This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5t5FQc_i9T0kBQS7h0v4A3wx7e4.roa File: 5t5FQc_i9T0kBQS7h0v4A3wx7e4.roa (raw, json) Hash identifier: XNEHMMO4B6uB55EfZJvZk8hGn41uJC7590CKVpgZvXU= Subject key identifier: E6:DE:45:41:CF:E2:F5:3D:24:05:04:BB:87:4B:F8:03:7C:31:ED:EE Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 018AF9C7EE16B42F1B17EB1981D5C8B65FC9 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5t5FQc_i9T0kBQS7h0v4A3wx7e4.roa Signing time: Wed 04 Oct 2023 08:22:23 +0000 ROA not before: Wed 04 Oct 2023 08:22:23 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 203639 IP address blocks: 212.193.14.0/24 maxlen: 24 194.87.208.0/24 maxlen: 24 194.87.2.0/24 maxlen: 24 194.87.226.0/24 maxlen: 24 194.87.231.0/24 maxlen: 24 212.192.4.0/24 maxlen: 24 195.133.15.0/24 maxlen: 24 195.133.14.0/24 maxlen: 24 194.58.42.0/24 maxlen: 24 195.133.25.0/24 maxlen: 24 195.133.27.0/24 maxlen: 24 194.87.172.0/24 maxlen: 24 192.124.180.0/24 maxlen: 24 195.133.35.0/24 maxlen: 24 194.87.76.0/24 maxlen: 24 193.124.90.0/24 maxlen: 24 194.87.81.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:f9:c7:ee:16:b4:2f:1b:17:eb:19:81:d5:c8:b6:5f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Oct 4 08:22:23 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=e6de4541cfe2f53d240504bb874bf8037c31edee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:91:a1:8d:d6:48:a5:64:1b:3a:4f:fd:7a:3c: 78:cb:08:ef:ea:41:86:19:45:60:b5:f1:c0:45:3c: b5:7a:ec:97:a9:cd:03:04:ea:d1:c1:87:32:3f:b0: c5:f5:56:79:39:c6:1f:5d:ae:26:95:84:4e:a1:d3: 89:fa:49:3b:f0:4d:97:85:aa:12:83:30:83:50:20: 58:e1:97:66:fc:60:4d:46:08:a5:cb:af:77:3c:35: fb:71:76:d5:b2:e9:4d:f0:e3:cf:54:ba:a9:18:9e: 19:94:35:42:c5:9c:79:fc:00:3a:9b:55:42:52:bc: 9a:a2:30:42:73:44:d1:18:ba:8b:a4:5a:24:6b:34: a5:8b:86:cb:39:80:da:2d:4b:07:29:96:9e:61:c8: ca:35:b2:45:f1:b7:19:15:f0:3e:af:00:55:2f:3c: 90:cb:49:bb:a5:b7:d5:53:e0:27:35:b6:b2:f7:a0: 64:26:a4:7c:60:dc:5d:dd:56:32:35:79:64:d2:82: b1:a4:32:7b:a8:c9:ba:39:a3:0a:46:bb:a4:fa:b4: 04:b6:f8:d7:68:98:e2:6a:d8:91:9c:25:a2:73:9a: 2a:4d:14:ae:30:b7:e5:19:5f:0e:ff:34:43:ac:40: c7:a4:c9:f5:f0:a7:5e:ca:11:8f:ff:49:b5:53:47: 27:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DE:45:41:CF:E2:F5:3D:24:05:04:BB:87:4B:F8:03:7C:31:ED:EE X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5t5FQc_i9T0kBQS7h0v4A3wx7e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.124.180.0/24 193.124.90.0/24 194.58.42.0/24 194.87.2.0/24 