Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/4yjh2kTkPbXkWKWD-moCmTCAfh4.roa
File: 4yjh2kTkPbXkWKWD-moCmTCAfh4.roa (raw, json)
Hash identifier: nZNOZI4yQaJLmZNkIKCFYK2RUOM/vYDH3HV42SdiYLU=
Subject key identifier: E3:28:E1:DA:44:E4:3D:B5:E4:58:A5:83:FA:6A:02:99:30:80:7E:1E
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 018C90969AF241EA36688D1D8842CE002ED7
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/4yjh2kTkPbXkWKWD-moCmTCAfh4.roa
Signing time: Fri 22 Dec 2023 08:13:58 +0000
ROA not before: Fri 22 Dec 2023 08:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20773
IP address blocks: 176.32.224.0/21 maxlen: 24
46.32.224.0/19 maxlen: 24
93.187.232.0/21 maxlen: 24
92.60.112.0/20 maxlen: 24
5.175.0.0/19 maxlen: 24
188.121.32.0/19 maxlen: 24
88.80.192.0/19 maxlen: 24
80.67.16.0/20 maxlen: 24
93.180.152.0/21 maxlen: 24
85.25.168.0/22 maxlen: 24
188.93.8.0/21 maxlen: 24
85.119.152.0/21 maxlen: 24
146.255.32.0/20 maxlen: 24
176.221.40.0/21 maxlen: 24
92.51.160.0/21 maxlen: 24
92.51.170.0/24 maxlen: 24
92.51.180.0/22 maxlen: 24
185.139.72.0/22 maxlen: 24
94.199.240.0/21 maxlen: 24
217.172.162.0/24 maxlen: 24
217.172.160.0/23 maxlen: 24
217.172.164.0/24 maxlen: 24
194.145.192.0/23 maxlen: 24
217.199.160.0/19 maxlen: 24
77.91.232.0/21 maxlen: 24
92.51.128.0/20 maxlen: 24
185.85.48.0/22 maxlen: 24
92.51.144.0/21 maxlen: 24
85.25.16.0/23 maxlen: 24
93.92.144.0/21 maxlen: 24
37.200.96.0/21 maxlen: 24
217.119.49.0/24 maxlen: 24
217.119.50.0/24 maxlen: 24
217.119.54.0/24 maxlen: 24
217.119.56.0/24 maxlen: 24
193.17.17.0/24 maxlen: 24
193.138.96.0/24 maxlen: 24
80.246.48.0/20 maxlen: 24
62.138.128.0/18 maxlen: 24
178.77.124.0/24 maxlen: 24
109.239.48.0/20 maxlen: 24
46.252.192.0/20 maxlen: 24
46.252.16.0/20 maxlen: 24
92.205.0.0/19 maxlen: 24
92.43.16.0/21 maxlen: 24
80.90.192.0/20 maxlen: 24
109.104.64.0/19 maxlen: 24
178.77.80.0/21 maxlen: 24
95.131.64.0/21 maxlen: 24
178.77.96.0/20 maxlen: 24
178.77.112.0/21 maxlen: 24
195.137.212.0/23 maxlen: 24
195.225.104.0/22 maxlen: 24
178.77.64.0/20 maxlen: 24
80.237.194.0/23 maxlen: 24
80.237.212.0/24 maxlen: 24
80.237.214.0/23 maxlen: 24
46.163.96.0/22 maxlen: 24
80.237.130.0/24 maxlen: 24
62.75.208.0/22 maxlen: 24
80.237.128.0/23 maxlen: 24
46.163.104.0/21 maxlen: 24
80.237.132.0/23 maxlen: 24
80.237.135.0/24 maxlen: 24
80.237.136.0/22 maxlen: 24
79.170.40.0/21 maxlen: 24
46.163.112.0/21 maxlen: 24
80.237.142.0/23 maxlen: 24
