This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Tm-76GteUw0DAGsREvBrQVrpd30.roa File: Tm-76GteUw0DAGsREvBrQVrpd30.roa (raw, json) Hash identifier: VI+dnPU+3mRGyofjlnfMasFvyJ/xUP/m1vDLb6N4rRM= Subject key identifier: 4E:6F:BB:E8:6B:5E:53:0D:03:00:6B:11:12:F0:6B:41:5A:E9:77:7D Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c Certificate serial: 019710B2AE76945CD8ABE52D2168327BA000 Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Tm-76GteUw0DAGsREvBrQVrpd30.roa Signing time: Tue 27 May 2025 07:43:54 +0000 ROA not before: Tue 27 May 2025 07:43:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201089 IP address blocks: 185.124.148.0/24 maxlen: 24 185.124.150.0/24 maxlen: 24 185.124.151.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:10:b2:ae:76:94:5c:d8:ab:e5:2d:21:68:32:7b:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c Validity Not Before: May 27 07:43:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4e6fbbe86b5e530d03006b1112f06b415ae9777d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ef:94:42:6d:6e:86:9a:8f:03:e7:6c:2b:ff: 96:74:45:43:e6:05:d0:b6:0a:7d:36:a7:fb:f3:c5: 2b:b6:a5:83:6e:7e:e4:d5:f7:5f:33:66:99:12:40: de:d0:9e:69:74:88:e2:f5:97:7b:49:66:0a:1e:01: 38:17:f2:0d:59:d6:ce:06:74:3c:48:42:13:c7:7f: 69:ff:35:fe:ca:23:92:70:03:9f:87:d8:f3:bd:a3: dc:fe:cd:8c:45:0b:2d:92:ba:be:50:19:86:d0:1e: 30:e1:f0:54:6e:1e:e5:13:e2:4e:e6:d5:22:48:1a: 58:19:fb:a0:1f:bf:1e:11:d9:b2:f0:c4:9e:19:14: 56:7f:c9:e1:ae:7e:33:a4:69:99:16:29:85:44:64: 34:42:5f:04:c5:1f:b6:69:4e:1b:b0:e3:30:63:11: 8a:22:05:4d:d1:01:74:c3:01:95:eb:69:f9:cc:82: 48:19:45:44:70:11:17:4b:20:2b:b9:1f:b3:fa:91: 8d:57:f7:55:64:39:a0:33:f6:9d:96:69:ec:69:1c: eb:05:3b:c8:5f:57:33:81:91:8c:33:14:57:6d:8e: dd:1c:43:34:07:8b:a4:de:de:24:3f:9f:90:bd:56: a6:0e:16:4b:91:6c:59:06:db:b2:0e:e7:84:65:c5: b9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6F:BB:E8:6B:5E:53:0D:03:00:6B:11:12:F0:6B:41:5A:E9:77:7D X509v3 Authority Key Identifier: keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Tm-76GteUw0DAGsREvBrQVrpd30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.148.0/24 185.124.150.0/23 Signature Algorithm: sha256WithRSAEncryption 51:62:54:ec:d5:e9:b5:a0:67:9f:4f:02:6a:8f:75:45:c8:a6: 06:2e:63:e7:e6:74:c8:bc:e7:dd:0f:2c:09:f6:cb:24:b1:d1: 87:93:e3:c2:56:5d:4b:ad:c6:8c:23:1d:28:fa:05:a1:29:27: 2c:8a:49:7f:d1:ae:b5:86:55:73:8d:a9:86:3f:c1:c5:90:d1: ba:13:1e:8c:95:9b:18:7d:4a:42:d8:bb:bf:68:88:6c:0c:4b: d1:e0:a4:f5:0e:91:3f:59:a0:ed:14:34:2c:93:c5:34:6b:fc: 20:89:ab:f2:52:32:c9:1c:b2:c1:4b:d4:97:51:ff:0f:4a:56: e2:cc:2c:19:3d:2a:5a:8b:52:57:bf:c3:0a:3a:78:19:8e:9a: b4:c3:80:0b:16:4e:74:ac:6a:ee:ec:38:de:15:f7:21:bb:b8: 76:db:15:88:92:1c:0b:8b:a0:e1:33:8b:f7:56:77:51:ee:36: 9b:ec:0d:df:67:0c:09:79:1b:76:19:3f:ee:ca:dd:92:b0:7c: f4:0f:7c:14:65:4d:83:9e:0a:f4:39:02:57:b6:42:0c:75:e3: 6f:2b:41:ab:5a:a0:d0:ae:d4:db:cc:64:4c:e4:d2:76:77:b9: cc:83:f9:0d:04:0c:fa:8d:6e:7d:30:73:dc:09:49:dd:43:e9: f0:fb:cc:55 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZcQsq52lFzYq+UtIWgye6AAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMmY4YjJiOTQ3MjFlOTI4ZjYxODhiNWNmMTUwNTMxNDRk ZWRmOGMwHhcNMjUwNTI3MDc0MzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTZmYmJlODZiNWU1MzBkMDMwMDZiMTExMmYwNmI0MTVhZTk3NzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle+UQm1uhpqPA+dsK/+WdEVD5gXQ tgp9Nqf788UrtqWDbn7k1fdfM2aZEkDe0J5pdIji9Zd7SWYKHgE4F/INWdbOBnQ8 SEITx39p/zX+yiOScAOfh9jzvaPc/s2MRQstkrq+UBmG0B4w4fBUbh7lE+JO5tUi SBpYGfugH78eEdmy8MSeGRRWf8nhrn4zpGmZFimFRGQ0Ql8ExR+2aU4bsOMwYxGK IgVN0QF0wwGV62n5zIJIGUVEcBEXSyAruR+z+pGNV/dVZDmgM/adlmnsaRzrBTvI X1czgZGMMxRXbY7dHEM0B4uk3t4kP5+QvVamDhZLkWxZBtuyDueEZcW5YQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE5vu+hrXlMNAwBrERLwa0Fa6Xd9MB8GA1UdIwQY MBaAFA8viyuUch6Sj2GItc8VBTFE3t+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHktTEs1UnlIcEtQWVlpMXp4VUZNVVRlMzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80ZTU5MDItZTI4My00OTE2LWEzM2Mt NzIyNmE4ODQ1ZTAxLzEvVG0tNzZHdGVVdzBEQUdzUkV2QnJRVnJwZDMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80ZTU5MDItZTI4My00OTE2LWEzM2MtNzIyNmE4ODQ1ZTAx LzEvRHktTEs1UnlIcEtQWVlpMXp4VUZNVVRlMzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXyUAwQB uXyWMA0GCSqGSIb3DQEBCwUAA4IBAQBRYlTs1em1oGefTwJqj3VFyKYGLmPn5nTI vOfdDywJ9ssksdGHk+PCVl1LrcaMIx0o+gWhKScsikl/0a61hlVzjamGP8HFkNG6 Ex6MlZsYfUpC2Lu/aIhsDEvR4KT1DpE/WaDtFDQsk8U0a/wgiavyUjLJHLLBS9SX Uf8PSlbizCwZPSpai1JXv8MKOngZjpq0w4ALFk50rGru7DjeFfchu7h22xWIkhwL i6DhM4v3VndR7jab7A3fZwwJeRt2GT/uyt2SsHz0D3wUZU2Dngr0OQJXtkIMdeNv K0GrWqDQrtTbzGRM5NJ2d7nMg/kNBAz6jW59MHPcCUndQ+nw+8xV -----END CERTIFICATE-----Generated at Fri Dec 19 04:54:26 2025 by rpki-client