This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2L_SbXtuLaEOrIgJbjJVnGBezHI.roa File: 2L_SbXtuLaEOrIgJbjJVnGBezHI.roa (raw, json) Hash identifier: O2f1humNvyMrCaaToUU5mEf5Vaf0uKF4/da17vHgmko= Subject key identifier: D8:BF:D2:6D:7B:6E:2D:A1:0E:AC:88:09:6E:32:55:9C:60:5E:CC:72 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 0188EE64184BB75ABF9C8D0BC446FDA5D5AF Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2L_SbXtuLaEOrIgJbjJVnGBezHI.roa Signing time: Sat 24 Jun 2023 17:11:57 +0000 ROA not before: Sat 24 Jun 2023 17:11:57 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 61138 IP address blocks: 185.209.38.0/24 maxlen: 24 185.218.103.0/24 maxlen: 24 185.209.39.0/24 maxlen: 24 185.226.106.0/24 maxlen: 24 185.214.103.0/24 maxlen: 24 185.214.100.0/24 maxlen: 24 185.214.102.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:88:ee:64:18:4b:b7:5a:bf:9c:8d:0b:c4:46:fd:a5:d5:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jun 24 17:11:57 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=d8bfd26d7b6e2da10eac88096e32559c605ecc72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:35:18:71:d8:9c:b4:45:59:f9:83:e6:d8:3c: 13:3b:dc:86:3f:5d:ac:6d:d4:20:1b:80:f8:03:df: 92:cd:ad:47:1e:9e:f4:e2:4a:ce:35:c6:11:b4:43: d4:2b:cb:8a:31:e9:bd:f1:0c:5c:da:af:49:16:95: 86:fd:c2:52:fc:bb:4f:dd:47:05:54:09:6d:5c:6d: e0:bb:d1:5b:a7:da:f1:30:f3:95:95:9c:dc:b2:b4: 8f:52:33:02:a0:cb:1d:2c:58:d8:33:a7:5a:84:7a: b0:38:f6:d4:d3:14:53:f3:4f:c8:b1:ac:64:84:82: fa:59:12:ea:99:c3:76:b1:fd:83:79:c0:a2:f4:a3: 16:93:64:93:67:06:c3:1b:e7:f9:db:0c:2c:00:e7: b5:27:29:39:67:6e:6a:bf:55:6f:98:d2:2b:ba:e4: 10:49:44:f4:8d:f0:3d:e4:75:49:0e:0c:34:fd:d6: a2:9f:92:74:4c:17:8f:cf:67:64:ef:ac:05:36:f8: 8e:6e:1a:8e:dc:0e:de:ab:09:6d:4d:cb:21:35:e7: 11:1c:80:31:1f:34:e1:a4:b9:4d:69:36:f7:5f:0a: 55:dc:2e:a9:e4:1e:fe:2e:41:5f:2e:a1:95:6f:26: 63:9e:24:3d:fd:5d:2e:46:d7:c9:b2:b1:3d:9c:44: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BF:D2:6D:7B:6E:2D:A1:0E:AC:88:09:6E:32:55:9C:60:5E:CC:72 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/2L_SbXtuLaEOrIgJbjJVnGBezHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.38.0/23 185.214.100.0/24 185.214.102.0/23 185.218.103.0/24 185.226.106.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:a0:0f:da:bf:c4:48:37:53:ba:80:e1:38:2c:c9:79:47:b6: 01:e9:14:30:a5:1d:7a:c8:30:c2:09:e3:f5:6a:da:51:ba:69: a9:03:8a:ab:6f:71:12:5c:ad:d8:19:0b:05:fa:a7:da:31:d4: 95:e3:42:8d:a9:b6:57:2e:b5:ea:e4:33:5f:4a:e7:b0:9c:e2: 78:c0:1b:5a:ab:90:b3:a5:42:1c:40:92:21:12:86:22:46:ba: 24:20:0a:61:ee:46:cf:4d:2b:62:af:b9:49:57:3e:4d:42:26: 96:97:21:b3:e8:1c:57:93:c3:ce:44:82:cc:5e:58:d0:33:4b: 19:6b:fc:e5:65:cc:d2:ab:8d:d3:51:ec:3a:ee:fc:a3:8f:b3: 57:57:ed:5f:3f:4c:5d:f5:e2:9a:61:20:13:3b:3e:80:28:50: eb:62:c0:f9:c0:75:9d:7a:12:63:58:63:2c:f8:aa:0c:67:fe: 73:55:91:93:0d:fb:97:bb:50:76:fc:92:01:3f:15:b3:39:06: f9:29:00:28:fc:41:ed:04:dc:2e:d1:65:0c:3e:73:97:69:e4: 70:65:66:cd:54:b4:39:14:5a:67:cc:c2:96:e2:58:6f:ea:e2: 47:6f:1e:28:e4:f7:bf:e1:2d:18:5a:0b:c4:7c:d3:cd:7c:64: ae:fc:0d:3e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAYjuZBhLt1q/nI0LxEb9pdWvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjMwNjI0MTcxMTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGJmZDI2ZDdiNmUyZGExMGVhYzg4MDk2ZTMyNTU5YzYwNWVjYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDUYcdictEVZ+YPm2DwTO9yGP12s bdQgG4D4A9+Sza1HHp704krONcYRtEPUK8uKMem98Qxc2q9JFpWG/cJS/LtP3UcF VAltXG3gu9Fbp9rxMPOVlZzcsrSPUjMCoMsdLFjYM6dahHqwOPbU0xRT80/Isaxk hIL6WRLqmcN2sf2DecCi9KMWk2STZwbDG+f52wwsAOe1Jyk5Z25qv1VvmNIruuQQ SUT0jfA95HVJDgw0/dain5J0TBePz2dk76wFNviObhqO3A7eqwltTcshNecRHIAx HzThpLlNaTb3XwpV3C6p5B7+LkFfLqGVbyZjniQ9/V0uRtfJsrE9nEQWnwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFNi/0m17bi2hDqyICW4yVZxgXsxyMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvMkxfU2JYdHVMYUVPcklnSmJqSlZuR0JlekhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBudEmAwQA udZkAwQBudZmAwQAudpnAwQAueJqMA0GCSqGSIb3DQEBCwUAA4IBAQAvoA/av8RI N1O6gOE4LMl5R7YB6RQwpR16yDDCCeP1atpRummpA4qrb3ESXK3YGQsF+qfaMdSV 40KNqbZXLrXq5DNfSuewnOJ4wBtaq5CzpUIcQJIhEoYiRrokIAph7kbPTStir7lJ Vz5NQiaWlyGz6BxXk8PORILMXljQM0sZa/zlZczSq43TUew67vyjj7NXV+1fP0xd 9eKaYSATOz6AKFDrYsD5wHWdehJjWGMs+KoMZ/5zVZGTDfuXu1B2/JIBPxWzOQb5 KQAo/EHtBNwu0WUMPnOXaeRwZWbNVLQ5FFpnzMKW4lhv6uJHbx4o5Pe/4S0YWgvE fNPNfGSu/A0+ -----END CERTIFICATE-----Generated at Sat Dec 20 22:16:26 2025 by rpki-client