This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/kxljmsoERlDuanvL-jLdVpNnv-s.roa File: kxljmsoERlDuanvL-jLdVpNnv-s.roa (raw, json) Hash identifier: 5TAK9AIk+J6h2Hx8/CRN2BSdCHdNA2cgxHLAHnyXf48= Subject key identifier: 93:19:63:9A:CA:04:46:50:EE:6A:7B:CB:FA:32:DD:56:93:67:BF:EB Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56 Certificate serial: 0189BB90D698817371621D42E6F18E6190E1 Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/kxljmsoERlDuanvL-jLdVpNnv-s.roa Signing time: Thu 03 Aug 2023 13:22:58 +0000 ROA not before: Thu 03 Aug 2023 13:22:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 58030 IP address blocks: 91.238.0.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:bb:90:d6:98:81:73:71:62:1d:42:e6:f1:8e:61:90:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56 Validity Not Before: Aug 3 13:22:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=9319639aca044650ee6a7bcbfa32dd569367bfeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1e:6d:ae:92:90:b8:56:67:66:a4:6a:50:83: 01:da:b8:40:a9:ec:ac:6a:9a:41:e0:e2:7a:88:fb: 15:fa:b7:97:46:cf:28:f8:79:29:95:44:d2:df:2c: 1a:c4:3b:f0:1a:da:9e:71:f4:6b:80:3e:eb:bb:62: dc:8f:8c:a1:b9:8e:3c:c5:fb:f3:98:98:9f:fb:60: d0:a3:ac:1d:87:95:ac:90:56:88:9b:5a:47:dc:12: 38:43:d9:2b:3c:06:68:f8:d8:25:54:2f:41:8b:39: 69:ad:00:2b:fc:85:94:bf:a5:0f:3b:be:c4:80:ec: 13:07:b6:94:93:15:a7:09:f4:ee:57:74:84:04:35: ec:eb:5a:50:16:87:27:a8:c0:dc:a3:ec:f8:2a:83: 30:13:3c:ea:78:36:96:0f:af:bc:cf:17:af:11:a3: 97:78:a7:c4:7e:9e:96:be:68:d3:a3:3c:35:90:29: 3c:9b:96:6a:54:84:b2:e6:a0:a7:52:cf:7c:c9:1f: 82:96:d3:03:8f:f7:1c:59:15:06:81:aa:34:51:40: a9:3e:e5:93:d9:f9:8c:11:68:a3:22:13:41:32:67: 90:54:d2:91:80:5f:d6:61:c4:ab:a6:40:94:a5:c4: a0:46:b0:ba:e7:1f:63:5b:6f:0e:44:f2:b1:e8:4a: 26:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:19:63:9A:CA:04:46:50:EE:6A:7B:CB:FA:32:DD:56:93:67:BF:EB X509v3 Authority Key Identifier: keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/kxljmsoERlDuanvL-jLdVpNnv-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.0.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:41:f0:9d:53:11:a9:b2:a2:38:a8:71:c9:b6:34:d6:6a:f2: b9:5e:f5:9d:2d:69:86:c5:82:dd:4a:8c:0f:21:9a:7e:cf:df: 8c:64:4e:df:8a:c7:a7:17:a0:74:93:62:9c:1e:ac:a3:58:36: a7:4e:54:91:64:27:46:fe:50:7d:53:60:a1:83:21:7f:67:66: f2:45:2b:bd:20:7c:5e:bd:94:f8:a7:a6:c4:f1:b7:4d:02:0c: 5a:fb:0c:21:1a:2b:80:ab:b9:2a:d7:e4:6b:13:fb:20:8e:69: e0:6d:98:03:7c:6a:3a:9c:61:1b:c1:69:81:56:ff:90:18:ac: 09:a4:8d:fa:c7:1a:18:cc:41:7b:3e:7e:3a:e2:16:d8:ec:83: 96:e8:d4:22:d6:5d:d2:5f:81:1a:8d:b7:34:72:9a:79:ee:5e: 3f:11:d7:20:98:ed:73:16:5c:b0:03:49:13:b6:71:46:54:49: cd:07:e6:13:ed:e2:d7:3b:d7:cb:41:59:da:f9:4d:a4:1a:79: 76:c7:82:6b:9a:6a:59:f5:5a:4f:25:f8:e8:63:98:5a:20:9b: 4e:2f:70:1d:58:66:27:8a:91:28:7f:5b:20:81:fb:5a:67:a7: 97:e4:53:c7:b1:ad:06:5a:af:c4:a5:fb:20:b5:d3:31:c1:c8: c8:8b:3a:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAYm7kNaYgXNxYh1C5vGOYZDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNWU2NmIyNzU5ZTUwYmI2OWJiMGE0NDA5ZWViM2JhNDhj NDZjNTYwHhcNMjMwODAzMTMyMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzE5NjM5YWNhMDQ0NjUwZWU2YTdiY2JmYTMyZGQ1NjkzNjdiZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR5trpKQuFZnZqRqUIMB2rhAqeys appB4OJ6iPsV+reXRs8o+HkplUTS3ywaxDvwGtqecfRrgD7ru2Lcj4yhuY48xfvz mJif+2DQo6wdh5WskFaIm1pH3BI4Q9krPAZo+NglVC9BizlprQAr/IWUv6UPO77E gOwTB7aUkxWnCfTuV3SEBDXs61pQFocnqMDco+z4KoMwEzzqeDaWD6+8zxevEaOX eKfEfp6WvmjTozw1kCk8m5ZqVISy5qCnUs98yR+CltMDj/ccWRUGgao0UUCpPuWT 2fmMEWijIhNBMmeQVNKRgF/WYcSrpkCUpcSgRrC65x9jW28ORPKx6EomAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJMZY5rKBEZQ7mp7y/oy3VaTZ7/rMB8GA1UdIwQY MBaAFFpeZrJ1nlC7absKRAnus7pIxGxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2w1bXNuV2VVTHRwdXdwRUNlNnp1a2pFYkZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80Zjc2YjQtN2Q1Ni00N2EwLWFjNWIt NjUzZjIzOWZlOWEwLzEva3hsam1zb0VSbER1YW52TC1qTGRWcE5udi1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi80Zjc2YjQtN2Q1Ni00N2EwLWFjNWItNjUzZjIzOWZlOWEw LzEvV2w1bXNuV2VVTHRwdXdwRUNlNnp1a2pFYkZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+4AMA0G CSqGSIb3DQEBCwUAA4IBAQBMQfCdUxGpsqI4qHHJtjTWavK5XvWdLWmGxYLdSowP IZp+z9+MZE7fisenF6B0k2KcHqyjWDanTlSRZCdG/lB9U2ChgyF/Z2byRSu9IHxe vZT4p6bE8bdNAgxa+wwhGiuAq7kq1+RrE/sgjmngbZgDfGo6nGEbwWmBVv+QGKwJ pI36xxoYzEF7Pn464hbY7IOW6NQi1l3SX4Eajbc0cpp57l4/EdcgmO1zFlywA0kT tnFGVEnNB+YT7eLXO9fLQVna+U2kGnl2x4JrmmpZ9VpPJfjoY5haIJtOL3AdWGYn ipEof1sggftaZ6eX5FPHsa0GWq/EpfsgtdMxwcjIizoK -----END CERTIFICATE-----Generated at Thu Dec 18 12:49:34 2025 by rpki-client