This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/3EadPK5K-LmTwoHQ68F6awg9eHU.roa File: 3EadPK5K-LmTwoHQ68F6awg9eHU.roa (raw, json) Hash identifier: Nd8mpZhLsy8zqvF61iexy19G9UAK3bXk+p5oYZGNaCA= Subject key identifier: DC:46:9D:3C:AE:4A:F8:B9:93:C2:81:D0:EB:C1:7A:6B:08:3D:78:75 Certificate issuer: /CN=2f246475d7c9ba399f07f843621f6e081372d757 Certificate serial: 018D0D8D667DD882A183F7BDE3BB93924C34 Authority key identifier: 2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/3EadPK5K-LmTwoHQ68F6awg9eHU.roa Signing time: Mon 15 Jan 2024 14:36:27 +0000 ROA not before: Mon 15 Jan 2024 14:36:27 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 215746 IP address blocks: 217.20.252.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:8d:0d:8d:66:7d:d8:82:a1:83:f7:bd:e3:bb:93:92:4c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f246475d7c9ba399f07f843621f6e081372d757 Validity Not Before: Jan 15 14:36:27 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=dc469d3cae4af8b993c281d0ebc17a6b083d7875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:83:bb:58:17:66:00:fc:49:d2:2d:76:21: 6a:30:33:1b:b8:d0:d4:2a:94:7f:3e:c4:79:ac:bd: 97:7e:6d:6c:4a:d4:62:52:0e:f4:9e:dc:96:b2:9c: 15:f1:df:65:22:04:c0:41:26:f6:ac:01:14:24:53: ff:a6:de:41:87:42:fa:9a:98:6b:67:13:4c:e2:28: 97:ec:58:57:2a:38:7c:5f:af:a9:96:af:b6:55:c1: 43:31:f0:fd:f7:16:d4:c9:e8:04:da:9d:04:74:04: d2:71:a7:5b:d1:8e:fc:e8:d8:83:32:1d:a6:d0:a2: ee:01:cc:71:6c:7b:bb:c5:68:f1:ec:51:74:26:80: 7b:03:ad:4b:fe:62:07:83:b7:52:65:c6:e4:bf:97: 43:ba:0b:31:1d:cc:d1:9b:8e:8b:0e:ee:30:bc:fd: 30:fa:68:f1:4b:49:51:85:71:fb:37:b0:81:99:27: 3f:ef:86:f5:0f:bb:41:40:b6:06:6a:86:bb:80:55: 4c:f1:6a:a9:8b:cf:f8:75:1f:ec:17:f7:f7:3c:ff: ef:7c:53:d0:16:4d:ec:8b:90:6a:e7:7e:3a:d3:88: b7:aa:aa:81:c1:3b:de:99:84:fa:86:c1:46:23:b5: d0:47:9a:98:13:85:76:80:7a:d4:b4:25:d4:39:c2: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:46:9D:3C:AE:4A:F8:B9:93:C2:81:D0:EB:C1:7A:6B:08:3D:78:75 X509v3 Authority Key Identifier: keyid:2F:24:64:75:D7:C9:BA:39:9F:07:F8:43:62:1F:6E:08:13:72:D7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyRkddfJujmfB_hDYh9uCBNy11c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/3EadPK5K-LmTwoHQ68F6awg9eHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/df52a0-5824-42ad-9b4d-d9a1fa90810f/1/LyRkddfJujmfB_hDYh9uCBNy11c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.20.252.