This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/2crGPKQ0A9fPZvX9H6DZSQ7kCKU.roa File: 2crGPKQ0A9fPZvX9H6DZSQ7kCKU.roa (raw, json) Hash identifier: VkiSCQADydDdJYK8BUuUyvBOOASeTu5uySvXrzYweho= Subject key identifier: D9:CA:C6:3C:A4:34:03:D7:CF:66:F5:FD:1F:A0:D9:49:0E:E4:08:A5 Certificate issuer: /CN=e916dc9db4e49de71b2fd0819dae853aeb053b06 Certificate serial: 018E7CDF7D95CF6C12296E2CFDCC32E00BB3 Authority key identifier: E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/2crGPKQ0A9fPZvX9H6DZSQ7kCKU.roa Signing time: Tue 26 Mar 2024 22:26:45 +0000 ROA not before: Tue 26 Mar 2024 22:26:45 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 50340 IP address blocks: 202.181.148.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:7c:df:7d:95:cf:6c:12:29:6e:2c:fd:cc:32:e0:0b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e916dc9db4e49de71b2fd0819dae853aeb053b06 Validity Not Before: Mar 26 22:26:45 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=d9cac63ca43403d7cf66f5fd1fa0d9490ee408a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6c:10:3f:ae:14:77:db:75:b5:f2:ff:42:34: 9e:1a:74:29:67:19:47:ad:89:5d:c2:3a:96:95:fd: a2:48:d1:a1:c7:0f:d3:93:80:26:7f:3b:1a:ff:1e: e4:83:34:d3:f6:a7:3c:2e:be:6a:05:b1:6c:7c:69: f5:81:d8:4f:15:a8:1f:45:5d:4a:64:ff:f4:61:45: b7:a4:83:b6:da:cd:75:ea:b3:63:a5:8b:c8:43:92: 77:13:af:19:8d:aa:e7:60:d3:c3:d6:d7:1e:38:70: 08:03:b9:c1:0d:b6:bf:c8:07:8d:0e:f2:04:4f:12: c1:77:fb:43:d8:79:ca:c0:a3:48:1e:3f:a0:98:70: 1f:71:41:93:af:8f:c9:ad:2a:ea:9e:94:16:e3:ba: ab:54:23:46:79:26:24:5b:69:77:1c:cc:fe:42:0e: 4d:6f:f4:7d:95:24:ce:09:d4:fb:a9:1f:41:50:13: d1:d3:2c:82:ee:5c:df:6e:30:90:bb:21:14:46:7c: 80:21:8e:82:2f:27:16:0d:92:11:06:ba:ac:52:cd: 26:cb:fc:5b:f3:5b:8c:75:29:d3:11:4f:39:20:b4: dd:78:5f:c0:4f:81:fa:22:b9:9a:e3:79:cd:bc:db: 51:4f:f7:04:f5:db:05:b2:9a:9e:0d:a2:e6:3e:4b: d9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CA:C6:3C:A4:34:03:D7:CF:66:F5:FD:1F:A0:D9:49:0E:E4:08:A5 X509v3 Authority Key Identifier: keyid:E9:16:DC:9D:B4:E4:9D:E7:1B:2F:D0:81:9D:AE:85:3A:EB:05:3B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6RbcnbTknecbL9CBna6FOusFOwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/2crGPKQ0A9fPZvX9H6DZSQ7kCKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1af4a5-0d6c-4776-be5c-be852f644201/1/6RbcnbTknecbL9CBna6FOusFOwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.181.148.0/24 Signature Algorithm: sha256WithRSAEncryption 