This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AoSobMh6iG4PHjsKmdKaAinZUdI.roa File: AoSobMh6iG4PHjsKmdKaAinZUdI.roa (raw, json) Hash identifier: HgBln6+7/y7qUL1oKVerP0A3wJGFeZxErVkTi5owUfw= Subject key identifier: 02:84:A8:6C:C8:7A:88:6E:0F:1E:3B:0A:99:D2:9A:02:29:D9:51:D2 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 01891CC21C648AA0E82B259ABB5299B5C842 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AoSobMh6iG4PHjsKmdKaAinZUdI.roa Signing time: Mon 03 Jul 2023 17:17:10 +0000 ROA not before: Mon 03 Jul 2023 17:17:10 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 834 IP address blocks: 185.225.22.0/24 maxlen: 24 185.218.100.0/24 maxlen: 24 185.230.52.0/24 maxlen: 24 193.58.144.0/24 maxlen: 24 193.58.145.0/24 maxlen: 24 193.58.146.0/23 maxlen: 24 45.147.224.0/24 maxlen: 24 45.8.21.0/24 maxlen: 24 185.246.115.0/24 maxlen: 24 185.225.0.0/23 maxlen: 23 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:1c:c2:1c:64:8a:a0:e8:2b:25:9a:bb:52:99:b5:c8:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jul 3 17:17:10 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=0284a86cc87a886e0f1e3b0a99d29a0229d951d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dc:5a:5b:66:70:e8:e8:ad:fd:1f:f8:5d:83: a8:35:c9:a8:72:1f:d2:01:ac:f2:68:68:7a:ce:bf: 08:63:4b:73:c1:0f:b1:cd:ee:8f:01:4e:26:77:8b: 52:91:d3:93:9b:49:bb:6e:bc:05:dc:99:49:b5:b2: fa:6b:3a:02:08:90:8c:66:42:a0:07:d4:5a:1b:4e: 07:8f:a5:5c:97:7e:e4:05:da:14:fa:ac:07:06:c4: f8:91:e4:7e:2f:0b:01:19:b8:3a:fe:5d:95:02:de: 15:e6:15:7f:37:13:80:cb:e5:b3:5b:b9:8b:a2:58: 85:0a:8b:07:e1:8b:66:ed:91:57:7a:18:1b:cf:47: fc:12:95:f1:44:e7:66:da:ab:f7:76:c0:a5:c4:5b: 53:56:e4:7a:b1:c3:1e:71:95:4b:e6:89:4a:df:46: 09:78:b9:b5:18:08:b2:5c:83:2a:4e:31:5e:7f:ad: 1b:c1:31:81:7e:03:1e:c1:d3:23:df:a7:9e:e7:cf: df:ea:e0:2f:17:56:ad:71:8a:28:0d:3e:e6:78:aa: 32:27:c4:e2:e7:71:79:c2:63:1b:bf:07:dc:6e:61: 23:6b:ee:63:73:59:0c:44:55:d5:f9:34:2d:1d:84: e1:fc:62:f4:4f:40:26:5c:71:c6:59:1e:35:82:39: 08:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:84:A8:6C:C8:7A:88:6E:0F:1E:3B:0A:99:D2:9A:02:29:D9:51:D2 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AoSobMh6iG4PHjsKmdKaAinZUdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.21.0/24 45.147.224.0/24 185.218.100.0/24 185.225.0.0/23 185.225.22.0/24 185.230.52.0/24 185.246.115.0/24 193.58.144.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:37:af:6a:a1:f2:b2:ac:cb:6e:f5:a8:4d:94:26:88:29:6c: 00:86:f9:36:3d:ce:24:1a:db:6e:0d:9c:6d:9b:f2:68:d9:ff: a1:07:ba:89:0f:12:0d:8c:e1:d4:42:dc:6c:12:f0:e4:27:7c: 64:28:f1:ab:86:90:f5:86:33:fc:c7:ee:30:44:9a:a7:65:16: bd:12:8d:18:e5:4d:cc:8e:8d:ad:1f:cb:8a:7b:44:17:4e:94: bb:87:eb:a4:02:0d:84:73:c4:76:fd:a2:38:df:eb:86:9b:c8: be:76:67:fa:14:bc:68:e2:b2:e2:c0:7f:26:21:75:7d:5e:a9: c4:5e:ea:07:a5:df:d0:ad:f4:5e:db:17:0d:47:26:13:38:aa: e4:69:d0:b7:e7:fc:2f:66:78:e8:b2:11:0e:25:9f:e3:9b:95: 30:74:f6:d2:a3:20:db:96:b8:d6:69:f1:65:c6:f6:26:ea:0a: a4:54:b5:08:cd:aa:da:7c:3b:29:ce:95:33:58:f4:60:70:c0: 98:60:46:a4:26:e5:d7:cf:0b:65:17:3b:37:e0:75:fc:8f:47: c0:21:3c:21:d8:f8:ba:69:c8:b3:0d:bf:af:4c:bd:6d:3b:60: 4c:d6:07:e4:48:7c:9f:8f:96:4c:1a:26:1e:4c:6a:d5:c4:15: f9:79:16:05 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAYkcwhxkiqDoKyWau1KZtchCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjMwNzAzMTcxNzEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjg0YTg2Y2M4N2E4ODZlMGYxZTNiMGE5OWQyOWEwMjI5ZDk1MWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdxaW2Zw6Oit/R/4XYOoNcmoch/S AazyaGh6zr8IY0tzwQ+xze6PAU4md4tSkdOTm0m7brwF3JlJtbL6azoCCJCMZkKg B9RaG04Hj6Vcl37kBdoU+qwHBsT4keR+LwsBGbg6/l2VAt4V5hV/NxOAy+WzW7mL oliFCosH4Ytm7ZFXehgbz0f8EpXxROdm2qv3dsClxFtTVuR6scMecZVL5olK30YJ eLm1GAiyXIMqTjFef60bwTGBfgMewdMj36ee58/f6uAvF1atcYooDT7meKoyJ8Ti 53F5wmMbvwfcbmEja+5jc1kMRFXV+TQtHYTh/GL0T0AmXHHGWR41gjkIqQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFAKEqGzIeohuDx47CpnSmgIp2VHSMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvQW9Tb2JNaDZpRzRQSGpzS21kS2FBaW5aVWRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALQgVAwQA LZPgAwQAudpkAwQBueEAAwQAueEWAwQAueY0AwQAufZzAwQCwTqQMA0GCSqGSIb3 DQEBCwUAA4IBAQBrN69qofKyrMtu9ahNlCaIKWwAhvk2Pc4kGttuDZxtm/Jo2f+h B7qJDxINjOHUQtxsEvDkJ3xkKPGrhpD1hjP8x+4wRJqnZRa9Eo0Y5U3Mjo2tH8uK e0QXTpS7h+ukAg2Ec8R2/aI43+uGm8i+dmf6FLxo4rLiwH8mIXV9XqnEXuoHpd/Q rfRe2xcNRyYTOKrkadC35/wvZnjoshEOJZ/jm5UwdPbSoyDblrjWafFlxvYm6gqk VLUIzarafDspzpUzWPRgcMCYYEakJuXXzwtlFzs34HX8j0fAITwh2Pi6acizDb+v TL1tO2BM1gfkSHyfj5ZMGiYeTGrVxBX5eRYF -----END CERTIFICATE-----Generated at Thu Dec 18 07:10:35 2025 by rpki-client