This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/kS95iEA73UuDgxFnKmSJT2LaHFc.roa File: kS95iEA73UuDgxFnKmSJT2LaHFc.roa (raw, json) Hash identifier: ron2OiSe50rN9S9H3DCdDVxBTPgEgdefkklG4Pq+myc= Subject key identifier: 91:2F:79:88:40:3B:DD:4B:83:83:11:67:2A:64:89:4F:62:DA:1C:57 Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515 Certificate serial: 01904F8992FA40E2DB5803D15BE45987416D Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/kS95iEA73UuDgxFnKmSJT2LaHFc.roa Signing time: Tue 25 Jun 2024 13:15:34 +0000 ROA not before: Tue 25 Jun 2024 13:15:34 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 197540 IP address blocks: 2.56.96.0/22 maxlen: 22 5.45.96.0/20 maxlen: 32 5.181.48.0/22 maxlen: 22 5.252.224.0/22 maxlen: 22 37.120.160.0/19 maxlen: 32 37.221.192.0/21 maxlen: 32 45.9.60.0/22 maxlen: 22 45.83.104.0/22 maxlen: 22 45.90.4.0/22 maxlen: 22 45.90.7.0/24 maxlen: 24 45.129.180.0/22 maxlen: 22 45.132.244.0/22 maxlen: 22 45.136.28.0/22 maxlen: 22 45.142.176.0/22 maxlen: 22 45.157.176.0/22 maxlen: 22 46.38.224.0/20 maxlen: 32 46.38.240.0/21 maxlen: 32 46.38.248.0/22 maxlen: 32 46.38.252.0/22 maxlen: 32 46.232.248.0/22 maxlen: 22 81.16.16.0/22 maxlen: 22 85.209.48.0/22 maxlen: 22 85.235.64.0/22 maxlen: 22 89.58.0.0/22 maxlen: 22 89.58.4.0/22 maxlen: 22 89.58.8.0/22 maxlen: 22 89.58.12.0/22 maxlen: 22 89.58.16.0/21 maxlen: 21 89.58.20.0/24 maxlen: 24 89.58.24.0/22 maxlen: 22 89.58.28.0/22 maxlen: 22 89.58.32.0/22 maxlen: 22 89.58.36.0/22 maxlen: 22 89.58.40.0/22 maxlen: 22 89.58.44.0/22 maxlen: 22 89.58.48.0/22 maxlen: 22 89.58.52.0/22 maxlen: 22 89.58.56.0/22 maxlen: 22 89.58.60.0/22 maxlen: 22 91.132.144.0/22 maxlen: 22 91.204.44.0/22 maxlen: 24 92.60.36.0/22 maxlen: 22 93.177.64.0/22 maxlen: 22 152.89.104.0/22 maxlen: 22 185.16.60.0/22 maxlen: 32 185.162.248.0/22 maxlen: 32 185.163.116.0/22 maxlen: 22 185.170.112.0/22 maxlen: 32 185.183.156.0/22 maxlen: 32 185.194.140.0/22 maxlen: 22 185.207.104.0/22 maxlen: 32 185.228.136.0/22 maxlen: 32 185.233.104.0/22 maxlen: 32 185.243.8.0/22 maxlen: 32 185.244.192.0/22 maxlen: 32 188.68.32.0/19 maxlen: 32 192.145.44.0/22 maxlen: 22 193.30.120.0/22 maxlen: 22 193.31.24.0/22 maxlen: 22 194.13.80.0/22 maxlen: 22 194.55.12.0/22 maxlen: 22 194.59.204.0/22 maxlen: 22 195.128.100.0/22 maxlen: 22 213.109.160.0/22 maxlen: 22 2a03:4000::/32 maxlen: 48 2a03:4001::/32 maxlen: 48 2a0a:4cc0::/40 maxlen: 40 