80.237.144.0/21 maxlen: 24
80.237.160.0/20 maxlen: 24
185.2.128.0/22 maxlen: 24
80.237.251.0/24 maxlen: 24
80.237.248.0/23 maxlen: 24
5.35.224.0/19 maxlen: 24
80.237.252.0/22 maxlen: 24
217.8.240.0/20 maxlen: 24
176.28.0.0/20 maxlen: 24
217.115.152.0/21 maxlen: 24
91.250.80.0/21 maxlen: 24
217.115.146.0/23 maxlen: 24
91.250.88.0/22 maxlen: 24
87.230.32.0/22 maxlen: 24
212.48.64.0/19 maxlen: 24
87.230.40.0/21 maxlen: 24
91.250.96.0/21 maxlen: 24
176.28.16.0/21 maxlen: 24
87.230.48.0/23 maxlen: 24
185.34.212.0/22 maxlen: 24
91.250.108.0/22 maxlen: 24
176.28.32.0/20 maxlen: 24
87.230.64.0/24 maxlen: 24
185.21.100.0/22 maxlen: 24
87.230.60.0/22 maxlen: 24
91.250.112.0/20 maxlen: 24
91.109.0.0/20 maxlen: 24
87.230.68.0/22 maxlen: 24
87.230.66.0/23 maxlen: 24
185.7.248.0/22 maxlen: 24
176.28.48.0/21 maxlen: 24
87.230.76.0/22 maxlen: 24
87.230.0.0/19 maxlen: 24
91.250.64.0/21 maxlen: 24
217.115.128.0/21 maxlen: 24
217.115.142.0/23 maxlen: 24
217.115.145.0/24 maxlen: 24
217.115.141.0/24 maxlen: 24
81.21.64.0/20 maxlen: 24
62.75.152.0/24 maxlen: 24
62.75.155.0/24 maxlen: 24
62.75.156.0/22 maxlen: 24
37.122.208.0/21 maxlen: 24
62.75.168.0/22 maxlen: 24
46.163.64.0/20 maxlen: 24
62.75.177.0/24 maxlen: 24
62.75.173.0/24 maxlen: 24
62.75.175.0/24 maxlen: 24
62.75.184.0/21 maxlen: 24
46.163.84.0/22 maxlen: 24
87.230.80.0/23 maxlen: 24
176.28.56.0/22 maxlen: 24
87.230.84.0/22 maxlen: 24
87.230.88.0/21 maxlen: 24
176.28.62.0/24 maxlen: 24
87.230.104.0/22 maxlen: 24
87.230.110.0/23 maxlen: 24
87.230.112.0/21 maxlen: 24
94.136.32.0/19 maxlen: 24
62.75.134.0/24 maxlen: 24
62.75.144.0/21 maxlen: 24
62.75.142.0/23 maxlen: 24
87.230.126.0/24 maxlen: 24
62.75.141.0/24 maxlen: 24
212.40.162.0/23 maxlen: 24
212.40.164.0/23 maxlen: 24
212.40.161.0/24 maxlen: 24
212.40.170.0/23 maxlen: 24
212.40.167.0/24 maxlen: 24
212.40.172.0/23 maxlen: 24
212.40.169.0/24 maxlen: 24
212.40.178.0/23 maxlen: 24
212.40.177.0/24 maxlen: 24
212.40.184.0/23 maxlen: 24
212.40.180.0/24 maxlen: 24
212.40.188.0/22 maxlen: 24
212.40.187.0/24 maxlen: 24
212.67.192.0/19 maxlen: 24
141.0.16.0/21 maxlen: 24
83.169.32.0/20 maxlen: 24
109.68.32.0/21 maxlen: 24
83.169.52.0/22 maxlen: 24
37.148.200.0/21 maxlen: 24
83.169.0.0/19 maxlen: 24
2001:1520::/32 maxlen: 48
2a00:1158::/32 maxlen: 48
2001:4d08::/32 maxlen: 48
2a00:1e78::/32 maxlen: 48
2a02:4e8::/32 maxlen: 48
2a01:488::/32 maxlen: 48
2a00:1168::/29 maxlen: 48
