This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/sMZ1ijd-itg2RUJbZp8-nH47b4o.roa
File: sMZ1ijd-itg2RUJbZp8-nH47b4o.roa (raw, json)
Hash identifier: nfZmrAmB/uqIBkq9FXt9j7DSzVg+sHF+FRHh6XQyfGs=
Subject key identifier: B0:C6:75:8A:37:7E:8A:D8:36:45:42:5B:66:9F:3E:9C:7E:3B:6F:8A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188C53F0EB4AD66F706DD352741BB2827DC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/sMZ1ijd-itg2RUJbZp8-nH47b4o.roa
Signing time: Fri 16 Jun 2023 17:27:04 +0000
ROA not before: Fri 16 Jun 2023 17:27:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 89.36.140.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c5:3f:0e:b4:ad:66:f7:06:dd:35:27:41:bb:28:27:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 16 17:27:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0c6758a377e8ad83645425b669f3e9c7e3b6f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:8d:61:9e:b9:26:8d:3b:73:03:ee:6c:e3:
3e:ad:ae:58:17:31:06:89:47:51:18:2b:81:e2:c6:
b2:28:70:20:93:8b:b8:bd:81:09:0c:90:7d:2b:d7:
1f:7d:56:aa:0d:bf:61:ed:0c:ad:6d:da:17:31:0a:
63:c1:6a:77:91:d3:4f:bf:75:71:e4:82:a8:71:bf:
cf:4a:0f:94:21:f6:50:eb:30:a5:76:fe:ca:10:f7:
36:27:9d:e9:57:67:af:c7:fb:e2:8d:e1:7a:92:f4:
17:a8:81:51:4d:01:13:5b:7a:51:7d:fc:d8:95:c3:
b0:ee:bc:11:af:30:4b:87:99:48:11:82:08:b4:cc:
3d:7e:09:2d:67:27:5c:f0:17:ec:d7:c2:ae:14:fb:
0e:ae:e0:8f:8f:4c:2d:8f:87:50:b7:11:76:f6:b0:
86:f0:6c:e3:a1:7f:65:26:9e:a0:5d:5c:bf:2f:9e:
45:72:62:8d:a1:11:bf:b7:b6:d7:dd:21:5c:a3:be:
c5:57:c5:68:34:cc:af:fc:31:aa:ca:21:71:3b:47:
2e:03:fb:78:90:40:b6:d6:09:db:39:4a:9e:4d:a2:
d2:10:4d:f9:93:49:08:ea:ed:37:db:43:af:ad:5d:
e0:9a:28:5b:f4:8f:d5:57:7d:ca:a7:47:07:f0:a9:
fe:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C6:75:8A:37:7E:8A:D8:36:45:42:5B:66:9F:3E:9C:7E:3B:6F:8A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/sMZ1ijd-itg2RUJbZp8-nH47b4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.4.0/24
89.36.140.0/24
Signature Algorithm: sha256WithRSAEncryption
83:05:96:f7:7e:c7:bb:fa:9f:f3:30:72:3a:89:29:9e:e5:98:
99:f5:1a:6a:86:13:c0:ae:de:02:a6:df:fe:be:3e:3e:6c:10:
94:a3:80:9c:45:8b:b5:e6:b9:f9:75:13:d1:c8:2d:4f:e6:1a:
c3:ec:bc:8c:87:49:c2:d1:1a:a5:23:1f:ac:78:75:98:aa:be:
b4:a5:1c:c6:01:43:11:e6:77:c4:fb:05:6b:e0:48:32:a1:2e:
3e:62:76:4e:28:02:4e:51:60:c7:69:5d:ca:ce:9e:fa:4f:78:
fc:e7:78:44:14:27:fb:18:56:a1:b0:59:c9:b4:31:c0:fc:7e:
f3:78:58:27:4b:c7:97:59:df:9e:44:6f:be:72:97:47:47:d8:
07:fe:b2:91:55:64:7c:de:c1:9f:4a:09:26:ea:56:43:0b:6d:
ab:ac:b2:91:2c:1d:5a:58:91:46:74:61:04:57:66:f4:ac:94:
3b:86:07:0c:21:b6:a1:43:c1:d6:e9:6c:63:4c:e0:c6:5c:0d:
02:3b:83:a2:c3:d9:0b:d2:07:75:c0:aa:1a:d9:35:b4:d4:da:
bd:c1:a4:30:34:ba:6a:f1:52:5b:be:fc:8f:e4:3f:fa:6b:62:
37:6d:97:6a:82:92:9e:55:ad:46:1c:35:d9:35:f9:b5:67:71:
a5:be:03:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:09:12 2025 by rpki-client