2a0a:4cc0:100::/48 maxlen: 48 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:4f:89:92:fa:40:e2:db:58:03:d1:5b:e4:59:87:41:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515 Validity Not Before: Jun 25 13:15:34 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=912f7988403bdd4b838311672a64894f62da1c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fb:3b:36:fc:06:e0:80:3e:b7:03:4e:78:36: 15:27:7a:05:86:b7:f6:58:99:0b:67:e1:af:13:be: 3d:bf:8c:3d:1e:1f:9c:d4:9d:83:f5:f1:1e:8b:12: fc:4a:8f:ad:ca:8d:51:7b:6a:5e:ff:a1:86:5a:66: e2:b1:28:17:62:dc:50:4c:01:dc:a5:40:d5:de:5b: 98:d2:7d:0f:9a:e4:97:0c:46:a2:de:9f:de:30:39: df:1a:a4:21:16:fe:bd:f2:2d:44:9f:e2:ac:9e:26: ef:36:e3:c1:84:a2:5e:06:39:1b:5a:c8:27:24:bf: 51:48:8e:b8:65:89:a2:90:1e:cd:65:aa:cc:3d:61: 14:95:df:bc:9b:bc:ba:08:aa:60:e0:0a:59:69:eb: c8:d8:01:22:ed:07:d9:2a:ad:16:fa:64:af:25:cf: 55:99:a5:8f:76:ce:74:92:a4:69:19:bc:7f:6d:d8: 9b:72:bb:29:a8:4c:f5:6d:0b:07:96:5c:e5:48:3f: bd:79:7e:bb:a4:08:cf:01:e4:49:5a:76:0f:4e:28: d6:9b:62:0c:d0:52:ba:9c:ef:23:4a:64:f5:dd:33: 91:45:e3:30:40:e4:b1:da:68:f8:3e:66:f9:f6:5d: 70:6c:f2:ed:c4:06:c2:30:2f:c0:95:f6:8b:d3:9c: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2F:79:88:40:3B:DD:4B:83:83:11:67:2A:64:89:4F:62:DA:1C:57 X509v3 Authority Key Identifier: keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/kS95iEA73UuDgxFnKmSJT2LaHFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.96.0/22 5.45.96.0/20 5.181.48.0/22 5.252.224.0/22 37.120.160.0/19 37.221.192.0/21 45.9.60.0/22 45.83.104.0/22 45.90.4.0/22 45.129.180.0/22 45.132.244.0/22 45.136.28.0/22 45.142.176.0/22 45.157.176.0/22 46.38.224.0/19 46.232.248.0/22 81.16.16.0/22 85.209.48.0/22 85.235.64.0/22 89.58.0.0/18 91.132.144.0/22 91.204.44.0/22 92.60.36.0/22 93.177.64.0/22 152.89.104.0/22 185.16.60.0/22 185.162.248.0/22 185.163.116.0/22 185.170.112.0/22 185.183.156.0/22 185.194.140.0/22 185.207.104.0/22 185.228.136.0/22 185.233.104.0/22 185.243.8.0/22 185.244.192.0/22 188.68.32.0/19 192.145.44.0/22 193.30.120.0/22 193.31.24.0/22 194.13.80.0/22 194.55.12.0/22 194.59.204.0/22 195.128.100.0/22 213.109.160.0/22 IPv6: 2a03:4000::/31 2a0a:4cc0::-2a0a:4cc0:100:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 28:5f:ac:10:57:e9:84:e7:4f:7f:94:5a:72:cc:76:22:3c:3e: 1e:42:76:a6:ec:f0:69:6d:53:83:e1:a6:df:e1:88:7a:1a:3b: 7f:32:1f:f0:0b:f7:fc:a8:66:be:19:0e:c5:01:f6:65:fb:51: ef:8a:6c:99:94:71:33:c7:65:84:d2:7d:80:0b:fd:06:07:1c: 03:0f:31:5d:fc:ca:7a:38:16:c0:e8:41:f6:78:90:3e:eb:1e: ae:76:03:5c:18:bf:80:2e:10:7a:51:6e:02:25:b7:00:f3:d3: 78:fa:c9:3e:56:1d:ea:54:f3:5c:5f:80:bb:58:df:e0:81:89: 76:39:7b:99:b2:b0:2c:a4:50:bd:64:1b:b7:33:de:13:e7:bf: c9:14:48:36:69:e6:40:85:27:9d:1c:d8:3e:e8:34:11:c7:eb: 4d:db:cc:12:ad:0c:80:75:14:7c:be:53:c6:79:44:7b:79:29: 53:06:04:31:96:c9:aa:a2:5c:c2:5c:b6:8f:28:5f:ab:b3:05: 16:b3:9d:df:0a:40:28:41:b0:da:9e:ea:c1:74:95:40:81:d6: fe:0a:86:6c:8b:fc:25:f3:ed:a5:88:3e:5c:ce:36:d0:74:22: 89:9f:c5:64:b1:41:4c:7d:de:ef:f8:79:ea:b0:9e:ea:6c:06: dc:c8:fe:86 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgISAZBPiZL6QOLbWAPRW+RZh0FtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1 MTY1MTUwHhcNMjQwNjI1MTMxNTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTJmNzk4ODQwM2JkZDRiODM4MzExNjcyYTY0ODk0ZjYyZGExYzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPs7NvwG4IA+twNOeDYVJ3oFhrf2 WJkLZ+GvE749v4w9Hh+c1J2D9fEeixL8So+tyo1Re2pe/6GGWmbisSgXYtxQTAHc pUDV3luY0n0PmuSXDEai3p/eMDnfGqQhFv698i1En+KsnibvNuPBhKJeBjkbWsgn JL9RSI64ZYmikB7NZarMPWEUld+8m7y6CKpg4ApZaevI2AEi7QfZKq0W+mSvJc9V maWPds50kqRpGbx/bdibcrspqEz1bQsHllzlSD+9eX67pAjPAeRJWnYPTijWm2IM 0FK6nO8jSmT13TORReMwQOSx2mj4Pmb59l1wbPLtxAbCMC/AlfaL05yJKwIDAQAB o4IDPDCCAzgwHQYDVR0OBBYEFJEveYhAO91Lg4MRZypkiU9i2hxXMB8GA1UdIwQY MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt NWZiZjlhMjliNmUxLzEva1M5NWlFQTczVXVEZ3hGbkttU0pUMkxhSEZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBUAYIKwYBBQUHAQcBAf8EggE/MIIBOzCCARYEAgABMIIB DgMEAgI4YAMEBAUtYAMEAgW1MAMEAgX84AMEBSV4oAMEAyXdwAMEAi0JPAMEAi1T aAMEAi1aBAMEAi2BtAMEAi2E9AMEAi2IHAMEAi2OsAMEAi2dsAMEBS4m4AMEAi7o +AMEAlEQEAMEAlXRMAMEAlXrQAMEBlk6AAMEAluEkAMEAlvMLAMEAlw8JAMEAl2x QAMEAphZaAMEArkQPAMEArmi+AMEArmjdAMEArmqcAMEArm3nAMEArnCjAMEArnP aAMEArnkiAMEArnpaAMEArnzCAMEArn0wAMEBbxEIAMEAsCRLAMEAsEeeAMEAsEf GAMEAsINUAMEAsI3DAMEAsI7zAMEAsOAZAMEAtVtoDAfBAIAAjAZAwUBKgNAADAQ AwUGKgpMwAMHACoKTMABADANBgkqhkiG9w0BAQsFAAOCAQEAKF+sEFfphOdPf5Ra csx2Ijw+HkJ2puzwaW1Tg+Gm3+GIeho7fzIf8Av3/KhmvhkOxQH2ZftR74psmZRx M8dlhNJ9gAv9BgccAw8xXfzKejgWwOhB9niQPusernYDXBi/gC4QelFuAiW3APPT ePrJPlYd6lTzXF+Au1jf4IGJdjl7mbKwLKRQvWQbtzPeE+e/yRRINmnmQIUnnRzY Pug0EcfrTdvMEq0MgHUUfL5TxnlEe3kpUwYEMZbJqqJcwly2jyhfq7MFFrOd3wpA KEGw2p7qwXSVQIHW/gqGbIv8JfPtpYg+XM420HQiiZ/FZLFBTH3e7/h56rCe6mwG 3Mj+hg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:36:11 2025 by rpki-client