2a04:4fc0::/30 maxlen: 48
2001:67c:308::/48 maxlen: 48
2a02:718::/32 maxlen: 48
2a02:46c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:96:9a:f2:41:ea:36:68:8d:1d:88:42:ce:00:2e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Dec 22 08:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e328e1da44e43db5e458a583fa6a029930807e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d8:b8:a5:4a:ad:b4:7c:8e:28:83:dc:1d:b4:
ce:d7:42:4d:88:a8:80:44:cd:65:45:2b:6a:3d:e2:
88:91:e7:bf:6a:d5:7a:97:28:b2:f8:29:b0:c5:b4:
8b:dd:91:0d:0c:5a:77:fd:c0:f4:90:80:7b:1d:ef:
38:1e:ea:10:a3:33:24:b0:b0:ea:c0:95:4b:24:12:
7f:9c:35:52:c8:f7:aa:e4:9a:2d:ce:ae:ae:27:d9:
e5:b0:2a:b7:ab:96:f2:0f:42:ae:95:38:23:fd:c1:
09:b7:81:77:60:4a:a3:d3:f4:55:06:87:bf:45:07:
63:32:d4:9f:2e:89:fa:70:be:5b:50:93:5c:80:cb:
f4:c1:b7:9f:46:26:c1:e2:27:3c:5f:58:87:bc:39:
66:f2:fc:57:98:bb:a1:18:8f:ab:d8:9c:26:44:15:
65:e4:9e:d8:ea:e1:60:b2:4f:4c:9d:3f:f9:ea:fa:
c1:3f:45:69:07:53:f1:fc:af:8d:05:2b:f6:8f:07:
ca:97:9f:b9:49:19:7c:e0:e7:2b:3b:35:1a:01:c9:
87:6a:12:fa:6e:36:d2:8a:1b:fa:8e:49:61:5b:cb:
23:a1:e9:00:f3:0f:9d:3a:a1:c5:37:31:e3:33:dc:
0c:95:2d:4b:8e:92:a7:e2:92:44:25:98:99:57:1f:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:28:E1:DA:44:E4:3D:B5:E4:58:A5:83:FA:6A:02:99:30:80:7E:1E
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/4yjh2kTkPbXkWKWD-moCmTCAfh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.224.0/19
5.175.0.0/19
37.122.208.0/21
37.148.200.0/21
37.200.96.0/21
46.32.224.0/19
46.163.64.0/20
46.163.84.0/22
46.163.96.0/22
46.163.104.0-46.163.119.255
46.252.16.0/20
46.252.192.0/20
62.75.134.0/24
62.75.141.0-62.75.152.255
62.75.155.0-62.75.159.255
62.75.168.0/22
62.75.173.0/24
62.75.175.0/24
62.75.177.0/24
62.75.184.0/21
62.75.208.0/22
62.138.128.0/18
77.91.232.0/21
79.170.40.0/21
80.67.16.0/20
80.90.192.0/20
80.237.128.0-80.237.130.255
80.237.132.0/23
80.237.135.0-80.237.139.255
80.237.142.0-80.237.151.255
80.237.160.0/20
80.237.194.0/23
80.237.212.0/24
80.237.214.0/23
80.237.248.0/23
80.237.251.0-80.237.255.255
80.246.48.0/20
81.21.64.0/20
83.169.0.0-83.169.47.255
83.169.52.0/22
85.25.16.0/23
85.25.168.0/22
85.119.152.0/21
87.230.0.0-87.230.35.255
87.230.40.0-87.230.49.255
87.230.60.0-87.230.64.255
87.230.66.0-87.230.71.255
87.230.76.0-87.230.81.255
87.230.84.0-87.230.95.255
87.230.104.0/22
87.230.110.0-87.230.119.255
87.230.126.0/24
88.80.192.0/19
91.109.0.0/20
91.250.64.0/21
91.250.80.0-91.250.91.255
