This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/ctCQac4zcYxjsVi1knJP-WrVXyw.roa File: ctCQac4zcYxjsVi1knJP-WrVXyw.roa (raw, json) Hash identifier: BGW+88gity58XgNaLwL3cOzZW10fWrzbIuE1oihm4W4= Subject key identifier: 72:D0:90:69:CE:33:71:8C:63:B1:58:B5:92:72:4F:F9:6A:D5:5F:2C Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3 Certificate serial: 018C67B5556E7DDA02C446ACE3B45D73B69F Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/ctCQac4zcYxjsVi1knJP-WrVXyw.roa Signing time: Thu 14 Dec 2023 09:43:06 +0000 ROA not before: Thu 14 Dec 2023 09:43:06 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 21263 IP address blocks: 149.238.32.0/19 maxlen: 19 149.238.160.0/19 maxlen: 19 193.33.52.0/23 maxlen: 23 192.112.208.0/24 maxlen: 24 192.77.114.0/23 maxlen: 23 149.238.192.0/19 maxlen: 19 149.238.0.0/19 maxlen: 24 149.238.224.0/19 maxlen: 19 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:8c:67:b5:55:6e:7d:da:02:c4:46:ac:e3:b4:5d:73:b6:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3 Validity Not Before: Dec 14 09:43:06 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=72d09069ce33718c63b158b592724ff96ad55f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cc:ff:2f:33:95:7c:c8:2f:a8:23:cf:03:73: cf:e2:4e:21:09:2d:f9:24:a6:5a:f4:e5:d6:1a:fe: 34:e5:57:99:18:22:f8:ed:47:c6:85:19:de:54:ee: 66:7c:50:11:ef:c1:00:b6:8f:d6:4e:7c:67:65:01: fe:ca:35:95:ec:89:da:0d:05:bd:f2:df:db:98:e6: 91:4e:d1:a5:2a:d8:41:8f:60:29:1e:21:6b:5e:28: e3:d7:78:8d:f3:1a:68:66:fe:a0:7b:0a:1b:3c:8c: 23:17:64:68:3f:2d:e2:67:0b:f2:29:70:9e:55:26: 11:2d:dc:95:9e:7e:36:e6:0e:40:81:69:4e:a4:4b: 79:86:06:db:ee:4d:04:02:a0:85:3c:54:8d:8e:e5: 1a:fb:8a:c5:f5:95:59:c4:3f:64:13:95:0d:bd:e3: 1e:66:0d:8e:e0:ed:5a:36:a3:fd:94:e5:db:ed:0b: 8d:c3:52:d6:a5:8f:e9:77:7a:fe:36:93:2c:82:00: ea:e9:6f:ff:d8:5f:67:78:14:a2:4f:fa:9f:b3:2a: 40:76:03:60:32:fd:02:23:d0:12:37:dc:0f:0a:45: d9:fc:34:2b:43:db:8d:77:35:0e:3e:85:1c:ae:6c: 3e:f4:53:08:67:50:ac:84:1d:89:61:69:22:a0:51: f2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D0:90:69:CE:33:71:8C:63:B1:58:B5:92:72:4F:F9:6A:D5:5F:2C X509v3 Authority Key Identifier: keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/ctCQac4zcYxjsVi1knJP-WrVXyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.238.0.0/18 149.238.160.0-149.238.255.255 192.77.114.0/23 192.112.208.0/24 193.33.52.0/23 Signature Algorithm: sha256WithRSAEncryption 80:68:9e:49:4d:c5:3e:bb:51:27:c0:03:36:b4:32:7d:c7:05: d9:15:72:82:05:5d:0a:50:4c:94:8d:b2:db:84:4c:80:65:b6: d0:c2:e0:06:92:7e:25:4e:82:54:87:1c:46:96:5c:2e:9f:0a: 6b:a6:0c:f0:2e:37:a1:37:97:95:78:4d:62:4f:75:ae:43:51: b9:24:2d:59:e6:39:23:fa:b1:bc:76:26:81:ef:7f:78:51:a3: 98:26:08:02:1d:65:11:3b:15:e5:a0:89:6d:ac:b8:ba:84:f3: 8f:3e:89:79:26:b1:ec:66:2f:37:46:10:cd:a7:a2:72:dd:1d: ba:24:a1:1c:f3:2f:ed:4d:0a:93:86:cf:5b:8a:51:5a:52:6d: 3d:1f:d3:d0:d8:3b:22:2f:5b:d9:e3:2f:95:1c:65:e8:d7:56: 58:d9:7d:14:74:eb:17:e2:24:b0:4d:be:88:09:03:5b:2f:91: eb:88:91:92:5e:e1:6d:3b:57:fa:5f:da:94:cd:68:bd:b0:f0: 4a:5a:23:84:30:dc:76:8f:9d:4b:13:a2:d4:2c:38:dd:cc:cf: a5:2e:c8:9f:e6:6c:63:e5:48:5a:17:bf:26:eb:14:27:1a:a7: e8:92:b0:3b:40:b6:da:f5:d4:9b:57:59:21:fe:93:b5:d5:e5: dd:6b:c1:dc -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAYxntVVufdoCxEas47Rdc7afMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm NWJjZjMwHhcNMjMxMjE0MDk0MzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmQwOTA2OWNlMzM3MThjNjNiMTU4YjU5MjcyNGZmOTZhZDU1ZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisz/LzOVfMgvqCPPA3PP4k4hCS35 JKZa9OXWGv405VeZGCL47UfGhRneVO5mfFAR78EAto/WTnxnZQH+yjWV7InaDQW9 8t/bmOaRTtGlKthBj2ApHiFrXijj13iN8xpoZv6gewobPIwjF2RoPy3iZwvyKXCe VSYRLdyVnn425g5AgWlOpEt5hgbb7k0EAqCFPFSNjuUa+4rF9ZVZxD9kE5UNveMe Zg2O4O1aNqP9lOXb7QuNw1LWpY/pd3r+NpMsggDq6W//2F9neBSiT/qfsypAdgNg Mv0CI9ASN9wPCkXZ/DQrQ9uNdzUOPoUcrmw+9FMIZ1CshB2JYWkioFHyyQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFHLQkGnOM3GMY7FYtZJyT/lq1V8sMB8GA1UdIwQY MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt MjhjMzQzY2U5ZDVkLzEvY3RDUWFjNHpjWXhqc1ZpMWtuSlAtV3JWWHl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAATAlAwQGle4AMAsD BAWV7qADAwCV7gMEAcBNcgMEAMBw0AMEAcEhNDANBgkqhkiG9w0BAQsFAAOCAQEA gGieSU3FPrtRJ8ADNrQyfccF2RVyggVdClBMlI2y24RMgGW20MLgBpJ+JU6CVIcc RpZcLp8Ka6YM8C43oTeXlXhNYk91rkNRuSQtWeY5I/qxvHYmge9/eFGjmCYIAh1l ETsV5aCJbay4uoTzjz6JeSax7GYvN0YQzaeict0duiShHPMv7U0Kk4bPW4pRWlJt PR/T0Ng7Ii9b2eMvlRxl6NdWWNl9FHTrF+IksE2+iAkDWy+R64iRkl7hbTtX+l/a lM1ovbDwSlojhDDcdo+dSxOi1Cw43czPpS7In+ZsY+VIWhe/JusUJxqn6JKwO0C2 2vXUm1dZIf6TtdXl3WvB3A== -----END CERTIFICATE-----Generated at Wed Dec 17 22:26:53 2025 by rpki-client