This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS211350.roa File: AS211350.roa (raw, json) Hash identifier: zVDLONLh5pyKiZDHBHkMNoG1sXWd4UqRoGp7Yt65bbE= Subject key identifier: F9:F3:5D:CE:3E:2E:4A:21:D4:62:66:EB:14:B5:7A:85:9E:12:1F:E4 Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 788CA8C49940FB59820AD504943EE769A69C5B7B Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS211350.roa Signing time: Fri 04 Jul 2025 07:51:28 +0000 ROA not before: Fri 04 Jul 2025 07:46:28 +0000 ROA not after: Fri 03 Jul 2026 07:51:28 +0000 asID: 211350 IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48 2a07:54c4:1755::/48 maxlen: 48 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 78:8c:a8:c4:99:40:fb:59:82:0a:d5:04:94:3e:e7:69:a6:9c:5b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:28 2025 GMT Not After : Jul 3 07:51:28 2026 GMT Subject: CN=F9F35DCE3E2E4A21D46266EB14B57A859E121FE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:46:53:77:43:b4:a6:c2:9d:31:d3:a3:e7:9d: 60:f2:a0:8e:f2:4c:63:fd:0d:2b:fb:7e:e1:84:ba: 37:7a:e6:02:e5:bc:86:7c:4a:da:e7:88:e8:e8:7a: 23:75:60:53:0f:51:6d:75:be:9b:86:1d:5c:bd:a7: 04:fb:18:78:fa:4e:58:da:db:33:b3:cc:0f:02:28: 79:54:26:ab:ea:50:d4:ff:1e:86:3a:6b:e7:bb:e3: 27:09:b0:4e:ac:ed:96:2e:3a:a6:a8:3e:8d:86:59: 63:64:61:c7:88:b5:47:fb:66:28:27:10:0c:cd:87: d4:a8:f7:12:1d:b2:1a:37:b3:98:7b:42:06:58:9e: cd:55:ae:bc:d1:04:b3:78:9c:b8:bc:fa:10:d9:c2: ce:ec:e6:79:3e:2d:d2:a3:c4:52:fe:06:3b:16:5a: e8:cf:3f:a9:00:a2:50:ef:eb:8a:4e:1a:e9:18:08: 5f:23:68:a4:c9:19:fa:27:65:08:83:28:cf:98:fb: 47:0a:3e:41:be:69:a2:42:00:2a:20:ba:60:db:d4: 1e:6b:28:98:be:09:07:8e:27:aa:c5:67:3f:b0:35: 35:58:34:2f:e8:a2:a2:cc:4e:8d:e8:52:20:2c:33: 07:a7:21:8d:4b:b4:32:c4:f1:e7:4a:d0:51:66:e4: a7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F3:5D:CE:3E:2E:4A:21:D4:62:66:EB:14:B5:7A:85:9E:12:1F:E4 X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS211350.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c2:b00b::/48 2a07:54c4:1755::/48 Signature Algorithm: sha256WithRSAEncryption 62:97:b6:2f:01:39:9f:37:f0:cf:c9:d0:73:ee:b7:9d:50:e9: 64:01:08:49:09:65:87:bc:f4:8d:c4:8a:d0:00:26:3c:57:76: 1c:fa:c1:8a:4f:81:03:aa:0d:34:a9:8b:3b:0d:80:13:f1:22: 49:5a:20:f0:52:ac:df:bb:8f:f1:a6:2c:d5:4d:98:38:73:6d: bf:32:14:fb:51:27:2b:41:b4:2d:1d:12:aa:ba:d6:f8:69:a7: 67:b7:6a:d2:ac:93:c9:dc:3a:d8:e3:f5:db:d9:90:dc:41:8b: fd:01:5b:3e:67:f9:90:44:d6:e1:e3:a0:d3:37:8f:f0:e7:dd: c7:ea:dd:9a:37:74:6b:c7:3a:8d:a2:c5:c7:3c:de:f2:fd:ec: fb:7b:aa:35:0f:4c:67:5c:a2:e0:ee:20:8b:00:1a:1e:7e:62: 28:f8:a7:b8:93:19:52:29:b4:59:70:db:bc:11:cd:40:f3:ee: 1d:c7:d9:7d:29:6f:71:3f:ca:d8:39:69:8b:ec:4a:46:f2:83: dc:42:8e:9a:be:bf:c7:b8:0b:37:c8:16:0c:01:f1:09:c7:75: d3:5c:cf:0e:2b:6f:2c:51:cf:c5:b0:cd:e7:2f:79:ec:d2:5e: 17:69:63:89:50:eb:eb:ec:bc:d8:0d:e6:b6:5c:bd:ab:a7:da: 4f:f7:e7:0d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUeIyoxJlA+1mCCtUElD7naaacW3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjhaFw0yNjA3MDMwNzUxMjhaMDMxMTAvBgNV BAMTKEY5RjM1RENFM0UyRTRBMjFENDYyNjZFQjE0QjU3QTg1OUUxMjFGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpRlN3Q7Smwp0x06PnnWDyoI7y TGP9DSv7fuGEujd65gLlvIZ8StrniOjoeiN1YFMPUW11vpuGHVy9pwT7GHj6Tlja 2zOzzA8CKHlUJqvqUNT/HoY6a+e74ycJsE6s7ZYuOqaoPo2GWWNkYceItUf7Zign EAzNh9So9xIdsho3s5h7QgZYns1VrrzRBLN4nLi8+hDZws7s5nk+LdKjxFL+BjsW WujPP6kAolDv64pOGukYCF8jaKTJGfonZQiDKM+Y+0cKPkG+aaJCACogumDb1B5r KJi+CQeOJ6rFZz+wNTVYNC/ooqLMTo3oUiAsMwenIY1LtDLE8edK0FFm5KfLAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQU+fNdzj4uSiHUYmbrFLV6hZ4SH+QwHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjExMzUwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgdU wrALAwcAKgdUxBdVMA0GCSqGSIb3DQEBCwUAA4IBAQBil7YvATmfN/DPydBz7red UOlkAQhJCWWHvPSNxIrQACY8V3Yc+sGKT4EDqg00qYs7DYAT8SJJWiDwUqzfu4/x pizVTZg4c22/MhT7UScrQbQtHRKqutb4aadnt2rSrJPJ3DrY4/Xb2ZDcQYv9AVs+ Z/mQRNbh46DTN4/w593H6t2aN3RrxzqNosXHPN7y/ez7e6o1D0xnXKLg7iCLABoe fmIo+Ke4kxlSKbRZcNu8Ec1A8+4dx9l9KW9xP8rYOWmL7EpG8oPcQo6avr/HuAs3 yBYMAfEJx3XTXM8OK28sUc/FsM3nL3ns0l4XaWOJUOvr7LzYDea2XL2rp9pP9+cN -----END CERTIFICATE-----Generated at Sat Nov 22 22:04:46 2025 by rpki-client