This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/rKzYylk1g1RxPCXGod3Y2JwP16g.roa File: rKzYylk1g1RxPCXGod3Y2JwP16g.roa (raw, json) Hash identifier: C04CKKXKE50OxW+of7LNNNdlMpMp4nPzDda4u1cnsJQ= Subject key identifier: AC:AC:D8:CA:59:35:83:54:71:3C:25:C6:A1:DD:D8:D8:9C:0F:D7:A8 Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Certificate serial: 0188F11BE1FA0B1F803A6043B8AEF839E7E5 Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/rKzYylk1g1RxPCXGod3Y2JwP16g.roa Signing time: Sun 25 Jun 2023 05:51:56 +0000 ROA not before: Sun 25 Jun 2023 05:51:56 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 8697 IP address blocks: 185.98.220.0/22 maxlen: 24 217.23.32.0/20 maxlen: 24 194.165.128.0/19 maxlen: 24 213.186.164.0/24 maxlen: 24 94.249.0.0/17 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:88:f1:1b:e1:fa:0b:1f:80:3a:60:43:b8:ae:f8:39:e7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Validity Not Before: Jun 25 05:51:56 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=acacd8ca59358354713c25c6a1ddd8d89c0fd7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e9:b1:62:96:ed:de:cb:f8:08:48:44:b1:77: ee:53:cb:e2:6b:03:6a:bf:5a:09:1a:e3:b1:6d:20: f0:aa:d3:6b:15:3b:13:ac:5d:d6:52:63:b3:b7:e7: 73:13:db:36:f5:bf:62:eb:35:49:f9:4a:b1:08:73: e8:14:22:5c:db:c5:4d:e1:5f:95:6f:76:b7:df:3b: fd:c2:b7:c0:cd:6c:63:1f:4d:f9:fa:b9:90:b0:85: 93:25:8d:2d:29:a6:6b:ae:c9:de:4c:e1:ac:74:16: 9e:3e:cb:c7:c7:90:e5:56:23:66:46:02:f1:a0:a2: c6:a9:01:09:87:b0:29:cd:d4:73:55:31:e7:66:f8: a7:ca:db:9c:fc:45:c6:1b:67:ed:72:de:09:11:9a: 00:42:ce:e3:70:e3:e3:01:e9:f0:af:31:a6:03:a4: 42:35:34:95:bb:06:7f:94:48:ae:dc:80:fa:a6:8e: d2:2c:95:82:ff:62:d3:23:2f:e4:79:49:d3:92:60: 35:06:7a:cb:b8:52:3d:d2:0f:55:dc:7c:78:7a:3c: 91:04:de:85:90:e0:67:0d:c5:07:4c:c2:f9:af:70: 4e:5b:0f:22:9c:5a:b1:5c:dc:b3:07:e2:36:17:04: 08:7d:0e:75:69:ff:b3:72:a6:c5:cf:d3:a6:81:35: 0d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AC:D8:CA:59:35:83:54:71:3C:25:C6:A1:DD:D8:D8:9C:0F:D7:A8 X509v3 Authority Key Identifier: keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/rKzYylk1g1RxPCXGod3Y2JwP16g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.249.0.0/17 185.98.220.0/22 194.165.128.0/19 213.186.164.0/24 217.23.32.0/20 Signature Algorithm: sha256WithRSAEncryption 2d:b8:76:6c:29:a2:98:f4:34:ad:58:2c:90:33:1f:1d:6f:28: 4f:4c:0a:18:89:97:50:9b:04:69:ce:86:62:2a:6f:3d:44:8e: bb:5f:46:b9:d4:0f:35:25:72:13:56:b5:e1:de:0d:5a:64:d6: 9f:77:cd:f3:de:c4:33:2f:f0:41:d5:d4:00:34:b8:c7:24:f1: a5:df:de:5b:41:34:f8:8e:f0:7f:1e:54:47:1c:5f:36:60:d9: fe:46:7a:03:bd:e4:13:a3:d6:15:99:3a:0b:2e:4f:89:f8:85: 20:d3:d8:b7:7d:f8:84:59:61:40:ec:61:35:1a:92:bb:cb:c8: e0:54:93:e5:2d:34:16:7a:99:56:36:d4:81:7e:14:c0:8c:4c: ca:db:46:93:5d:e6:58:43:d1:02:6a:9d:54:5c:88:f9:52:b3: 99:2a:eb:13:b8:39:02:e8:81:a8:f7:d6:08:51:fa:61:1f:91: 1b:1e:78:da:93:1b:d2:d0:43:48:b7:90:5e:d3:69:f7:eb:c5: 56:ec:c9:41:74:9d:59:a2:4e:72:f8:58:2b:c1:78:8d:28:00: f2:ad:26:b4:e4:c1:1e:38:08:ed:ed:44:d2:18:e4:87:28:f0: 32:b1:38:80:71:5f:50:05:ce:bb:ef:e7:73:f8:d9:3d:7a:14: a7:ea:63:5d -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAYjxG+H6Cx+AOmBDuK74OeflMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZDBlM2IyOGYyYmUzM2VjNWE5ZDJjYTAwYWM2NDE1NTUz NmNiYzYwHhcNMjMwNjI1MDU1MTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2FjZDhjYTU5MzU4MzU0NzEzYzI1YzZhMWRkZDhkODljMGZkN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmemxYpbt3sv4CEhEsXfuU8viawNq v1oJGuOxbSDwqtNrFTsTrF3WUmOzt+dzE9s29b9i6zVJ+UqxCHPoFCJc28VN4V+V b3a33zv9wrfAzWxjH035+rmQsIWTJY0tKaZrrsneTOGsdBaePsvHx5DlViNmRgLx oKLGqQEJh7ApzdRzVTHnZvinytuc/EXGG2ftct4JEZoAQs7jcOPjAenwrzGmA6RC NTSVuwZ/lEiu3ID6po7SLJWC/2LTIy/keUnTkmA1BnrLuFI90g9V3Hx4ejyRBN6F kOBnDcUHTML5r3BOWw8inFqxXNyzB+I2FwQIfQ51af+zcqbFz9OmgTUNUwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFKys2MpZNYNUcTwlxqHd2NicD9eoMB8GA1UdIwQY MBaAFFbQ47KPK+M+xanSygCsZBVVNsvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMt OGI4ZDcyMTcyMDkwLzEvckt6WXlsazFnMVJ4UENYR29kM1kySndQMTZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMtOGI4ZDcyMTcyMDkw LzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQHXvkAAwQC uWLcAwQFwqWAAwQA1bqkAwQE2RcgMA0GCSqGSIb3DQEBCwUAA4IBAQAtuHZsKaKY 9DStWCyQMx8dbyhPTAoYiZdQmwRpzoZiKm89RI67X0a51A81JXITVrXh3g1aZNaf d83z3sQzL/BB1dQANLjHJPGl395bQTT4jvB/HlRHHF82YNn+RnoDveQTo9YVmToL Lk+J+IUg09i3ffiEWWFA7GE1GpK7y8jgVJPlLTQWeplWNtSBfhTAjEzK20aTXeZY Q9ECap1UXIj5UrOZKusTuDkC6IGo99YIUfphH5EbHnjakxvS0ENIt5Be02n368VW 7MlBdJ1Zok5y+FgrwXiNKADyrSa05MEeOAjt7UTSGOSHKPAysTiAcV9QBc677+dz +Nk9ehSn6mNd -----END CERTIFICATE-----Generated at Sat Dec 20 13:09:39 2025 by rpki-client