:ed:87:cc:
a6:93:04:b1:11:d4:4a:84:02:28:6d:3a:68:6d:a5:0b:7b:58:
bf:95:a1:92:0a:8f:e4:39:af:b7:ac:5b:e5:33:ed:36:55:d2:
16:6d:7c:87:6c:27:74:b2:6d:e5:88:6b:d1:29:7e:7d:35:af:
78:4e:97:b3:58:5c:9e:9b:bd:80:d9:ba:96:73:1c:dc:a8:aa:
8d:1d:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 08:45:35 2025 by rpki-client