194.87.76.0/24 194.87.81.0/24 194.87.172.0/24 194.87.208.0/24 194.87.226.0/24 194.87.231.0/24 195.133.14.0/23 195.133.25.0/24 195.133.27.0/24 195.133.35.0/24 212.192.4.0/24 212.193.14.0/24 Signature Algorithm: sha256WithRSAEncryption 94:0d:97:32:df:2c:da:b6:de:dc:84:2d:be:81:ae:28:b0:1b: d0:1c:78:5e:e0:5f:f1:b8:a3:ec:63:3b:a6:9e:e0:75:8e:89: 96:b2:55:89:d3:c5:34:55:c3:31:d0:30:b2:17:8e:48:d5:5b: 79:e9:61:9d:28:77:c5:76:8b:cc:be:6c:9d:38:5c:ff:b4:34: 46:1c:a7:02:d8:39:83:4c:f3:98:c9:26:90:1c:5c:a5:b0:0f: b8:01:c9:bd:c6:9c:bf:f7:c8:bd:24:b1:13:f2:66:0c:0f:4c: 5e:00:0e:7d:c1:82:7f:94:f0:79:b1:1b:32:33:0d:cd:41:15: 0d:67:0b:86:f7:61:dc:53:87:34:9f:a2:01:5d:69:b4:ed:5c: 9e:56:bf:2c:db:4f:94:06:4e:bf:38:ba:19:b8:ac:5b:2b:01: 01:9e:6c:e6:a6:c8:60:5f:f0:c1:43:be:1b:e4:3b:ca:99:37: bc:63:52:0f:bf:e9:b4:42:bf:3d:27:a6:34:c9:9e:1f:ab:bf: 96:dd:da:37:a9:0c:c7:86:12:e9:b5:78:2d:1b:bd:8c:6f:4f: 50:d8:c3:3a:50:ec:c6:5a:e5:c4:01:c7:77:cb:7d:e9:31:b5: 5e:1a:74:1e:18:43:e4:2e:38:70:25:dd:a0:b8:4c:94:ca:c8: b3:f8:5f:66 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAYr5x+4WtC8bF+sZgdXItl/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjMxMDA0MDgyMjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmRlNDU0MWNmZTJmNTNkMjQwNTA0YmI4NzRiZjgwMzdjMzFlZGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZGhjdZIpWQbOk/9ejx4ywjv6kGG GUVgtfHARTy1euyXqc0DBOrRwYcyP7DF9VZ5OcYfXa4mlYROodOJ+kk78E2XhaoS gzCDUCBY4Zdm/GBNRgily693PDX7cXbVsulN8OPPVLqpGJ4ZlDVCxZx5/AA6m1VC UryaojBCc0TRGLqLpFokazSli4bLOYDaLUsHKZaeYcjKNbJF8bcZFfA+rwBVLzyQ y0m7pbfVU+AnNbay96BkJqR8YNxd3VYyNXlk0oKxpDJ7qMm6OaMKRruk+rQEtvjX aJjiatiRnCWic5oqTRSuMLflGV8O/zRDrEDHpMn18KdeyhGP/0m1U0cntQIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFObeRUHP4vU9JAUEu4dL+AN8Me3uMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvNXQ1RlFjX2k5VDBrQlFTN2gwdjRBM3d4N2U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAwHy0AwQA wXxaAwQAwjoqAwQAwlcCAwQAwldMAwQAwldRAwQAwlesAwQAwlfQAwQAwlfiAwQA wlfnAwQBw4UOAwQAw4UZAwQAw4UbAwQAw4UjAwQA1MAEAwQA1MEOMA0GCSqGSIb3 DQEBCwUAA4IBAQCUDZcy3yzatt7chC2+ga4osBvQHHhe4F/xuKPsYzumnuB1jomW slWJ08U0VcMx0DCyF45I1Vt56WGdKHfFdovMvmydOFz/tDRGHKcC2DmDTPOYySaQ HFylsA+4Acm9xpy/98i9JLET8mYMD0xeAA59wYJ/lPB5sRsyMw3NQRUNZwuG92Hc U4c0n6IBXWm07VyeVr8s20+UBk6/OLoZuKxbKwEBnmzmpshgX/DBQ74b5DvKmTe8 Y1IPv+m0Qr89J6Y0yZ4fq7+W3do3qQzHhhLptXgtG72Mb09Q2MM6UOzGWuXEAcd3 y33pMbVeGnQeGEPkLjhwJd2guEyUysiz+F9m -----END CERTIFICATE-----Generated at Mon Dec 15 12:00:56 2025 by rpki-client