This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VtNV7fgPWgsXPlfoaPP-eDFuFZ0.roa File: VtNV7fgPWgsXPlfoaPP-eDFuFZ0.roa (raw, json) Hash identifier: 5UtFvnhCc6WedDjCVzirdyk4xxrz0/lx3MYrzuzSHXk= Subject key identifier: 56:D3:55:ED:F8:0F:5A:0B:17:3E:57:E8:68:F3:FE:78:31:6E:15:9D Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 018926D8D0AC2C06751A3795CB2981909DD9 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VtNV7fgPWgsXPlfoaPP-eDFuFZ0.roa Signing time: Wed 05 Jul 2023 16:18:10 +0000 ROA not before: Wed 05 Jul 2023 16:18:10 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 834 IP address blocks: 185.209.38.0/24 maxlen: 24 185.230.52.0/24 maxlen: 24 185.209.74.0/24 maxlen: 24 193.58.145.0/24 maxlen: 24 193.58.146.0/23 maxlen: 24 45.147.224.0/24 maxlen: 24 45.8.21.0/24 maxlen: 24 185.223.78.0/24 maxlen: 24 185.225.0.0/23 maxlen: 23 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:26:d8:d0:ac:2c:06:75:1a:37:95:cb:29:81:90:9d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jul 5 16:18:10 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=56d355edf80f5a0b173e57e868f3fe78316e159d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:92:86:51:8d:c3:91:4a:3d:48:31:1d:ca: 48:99:23:71:08:3a:08:68:4f:42:a2:7f:4c:06:17: 72:41:87:49:e7:37:bc:79:5f:29:18:18:ae:dc:0c: 80:0e:02:46:fa:ef:c9:1f:a3:34:68:ff:04:78:60: 9f:de:ed:02:18:3d:c2:24:3f:a8:9c:6b:4a:ca:fd: 5b:28:fc:0e:33:fa:ef:dc:98:6b:2d:74:47:08:c5: f6:72:07:88:2d:9b:2a:74:4b:54:8e:ce:76:d3:de: 7f:9b:86:00:82:55:d9:85:2e:33:f4:56:2b:f9:7e: cf:be:1f:ce:e1:e6:5b:7a:21:22:37:28:f8:3f:32: 95:d0:f8:61:0e:3f:28:c8:9e:78:98:4d:3d:05:33: e5:b1:bc:97:d7:11:26:19:7a:3c:65:82:82:74:a6: aa:bf:bc:81:c5:40:e2:87:17:d5:3c:92:8d:1e:75: db:c0:36:cb:77:0a:b6:40:53:23:df:4e:c8:9e:9b: 9f:b2:f5:18:66:61:8a:8d:8f:24:9d:26:2e:b8:b7: bb:70:00:a0:09:b2:68:cd:4d:eb:56:c8:25:fc:7e: 51:65:f1:a4:79:65:31:ea:3e:1d:48:3d:53:4f:7d: 6d:81:40:55:7c:2f:ff:62:fd:21:04:00:08:47:43: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D3:55:ED:F8:0F:5A:0B:17:3E:57:E8:68:F3:FE:78:31:6E:15:9D X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VtNV7fgPWgsXPlfoaPP-eDFuFZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.21.0/24 45.147.224.0/24 185.209.38.0/24 185.209.74.0/24 185.223.78.0/24 185.225.0.0/23 185.230.52.0/24 193.58.145.0-193.58.147.255 Signature Algorithm: sha256WithRSAEncryption 9a:3a:84:7c:b7:72:b4:c4:a2:5e:01:17:a6:01:37:9b:0b:3d: c1:5f:22:6c:ad:8c:44:06:6c:50:13:f6:87:d2:c0:0f:93:7d: f4:d7:a9:b1:1a:6f:e8:58:32:16:0c:98:7e:7a:fd:46:a4:e2: e8:1a:5e:25:47:de:6e:16:8f:6e:13:72:ff:d3:12:69:a6:c1: 06:f4:af:89:63:4e:19:a9:a2:81:b0:09:c1:10:eb:77:72:f5: 92:a0:5d:e4:a8:73:bd:05:6b:20:9a:af:f8:a8:7e:a7:39:cb: 3f:18:52:f3:0b:7c:26:4d:82:71:08:36:f8:29:1e:2e:15:54: d9:97:98:26:ea:d5:ac:09:7b:c8:5f:b5:90:92:b9:8d:60:fa: 86:00:e4:1a:5c:86:5e:51:88:37:e5:2f:b2:e8:b6:1e:f6:16: d2:bb:4a:90:09:f5:87:94:76:fd:71:83:fc:a8:84:85:cd:8e: 0f:48:b5:00:43:cf:56:c8:30:e0:18:8a:ba:34:be:71:54:1a: 0d:4e:b8:65:3c:29:92:ed:ad:9b:80:8a:78:73:f8:3c:f3:58: 3e:df:91:83:29:73:54:5d:8e:a0:fd:1e:42:f6:c9:86:f0:e1: 68:14:84:56:5f:e0:43:ad:ca:62:2d:d5:14:a3:57:d1:19:51: 30:47:33:b6 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAYkm2NCsLAZ1GjeVyymBkJ3ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjMwNzA1MTYxODEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NmQzNTVlZGY4MGY1YTBiMTczZTU3ZTg2OGYzZmU3ODMxNmUxNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvduShlGNw5FKPUgxHcpImSNxCDoI aE9Con9MBhdyQYdJ5ze8eV8pGBiu3AyADgJG+u/JH6M0aP8EeGCf3u0CGD3CJD+o nGtKyv1bKPwOM/rv3JhrLXRHCMX2cgeILZsqdEtUjs52095/m4YAglXZhS4z9FYr +X7Pvh/O4eZbeiEiNyj4PzKV0PhhDj8oyJ54mE09BTPlsbyX1xEmGXo8ZYKCdKaq v7yBxUDihxfVPJKNHnXbwDbLdwq2QFMj307InpufsvUYZmGKjY8knSYuuLe7cACg CbJozU3rVsgl/H5RZfGkeWUx6j4dSD1TT31tgUBVfC//Yv0hBAAIR0PZXQIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFFbTVe34D1oLFz5X6Gjz/ngxbhWdMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvVnROVjdmZ1BXZ3NYUGxmb2FQUC1lREZ1RlowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQALQgVAwQA LZPgAwQAudEmAwQAudFKAwQAud9OAwQBueEAAwQAueY0MAwDBADBOpEDBALBOpAw DQYJKoZIhvcNAQELBQADggEBAJo6hHy3crTEol4BF6YBN5sLPcFfImytjEQGbFAT 9ofSwA+TffTXqbEab+hYMhYMmH56/Uak4ugaXiVH3m4Wj24Tcv/TEmmmwQb0r4lj ThmpooGwCcEQ63dy9ZKgXeSoc70FayCar/iofqc5yz8YUvMLfCZNgnEINvgpHi4V VNmXmCbq1awJe8hftZCSuY1g+oYA5Bpchl5RiDflL7Loth72FtK7SpAJ9YeUdv1x g/yohIXNjg9ItQBDz1bIMOAYiro0vnFUGg1OuGU8KZLtrZuAinhz+DzzWD7fkYMp c1RdjqD9HkL2yYbw4WgUhFZf4EOtymIt1RSjV9EZUTBHM7Y= -----END CERTIFICATE-----Generated at Thu Dec 18 07:09:10 2025 by rpki-client