This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/cF9h7qDaM7wee5Fka93dKvTEqIE.roa File: cF9h7qDaM7wee5Fka93dKvTEqIE.roa (raw, json) Hash identifier: 6VYVFuT2ux5KZ5Bth3UtBECRZePw6nyCcWlf3Ym7KdQ= Subject key identifier: 70:5F:61:EE:A0:DA:33:BC:1E:7B:91:64:6B:DD:DD:2A:F4:C4:A8:81 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 0188FEB77B9C5717BBF00855687E89808F0F Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/cF9h7qDaM7wee5Fka93dKvTEqIE.roa Signing time: Tue 27 Jun 2023 21:16:57 +0000 ROA not before: Tue 27 Jun 2023 21:16:57 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 834 IP address blocks: 45.145.154.0/23 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:88:fe:b7:7b:9c:57:17:bb:f0:08:55:68:7e:89:80:8f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Jun 27 21:16:57 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=705f61eea0da33bc1e7b91646bdddd2af4c4a881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:77:8c:1f:c7:fe:03:8c:2e:90:e7:8b:3b:dc: 77:43:dc:3a:35:a6:11:79:56:39:e4:ba:d0:ff:f7: ca:c8:e0:cc:8b:2b:ee:9c:2d:5c:e3:e3:fc:94:d1: 04:d3:44:87:15:3a:31:43:47:44:04:a4:30:4e:b8: 0b:c8:c5:5b:f1:3a:b6:66:d5:61:0a:94:17:86:94: 21:87:b7:52:7f:b3:26:0f:df:a8:af:28:73:37:3a: c1:fa:71:03:9f:c6:5d:21:09:97:ed:a5:88:b6:7e: 81:6d:a2:06:00:70:89:1e:fe:d7:9c:af:23:8b:ae: 0a:55:39:08:e1:a9:3a:03:94:3b:d6:ad:35:6a:45: 34:5b:2b:b5:93:1c:42:19:ce:fb:09:59:b4:83:9c: 92:41:d6:13:79:20:3b:e7:58:17:31:2d:51:59:d0: 73:8a:9b:41:f2:35:2f:ac:72:b3:21:a1:91:2e:5a: 75:a1:65:88:1c:86:8e:3f:8a:cb:ee:4f:1d:6a:e8: 0a:63:98:2b:d6:97:12:a8:18:a1:30:f7:aa:d3:00: 1d:32:7d:bb:b2:70:8c:db:52:fe:30:e0:8a:b2:75: ad:09:92:17:3c:a7:05:8d:71:09:5e:da:06:5a:57: 4d:76:97:28:d6:76:be:2f:40:0a:7e:a7:71:91:85: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5F:61:EE:A0:DA:33:BC:1E:7B:91:64:6B:DD:DD:2A:F4:C4:A8:81 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/cF9h7qDaM7wee5Fka93dKvTEqIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.154.0/23 Signature Algorithm: sha256WithRSAEncryption 14:a1:0f:6a:8f:b0:68:d4:c3:fe:3a:b8:17:aa:fe:be:19:e4: 57:d1:38:3e:0d:10:a3:9d:06:d0:00:76:c7:20:42:36:52:c0: 52:ab:0c:45:64:e5:1c:d0:07:25:0b:15:ac:30:0d:af:98:d8: 46:34:43:33:e3:8b:0e:d0:35:68:9e:2b:35:ac:65:6f:c1:dd: ac:48:3f:32:95:91:3b:06:30:50:e9:f5:37:82:42:df:0c:46: 4d:93:91:49:9b:f9:0c:7b:53:ac:65:67:74:87:1f:b3:c8:96: 40:fa:18:24:3c:99:db:af:18:0b:27:54:ab:58:5c:aa:31:60: cb:08:1b:f1:5d:4a:c6:92:aa:81:5a:13:7c:d6:6b:b8:b7:a5: 32:3a:41:0f:57:17:da:18:1e:7b:a5:6c:cd:18:86:dd:89:8f: 40:a9:25:e6:cb:da:e8:8c:fe:23:58:e6:91:0d:9a:62:d7:11: b8:71:55:f3:5f:53:b3:6a:60:c5:19:f6:2f:25:78:30:69:0b: 66:54:3b:65:df:4d:7d:c8:28:36:04:0a:e7:06:3b:50:98:a1: f3:f7:aa:7e:a6:ff:f9:5c:ba:4b:4f:52:85:e1:ea:01:d1:4f: 5c:2a:12:d6:0a:b4:0a:23:63:bc:ca:4a:3b:13:0f:ef:35:f2: 5f:cd:9f:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAYj+t3ucVxe78AhVaH6JgI8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjMwNjI3MjExNjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDVmNjFlZWEwZGEzM2JjMWU3YjkxNjQ2YmRkZGQyYWY0YzRhODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13eMH8f+A4wukOeLO9x3Q9w6NaYR eVY55LrQ//fKyODMiyvunC1c4+P8lNEE00SHFToxQ0dEBKQwTrgLyMVb8Tq2ZtVh CpQXhpQhh7dSf7MmD9+oryhzNzrB+nEDn8ZdIQmX7aWItn6BbaIGAHCJHv7XnK8j i64KVTkI4ak6A5Q71q01akU0Wyu1kxxCGc77CVm0g5ySQdYTeSA751gXMS1RWdBz iptB8jUvrHKzIaGRLlp1oWWIHIaOP4rL7k8daugKY5gr1pcSqBihMPeq0wAdMn27 snCM21L+MOCKsnWtCZIXPKcFjXEJXtoGWldNdpco1na+L0AKfqdxkYXQPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHBfYe6g2jO8HnuRZGvd3Sr0xKiBMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvY0Y5aDdxRGFNN3dlZTVGa2E5M2RLdlRFcUlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZGaMA0G CSqGSIb3DQEBCwUAA4IBAQAUoQ9qj7Bo1MP+OrgXqv6+GeRX0Tg+DRCjnQbQAHbH IEI2UsBSqwxFZOUc0AclCxWsMA2vmNhGNEMz44sO0DVonis1rGVvwd2sSD8ylZE7 BjBQ6fU3gkLfDEZNk5FJm/kMe1OsZWd0hx+zyJZA+hgkPJnbrxgLJ1SrWFyqMWDL CBvxXUrGkqqBWhN81mu4t6UyOkEPVxfaGB57pWzNGIbdiY9AqSXmy9rojP4jWOaR DZpi1xG4cVXzX1OzamDFGfYvJXgwaQtmVDtl3019yCg2BArnBjtQmKHz96p+pv/5 XLpLT1KF4eoB0U9cKhLWCrQKI2O8yko7Ew/vNfJfzZ9R -----END CERTIFICATE-----Generated at Thu Dec 18 17:32:22 2025 by rpki-client