This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/TGdU6PJcHNc7W41rJFs985Us9b4.roa File: TGdU6PJcHNc7W41rJFs985Us9b4.roa (raw, json) Hash identifier: zWlOeC7GsrHeBYfO4Gb4gxmVvQeYdqRMHqcdkveHV34= Subject key identifier: 4C:67:54:E8:F2:5C:1C:D7:3B:5B:8D:6B:24:5B:3D:F3:95:2C:F5:BE Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f Certificate serial: 0199E1A829502B94DFAABF7296233DECA3F3 Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/TGdU6PJcHNc7W41rJFs985Us9b4.roa Signing time: Tue 14 Oct 2025 07:38:38 +0000 ROA not before: Tue 14 Oct 2025 07:38:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42945 IP address blocks: 185.192.100.0/22 maxlen: 22 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:e1:a8:29:50:2b:94:df:aa:bf:72:96:23:3d:ec:a3:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f Validity Not Before: Oct 14 07:38:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4c6754e8f25c1cd73b5b8d6b245b3df3952cf5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:12:08:be:f2:06:93:fa:65:74:7e:81:6f: 42:86:df:be:a1:cf:87:ce:c7:a8:64:90:52:4b:f2: 55:ea:b4:db:19:22:e3:9b:5f:80:b1:a5:65:7b:09: d8:00:e1:fa:6e:9c:2a:39:50:7a:5a:b0:10:21:b9: c0:07:1d:44:f8:78:cb:34:aa:31:4c:2f:b9:41:e2: 43:c5:d6:ef:5e:51:ba:fd:6a:c0:4b:4d:8f:7a:30: fc:74:f5:d6:3c:41:6f:fe:c1:6e:2b:cb:48:d4:cf: f6:73:88:91:e3:2c:52:c0:38:aa:03:ab:4e:e8:95: 31:61:68:de:5d:2a:99:8c:e5:1a:82:8f:ff:20:0f: c4:4a:70:d5:67:03:5f:27:47:07:2a:c7:20:bd:56: 98:2c:55:a2:c2:02:67:9d:47:d9:7d:d4:17:1e:d8: 23:84:97:df:c0:5d:bd:4e:b8:23:1f:3f:c5:e5:5a: 85:d9:34:d9:2b:00:ce:7b:0f:de:77:92:8a:56:e8: 1d:17:cc:c1:c3:2c:93:e7:6c:0d:20:e0:a0:99:ce: c5:a5:9e:8c:91:88:21:d2:de:51:1b:71:3e:23:65: ac:84:ad:c3:3e:03:4f:75:57:a9:59:1a:bd:a0:af: 76:9d:4a:44:2c:9c:60:b3:16:74:f7:c4:3e:f2:77: 8b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:67:54:E8:F2:5C:1C:D7:3B:5B:8D:6B:24:5B:3D:F3:95:2C:F5:BE X509v3 Authority Key Identifier: keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/TGdU6PJcHNc7W41rJFs985Us9b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.100.0/22 Signature Algorithm: sha256WithRSAEncryption 52:02:7b:94:6e:ca:fb:08:ab:37:8c:09:5d:06:9d:15:38:cd: c2:9c:7a:cb:9e:96:ac:6d:5b:2d:ab:b4:1d:66:55:1e:e0:e9: 2e:fe:03:1d:01:b6:14:a1:c7:0a:65:c8:11:db:b4:de:e7:d2: ed:f5:e6:86:9c:17:43:0d:40:f8:0d:17:fc:e3:2f:c7:0c:0f: 01:d2:e9:e6:e1:8b:4c:07:28:8a:1e:a4:9a:81:d4:46:62:20: ae:43:3b:b6:4e:ed:d4:b7:dd:19:70:fc:ea:23:8a:b1:53:be: b5:25:00:e6:28:99:00:e3:eb:22:90:ab:5c:28:0a:22:3b:90: 33:1c:5c:61:58:c9:38:a3:0d:36:c5:74:5f:41:7b:86:bf:ed: 83:49:a7:3b:3e:04:d1:80:50:10:3d:e3:95:ee:02:ed:e2:33: f1:f0:1d:a5:51:4f:43:40:0d:73:74:aa:f9:f4:75:fd:b5:1d: 5f:2a:c3:55:65:59:f9:bb:1b:b4:35:5f:7e:ac:f9:d3:da:ce: 41:b7:12:67:48:4b:33:33:24:48:a3:4c:90:c3:35:15:d9:35: 22:aa:43:e8:3a:80:16:f1:b0:03:95:4d:e9:b3:56:c2:a3:5e: 1f:b2:f4:a8:aa:47:79:08:3f:c7:cf:48:c7:79:d5:48:a0:c7: d9:64:a0:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZnhqClQK5Tfqr9yliM97KPzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4 MWEyOWYwHhcNMjUxMDE0MDczODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YzY3NTRlOGYyNWMxY2Q3M2I1YjhkNmIyNDViM2RmMzk1MmNmNWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsysSCL7yBpP6ZXR+gW9Cht++oc+H zseoZJBSS/JV6rTbGSLjm1+AsaVlewnYAOH6bpwqOVB6WrAQIbnABx1E+HjLNKox TC+5QeJDxdbvXlG6/WrAS02PejD8dPXWPEFv/sFuK8tI1M/2c4iR4yxSwDiqA6tO 6JUxYWjeXSqZjOUago//IA/ESnDVZwNfJ0cHKscgvVaYLFWiwgJnnUfZfdQXHtgj hJffwF29TrgjHz/F5VqF2TTZKwDOew/ed5KKVugdF8zBwyyT52wNIOCgmc7FpZ6M kYgh0t5RG3E+I2WshK3DPgNPdVepWRq9oK92nUpELJxgsxZ098Q+8neL8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFExnVOjyXBzXO1uNayRbPfOVLPW+MB8GA1UdIwQY MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt Mzc1NzUzOWMyYWM5LzEvVEdkVTZQSmNITmM3VzQxckpGczk4NVVzOWI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5 LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucBkMA0G CSqGSIb3DQEBCwUAA4IBAQBSAnuUbsr7CKs3jAldBp0VOM3CnHrLnpasbVstq7Qd ZlUe4Oku/gMdAbYUoccKZcgR27Te59Lt9eaGnBdDDUD4DRf84y/HDA8B0unm4YtM ByiKHqSagdRGYiCuQzu2Tu3Ut90ZcPzqI4qxU761JQDmKJkA4+sikKtcKAoiO5Az HFxhWMk4ow02xXRfQXuGv+2DSac7PgTRgFAQPeOV7gLt4jPx8B2lUU9DQA1zdKr5 9HX9tR1fKsNVZVn5uxu0NV9+rPnT2s5BtxJnSEszMyRIo0yQwzUV2TUiqkPoOoAW 8bADlU3ps1bCo14fsvSoqkd5CD/Hz0jHedVIoMfZZKAN -----END CERTIFICATE-----Generated at Thu Dec 18 14:47:55 2025 by rpki-client