This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jVigkb3aXWG-lYZV7pzQ3ssl3aw.roa
File: jVigkb3aXWG-lYZV7pzQ3ssl3aw.roa (raw, json)
Hash identifier: D28fSwve6+LuWI0uHg0lQ6KO7QmOz5VmoDWumhxiRMg=
Subject key identifier: 8D:58:A0:91:BD:DA:5D:61:BE:95:86:55:EE:9C:D0:DE:CB:25:DD:AC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0189626D354D10B8E590C241A84144E1C404
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jVigkb3aXWG-lYZV7pzQ3ssl3aw.roa
Signing time: Mon 17 Jul 2023 05:57:51 +0000
ROA not before: Mon 17 Jul 2023 05:57:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 84.32.214.0/23 maxlen: 24
84.32.219.0/24 maxlen: 24
84.32.221.0/24 maxlen: 24
84.32.224.0/24 maxlen: 24
84.32.225.0/24 maxlen: 24
84.32.226.0/24 maxlen: 24
84.32.228.0/24 maxlen: 24
84.32.231.0/24 maxlen: 24
84.32.232.0/24 maxlen: 24
84.32.235.0/24 maxlen: 24
84.32.234.0/24 maxlen: 24
84.32.239.0/24 maxlen: 24
84.32.240.0/24 maxlen: 24
84.32.246.0/23 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/24 maxlen: 24
84.32.242.0/24 maxlen: 24
84.32.243.0/24 maxlen: 24
84.32.241.0/24 maxlen: 24
84.32.252.0/23 maxlen: 24
84.32.249.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
84.32.251.0/24 maxlen: 24
84.32.247.0/24 maxlen: 24
84.32.254.0/24 maxlen: 24
84.32.255.0/24 maxlen: 24
84.32.58.0/24 maxlen: 24
84.32.61.0/24 maxlen: 24
84.32.83.0/24 maxlen: 24
84.32.79.0/24 maxlen: 24
84.32.89.0/24 maxlen: 24
84.32.94.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.9.0/24 maxlen: 24
84.32.14.0/24 maxlen: 24
84.32.24.0/22 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.23.0/24 maxlen: 24
84.32.20.0/24 maxlen: 24
84.32.21.0/24 maxlen: 24
84.32.22.0/24 maxlen: 24
84.32.28.0/24 maxlen: 24
84.32.29.0/24 maxlen: 24
84.32.25.0/24 maxlen: 24
84.32.26.0/24 maxlen: 24
84.32.31.0/24 maxlen: 24
84.32.51.0/24 maxlen: 24
84.32.50.0/24 maxlen: 24
84.32.45.0/24 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.178.0/23 maxlen: 24
84.32.210.0/24 maxlen: 24
84.32.211.0/24 maxlen: 24
84.32.213.0/24 maxlen: 24
84.32.108.0/23 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.150.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.153.0/24 maxlen: 24
84.32.159.0/24 maxlen: 24
84.32.155.0/24 maxlen: 24
84.32.158.0/24 maxlen: 24
88.216.183.0/24 maxlen: 24
88.216.180.0/24 maxlen: 24
88.216.188.0/24 maxlen: 24
88.216.189.0/24 maxlen: 24
88.216.197.0/24 maxlen: 24
88.216.212.0/22 maxlen: 24
88.216.110.0/24 maxlen: 24
88.216.111.0/24 maxlen: 24
88.216.107.0/24 maxlen: 24
88.216.109.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
88.216.132.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.222.0/24 maxlen: 24
88.216.220.0/24 maxlen: 24
88.216.228.0/22 maxlen: 24
88.216.240.0/22 maxlen: 24
88.216.236.0/22 maxlen: 24
88.216.244.0/22 maxlen: 24
88.216.58.0/24 maxlen: 24
88.216.61.0/24 maxlen: 24
