This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/2dlUyZ01ETxdvkseGgakl-HtFXI.roa File: 2dlUyZ01ETxdvkseGgakl-HtFXI.roa (raw, json) Hash identifier: taIjFUnta5Oh+S9adGakGqdnj3MObtpRUDmJ8Ux2bC4= Subject key identifier: D9:D9:54:C9:9D:35:11:3C:5D:BE:4B:1E:1A:06:A4:97:E1:ED:15:72 Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8 Certificate serial: 018BCE7E2CE11EB82349E2F4EF381FD7497B Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/2dlUyZ01ETxdvkseGgakl-HtFXI.roa Signing time: Tue 14 Nov 2023 15:40:57 +0000 ROA not before: Tue 14 Nov 2023 15:40:57 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 50964 IP address blocks: 194.59.39.0/24 maxlen: 24 91.205.76.0/22 maxlen: 22 194.76.38.0/23 maxlen: 23 194.59.38.0/24 maxlen: 24 194.59.36.0/24 maxlen: 24 194.59.36.0/22 maxlen: 22 194.59.37.0/24 maxlen: 24 2001:67c:2dac::/48 maxlen: 48 2001:67c:2da8::/48 maxlen: 48 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:ce:7e:2c:e1:1e:b8:23:49:e2:f4:ef:38:1f:d7:49:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8 Validity Not Before: Nov 14 15:40:57 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=d9d954c99d35113c5dbe4b1e1a06a497e1ed1572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4d:e2:63:38:40:b6:2e:c6:9c:b2:db:7b:2e: ed:c8:fb:53:fa:6f:e9:3c:13:68:0f:a9:db:59:07: 8c:94:31:b9:de:5f:ca:30:40:ab:cc:c6:d8:67:a8: c0:26:0c:da:10:86:04:d2:7f:69:a8:8b:7c:f0:4a: d1:55:0e:31:1b:6a:ce:62:4e:60:93:2f:f0:74:4e: a1:a6:1b:ed:a5:8c:b8:b5:96:64:d7:24:56:df:5b: b4:ab:98:d8:cf:10:09:89:18:c5:fd:3d:fe:b5:00: fd:0c:1c:da:e9:f0:b1:dd:ab:ff:24:a3:98:1c:cc: 0f:1b:4a:4e:f4:67:bd:50:1e:ac:f2:cb:be:3a:b8: 4d:5a:13:f4:d1:41:b2:f0:3a:6e:66:b7:92:48:7d: a6:05:e5:3b:86:a5:df:f3:d4:84:7c:1f:f6:59:6f: 7b:03:64:92:87:1c:e3:38:dc:02:15:cf:ab:93:2b: ce:a3:61:f9:77:ea:0b:a1:85:f8:2b:f6:25:3e:dd: 3f:9b:3f:40:71:0f:72:1b:c4:7c:ad:dd:b2:a4:40: 95:55:1a:48:0e:6a:5d:7a:ec:9d:09:96:a9:65:d7: 94:ba:fa:6f:44:73:37:6d:ca:ad:43:45:c9:f7:b0: 4d:23:e5:84:36:af:68:51:45:ea:d9:77:88:38:34: b9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D9:54:C9:9D:35:11:3C:5D:BE:4B:1E:1A:06:A4:97:E1:ED:15:72 X509v3 Authority Key Identifier: keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/2dlUyZ01ETxdvkseGgakl-HtFXI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.76.0/22 194.59.36.0/22 194.76.38.0/23 IPv6: 2001:67c:2da8::/48 2001:67c:2dac::/48 Signature Algorithm: