This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/mkjCL_cy5q7_4z1JoA4izp_LfII.roa File: mkjCL_cy5q7_4z1JoA4izp_LfII.roa (raw, json) Hash identifier: 8mbumpo/cEZCjuIpONDxg+flpTMAigBv437ncaKuCMU= Subject key identifier: 9A:48:C2:2F:F7:32:E6:AE:FF:E3:3D:49:A0:0E:22:CE:9F:CB:7C:82 Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3 Certificate serial: 018775378FCE6270B428CD0CC21E2D16F62A Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/mkjCL_cy5q7_4z1JoA4izp_LfII.roa Signing time: Wed 12 Apr 2023 11:26:28 +0000 ROA not before: Wed 12 Apr 2023 11:26:28 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 203216 IP address blocks: 185.137.88.0/22 maxlen: 24 185.137.88.0/24 maxlen: 24 185.137.91.0/24 maxlen: 24 185.137.90.0/24 maxlen: 24 185.137.89.0/24 maxlen: 24 2a07:3300::/48 maxlen: 48 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:87:75:37:8f:ce:62:70:b4:28:cd:0c:c2:1e:2d:16:f6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3 Validity Not Before: Apr 12 11:26:28 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=9a48c22ff732e6aeffe33d49a00e22ce9fcb7c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:17:b7:c1:23:91:eb:12:be:50:91:7b:87:76: cb:fb:3c:48:e5:5a:c7:d3:14:d7:09:99:34:d1:49: 2b:8c:f7:78:4d:a5:aa:1b:1f:3e:be:9b:cc:30:0b: a9:0f:ac:70:eb:46:f3:9a:85:b7:91:7b:19:96:d9: 99:55:4d:78:09:d2:27:58:93:b5:f1:19:d3:be:04: 33:cd:63:10:0c:0c:e4:72:ee:b2:fc:5c:6f:a5:fe: 96:fb:6f:18:86:4d:5d:88:54:a9:8f:9b:8d:33:43: af:ba:1f:9f:80:9a:da:69:0a:59:da:92:02:2f:9c: e7:6f:66:d0:01:fc:bc:21:da:d8:42:e5:8b:b9:fc: 00:c3:cd:52:53:5c:65:a1:55:c7:18:e9:f2:f2:90: 2e:0a:c3:b4:0a:56:0c:f1:bf:7e:01:a9:e3:64:03: f6:b0:52:f3:4d:40:d6:a8:25:61:f9:7e:37:b7:ce: ad:f1:89:04:e5:a6:32:79:48:10:2a:39:09:c3:0e: 88:91:c5:cc:69:2a:75:50:98:78:e4:7d:22:4f:9a: b8:af:fb:3d:7b:48:13:d8:0d:5c:9b:4b:eb:ec:7a: da:65:10:bb:d9:24:c6:78:4f:65:79:2a:ed:e1:4c: e1:2f:06:dd:0b:2d:88:d2:42:bd:cf:5f:0f:82:81: f1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:48:C2:2F:F7:32:E6:AE:FF:E3:3D:49:A0:0E:22:CE:9F:CB:7C:82 X509v3 Authority Key Identifier: keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/mkjCL_cy5q7_4z1JoA4izp_LfII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.88.0/22 IPv6: 2a07:3300::/48 Signature Algorithm: sha256WithRSAEncryption 20:24:7c:fb:e7:51:d8:72:39:b7:3b:10:32:26:77:70:fe:86: 