This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/m4W5j8eEe3k5ryWkqeAvGs6EiSY.roa File: m4W5j8eEe3k5ryWkqeAvGs6EiSY.roa (raw, json) Hash identifier: TF91eYpKuNWMhnD2DNpzR9vD2aR+ppR9cIUIozURXqE= Subject key identifier: 9B:85:B9:8F:C7:84:7B:79:39:AF:25:A4:A9:E0:2F:1A:CE:84:89:26 Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Certificate serial: 0197534BFC292D0C58545584F9422A899702 Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/m4W5j8eEe3k5ryWkqeAvGs6EiSY.roa Signing time: Mon 09 Jun 2025 06:06:18 +0000 ROA not before: Mon 09 Jun 2025 06:06:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12430 IP address blocks: 2.152.0.0/14 maxlen: 17 2.152.0.0/16 maxlen: 16 2.154.0.0/15 maxlen: 16 2.154.0.0/16 maxlen: 16 2.154.192.0/18 maxlen: 18 5.40.0.0/16 maxlen: 16 62.42.0.0/15 maxlen: 16 62.57.0.0/16 maxlen: 16 62.81.0.0/16 maxlen: 24 62.82.0.0/15 maxlen: 16 62.100.96.0/19 maxlen: 19 62.101.160.0/19 maxlen: 19 62.117.128.0/17 maxlen: 17 62.174.0.0/15 maxlen: 19 80.174.0.0/16 maxlen: 17 80.224.0.0/16 maxlen: 16 81.60.0.0/15 maxlen: 18 81.172.0.0/17 maxlen: 17 81.184.0.0/16 maxlen: 16 81.202.0.0/15 maxlen: 15 81.202.0.0/16 maxlen: 16 82.158.0.0/15 maxlen: 16 82.159.0.0/16 maxlen: 16 82.213.128.0/18 maxlen: 18 83.138.192.0/18 maxlen: 18 83.173.128.0/18 maxlen: 18 84.120.0.0/13 maxlen: 19 84.127.229.0/24 maxlen: 24 85.219.0.0/17 maxlen: 17 85.251.0.0/16 maxlen: 17 89.140.0.0/16 maxlen: 16 89.141.0.0/16 maxlen: 16 95.39.0.0/16 maxlen: 19 185.128.128.0/22 maxlen: 24 194.106.0.0/19 maxlen: 19 194.140.128.0/18 maxlen: 18 194.149.192.0/19 maxlen: 19 212.21.224.0/19 maxlen: 19 212.22.32.0/19 maxlen: 20 212.40.224.0/19 maxlen: 19 212.40.224.0/24 maxlen: 24 212.78.128.0/19 maxlen: 19 212.79.128.0/19 maxlen: 19 212.95.192.0/19 maxlen: 19 212.97.160.0/19 maxlen: 19 212.122.96.0/19 maxlen: 19 212.183.192.0/18 maxlen: 18 213.37.0.0/16 maxlen: 16 213.201.0.0/17 maxlen: 17 213.227.0.0/18 maxlen: 18 213.231.64.0/18 maxlen: 18 213.254.64.0/18 maxlen: 18 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:53:4b:fc:29:2d:0c:58:54:55:84:f9:42:2a:89:97:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Validity Not Before: Jun 9 06:06:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9b85b98fc7847b7939af25a4a9e02f1ace848926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7a:0d:82:7f:90:a1:8f:4f:ad:15:59:85:fa: 7e:c2:c3:86:65:55:af:54:ef:cb:83:d8:c8:c5:91: 1f:08:f4:46:a1:fb:a3:87:dc:6a:78:ac:32:e5:87: a5:66:67:28:e8:31:7a:45:61:96:eb:e3:1b:64:5f: a8:99:38:9a:f7:84:af:04:49:69:21:5c:57:f2:b5: 33:1c:44:bc:60:0f:d4:67:30:31:d9:bd:c8:d8:46: 80:4d:d7:c3:73:89:cf:7b:52:b0:56:87:6f:83:db: 12:b0:7d:3d:ed:2f:54:19:45:77:dc:ea:c6:9e:da: 92:a0:d7:f8:f6:45:60:fa:07:6d:9c:23:02:c6:91: 26:23:3a:51:1c:3a:80:37:eb:00:10:b7:6e:ef:59: b2:9f:b6:c3:83:81:30:09:ca:24:b3:ed:b2:96:91: cc:e4:37:d4:10:92:ba:69:9b:39:84:53:16:64:89: a3:32:cc:ac:75:14:bd:a4:5f:fe:96:ba:e8:8d:bf: 1d:c4:08:ca:17:5f:4e:81:3c:7f:eb:88:c5:bf:7b: bf:47:ae:c9:85:b1:dd:24:e3:65:59:68:fe:29:5c: 18:6c:5b:24:50:f2:0f:e7:c6:f3:58:fe:dd:09:5d: 50:ce:3e:32:57:69:8f:11:cc:96:39:e7:dc:de:25: 3f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:85:B9:8F:C7:84:7B:79:39:AF:25:A4:A9:E0:2F:1A:CE:84:89:26 X509v3 Authority Key Identifier: keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/m4W5j8eEe3k5ryWkqeAvGs6EiSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.152.0.0/14 5.40.0.0/16 62.42.0.0/15 62.57.0.0/16 62.81.0.0-62.83.255.255 62.100.96.0/19 62.101.160.0/19 62.117.128.0/17 62.174.0.0/15 80.174.0.0/16 80.224.0.0/16 81.60.0.0/15 81.172.0.0/17 81.184.0.0/16 81.202.0.0/15 82.158.0.0/15 82.213.128.0/18 83.138.192.0/18 83.173.128.0/18 84.120.0.0/13 85.219.0.0/17 85.251.0.0/16 89.140.0.0/15 95.39.0.0/16 185.128.128.0/22 194.106.0.0/19 194.140.128.0/18 194.149.192.0/19 212.21.224.0/19 212.22.32.0/19 212.40.224.0/19 212.78.128.0/19 212.79.128.0/19 212.95.192.0/19 212.97.160.0/19 212.122.96.0/19 212.183.192.0/18 213.37.0.0/16 213.201.0.0/17 213.227.0.0/18 213.231.64.0/18 213.254.64.0/18 Signature Algorithm: sha256WithRSAEncryption 7e:a0:cc:8e:8d:93:55:5f:79:01:37:7f:8e:f8:eb:89:c8:aa: 1c:d4:9c:2b:c3:5c:ce:8f:97:cf:2f:55:09:53:a5:b6:6f:19: 4b:b1:ea:a2:a2:b0:e0:0a:b5:53:36:16:36:a6:b6:a4:49:1b: 14:59:96:79:16:ae:9e:33:38:c4:e7:ab:ad:6f:71:be:07:e1: 6c:98:9b:49:8d:79:f6:0f:1e:30:c2:e4:2f:e6:b9:34:20:16: 95:9d:6a:55:0a:57:e8:a4:90:7a:b9:73:62:54:f9:49:96:7a: fc:c1:5c:d8:6b:aa:85:5c:ac:96:ac:ab:2c:89:e4:bd:6d:90: 85:82:30:19:a4:2d:1f:b0:3f:4e:59:84:c1:7c:5d:13:de:66: ce:25:40:fc:46:bf:14:49:30:d9:3e:ea:98:f8:14:1c:6c:39: 2c:83:73:da:a4:38:21:4d:29:40:d6:9c:be:e5:cc:8f:f5:1d: 9a:be:66:fb:21:65:dd:5e:76:bd:81:91:2f:24:ef:d3:8c:d8: 1f:42:a9:fa:cc:a1:8f:06:a7:a7:70:16:ac:51:cd:19:cb:62: db:6f:60:70:3b:49:3c:28:64:7b:8c:81:87:ef:bf:73:e9:5d: 40:78:e6:5f:3e:e9:ed:c2:18:9b:57:39:cb:38:aa:41:90:5c: ca:02:81:b7 -----BEGIN CERTIFICATE----- MIIF7zCCBNegAwIBAgISAZdTS/wpLQxYVFWE+UIqiZcCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw ZDdiNmIwHhcNMjUwNjA5MDYwNjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjg1Yjk4ZmM3ODQ3Yjc5MzlhZjI1YTRhOWUwMmYxYWNlODQ4OTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3oNgn+QoY9PrRVZhfp+wsOGZVWv VO/Lg9jIxZEfCPRGofujh9xqeKwy5YelZmco6DF6RWGW6+MbZF+omTia94SvBElp IVxX8rUzHES8YA/UZzAx2b3I2EaATdfDc4nPe1KwVodvg9sSsH097S9UGUV33OrG ntqSoNf49kVg+gdtnCMCxpEmIzpRHDqAN+sAELdu71myn7bDg4EwCcoks+2ylpHM 5DfUEJK6aZs5hFMWZImjMsysdRS9pF/+lrrojb8dxAjKF19OgTx/64jFv3u/R67J hbHdJONlWWj+KVwYbFskUPIP58bzWP7dCV1Qzj4yV2mPEcyWOefc3iU/pwIDAQAB o4IC+zCCAvcwHQYDVR0OBBYEFJuFuY/HhHt5Oa8lpKngLxrOhIkmMB8GA1UdIwQY MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut NTcxMmQ5NWFlNjM4LzEvbTRXNWo4ZUVlM2s1cnlXa3FlQXZHczZFaVNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4 LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBDwYIKwYBBQUHAQcBAf8Egf8wgfwwgfkEAgABMIHyAwMC ApgDAwAFKAMDAT4qAwMAPjkwCgMDAD5RAwMCPlADBAU+ZGADBAU+ZaADBAc+dYAD AwE+rgMDAFCuAwMAUOADAwFRPAMEB1GsAAMDAFG4AwMBUcoDAwFSngMEBlLVgAME BlOKwAMEBlOtgAMDA1R4AwQHVdsAAwMAVfsDAwFZjAMDAF8nAwQCuYCAAwQFwmoA AwQGwoyAAwQFwpXAAwQF1BXgAwQF1BYgAwQF1CjgAwQF1E6AAwQF1E+AAwQF1F/A AwQF1GGgAwQF1HpgAwQG1LfAAwMA1SUDBAfVyQADBAbV4wADBAbV50ADBAbV/kAw DQYJKoZIhvcNAQELBQADggEBAH6gzI6Nk1VfeQE3f47464nIqhzUnCvDXM6Pl88v VQlTpbZvGUux6qKisOAKtVM2FjamtqRJGxRZlnkWrp4zOMTnq61vcb4H4WyYm0mN efYPHjDC5C/muTQgFpWdalUKV+ikkHq5c2JU+UmWevzBXNhrqoVcrJasqyyJ5L1t kIWCMBmkLR+wP05ZhMF8XRPeZs4lQPxGvxRJMNk+6pj4FBxsOSyDc9qkOCFNKUDW nL7lzI/1HZq+ZvshZd1edr2BkS8k79OM2B9CqfrMoY8Gp6dwFqxRzRnLYttvYHA7 STwoZHuMgYfvv3PpXUB45l8+6e3CGJtXOcs4qkGQXMoCgbc= -----END CERTIFICATE-----Generated at Sat Dec 27 03:55:14 2025 by rpki-client