This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6xfG4rPZeVzqqm4mD2FUsHQo6VA.roa File: 6xfG4rPZeVzqqm4mD2FUsHQo6VA.roa (raw, json) Hash identifier: JNeLBDh6oOlONE6d1Bp9RjwsX67NlDTUpMoeRrfk6+E= Subject key identifier: EB:17:C6:E2:B3:D9:79:5C:EA:AA:6E:26:0F:61:54:B0:74:28:E9:50 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 0186EA332BBFABD523A1969484A1D2F0CA30 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6xfG4rPZeVzqqm4mD2FUsHQo6VA.roa Signing time: Thu 16 Mar 2023 11:34:27 +0000 ROA not before: Thu 16 Mar 2023 11:34:27 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 15083 IP address blocks: 212.192.208.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:ea:33:2b:bf:ab:d5:23:a1:96:94:84:a1:d2:f0:ca:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Mar 16 11:34:27 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=eb17c6e2b3d9795ceaaa6e260f6154b07428e950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:24:d4:51:6e:90:1e:f0:0c:b7:3a:a3:e7: 50:10:27:2e:0d:c6:e9:44:d8:cc:5c:ab:87:3d:9c: 24:02:ea:07:23:e0:a3:9a:61:ef:f3:f0:45:fe:83: 4b:2a:4e:72:14:07:b2:65:c1:90:95:6d:99:31:fc: 12:1b:aa:78:58:a4:e6:53:be:aa:ea:04:97:7f:7a: 63:75:1a:e8:9f:1e:2f:72:af:32:db:b0:58:96:44: 49:53:41:18:19:35:0e:fd:22:90:02:1f:e0:9a:99: a8:e0:5d:d9:56:9d:4b:76:6b:37:39:0d:37:9f:81: 86:74:b0:9c:e8:5c:21:d4:0a:64:75:f4:9a:58:b6: 17:60:21:e4:fc:33:0c:6f:ad:35:9d:50:2b:ed:db: 74:38:08:cd:9c:a7:c9:99:83:bc:71:dd:09:b7:03: 19:e1:6d:39:14:cc:3b:5f:4f:0a:08:35:57:40:39: 81:ab:45:b5:96:a1:5d:36:98:0b:a6:a3:88:bf:6d: c7:02:b4:ce:b7:56:1e:95:fa:71:63:34:2b:25:bd: 94:14:f4:05:40:65:4b:85:dc:30:27:95:a2:b5:5d: 6d:c5:6d:e3:41:e1:4a:bf:30:f3:d3:8d:9f:c7:86: d1:88:99:c1:38:b3:11:de:51:08:b2:a6:64:8f:22: 2a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:17:C6:E2:B3:D9:79:5C:EA:AA:6E:26:0F:61:54:B0:74:28:E9:50 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6xfG4rPZeVzqqm4mD2FUsHQo6VA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.192.208.0/24 Signature Algorithm: sha256WithRSAEncryption 67:b7:ab:46:fb:92:b3:cb:08:7f:60:c5:3c:bf:fc:61:48:b3: 55:dc:41:38:74:ff:c0:3a:3c:3b:e1:8c:2d:44:71:65:a2:94: c6:b2:36:d9:2a:b8:ac:6c:54:c5:23:35:e2:00:df:4d:54:bb: a6:76:39:17:59:11:f6:2e:73:b4:8d:6c:21:99:70:36:97:d3: 61:d4:2c:d7:16:5d:8f:be:c6:a4:1a:72:46:80:e0:8a:36:01: 9f:4c:47:0a:ec:b1:5a:6e:70:ec:40:13:49:40:1a:95:2b:a9: bb:bc:cb:74:cd:a9:0f:95:82:06:1c:8c:38:0a:3a:2d:a9:08: a6:9c:82:41:39:6a:05:60:04:72:b6:de:25:a9:3b:e9:fa:7c: c3:d3:22:b0:51:ab:29:48:7d:62:1b:c6:9f:e0:f4:81:c7:5f: fe:5c:fc:43:10:44:3b:b4:2e:03:af:fd:53:3d:f5:88:7c:1f: be:ac:a2:2b:72:de:b5:c8:e1:78:c8:ff:6e:aa:e7:e0:65:8d: c2:24:32:cf:17:33:66:55:ab:09:37:9c:bf:31:e4:b7:a4:cc: ea:d4:81:3c:80:eb:98:7c:97:c8:80:ba:d8:82:f7:b0:bd:95: 12:bc:3b:75:ff:b2:b1:5e:36:1c:70:db:62:a6:c6:c0:d9:4d: da:31:28:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAYbqMyu/q9UjoZaUhKHS8MowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjMwMzE2MTEzNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjE3YzZlMmIzZDk3OTVjZWFhYTZlMjYwZjYxNTRiMDc0MjhlOTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKEk1FFukB7wDLc6o+dQECcuDcbp RNjMXKuHPZwkAuoHI+CjmmHv8/BF/oNLKk5yFAeyZcGQlW2ZMfwSG6p4WKTmU76q 6gSXf3pjdRronx4vcq8y27BYlkRJU0EYGTUO/SKQAh/gmpmo4F3ZVp1Ldms3OQ03 n4GGdLCc6Fwh1ApkdfSaWLYXYCHk/DMMb601nVAr7dt0OAjNnKfJmYO8cd0JtwMZ 4W05FMw7X08KCDVXQDmBq0W1lqFdNpgLpqOIv23HArTOt1YelfpxYzQrJb2UFPQF QGVLhdwwJ5WitV1txW3jQeFKvzDz042fx4bRiJnBOLMR3lEIsqZkjyIq6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOsXxuKz2Xlc6qpuJg9hVLB0KOlQMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvNnhmRzRyUFplVnpxcW00bUQyRlVzSFFvNlZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MDQMA0G CSqGSIb3DQEBCwUAA4IBAQBnt6tG+5Kzywh/YMU8v/xhSLNV3EE4dP/AOjw74Ywt RHFlopTGsjbZKrisbFTFIzXiAN9NVLumdjkXWRH2LnO0jWwhmXA2l9Nh1CzXFl2P vsakGnJGgOCKNgGfTEcK7LFabnDsQBNJQBqVK6m7vMt0zakPlYIGHIw4CjotqQim nIJBOWoFYARytt4lqTvp+nzD0yKwUaspSH1iG8af4PSBx1/+XPxDEEQ7tC4Dr/1T PfWIfB++rKIrct61yOF4yP9uqufgZY3CJDLPFzNmVasJN5y/MeS3pMzq1IE8gOuY fJfIgLrYgvewvZUSvDt1/7KxXjYccNtipsbA2U3aMSi4 -----END CERTIFICATE-----Generated at Thu Dec 18 23:35:30 2025 by rpki-client