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:d5:3a:35:78:46:a2:ae:c2:2e:72:2c:12:21:4a:0b:be:80: 81:55:7c:ee:9e:f1:c1:d8:50:ac:2a:8f:dc:7d:b1:45:61:a8: 4c:31:89:19:3f:d6:80:10:b2:f8:ee:c4:4b:19:5e:f2:3c:b3: 94:7a:38:73:62:26:51:82:15:12:fc:15:73:a1:de:50:ef:44: 75:fb:0a:06:ba:ff:e8:5d:09:2e:8a:51:db:27:eb:4e:a4:92: 16:88:91:a5:36:3c:5b:b7:31:9a:7e:bd:67:b1:74:79:34:58: 8d:86:00:65:87:b1:36:2d:29:63:58:75:0a:d2:26:b0:91:74: bd:f5:bf:ef:44:a3:36:81:5b:85:a9:cc:3c:2c:21:2c:63:09: 3e:f2:81:d1:f9:2a:eb:64:df:c8:3d:3b:91:ad:5a:85:de:14: 55:c6:99:60:9b:ee:e6:f7:ff:b1:30:98:f6:62:d1:39:5f:5b: 18:32:71:a1:d1:81:a1:3b:b4:ec:f4:4f:c8:b1:93:3d:8f:a3: bc:60:22:bb:3d:4d:eb:74:18:95:ab:08:48:e6:00:8d:36:34: 2d:ba:ee:cb:b2:82:6f:ce:58:f6:8c:89:7a:ed:b9:64:2e:79: c7:0d:53:91:8b:8a:9f:ec:a9:7f:2a:ab:68:6e:dd:0d:d5:d3: d5:d4:d6:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAY0NjWZ92IKhg/e947uTkkw0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMjQ2NDc1ZDdjOWJhMzk5ZjA3Zjg0MzYyMWY2ZTA4MTM3 MmQ3NTcwHhcNMjQwMTE1MTQzNjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzQ2OWQzY2FlNGFmOGI5OTNjMjgxZDBlYmMxN2E2YjA4M2Q3ODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3eDu1gXZgD8SdItdiFqMDMbuNDU KpR/PsR5rL2Xfm1sStRiUg70ntyWspwV8d9lIgTAQSb2rAEUJFP/pt5Bh0L6mphr ZxNM4iiX7FhXKjh8X6+plq+2VcFDMfD99xbUyegE2p0EdATScadb0Y786NiDMh2m 0KLuAcxxbHu7xWjx7FF0JoB7A61L/mIHg7dSZcbkv5dDugsxHczRm46LDu4wvP0w +mjxS0lRhXH7N7CBmSc/74b1D7tBQLYGaoa7gFVM8Wqpi8/4dR/sF/f3PP/vfFPQ Fk3si5Bq534604i3qqqBwTvemYT6hsFGI7XQR5qYE4V2gHrUtCXUOcLFawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNxGnTyuSvi5k8KB0OvBemsIPXh1MB8GA1UdIwQY MBaAFC8kZHXXybo5nwf4Q2IfbggTctdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kZjUyYTAtNTgyNC00MmFkLTliNGQt ZDlhMWZhOTA4MTBmLzEvM0VhZFBLNUstTG1Ud29IUTY4RjZhd2c5ZUhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9kZjUyYTAtNTgyNC00MmFkLTliNGQtZDlhMWZhOTA4MTBm LzEvTHlSa2RkZkp1am1mQl9oRFloOXVDQk55MTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RT8MA0G CSqGSIb3DQEBCwUAA4IBAQA91To1eEairsIuciwSIUoLvoCBVXzunvHB2FCsKo/c fbFFYahMMYkZP9aAELL47sRLGV7yPLOUejhzYiZRghUS/BVzod5Q70R1+woGuv/o XQkuilHbJ+tOpJIWiJGlNjxbtzGafr1nsXR5NFiNhgBlh7E2LSljWHUK0iawkXS9 9b/vRKM2gVuFqcw8LCEsYwk+8oHR+SrrZN/IPTuRrVqF3hRVxplgm+7m9/+xMJj2 YtE5X1sYMnGh0YGhO7Ts9E/IsZM9j6O8YCK7PU3rdBiVqwhI5gCNNjQtuu7LsoJv zlj2jIl67blkLnnHDVORi4qf7Kl/Kqtobt0N1dPV1NaL -----END CERTIFICATE-----Generated at Sat Dec 20 07:36:15 2025 by rpki-client