sha256WithRSAEncryption 4f:4d:2f:74:d2:22:28:e5:01:9e:f8:ad:08:a7:1f:33:f7:c9: df:58:32:3c:c2:f8:71:31:66:05:06:87:53:ac:fa:67:01:23: 44:e5:10:dc:5f:01:4a:12:f9:58:05:d4:b9:ef:ec:c8:10:78: ce:d1:bc:79:40:03:7f:30:19:cb:6a:eb:c4:fb:0d:1b:eb:ba: 8d:a3:7f:9a:c1:1c:5e:0a:9d:6c:fc:93:79:3c:4d:b6:2b:7e: fd:90:8a:02:c2:56:e7:c6:7b:fa:5f:4a:54:3f:b6:52:7a:47: 42:f2:f6:f4:7c:2e:b6:aa:4f:b4:f7:db:3b:70:65:04:3e:75: 21:a4:74:87:88:64:03:72:02:c1:d4:ff:f8:8c:3f:42:0a:68: 41:0e:fc:15:1d:dc:1d:32:30:f6:df:b9:31:6d:7c:81:3d:ac: 1f:95:9a:e1:fc:96:90:26:eb:0a:d2:49:96:53:cc:2e:e5:c0: 9d:64:d5:ed:ee:17:12:90:38:25:cc:57:74:7f:26:e1:1c:26: 37:ed:4b:93:eb:b6:ac:ae:ec:35:a8:9f:ec:59:c5:07:c9:82: 25:32:1c:6b:00:a0:07:72:d4:0e:32:98:af:98:a9:14:c8:79: 47:6f:d5:b1:60:82:40:50:e1:a4:88:8b:76:10:e0:fd:46:50: e4:8e:89:83 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAYvOfizhHrgjSeL07zgf10l7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NzBiZjIzNzVkNTliYTgxYTk5NTVjMDdhMmYwYTIzMjY0 YjYxYTgwHhcNMjMxMTE0MTU0MDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWQ5NTRjOTlkMzUxMTNjNWRiZTRiMWUxYTA2YTQ5N2UxZWQxNTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE3iYzhAti7GnLLbey7tyPtT+m/p PBNoD6nbWQeMlDG53l/KMECrzMbYZ6jAJgzaEIYE0n9pqIt88ErRVQ4xG2rOYk5g ky/wdE6hphvtpYy4tZZk1yRW31u0q5jYzxAJiRjF/T3+tQD9DBza6fCx3av/JKOY HMwPG0pO9Ge9UB6s8su+OrhNWhP00UGy8DpuZreSSH2mBeU7hqXf89SEfB/2WW97 A2SShxzjONwCFc+rkyvOo2H5d+oLoYX4K/YlPt0/mz9AcQ9yG8R8rd2ypECVVRpI DmpdeuydCZapZdeUuvpvRHM3bcqtQ0XJ97BNI+WENq9oUUXq2XeIODS5gQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFNnZVMmdNRE8Xb5LHhoGpJfh7RVyMB8GA1UdIwQY MBaAFJdwvyN11ZuoGplVwHovCiMmS2GoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWIt OGQzNGY1NTc4MjJhLzEvMmRsVXlaMDFFVHhkdmtzZUdnYWtsLUh0RlhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWItOGQzNGY1NTc4MjJh LzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQCW81MAwQC wjskAwQBwkwmMBgEAgACMBIDBwAgAQZ8LagDBwAgAQZ8LawwDQYJKoZIhvcNAQEL BQADggEBAE9NL3TSIijlAZ74rQinHzP3yd9YMjzC+HExZgUGh1Os+mcBI0TlENxf AUoS+VgF1Lnv7MgQeM7RvHlAA38wGctq68T7DRvruo2jf5rBHF4KnWz8k3k8TbYr fv2QigLCVufGe/pfSlQ/tlJ6R0Ly9vR8LraqT7T32ztwZQQ+dSGkdIeIZANyAsHU //iMP0IKaEEO/BUd3B0yMPbfuTFtfIE9rB+VmuH8lpAm6wrSSZZTzC7lwJ1k1e3u FxKQOCXMV3R/JuEcJjftS5Prtqyu7DWon+xZxQfJgiUyHGsAoAdy1A4ymK+YqRTI eUdv1bFggkBQ4aSIi3YQ4P1GUOSOiYM= -----END CERTIFICATE-----Generated at Tue Dec 23 18:02:31 2025 by rpki-client