This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/9fkJrY5Dit_2MJKsJJ11BI7kFig.roa File: 9fkJrY5Dit_2MJKsJJ11BI7kFig.roa (raw, json) Hash identifier: 6sRo5sGwYZqfDSs1g+t2JiS9vu//eF6hE7+3a5t4Zic= Subject key identifier: F5:F9:09:AD:8E:43:8A:DF:F6:30:92:AC:24:9D:75:04:8E:E4:16:28 Certificate issuer: /CN=2f7a464b894841b3b940e0b357b865e393b1dd46 Certificate serial: 01894946751F39A2E3AC5167510B8579857A Authority key identifier: 2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/9fkJrY5Dit_2MJKsJJ11BI7kFig.roa Signing time: Wed 12 Jul 2023 08:45:01 +0000 ROA not before: Wed 12 Jul 2023 08:45:01 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 210619 IP address blocks: 2a0a:a501::/48 maxlen: 113 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:49:46:75:1f:39:a2:e3:ac:51:67:51:0b:85:79:85:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f7a464b894841b3b940e0b357b865e393b1dd46 Validity Not Before: Jul 12 08:45:01 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=f5f909ad8e438adff63092ac249d75048ee41628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f2:08:f5:76:f2:a4:25:1c:92:d2:65:26:9b: 27:20:44:69:a5:a8:d7:19:e3:66:7f:96:f9:e1:aa: 21:de:59:4c:54:c1:4d:ba:f8:34:56:76:60:6a:db: ff:cb:63:d2:a5:67:f7:0e:3e:e3:f6:f4:c0:ef:c3: 0a:14:9d:e0:6d:ee:36:bc:21:9c:c7:30:72:96:12: 69:b4:2b:22:e0:3f:01:01:d8:f2:b1:db:a4:98:e4: 3a:8a:da:3f:6c:26:a1:a9:5d:dc:0e:b2:5c:b0:f3: 51:63:d2:d4:08:c7:78:02:8b:29:bf:85:03:5b:a3: f4:8b:16:fd:ce:82:1b:a0:e1:09:f7:96:78:c3:73: 5d:61:8c:d7:26:42:d8:b2:9d:f4:41:ce:a7:5d:a4: 06:a1:78:46:34:ca:81:2d:4f:ec:a9:f8:08:c4:f3: 0e:fb:e5:40:b9:62:c1:de:6f:c6:10:c3:36:e2:75: 7a:6a:f5:7f:03:b5:e8:c3:5b:79:71:87:13:61:4b: 85:ab:4c:77:27:fe:a0:9c:a6:29:77:2f:5d:0b:35: 06:09:92:88:3f:4d:a3:30:10:0c:97:4d:8e:dd:57: 65:1d:5a:84:09:16:b2:36:10:87:86:8f:36:18:6e: 29:c8:49:80:69:a7:eb:a0:a0:b9:51:5f:a2:d8:2b: 0f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F9:09:AD:8E:43:8A:DF:F6:30:92:AC:24:9D:75:04:8E:E4:16:28 X509v3 Authority Key Identifier: keyid:2F:7A:46:4B:89:48:41:B3:B9:40:E0:B3:57:B8:65:E3:93:B1:DD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3pGS4lIQbO5QOCzV7hl45Ox3UY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/9fkJrY5Dit_2MJKsJJ11BI7kFig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b2f7a0-06c4-4ab5-85aa-10144c1bcafc/1/L3pGS4lIQbO5QOCzV7hl45Ox3UY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:a501::/48 