This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2ToSphEk6aaIJKWESVtORQJH9-8.roa File: 2ToSphEk6aaIJKWESVtORQJH9-8.roa (raw, json) Hash identifier: kAXPiieCIag67XaJRPhWrdhFQ+eO/0lAC1PAANs657A= Subject key identifier: D9:3A:12:A6:11:24:E9:A6:88:24:A5:84:49:5B:4E:45:02:47:F7:EF Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 01891BCDABE1F223FFDC79C2BDA88CBEE852 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2ToSphEk6aaIJKWESVtORQJH9-8.roa Signing time: Mon 03 Jul 2023 12:50:10 +0000 ROA not before: Mon 03 Jul 2023 12:50:10 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 43043 IP address blocks: 84.32.61.0/24 maxlen: 24 84.32.107.0/24 maxlen: 24 84.32.11.0/24 maxlen: 24 84.32.46.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:1b:cd:ab:e1:f2:23:ff:dc:79:c2:bd:a8:8c:be:e8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jul 3 12:50:10 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=d93a12a61124e9a68824a584495b4e450247f7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e8:d0:d0:76:53:38:99:1a:3b:73:55:0c:ec: 1e:f2:db:00:18:ed:24:e6:64:cf:bf:71:06:27:ac: 14:93:7d:52:1f:13:ba:4a:9b:69:17:2a:78:e8:47: 04:ab:26:29:49:46:f8:0f:e0:c9:e8:84:67:a2:11: 76:3d:5f:26:34:e2:3a:be:d4:4a:1c:5c:09:e0:58: 87:f9:b6:6f:74:c0:1e:85:ab:46:ed:17:52:19:47: 81:b2:47:34:00:c4:60:db:bc:99:36:a5:87:ff:57: 39:af:3e:74:25:50:8a:67:8f:19:e3:95:07:3e:06: 11:db:cf:98:63:56:df:b6:5c:03:a0:44:c7:da:75: 51:e3:14:d9:07:68:4b:d5:2b:2a:1e:98:f4:2e:e7: 2f:10:be:e9:b1:08:f2:44:ca:8d:fa:e1:0e:e7:71: 57:80:45:09:e6:3f:54:04:7e:61:19:9a:63:48:e2: f2:f4:cb:44:e2:d7:57:73:0a:62:bd:15:bb:22:ae: 6f:a0:97:4b:fc:da:55:a2:ed:39:3c:4a:9f:68:c6: a1:c6:66:55:27:cc:b9:9d:4f:ab:23:82:c8:a5:74: 08:18:94:b8:7d:4b:16:3a:b6:ec:cb:c4:c7:de:ba: 46:ca:71:01:17:ab:bf:ee:46:80:6c:ee:e8:7b:85: ff:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3A:12:A6:11:24:E9:A6:88:24:A5:84:49:5B:4E:45:02:47:F7:EF X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/2ToSphEk6aaIJKWESVtORQJH9-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.11.0/24 84.32.46.0/24 84.32.61.0/24 84.32.107.0/24 Signature Algorithm: sha256WithRSAEncryption 83:9b:d7:60:3e:58:a8:8b:01:dd:5f:97:78:68:7f:60:36:ef: ff:06:5f:35:0b:5d:6d:bb:b5:aa:1d:a8:d5:0b:e6:34:a6:32: dd:88:c1:1d:05:8d:4c:05:e6:8a:ae:98:1c:a2:9d:b2:09:d7: af:53:cd:d3:8b:53:af:98:89:ad:9a:4f:5b:5d:f3:18:79:ef: f1:9c:8d:5d:7d:f2:5f:64:df:ee:f5:f3:8e:16:bf:ff:cf:40: 43:05:0c:1d:8b:80:d0:a0:cc:05:c0:99:ea:fb:8e:2a:dc:36: 0a:8b:ff:3d:1d:ed:c8:69:2a:ba:79:79:bf:8b:64:c2:b0:79: fd:06:8c:46:a5:cb:9c:94:69:62:8e:e1:18:1b:46:30:ba:5e: 28:bc:95:07:01:45:c0:40:02:d6:2c:94:2b:3d:9a:f8:10:34: ad:1f:b6:ea:c7:e5:99:76:19:3c:83:25:69:36:02:57:68:5d: 03:bf:9f:24:e1:a3:f5:5c:dd:89:e9:2a:4d:a5:36:22:4e:1b: 06:4a:cc:11:4b:e9:66:a2:d3:cc:65:58:95:2f:96:31:6a:a7: ac:59:ec:23:b6:66:10:93:26:5d:8f:ce:6f:2d:20:53:fe:30: 77:02:3f:b0:71:fc:06:a5:91:04:68:8e:3b:26:44:3f:e3:9e: 48:3d:84:08 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAYkbzavh8iP/3HnCvaiMvuhSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjMwNzAzMTI1MDEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTNhMTJhNjExMjRlOWE2ODgyNGE1ODQ0OTViNGU0NTAyNDdmN2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ejQ0HZTOJkaO3NVDOwe8tsAGO0k 5mTPv3EGJ6wUk31SHxO6SptpFyp46EcEqyYpSUb4D+DJ6IRnohF2PV8mNOI6vtRK HFwJ4FiH+bZvdMAehatG7RdSGUeBskc0AMRg27yZNqWH/1c5rz50JVCKZ48Z45UH PgYR28+YY1bftlwDoETH2nVR4xTZB2hL1SsqHpj0LucvEL7psQjyRMqN+uEO53FX gEUJ5j9UBH5hGZpjSOLy9MtE4tdXcwpivRW7Iq5voJdL/NpVou05PEqfaMahxmZV J8y5nU+rI4LIpXQIGJS4fUsWOrbsy8TH3rpGynEBF6u/7kaAbO7oe4X/1wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNk6EqYRJOmmiCSlhElbTkUCR/fvMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvMlRvU3BoRWs2YWFJSktXRVNWdE9SUUpIOS04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVCALAwQA VCAuAwQAVCA9AwQAVCBrMA0GCSqGSIb3DQEBCwUAA4IBAQCDm9dgPlioiwHdX5d4 aH9gNu//Bl81C11tu7WqHajVC+Y0pjLdiMEdBY1MBeaKrpgcop2yCdevU83Ti1Ov mImtmk9bXfMYee/xnI1dffJfZN/u9fOOFr//z0BDBQwdi4DQoMwFwJnq+44q3DYK i/89He3IaSq6eXm/i2TCsHn9BoxGpcuclGlijuEYG0Ywul4ovJUHAUXAQALWLJQr PZr4EDStH7bqx+WZdhk8gyVpNgJXaF0Dv58k4aP1XN2J6SpNpTYiThsGSswRS+lm otPMZViVL5YxaqesWewjtmYQkyZdj85vLSBT/jB3Aj+wcfwGpZEEaI47JkQ/455I PYQI -----END CERTIFICATE-----Generated at Fri Dec 19 15:06:29 2025 by rpki-client