This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/XIh0Bx99gbe1KU5qhR7VwBzdAq4.roa File: XIh0Bx99gbe1KU5qhR7VwBzdAq4.roa (raw, json) Hash identifier: xUhV5ugul7LaSlMypwLB2SzLG/R2Pa8p7ZncAU6mJFE= Subject key identifier: 5C:88:74:07:1F:7D:81:B7:B5:29:4E:6A:85:1E:D5:C0:1C:DD:02:AE Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654 Certificate serial: 01936906BE90BB9B2D4A7D46DCCB0D5AD5DA Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/XIh0Bx99gbe1KU5qhR7VwBzdAq4.roa Signing time: Tue 26 Nov 2024 15:11:09 +0000 ROA not before: Tue 26 Nov 2024 15:11:09 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 8368 IP address blocks: 46.243.24.0/21 maxlen: 24 85.158.208.0/21 maxlen: 24 94.158.248.0/24 maxlen: 24 178.132.8.0/21 maxlen: 24 188.64.72.0/21 maxlen: 24 188.118.0.0/18 maxlen: 24 2001:4c40::/32 maxlen: 48 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:69:06:be:90:bb:9b:2d:4a:7d:46:dc:cb:0d:5a:d5:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654 Validity Not Before: Nov 26 15:11:09 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=5c8874071f7d81b7b5294e6a851ed5c01cdd02ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a4:cc:60:8c:d8:ab:a4:af:da:8a:7b:19:2a: 46:88:4d:7d:92:51:cf:b5:41:3a:60:12:b3:48:13: 7f:84:01:ff:51:fe:ac:c4:44:9c:93:c8:ff:00:82: 4a:c7:17:03:a3:3e:c7:b2:67:bc:91:ef:cc:f9:0a: 13:9e:39:d7:9c:14:8e:d3:c8:8a:6b:02:f4:0f:4a: 46:7d:84:85:02:23:81:1f:dd:3d:a0:ee:72:c3:d1: bd:0f:4a:e7:d6:41:76:28:4e:89:c2:2c:b9:51:64: a0:bb:00:a5:af:c2:e1:e4:c5:c5:8d:1e:82:22:fe: 4d:ba:6d:21:48:e2:95:03:12:cc:18:45:20:f5:59: 53:4f:8a:11:a3:49:67:40:e7:3d:c9:2c:23:6c:79: f2:14:50:a5:97:fc:1f:69:b2:f2:78:00:f7:f7:23: 15:fc:a0:99:dc:e9:f5:ea:ad:cd:4d:9c:69:5c:53: 88:06:b7:2a:48:f8:92:6d:92:c4:d9:d1:59:62:3b: 63:51:9c:35:64:3e:45:a4:84:be:c7:7d:c4:45:91: 21:af:1c:8e:65:27:f9:17:65:3d:9c:47:07:c0:37: 30:f3:12:90:82:93:de:01:7d:44:2b:24:90:f5:56: 82:38:27:2d:95:7b:cb:36:77:2b:30:e0:ec:70:f9: eb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:88:74:07:1F:7D:81:B7:B5:29:4E:6A:85:1E:D5:C0:1C:DD:02:AE X509v3 Authority Key Identifier: keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/XIh0Bx99gbe1KU5qhR7VwBzdAq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.24.0/21 85.158.208.0/21 94.158.248.0/24 178.132.8.0/21 188.64.72.0/21 188.118.0.0/18 IPv6: 2001:4c40::/32 Signature Algorithm: sha256WithRSAEncryption 