Signature Algorithm: sha256WithRSAEncryption 8d:df:b9:7d:f9:11:55:27:ee:d3:36:bb:c0:8a:71:9d:bd:01: 6c:80:6c:4d:0f:ac:87:7e:84:33:c5:37:3a:ea:fd:86:ad:7d: d6:1b:95:78:98:57:70:03:aa:08:b2:a6:60:0b:af:fe:b0:6c: 90:33:0e:61:b0:27:75:93:82:cb:aa:bc:3b:ab:33:31:84:89: 01:81:3c:28:05:1e:5c:98:5c:22:f0:63:f9:b2:f9:e4:11:ae: 46:d1:3e:71:0d:f7:ac:30:cc:e4:0c:69:61:c2:11:90:56:da: 37:70:f4:37:82:b2:a9:bd:16:7f:e0:2a:e5:39:52:9c:98:a0: 1a:c2:fa:9d:86:29:6f:37:9a:90:82:db:5a:48:1e:c2:8c:53: 4e:1f:19:66:4c:39:1c:c1:ab:2f:11:e3:0e:18:83:d5:6f:20: 63:19:47:91:49:27:89:0c:bb:15:2c:56:11:28:2e:e1:07:ed: ca:d1:45:42:65:82:68:30:71:4e:44:1d:49:72:68:22:92:c1: 27:ee:e4:42:39:00:45:20:63:74:29:61:dc:3c:6d:b2:49:a3: d0:1f:4e:e5:37:bf:f1:3a:4b:ff:d3:e3:69:9b:6c:10:62:09: 9a:fc:04:54:a1:05:49:8f:09:ef:93:07:8f:cf:cc:c1:a9:53: 9c:71:01:04 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAYlJRnUfOaLjrFFnUQuFeYV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmN2E0NjRiODk0ODQxYjNiOTQwZTBiMzU3Yjg2NWUzOTNi MWRkNDYwHhcNMjMwNzEyMDg0NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWY5MDlhZDhlNDM4YWRmZjYzMDkyYWMyNDlkNzUwNDhlZTQxNjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvII9XbypCUcktJlJpsnIERppajX GeNmf5b54aoh3llMVMFNuvg0VnZgatv/y2PSpWf3Dj7j9vTA78MKFJ3gbe42vCGc xzBylhJptCsi4D8BAdjysdukmOQ6ito/bCahqV3cDrJcsPNRY9LUCMd4Aospv4UD W6P0ixb9zoIboOEJ95Z4w3NdYYzXJkLYsp30Qc6nXaQGoXhGNMqBLU/sqfgIxPMO ++VAuWLB3m/GEMM24nV6avV/A7Xow1t5cYcTYUuFq0x3J/6gnKYpdy9dCzUGCZKI P02jMBAMl02O3VdlHVqECRayNhCHho82GG4pyEmAaafroKC5UV+i2CsPNQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPX5Ca2OQ4rf9jCSrCSddQSO5BYoMB8GA1UdIwQY MBaAFC96RkuJSEGzuUDgs1e4ZeOTsd1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEt MTAxNDRjMWJjYWZjLzEvOWZrSnJZNURpdF8yTUpLc0pKMTFCSTdrRmlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iMmY3YTAtMDZjNC00YWI1LTg1YWEtMTAxNDRjMWJjYWZj LzEvTDNwR1M0bElRYk81UU9DelY3aGw0NU94M1VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgqlAQAA MA0GCSqGSIb3DQEBCwUAA4IBAQCN37l9+RFVJ+7TNrvAinGdvQFsgGxND6yHfoQz xTc66v2GrX3WG5V4mFdwA6oIsqZgC6/+sGyQMw5hsCd1k4LLqrw7qzMxhIkBgTwo BR5cmFwi8GP5svnkEa5G0T5xDfesMMzkDGlhwhGQVto3cPQ3grKpvRZ/4CrlOVKc mKAawvqdhilvN5qQgttaSB7CjFNOHxlmTDkcwasvEeMOGIPVbyBjGUeRSSeJDLsV LFYRKC7hB+3K0UVCZYJoMHFORB1JcmgiksEn7uRCOQBFIGN0KWHcPG2ySaPQH07l N7/xOkv/0+Npm2wQYgma/ARUoQVJjwnvkwePz8zBqVOccQEE -----END CERTIFICATE-----Generated at Sun Dec 21 03:29:00 2025 by rpki-client