91.250.96.0/21
91.250.108.0-91.250.127.255
92.43.16.0/21
92.51.128.0-92.51.151.255
92.51.160.0/21
92.51.170.0/24
92.51.180.0/22
92.60.112.0/20
92.205.0.0/19
93.92.144.0/21
93.180.152.0/21
93.187.232.0/21
94.136.32.0/19
94.199.240.0/21
95.131.64.0/21
109.68.32.0/21
109.104.64.0/19
109.239.48.0/20
141.0.16.0/21
146.255.32.0/20
176.28.0.0-176.28.23.255
176.28.32.0-176.28.59.255
176.28.62.0/24
176.32.224.0/21
176.221.40.0/21
178.77.64.0-178.77.87.255
178.77.96.0-178.77.119.255
178.77.124.0/24
185.2.128.0/22
185.7.248.0/22
185.21.100.0/22
185.34.212.0/22
185.85.48.0/22
185.139.72.0/22
188.93.8.0/21
188.121.32.0/19
193.17.17.0/24
193.138.96.0/24
194.145.192.0/23
195.137.212.0/23
195.225.104.0/22
212.40.161.0-212.40.165.255
212.40.167.0/24
212.40.169.0-212.40.173.255
212.40.177.0-212.40.180.255
212.40.184.0/23
212.40.187.0-212.40.191.255
212.48.64.0/19
212.67.192.0/19
217.8.240.0/20
217.115.128.0/21
217.115.141.0-217.115.143.255
217.115.145.0-217.115.147.255
217.115.152.0/21
217.119.49.0-217.119.50.255
217.119.54.0/24
217.119.56.0/24
217.172.160.0-217.172.162.255
217.172.164.0/24
217.199.160.0/19
IPv6:
2001:67c:308::/48
2001:1520::/32
2001:4d08::/32
2a00:1158::/32
2a00:1168::/29
2a00:1e78::/32
2a01:488::/32
2a02:4e8::/32
2a02:718::/32
2a02:46c0::/32
2a04:4fc0::/30
Signature Algorithm: sha256WithRSAEncryption
59:66:d8:be:65:c9:56:f3:01:e1:28:b4:e2:44:a4:8a:80:96:
08:85:68:42:0c:8b:11:64:1a:c1:f6:7d:9a:94:5e:7c:20:b4:
86:11:00:0b:19:d9:a9:f7:3e:cf:6b:4b:83:f2:2a:92:4c:58:
5c:f5:9f:a4:0e:cd:0e:67:d7:62:73:c7:d3:a8:02:08:4c:89:
87:19:e3:d8:07:22:47:4e:f1:50:b1:d6:e0:e4:d7:10:d8:39:
97:01:2c:2c:b0:f9:7a:fb:0a:21:b5:7f:7c:b4:d2:53:58:5d:
36:50:48:84:16:54:92:a5:5a:fb:38:ce:37:d0:99:e1:fa:8c:
fe:8a:37:1a:f0:58:6f:4e:d4:43:05:eb:62:3e:f9:db:a4:59:
92:ab:21:36:28:47:2e:96:3e:7f:01:5c:00:75:ff:93:06:d8:
b1:b4:3b:37:2d:d8:bd:e1:cf:1e:6a:0a:20:10:33:0f:ea:96:
ee:60:9e:eb:99:cd:ad:37:91:c5:10:58:5f:a8:17:6e:4e:80:
64:63:3c:23:86:6b:52:4e:f4:87:db:5b:66:e6:0d:6d:57:cf:
fc:10:1a:81:a1:9f:2a:45:66:f7:8c:c8:d4:45:c6:54:e7:3d:
d6:64:fa:18:2e:98:4d:e9:45:b4:ec:d7:d5:ed:14:fb:4b:c5:
c3:0f:a6:2c
-----BEGIN CERTIFICATE-----
MIII/DCCB+SgAwIBAgISAYyQlpryQeo2aI0diELOAC7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjMxMjIyMDgxMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzI4ZTFkYTQ0ZTQzZGI1ZTQ1OGE1ODNmYTZhMDI5OTMwODA3ZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNi4pUqttHyOKIPcHbTO10JNiKiA
