This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8uMZg48HM1pyk3UbsenPcKHC3RU.roa File: 8uMZg48HM1pyk3UbsenPcKHC3RU.roa (raw, json) Hash identifier: P6d3FkqkVCZcXPGulo8ZZTPfFhN2qMEUsmzHo6bBwCI= Subject key identifier: F2:E3:19:83:8F:07:33:5A:72:93:75:1B:B1:E9:CF:70:A1:C2:DD:15 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 0189D43FCE819EC7D0AC63B64E499DEAAC74 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8uMZg48HM1pyk3UbsenPcKHC3RU.roa Signing time: Tue 08 Aug 2023 08:24:58 +0000 ROA not before: Tue 08 Aug 2023 08:24:58 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 39074 IP address blocks: 85.133.231.0/24 maxlen: 24 85.133.232.0/24 maxlen: 24 85.133.232.0/22 maxlen: 22 85.133.229.0/24 maxlen: 24 85.133.230.0/24 maxlen: 24 85.133.239.0/24 maxlen: 24 85.133.240.0/24 maxlen: 24 85.133.235.0/24 maxlen: 24 85.133.240.0/22 maxlen: 22 85.133.245.0/24 maxlen: 24 85.133.246.0/24 maxlen: 24 85.133.243.0/24 maxlen: 24 85.133.244.0/24 maxlen: 24 85.133.247.0/24 maxlen: 24 85.133.248.0/23 maxlen: 24 85.133.249.0/24 maxlen: 24 85.133.251.0/24 maxlen: 24 85.133.252.0/22 maxlen: 22 85.133.254.0/24 maxlen: 24 85.133.255.0/24 maxlen: 24 85.133.176.0/22 maxlen: 24 85.133.178.0/24 maxlen: 24 85.133.174.0/24 maxlen: 24 85.133.184.0/22 maxlen: 24 85.133.180.0/22 maxlen: 24 85.133.189.0/24 maxlen: 24 85.133.188.0/22 maxlen: 22 85.133.192.0/22 maxlen: 22 85.133.196.0/24 maxlen: 24 85.133.197.0/24 maxlen: 24 85.133.196.0/22 maxlen: 22 85.133.203.0/24 maxlen: 24 85.133.204.0/24 maxlen: 24 85.133.205.0/24 maxlen: 24 85.133.200.0/22 maxlen: 22 85.133.206.0/24 maxlen: 24 85.133.200.0/24 maxlen: 24 85.133.201.0/24 maxlen: 24 85.133.204.0/22 maxlen: 22 85.133.210.0/23 maxlen: 24 85.133.211.0/24 maxlen: 24 85.133.212.0/24 maxlen: 24 85.133.213.0/24 maxlen: 24 85.133.207.0/24 maxlen: 24 85.133.212.0/22 maxlen: 22 85.133.209.0/24 maxlen: 24 85.133.217.0/24 maxlen: 24 85.133.218.0/24 maxlen: 24 85.133.219.0/24 maxlen: 24 85.133.215.0/24 maxlen: 24 85.133.220.0/24 maxlen: 24 85.133.220.0/22 maxlen: 22 85.133.226.0/24 maxlen: 24 85.133.221.0/24 maxlen: 24 85.133.223.0/24 maxlen: 24 85.133.224.0/22 maxlen: 22 85.133.130.0/24 maxlen: 24 85.133.131.0/24 maxlen: 24 85.133.128.0/17 maxlen: 24 85.133.128.0/24 maxlen: 24 85.133.129.0/24 maxlen: 24 85.133.128.0/22 maxlen: 22 85.133.134.0/24 maxlen: 24 85.133.133.0/24 maxlen: 24 85.133.137.0/24 maxlen: 24 85.133.138.0/24 maxlen: 24 85.133.139.0/24 maxlen: 24 85.133.144.0/22 maxlen: 22 85.133.144.0/24 maxlen: 24 85.133.145.0/24 maxlen: 24 85.133.140.0/22 maxlen: 22 85.133.141.0/24 maxlen: 24 85.133.142.0/24 