88.216.62.0/24 maxlen: 24
88.216.63.0/24 maxlen: 24
88.216.64.0/24 maxlen: 24
88.216.65.0/24 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.92.0/24 maxlen: 24
88.216.101.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
88.216.105.0/24 maxlen: 24
88.216.2.0/24 maxlen: 24
88.216.3.0/24 maxlen: 24
88.216.0.0/24 maxlen: 24
88.216.1.0/24 maxlen: 24
88.216.16.0/24 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.32.0/24 maxlen: 24
88.216.35.0/24 maxlen: 24
88.216.36.0/24 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.42.0/24 maxlen: 24
88.216.40.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:6d:35:4d:10:b8:e5:90:c2:41:a8:41:44:e1:c4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jul 17 05:57:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d58a091bdda5d61be958655ee9cd0decb25ddac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:6e:4a:9a:7b:89:bf:e3:59:12:01:6c:c6:
94:e5:72:ed:74:14:c8:26:ef:66:05:21:7c:7b:5e:
0f:7c:a6:8d:8a:42:da:1f:60:cf:bd:e2:a5:4f:ef:
12:69:a9:5a:fb:9b:44:87:85:b1:52:fa:a2:87:09:
97:ed:e1:d5:53:99:ac:ac:e1:33:af:46:7f:d3:79:
0f:62:6d:cf:f4:76:a7:17:50:28:f3:60:04:cd:5d:
db:39:0f:13:ee:45:6c:42:d6:60:90:8b:a3:b6:75:
d9:fb:5a:91:4a:8e:fe:62:9b:ee:d3:11:31:b1:57:
83:c0:52:f3:b6:7b:3c:9b:38:d1:23:46:71:9b:0e:
74:9a:d6:3b:d4:a1:4c:f4:d7:87:71:ac:2f:66:71:
34:2a:1c:6a:e2:a1:9e:86:11:bb:91:e3:d2:05:31:
33:8a:75:22:88:bb:81:35:cb:7a:44:85:ca:bc:60:
dd:91:00:fb:b0:59:de:ef:dd:46:1a:99:18:c3:c0:
b8:18:b5:3e:72:3f:d3:f3:0c:e8:ba:cd:0d:91:e3:
34:cf:28:82:4b:42:67:60:e3:f1:c0:fa:17:5d:d1:
39:9f:e2:03:c6:47:7a:c4:3f:73:5b:5a:6e:39:0c:
3d:6a:b6:3c:be:c1:4d:13:ef:f8:5f:b6:65:e6:a2:
d6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:58:A0:91:BD:DA:5D:61:BE:95:86:55:EE:9C:D0:DE:CB:25:DD:AC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/jVigkb3aXWG-lYZV7pzQ3ssl3aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.8.0/23
84.32.14.0/24
84.32.20.0-84.32.29.255
84.32.31.0/24
84.32.45.0-84.32.46.255
84.32.50.0/23
84.32.58.0/24
84.32.61.0/24
84.32.79.0/24
84.32.83.0/24
84.32.89.0/24
84.32.94.0/24
84.32.108.0-84.32.110.255
84.32.148.0/22
84.32.153.0/24
84.32.155.0/24
84.32.158.0/23
84.32.174.0/23
84.32.178.0/23
84.32.210.0/23
84.32.213.0-84.32.215.255
84.32.219.0/24
84.32.221.0/24
84.32.224.0-84.32.226.255
84.32.228.0/24
84.32.231.0-84.32.232.255
84.32.234.0/23
84.32.239.0-84.32.247.255
84.32.249.0-84.32.255.255
88.216.0.0/22
88.216.16.0/24
88.216.22.0/23
88.216.32.0/24
88.216.35.0-88.216.36.255
88.216.40.0/24
88.216.42.0/24
88.216.44.0/23
88.216.58.0/24
88.216.61.0-88.216.65.255
88.216.92.0/23
88.216.101.0/24
88.216.104.0/23
88.216.107.0/24
88.216.109.0-88.216.111.255
88.216.128.0/24
88.216.130.0-88.216.132.255
88.216.134.0/23
88.216.180.0/24
88.216.183.0/24
88.216.188.0/23
88.216.197.0/24
88.216.212.0/22
88.216.220.0/24