RM1lRStqPeKIkee/atV6lyiy+CmwxbSL3ZENDFp3/cD0kIB7He84HuoQozMksLDq
wJVLJBJ/nDVSyPeq5Jotzq6uJ9nlsCq3q5byD0KulTgj/cEJt4F3YEqj0/RVBoe/
RQdjMtSfLon6cL5bUJNcgMv0wbefRibB4ic8X1iHvDlm8vxXmLuhGI+r2JwmRBVl
5J7Y6uFgsk9MnT/56vrBP0VpB1Px/K+NBSv2jwfKl5+5SRl84OcrOzUaAcmHahL6
bjbSihv6jklhW8sjoekA8w+dOqHFNzHjM9wMlS1LjpKn4pJEJZiZVx9mgQIDAQAB
o4IGCDCCBgQwHQYDVR0OBBYEFOMo4dpE5D215Filg/pqApkwgH4eMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvNHlqaDJrVGtQYlhrV0tXRC1tb0NtVENBZmg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIEHAYIKwYBBQUHAQcBAf8EggQLMIIEBzCCA6wEAgABMIID
pAMEBQUj4AMEBQWvAAMEAyV60AMEAyWUyAMEAyXIYAMEBS4g4AMEBC6jQAMEAi6j
VAMEAi6jYDAMAwQDLqNoAwQDLqNwAwQELvwQAwQELvzAAwQAPkuGMAwDBAA+S40D
BAA+S5gwDAMEAD5LmwMEBT5LgAMEAj5LqAMEAD5LrQMEAD5LrwMEAD5LsQMEAz5L
uAMEAj5L0AMEBj6KgAMEA01b6AMEA0+qKAMEBFBDEAMEBFBawDAMAwQHUO2AAwQA
UO2CAwQBUO2EMAwDBABQ7YcDBAJQ7YgwDAMEAVDtjgMEA1DtkAMEBFDtoAMEAVDt
wgMEAFDt1AMEAVDt1gMEAVDt+DALAwQAUO37AwMBUOwDBARQ9jADBARRFUAwCwMD
AFOpAwQEU6kgAwQCU6k0AwQBVRkQAwQCVRmoAwQDVXeYMAsDAwFX5gMEAlfmIDAM
AwQDV+YoAwQBV+YwMAwDBAJX5jwDBABX5kAwDAMEAVfmQgMEA1fmQDAMAwQCV+ZM
AwQBV+ZQMAwDBAJX5lQDBAVX5kADBAJX5mgwDAMEAVfmbgMEA1fmcAMEAFfmfgME
BVhQwAMEBFttAAMEA1v6QDAMAwQEW/pQAwQCW/pYAwQDW/pgMAwDBAJb+mwDBAdb
+gADBANcKxAwDAMEB1wzgAMEA1wzkAMEA1wzoAMEAFwzqgMEAlwztAMEBFw8cAME
BVzNAAMEA11ckAMEA120mAMEA1276AMEBV6IIAMEA17H8AMEA1+DQAMEA21EIAME
BW1oQAMEBG3vMAMEA40AEAMEBJL/IDALAwMCsBwDBAOwHBAwDAMEBbAcIAMEArAc
OAMEALAcPgMEA7Ag4AMEA7DdKDAMAwQGsk1AAwQDsk1QMAwDBAWyTWADBAOyTXAD
BACyTXwDBAK5AoADBAK5B/gDBAK5FWQDBAK5ItQDBAK5VTADBAK5i0gDBAO8XQgD
BAW8eSADBADBEREDBADBimADBAHCkcADBAHDidQDBALD4WgwDAMEANQooQMEAdQo
pAMEANQopzAMAwQA1CipAwQB1CisMAwDBADUKLEDBADUKLQDBAHUKLgwDAMEANQo
uwMEBtQogAMEBdQwQAMEBdRDwAMEBNkI8AMEA9lzgDAMAwQA2XONAwQE2XOAMAwD
BADZc5EDBALZc5ADBAPZc5gwDAMEANl3MQMEANl3MgMEANl3NgMEANl3ODAMAwQF
2aygAwQA2ayiAwQA2aykAwQF2cegMFUEAgACME8DBwAgAQZ8AwgDBQAgARUgAwUA
IAFNCAMFACoAEVgDBQMqABFoAwUAKgAeeAMFACoBBIgDBQAqAgToAwUAKgIHGAMF
ACoCRsADBQIqBE/AMA0GCSqGSIb3DQEBCwUAA4IBAQBZZti+ZclW8wHhKLTiRKSK
gJYIhWhCDIsRZBrB9n2alF58ILSGEQALGdmp9z7Pa0uD8iqSTFhc9Z+kDs0OZ9di
c8fTqAIITImHGePYByJHTvFQsdbg5NcQ2DmXASwssPl6+wohtX98tNJTWF02UEiE
FlSSpVr7OM430Jnh+oz+ijca8FhvTtRDBetiPvnbpFmSqyE2KEculj5/AVwAdf+T
BtixtDs3Ldi94c8eagogEDMP6pbuYJ7rmc2tN5HFEFhfqBduToBkYzwjhmtSTvSH
21tm5g1tV8/8EBqBoZ8qRWb3jMjURcZU5z3WZPoYLphN6UW07NfV7RT7S8XDD6Ys
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:36 2025 by rpki-client