5e:1f:42:f4:d3:e8:9f:3b:e3:10:11:4c:08:0e:de:f6:88:ca: 7f:9b:07:f3:de:6d:e9:e7:7e:8b:ef:06:b1:a5:98:78:d4:6f: 09:9f:b5:17:e0:12:c8:bc:21:a0:ba:96:34:f0:c2:c1:dc:c3: 1a:91:db:11:ae:76:25:b1:b8:b6:56:eb:0f:df:6c:7f:19:22: c1:bb:8e:92:49:a4:54:c1:1e:ec:5c:f9:db:6f:5a:5d:ed:59: be:04:3c:b1:e8:83:12:a4:88:b6:9b:d6:ee:3a:1a:88:df:48: cb:13:77:dc:b8:f0:02:64:db:16:8c:85:5c:08:0e:d9:5a:e6: e9:fc:a8:56:69:38:2a:65:51:75:04:f7:e4:2a:4a:4c:df:9e: d1:7f:c7:dd:85:e4:a3:bb:04:0b:48:7e:63:8b:16:82:13:be: 4b:97:57:c9:40:ad:30:6b:49:97:fd:cd:08:7e:59:7e:ea:1a: 03:b9:37:08:33:bc:bc:36:88:d8:6f:88:fe:52:26:62:59:df: e2:a4:f0:9a:c1:40:05:4f:28:df:a7:51:2a:f3:37:05:e0:e1: aa:7e:f9:57:2d:3d:b4:20:0f:67:a6:f3:a6:cb:1c:3c:28:07: 81:e1:04:85:84:fc:8f:49:7a:08:3c:ed:c3:34:be:8b:1f:e1: df:97:b5:0f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZNpBr6Qu5stSn1G3MsNWtXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGE1NTNlMDVmMDMxOWJmNDUyZmEyMDZjMTRjY2RhODcz MDQ2NTQwHhcNMjQxMTI2MTUxMTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yzg4NzQwNzFmN2Q4MWI3YjUyOTRlNmE4NTFlZDVjMDFjZGQwMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqTMYIzYq6Sv2op7GSpGiE19klHP tUE6YBKzSBN/hAH/Uf6sxESck8j/AIJKxxcDoz7Hsme8ke/M+QoTnjnXnBSO08iK awL0D0pGfYSFAiOBH909oO5yw9G9D0rn1kF2KE6Jwiy5UWSguwClr8Lh5MXFjR6C Iv5Num0hSOKVAxLMGEUg9VlTT4oRo0lnQOc9ySwjbHnyFFCll/wfabLyeAD39yMV /KCZ3On16q3NTZxpXFOIBrcqSPiSbZLE2dFZYjtjUZw1ZD5FpIS+x33ERZEhrxyO ZSf5F2U9nEcHwDcw8xKQgpPeAX1EKySQ9VaCOCctlXvLNncrMODscPnrLwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFFyIdAcffYG3tSlOaoUe1cAc3QKuMB8GA1UdIwQY MBaAFD2KVT4F8DGb9FL6IGwUzNqHMEZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1Mjct MGZiNDgyM2Y1Yjg3LzEvWEloMEJ4OTlnYmUxS1U1cWhSN1Z3QnpkQXE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1MjctMGZiNDgyM2Y1Yjg3 LzEvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDLvMYAwQD VZ7QAwQAXp74AwQDsoQIAwQDvEBIAwQGvHYAMA0EAgACMAcDBQAgAUxAMA0GCSqG SIb3DQEBCwUAA4IBAQBeH0L00+ifO+MQEUwIDt72iMp/mwfz3m3p536L7waxpZh4 1G8Jn7UX4BLIvCGgupY08MLB3MMakdsRrnYlsbi2VusP32x/GSLBu46SSaRUwR7s XPnbb1pd7Vm+BDyx6IMSpIi2m9buOhqI30jLE3fcuPACZNsWjIVcCA7ZWubp/KhW aTgqZVF1BPfkKkpM357Rf8fdheSjuwQLSH5jixaCE75Ll1fJQK0wa0mX/c0Ifll+ 6hoDuTcIM7y8NojYb4j+UiZiWd/ipPCawUAFTyjfp1Eq8zcF4OGqfvlXLT20IA9n pvOmyxw8KAeB4QSFhPyPSXoIPO3DNL6LH+Hfl7UP -----END CERTIFICATE-----Generated at Fri Dec 19 04:55:04 2025 by rpki-client