0f:d4:1d:05:c3:36:43:cb:c3:07:2c:90:ce:26:bb:30:6e:e1: 47:c7:37:59:58:09:44:f6:08:ac:f7:07:b1:78:eb:ed:17:c3: e6:4e:bd:19:14:93:d7:2b:34:a6:a7:6c:b3:bd:3e:1a:56:56: 4c:cd:70:d8:c8:4d:95:fd:04:9c:87:49:5a:cf:32:b4:20:e5: 8a:98:95:df:40:81:d9:c4:9b:d3:b4:8c:ac:e9:11:c1:f3:cc: ec:b0:9b:79:fa:a9:86:08:00:42:92:5d:17:01:58:30:23:f2: d4:0e:2a:8e:65:8a:2b:8c:6c:c8:84:3b:ff:65:1d:81:08:61: 70:1b:fd:8e:ca:8a:00:a7:06:56:e0:14:9a:a8:de:ad:66:bb: 90:6c:4e:53:1a:28:d6:49:df:13:2a:9e:07:df:32:62:ef:e1: 60:21:ac:e2:92:9e:8e:2b:8e:09:10:b0:a7:e5:6c:41:7b:d0: 06:01:80:1a:91:9e:83:9b:f9:8c:dd:b8:d5:4b:9a:b2:d9:6e: da:a5:4a:62:b9:2c:1b:d0:f4:64:79:44:2e:2b:a9:26:56:67: 5d:30:bd:8e:00:cf:0f:02:fc:98:e7:1d:a9:51:bd:94:cf:69: 78:1d:9b:ef -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAYd1N4/OYnC0KM0Mwh4tFvYqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExODQ0MDllNWMxODNiYmNjMzE1MzVmNGM3ZWVlNDc4MmNk NjdiZTMwHhcNMjMwNDEyMTEyNjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTQ4YzIyZmY3MzJlNmFlZmZlMzNkNDlhMDBlMjJjZTlmY2I3YzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBe3wSOR6xK+UJF7h3bL+zxI5VrH 0xTXCZk00UkrjPd4TaWqGx8+vpvMMAupD6xw60bzmoW3kXsZltmZVU14CdInWJO1 8RnTvgQzzWMQDAzkcu6y/Fxvpf6W+28Yhk1diFSpj5uNM0Ovuh+fgJraaQpZ2pIC L5znb2bQAfy8IdrYQuWLufwAw81SU1xloVXHGOny8pAuCsO0ClYM8b9+AanjZAP2 sFLzTUDWqCVh+X43t86t8YkE5aYyeUgQKjkJww6IkcXMaSp1UJh45H0iT5q4r/s9 e0gT2A1cm0vr7HraZRC72STGeE9leSrt4UzhLwbdCy2I0kK9z18PgoHx4QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJpIwi/3Muau/+M9SaAOIs6fy3yCMB8GA1UdIwQY MBaAFKGEQJ5cGDu8wxU19Mfu5Hgs1nvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZTk2OTQtYzI4NS00Y2NmLTk0M2It YzJiN2NmZjA2NjFjLzEvbWtqQ0xfY3k1cTdfNHoxSm9BNGl6cF9MZklJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xZTk2OTQtYzI4NS00Y2NmLTk0M2ItYzJiN2NmZjA2NjFj LzEvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuYlYMA8E AgACMAkDBwAqBzMAAAAwDQYJKoZIhvcNAQELBQADggEBACAkfPvnUdhyObc7EDIm d3D+hg/UHQXDNkPLwwcskM4muzBu4UfHN1lYCUT2CKz3B7F46+0Xw+ZOvRkUk9cr NKanbLO9PhpWVkzNcNjITZX9BJyHSVrPMrQg5YqYld9AgdnEm9O0jKzpEcHzzOyw m3n6qYYIAEKSXRcBWDAj8tQOKo5liiuMbMiEO/9lHYEIYXAb/Y7KigCnBlbgFJqo 3q1mu5BsTlMaKNZJ3xMqngffMmLv4WAhrOKSno4rjgkQsKflbEF70AYBgBqRnoOb +YzduNVLmrLZbtqlSmK5LBvQ9GR5RC4rqSZWZ10wvY4Azw8C/JjnHalRvZTPaXgd m+8= -----END CERTIFICATE-----Generated at Mon Dec 15 12:07:45 2025 by rpki-client