This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DDGq9DDiXW4Sb3OIN57j6fwCBOA.roa File: DDGq9DDiXW4Sb3OIN57j6fwCBOA.roa (raw, json) Hash identifier: ZdNAFJVitQDTMZOyKK6aRPVPdtNc1kOiIoDcWI8tH/g= Subject key identifier: 0C:31:AA:F4:30:E2:5D:6E:12:6F:73:88:37:9E:E3:E9:FC:02:04:E0 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 0188247F3963AACFF7AA84D22BC15A377909 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DDGq9DDiXW4Sb3OIN57j6fwCBOA.roa Signing time: Tue 16 May 2023 12:18:17 +0000 ROA not before: Tue 16 May 2023 12:18:17 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 834 IP address blocks: 185.230.53.0/24 maxlen: 24 193.58.144.0/24 maxlen: 24 45.147.226.0/24 maxlen: 24 45.147.224.0/24 maxlen: 24 45.8.21.0/24 maxlen: 24 185.246.115.0/24 maxlen: 24 185.225.0.0/23 maxlen: 23 45.131.135.0/24 maxlen: 24 45.131.134.0/24 maxlen: 24 185.225.0.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:88:24:7f:39:63:aa:cf:f7:aa:84:d2:2b:c1:5a:37:79:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: May 16 12:18:17 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=0c31aaf430e25d6e126f7388379ee3e9fc0204e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f4:ab:ad:08:de:4f:ff:7b:83:66:11:59:89: 89:45:86:67:1d:4a:ed:72:89:35:6b:b4:de:fe:e0: 81:e8:8d:28:48:01:a7:c4:3c:d7:34:5e:53:c0:ca: 8d:6e:c9:59:68:e6:16:c9:1e:5e:8b:95:c1:0a:66: c2:7d:11:cb:ed:86:dc:c9:22:37:46:7d:59:a1:1d: 10:ed:97:2c:59:a4:17:6a:07:f6:dc:c7:77:f8:c8: 02:6c:50:99:39:c8:d1:36:d1:67:35:3f:16:78:45: 16:b7:65:7d:33:a6:8f:a5:c0:fa:a1:72:1f:59:d3: dc:fd:41:95:80:18:a9:3c:fd:e0:59:1a:da:62:9e: 10:b7:09:6f:7a:71:a9:24:d4:f9:b4:95:dc:45:ad: 27:c6:9c:ca:d8:d0:ae:4f:82:24:cb:bd:62:63:57: 8b:34:8a:b4:1a:61:1a:96:24:28:95:e9:d5:44:81: 0e:b7:32:f8:5a:65:e5:a8:6c:d0:cd:9a:bf:2e:11: be:0e:b4:b6:db:69:4b:bf:51:34:2d:9a:32:8c:f2: 54:8a:4b:ae:df:3f:c8:f3:a1:1e:fd:a0:88:40:95: de:26:ff:6c:ff:95:37:04:fe:29:f2:49:ba:2e:0e: dc:71:e5:7a:98:f9:28:20:a5:6c:df:be:41:0d:31: 8d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:31:AA:F4:30:E2:5D:6E:12:6F:73:88:37:9E:E3:E9:FC:02:04:E0 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DDGq9DDiXW4Sb3OIN57j6fwCBOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.21.0/24 45.131.134.0/23 45.147.224.0/24 45.147.226.0/24 185.225.0.0/23 185.230.53.0/24 185.246.115.0/24 193.58.144.0/24 Signature Algorithm: sha256WithRSAEncryption 42:d6:d3:10:87:06:a2:7b:b6:ef:63:75:17:db:8d:a2:ec:55: 39:81:81:ac:88:a9:a2:14:9e:fc:1b:ac:4f:ed:6e:66:54:48: f0:81:3a:33:f5:fe:6a:33:4c:48:21:38:ed:60:16:cb:56:57: 2a:c5:11:89:8e:94:4a:b6:ee:f3:2e:26:9c:1f:75:91:4f:76: 4a:dd:3f:b9:94:4d:41:d7:ff:6b:6b:c2:e3:95:e3:f1:4b:a1: 59:21:80:aa:c0:12:eb:65:f1:cf:8a:c8:9b:cc:b1:be:d6:4f: 75:f7:8a:78:d8:dc:4e:fb:dc:c4:d0:9c:c7:9e:ec:86:cb:e3: cc:64:0a:c5:50:c5:51:ad:e1:3e:5b:e7:e8:cf:82:c9:02:de: ca:98:de:d4:80:79:e3:ae:78:1a:f0:83:56:de:31:dc:19:01: 27:14:a1:06:0e:71:ba:1f:c5:15:fb:d8:3c:3b:a1:92:1f:af: d6:ac:a0:2a:31:08:aa:3f:65:6c:12:65:ba:e1:d9:73:2c:bb: eb:b6:36:ee:8c:b7:32:4e:a7:9e:35:9b:e7:b3:bb:33:5d:ae: 9d:96:01:89:2d:1f:cc:6d:63:0c:35:64:5a:f3:da:72:e4:0b: 46:3f:9e:11:97:a0:e6:1c:3a:a3:4d:84:f6:1f:6b:18:ae:fb: 86:1f:32:b3 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAYgkfzljqs/3qoTSK8FaN3kJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjMwNTE2MTIxODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzMxYWFmNDMwZTI1ZDZlMTI2ZjczODgzNzllZTNlOWZjMDIwNGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/SrrQjeT/97g2YRWYmJRYZnHUrt cok1a7Te/uCB6I0oSAGnxDzXNF5TwMqNbslZaOYWyR5ei5XBCmbCfRHL7YbcySI3 Rn1ZoR0Q7ZcsWaQXagf23Md3+MgCbFCZOcjRNtFnNT8WeEUWt2V9M6aPpcD6oXIf WdPc/UGVgBipPP3gWRraYp4QtwlvenGpJNT5tJXcRa0nxpzK2NCuT4Iky71iY1eL NIq0GmEaliQolenVRIEOtzL4WmXlqGzQzZq/LhG+DrS222lLv1E0LZoyjPJUikuu 3z/I86Ee/aCIQJXeJv9s/5U3BP4p8km6Lg7cceV6mPkoIKVs375BDTGNlQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFAwxqvQw4l1uEm9ziDee4+n8AgTgMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvRERHcTlERGlYVzRTYjNPSU41N2o2ZndDQk9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALQgVAwQB LYOGAwQALZPgAwQALZPiAwQBueEAAwQAueY1AwQAufZzAwQAwTqQMA0GCSqGSIb3 DQEBCwUAA4IBAQBC1tMQhwaie7bvY3UX242i7FU5gYGsiKmiFJ78G6xP7W5mVEjw gToz9f5qM0xIITjtYBbLVlcqxRGJjpRKtu7zLiacH3WRT3ZK3T+5lE1B1/9ra8Lj lePxS6FZIYCqwBLrZfHPisibzLG+1k9194p42NxO+9zE0JzHnuyGy+PMZArFUMVR reE+W+foz4LJAt7KmN7UgHnjrnga8INW3jHcGQEnFKEGDnG6H8UV+9g8O6GSH6/W rKAqMQiqP2VsEmW64dlzLLvrtjbujLcyTqeeNZvns7szXa6dlgGJLR/MbWMMNWRa 89py5AtGP54Rl6DmHDqjTYT2H2sYrvuGHzKz -----END CERTIFICATE-----Generated at Thu Dec 18 05:45:43 2025 by rpki-client