88.216.222.0/24
88.216.228.0/22
88.216.236.0-88.216.247.255
Signature Algorithm: sha256WithRSAEncryption
40:7c:a3:ff:41:6b:44:08:2e:9c:a5:d2:a8:50:8d:28:67:e8:
a3:31:c0:56:60:4e:6d:04:a3:f2:57:6f:a9:45:e7:dd:43:8d:
c6:b3:d8:01:7d:4f:c7:7b:8c:21:0a:3f:5c:21:7e:a6:39:86:
6a:5e:f7:41:33:8d:7f:77:40:a3:09:7a:c4:f8:8b:b6:f1:10:
8a:be:81:13:fb:42:2c:f0:8c:30:75:c4:7e:62:f8:63:46:31:
d3:92:4d:78:ef:77:b4:7f:9f:8d:38:a0:f3:06:13:ef:27:ca:
a5:cc:24:e8:65:c0:eb:df:b2:e0:6b:fc:2b:dc:aa:cd:a5:90:
1e:a3:b6:d7:dc:01:1c:29:d0:7c:bd:12:e0:c7:f3:40:34:63:
84:ba:bc:6b:a6:36:71:b7:4d:16:0f:ee:60:15:5b:74:e9:88:
76:1c:ee:e9:81:6d:9c:42:69:83:66:8c:35:35:c9:fb:8b:45:
fd:31:19:37:f5:77:99:56:1e:af:f8:3d:45:5d:d1:d5:e8:70:
0f:6b:51:9f:91:3c:52:5d:64:c0:87:61:83:d5:94:80:ab:34:
8f:8f:64:84:8b:d3:e2:eb:a7:1c:82:06:52:e7:da:33:5d:9b:
be:88:70:c8:fe:b7:c9:ce:59:b7:b1:b3:76:c0:79:1b:2b:64:
e7:1a:a0:42
-----BEGIN CERTIFICATE-----
MIIGuDCCBaCgAwIBAgISAYlibTVNELjlkMJBqEFE4cQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNzE3MDU1NzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDU4YTA5MWJkZGE1ZDYxYmU5NTg2NTVlZTljZDBkZWNiMjVkZGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEduSpp7ib/jWRIBbMaU5XLtdBTI
Ju9mBSF8e14PfKaNikLaH2DPveKlT+8Saala+5tEh4WxUvqihwmX7eHVU5msrOEz
r0Z/03kPYm3P9HanF1Ao82AEzV3bOQ8T7kVsQtZgkIujtnXZ+1qRSo7+Ypvu0xEx
sVeDwFLztns8mzjRI0Zxmw50mtY71KFM9NeHcawvZnE0Khxq4qGehhG7kePSBTEz
inUiiLuBNct6RIXKvGDdkQD7sFne791GGpkYw8C4GLU+cj/T8wzous0NkeM0zyiC
S0JnYOPxwPoXXdE5n+IDxkd6xD9zW1puOQw9arY8vsFNE+/4X7Zl5qLWmwIDAQAB
o4IDxDCCA8AwHQYDVR0OBBYEFI1YoJG92l1hvpWGVe6c0N7LJd2sMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvalZpZ2tiM2FYV0ctbFlaVjdwelEzc3NsM2F3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB2AYIKwYBBQUHAQcBAf8EggHHMIIBwzCCAb8EAgABMIIB
twMEAVQgCAMEAFQgDjAMAwQCVCAUAwQBVCAcAwQAVCAfMAwDBABUIC0DBABUIC4D
BAFUIDIDBABUIDoDBABUID0DBABUIE8DBABUIFMDBABUIFkDBABUIF4wDAMEAlQg
bAMEAFQgbgMEAlQglAMEAFQgmQMEAFQgmwMEAVQgngMEAVQgrgMEAVQgsgMEAVQg
0jAMAwQAVCDVAwQDVCDQAwQAVCDbAwQAVCDdMAwDBAVUIOADBABUIOIDBABUIOQw
DAMEAFQg5wMEAFQg6AMEAVQg6jAMAwQAVCDvAwQDVCDwMAsDBABUIPkDAwBUIAME
AljYAAMEAFjYEAMEAVjYFgMEAFjYIDAMAwQAWNgjAwQAWNgkAwQAWNgoAwQAWNgq
AwQBWNgsAwQAWNg6MAwDBABY2D0DBAFY2EADBAFY2FwDBABY2GUDBAFY2GgDBABY
2GswDAMEAFjYbQMEBFjYYAMEAFjYgDAMAwQBWNiCAwQAWNiEAwQBWNiGAwQAWNi0
AwQAWNi3AwQBWNi8AwQAWNjFAwQCWNjUAwQAWNjcAwQAWNjeAwQCWNjkMAwDBAJY
2OwDBANY2PAwDQYJKoZIhvcNAQELBQADggEBAEB8o/9Ba0QILpyl0qhQjShn6KMx
wFZgTm0Eo/JXb6lF591Djcaz2AF9T8d7jCEKP1whfqY5hmpe90EzjX93QKMJesT4
i7bxEIq+gRP7QizwjDB1xH5i+GNGMdOSTXjvd7R/n404oPMGE+8nyqXMJOhlwOvf
suBr/Cvcqs2lkB6jttfcARwp0Hy9EuDH80A0Y4S6vGumNnG3TRYP7mAVW3TpiHYc
7umBbZxCaYNmjDU1yfuLRf0xGTf1d5lWHq/4PUVd0dXocA9rUZ+RPFJdZMCHYYPV
lICrNI+PZISL0+LrpxyCBlLn2jNdm76IcMj+t8nOWbexs3bAeRsrZOcaoEI=
-----END CERTIFICATE-----
Generated at Sat Dec 20 22:38:20 2025 by rpki-client