This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kTXiTK-xvOalnGWon2FHT8LuChk.roa File: kTXiTK-xvOalnGWon2FHT8LuChk.roa (raw, json) Hash identifier: fT/CvRRJWjKy1SdNQ5gP+STKWaCOcsPAV21SZzISSPE= Subject key identifier: 91:35:E2:4C:AF:B1:BC:E6:A5:9C:65:A8:9F:61:47:4F:C2:EE:0A:19 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 018917605C5F4FAC32859149BC39DF24307D Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kTXiTK-xvOalnGWon2FHT8LuChk.roa Signing time: Sun 02 Jul 2023 16:12:18 +0000 ROA not before: Sun 02 Jul 2023 16:12:18 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 834 IP address blocks: 81.5.189.0/24 maxlen: 24 82.153.136.0/22 maxlen: 22 82.153.246.0/24 maxlen: 24 82.153.248.0/24 maxlen: 24 82.153.249.0/24 maxlen: 24 82.152.108.0/24 maxlen: 24 82.152.111.0/24 maxlen: 24 82.153.73.0/24 maxlen: 24 81.168.123.0/24 maxlen: 24 81.168.119.0/24 maxlen: 24 82.152.253.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:17:60:5c:5f:4f:ac:32:85:91:49:bc:39:df:24:30:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jul 2 16:12:18 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=9135e24cafb1bce6a59c65a89f61474fc2ee0a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:dd:a6:05:1c:54:0d:ed:c3:22:d0:49:2b:3d: 71:c4:aa:34:38:fb:e3:2a:5e:49:e9:1a:79:f6:78: 75:dc:ed:36:8d:c7:e5:9d:ef:88:9a:87:8a:b6:94: 93:75:3d:93:57:26:83:cc:49:00:9d:e8:63:6e:f9: c0:ef:2f:4b:c2:c7:de:a1:03:df:6a:ea:00:10:c3: b4:50:aa:b2:cd:53:a6:e8:39:dd:65:0d:c4:84:f6: 40:6f:84:ac:69:8c:5c:73:44:66:a2:68:f0:33:76: 8a:6f:3f:91:88:ab:47:a1:9d:51:73:ae:8b:b4:06: 2a:8e:8a:08:f6:8b:d3:e6:ff:b4:f5:50:fe:57:e7: 50:4c:90:ab:b7:1c:bd:63:b0:c0:28:d9:0a:08:49: 3c:b6:fb:68:5f:1a:a3:73:b7:31:91:03:45:d7:20: 8c:10:54:48:2f:f3:f6:ca:07:66:03:d0:16:ee:68: e4:a6:14:5b:68:41:11:b4:3f:2b:af:3d:41:58:62: c3:88:94:84:26:a8:85:a8:e6:80:9a:f4:ad:6a:41: 04:11:b7:d1:bc:b8:d0:53:82:7e:37:0e:d0:c9:94: 4f:bc:13:fd:dd:10:2c:c7:79:d3:7b:83:af:84:e1: fd:74:09:74:cf:46:7b:19:d1:6f:e0:b2:ee:ef:7b: bc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:35:E2:4C:AF:B1:BC:E6:A5:9C:65:A8:9F:61:47:4F:C2:EE:0A:19 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/kTXiTK-xvOalnGWon2FHT8LuChk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.5.189.0/24 81.168.119.0/24 81.168.123.0/24 82.152.108.0/24 82.152.111.0/24 82.152.253.0/24 82.153.73.0/24 82.153.136.0/22 82.153.246.0/24 82.153.248.0/23 Signature Algorithm: sha256WithRSAEncryption 06:3f:14:63:b3:8c:3d:da:59:b4:93:3d:1b:34:6d:58:a8:6d: b0:74:b4:0c:7a:37:d4:49:13:7f:ec:e9:be:42:07:41:58:9b: 39:e0:0b:ed:43:f8:a5:1a:21:e8:14:56:11:45:11:c1:7a:7b: 1c:bf:32:f3:69:37:62:60:33:f2:8f:de:f0:88:e8:ae:57:43: 71:86:c4:78:84:71:79:58:0a:ee:b7:e8:32:ef:72:a3:48:f8: d9:70:c3:03:51:04:f3:7e:ce:f0:54:52:3b:81:99:07:dd:86: 5d:9d:41:9d:04:1b:99:a0:72:09:d1:a8:bd:ee:ff:a7:ba:22: 89:87:97:da:d5:f2:70:ba:9b:3f:45:e7:18:5e:f9:f5:f1:7f: d2:76:95:de:7c:ce:ee:db:f6:ff:41:68:cf:b5:45:4a:b9:f7: 95:1c:e2:9b:e1:d5:9b:4f:ba:49:9c:7f:cc:5e:ba:c4:71:ae: 54:a1:6e:2e:f2:2f:7b:1a:d6:46:91:48:d2:d2:77:7d:ea:07: 1f:e0:20:9e:1c:5b:00:69:45:fd:e3:3d:d2:4f:6b:2f:cf:f1: 3c:6f:81:37:47:21:96:a5:76:7f:6c:47:9a:7e:66:08:a2:17: 83:21:54:51:87:03:a9:fe:dc:58:75:36:0b:24:7c:1d:48:9b: 1e:40:79:35 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAYkXYFxfT6wyhZFJvDnfJDB9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjMwNzAyMTYxMjE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTM1ZTI0Y2FmYjFiY2U2YTU5YzY1YTg5ZjYxNDc0ZmMyZWUwYTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN2mBRxUDe3DItBJKz1xxKo0OPvj Kl5J6Rp59nh13O02jcflne+ImoeKtpSTdT2TVyaDzEkAnehjbvnA7y9LwsfeoQPf auoAEMO0UKqyzVOm6DndZQ3EhPZAb4SsaYxcc0RmomjwM3aKbz+RiKtHoZ1Rc66L tAYqjooI9ovT5v+09VD+V+dQTJCrtxy9Y7DAKNkKCEk8tvtoXxqjc7cxkQNF1yCM EFRIL/P2ygdmA9AW7mjkphRbaEERtD8rrz1BWGLDiJSEJqiFqOaAmvStakEEEbfR vLjQU4J+Nw7QyZRPvBP93RAsx3nTe4OvhOH9dAl0z0Z7GdFv4LLu73u86QIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFJE14kyvsbzmpZxlqJ9hR0/C7goZMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEva1RYaVRLLXh2T2FsbkdXb24yRkhUOEx1Q2hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAUQW9AwQA Uah3AwQAUah7AwQAUphsAwQAUphvAwQAUpj9AwQAUplJAwQCUpmIAwQAUpn2AwQB Upn4MA0GCSqGSIb3DQEBCwUAA4IBAQAGPxRjs4w92lm0kz0bNG1YqG2wdLQMejfU SRN/7Om+QgdBWJs54AvtQ/ilGiHoFFYRRRHBenscvzLzaTdiYDPyj97wiOiuV0Nx hsR4hHF5WArut+gy73KjSPjZcMMDUQTzfs7wVFI7gZkH3YZdnUGdBBuZoHIJ0ai9 7v+nuiKJh5fa1fJwups/RecYXvn18X/SdpXefM7u2/b/QWjPtUVKufeVHOKb4dWb T7pJnH/MXrrEca5UoW4u8i97GtZGkUjS0nd96gcf4CCeHFsAaUX94z3ST2svz/E8 b4E3RyGWpXZ/bEeafmYIoheDIVRRhwOp/txYdTYLJHwdSJseQHk1 -----END CERTIFICATE-----Generated at Fri Dec 19 13:31:21 2025 by rpki-client