87:27:56:cd:b6:a5:bb:ac:2c:81:c7:9b:de:0e:4a:eb:18:e0: c9:b2:f4:c5:f0:eb:1b:15:55:0f:81:58:70:f2:dd:d5:8d:d7: 3d:6f:66:9c:1f:55:6e:b9:e6:8c:18:d3:5a:68:a9:91:3f:cd: da:2b:34:31:79:76:96:6c:a2:e2:9a:bc:d6:5a:52:de:fb:e3: d9:21:cc:d1:7c:a7:eb:80:ba:3d:e5:b1:16:c2:aa:54:5e:16: c4:95:47:ae:6a:d0:c0:3b:dd:7d:83:d5:7b:38:f0:3f:4b:5f: 46:0a:60:f1:b5:f7:52:c2:81:76:bb:ee:58:6e:35:8d:f8:93: 8d:51:99:14:44:f6:c5:9a:c4:a6:fe:32:05:6f:a8:f1:10:65: a5:a7:33:2d:09:6a:33:05:ec:7f:30:1f:34:6d:07:26:65:21: 97:eb:85:8a:66:dd:da:f8:fd:b6:29:6a:f2:1c:58:a9:3c:a6: bc:c1:6d:d6:9c:2b:ea:0c:3b:25:cc:d8:45:2c:c2:e2:cb:93: 18:e2:01:47:e7:94:df:b3:97:b4:fd:a0:b2:ba:7d:16:48:5d: df:75:88:68:6e:22:df:7b:38:b6:54:73:5b:53:4f:f5:1b:68: 58:ed:b7:fc:e5:e3:d9:91:79:68:43:fe:ec:94:9c:84:43:7e: d6:ce:84:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAY58332Vz2wSKW4s/cwy4AuzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MTZkYzlkYjRlNDlkZTcxYjJmZDA4MTlkYWU4NTNhZWIw NTNiMDYwHhcNMjQwMzI2MjIyNjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWNhYzYzY2E0MzQwM2Q3Y2Y2NmY1ZmQxZmEwZDk0OTBlZTQwOGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mwQP64Ud9t1tfL/QjSeGnQpZxlH rYldwjqWlf2iSNGhxw/Tk4Amfzsa/x7kgzTT9qc8Lr5qBbFsfGn1gdhPFagfRV1K ZP/0YUW3pIO22s116rNjpYvIQ5J3E68ZjarnYNPD1tceOHAIA7nBDba/yAeNDvIE TxLBd/tD2HnKwKNIHj+gmHAfcUGTr4/JrSrqnpQW47qrVCNGeSYkW2l3HMz+Qg5N b/R9lSTOCdT7qR9BUBPR0yyC7lzfbjCQuyEURnyAIY6CLycWDZIRBrqsUs0my/xb 81uMdSnTEU85ILTdeF/AT4H6Irma43nNvNtRT/cE9dsFspqeDaLmPkvZewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNnKxjykNAPXz2b1/R+g2UkO5AilMB8GA1UdIwQY MBaAFOkW3J205J3nGy/QgZ2uhTrrBTsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlJiY25iVGtuZWNiTDlDQm5hNkZPdXNGT3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xYWY0YTUtMGQ2Yy00Nzc2LWJlNWMt YmU4NTJmNjQ0MjAxLzEvMmNyR1BLUTBBOWZQWnZYOUg2RFpTUTdrQ0tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS8xYWY0YTUtMGQ2Yy00Nzc2LWJlNWMtYmU4NTJmNjQ0MjAx LzEvNlJiY25iVGtuZWNiTDlDQm5hNkZPdXNGT3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyrWUMA0G CSqGSIb3DQEBCwUAA4IBAQCHJ1bNtqW7rCyBx5veDkrrGODJsvTF8OsbFVUPgVhw 8t3Vjdc9b2acH1VuueaMGNNaaKmRP83aKzQxeXaWbKLimrzWWlLe++PZIczRfKfr gLo95bEWwqpUXhbElUeuatDAO919g9V7OPA/S19GCmDxtfdSwoF2u+5YbjWN+JON UZkURPbFmsSm/jIFb6jxEGWlpzMtCWozBex/MB80bQcmZSGX64WKZt3a+P22KWry HFipPKa8wW3WnCvqDDslzNhFLMLiy5MY4gFH55Tfs5e0/aCyun0WSF3fdYhobiLf ezi2VHNbU0/1G2hY7bf85ePZkXloQ/7slJyEQ37WzoRI -----END CERTIFICATE-----Generated at Thu Dec 18 22:34:33 2025 by rpki-client