maxlen: 24 85.133.140.0/24 maxlen: 24 85.133.148.0/24 maxlen: 24 85.133.149.0/24 maxlen: 24 85.133.150.0/24 maxlen: 24 85.133.148.0/22 maxlen: 22 85.133.147.0/24 maxlen: 24 85.133.152.0/22 maxlen: 22 85.133.152.0/24 maxlen: 24 85.133.158.0/24 maxlen: 24 85.133.159.0/24 maxlen: 24 85.133.155.0/24 maxlen: 24 85.133.157.0/24 maxlen: 24 85.133.154.0/24 maxlen: 24 85.133.162.0/24 maxlen: 24 85.133.163.0/24 maxlen: 24 85.133.160.0/24 maxlen: 24 85.133.161.0/24 maxlen: 24 85.133.165.0/24 maxlen: 24 85.133.172.0/24 maxlen: 24 85.133.172.0/22 maxlen: 24 85.133.168.0/22 maxlen: 24 185.41.0.0/24 maxlen: 24 185.41.1.0/24 maxlen: 24 185.41.2.0/24 maxlen: 24 185.41.3.0/24 maxlen: 24 2a04:87c0::/29 maxlen: 29 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:d4:3f:ce:81:9e:c7:d0:ac:63:b6:4e:49:9d:ea:ac:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Aug 8 08:24:58 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=f2e319838f07335a7293751bb1e9cf70a1c2dd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:59:99:f8:f7:eb:c8:cb:e0:d9:d4:1f:9c:3f: 5e:2d:70:ec:e5:ad:b2:f8:38:4a:99:93:7a:33:91: 7e:74:d6:cc:59:46:a4:41:6f:6e:d8:9f:3b:1d:9c: b9:86:cd:90:06:3b:54:72:52:78:cb:0d:cc:7b:6a: 60:11:40:53:ae:9f:97:9b:9f:fc:ba:d9:2c:9b:46: 38:77:97:7b:95:63:2c:4a:de:a1:8d:bc:aa:82:8c: 21:f9:37:a1:29:23:39:bf:49:de:bc:ef:19:75:90: ad:68:6b:bd:79:39:3f:a8:f3:f5:5c:ce:a6:1f:a7: b9:f3:1d:98:00:2f:b2:9c:e5:d0:a0:f4:76:1c:5e: 17:fc:0d:a1:33:5c:6d:1f:bd:7f:4b:26:40:f6:b6: 8e:92:4a:e2:c5:32:e0:72:cf:c4:e9:86:ee:1f:3d: 4b:60:d9:b4:7a:9a:f7:f4:da:86:a4:32:80:63:af: 3b:56:9c:e1:ed:cc:fa:02:6b:c4:f5:dd:06:e6:93: 74:31:a5:da:98:42:f2:02:a3:03:e6:95:75:ab:33: a3:c5:18:64:8a:bb:7f:7c:ce:08:a9:6f:7b:e8:d7: d6:98:77:92:c2:f7:61:f7:bb:db:06:7b:94:82:0d: 61:32:76:82:4f:68:d1:ae:84:98:68:d2:9a:bf:3c: af:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E3:19:83:8F:07:33:5A:72:93:75:1B:B1:E9:CF:70:A1:C2:DD:15 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8uMZg48HM1pyk3UbsenPcKHC3RU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.128.0/17 185.41.0.0/22 IPv6: 2a04:87c0::/29 Signature Algorithm: sha256WithRSAEncryption 07:98:62:73:55:a4:0a:3c:09:a5:47:6c:fa:b2:df:45:e7:b5: 65:f7:7d:b3:3b:46:df:f4:e4:23:23:e2:6d:89:1c:79:90:4a: 60:3d:6e:7e:92:78:28:39:88:3a:ae:d4:99:89:ad:14:72:c9: 02:d1:be:46:1e:5c:1e:30:af:d0:00:1e:3f:48:24:1f:1e:12: 9e:e4:16:eb:de:01:f2:51:f3:eb:f3:b5:c2:44:a6:3b:a6:7b: 54:3f:a2:9d:37:e4:ae:a0:2e:0e:6a:3d:31:3c:b1:e8:cc:4b: 42:7d:28:96:c4:b5:c6:61:f6:53:20:a9:47:fa:b6:10:b4:d8: f9:6f:50:37:5f:2b:1d:b8:79:07:09:0c:fd:75:1e:47:b2:f2: 2e:37:b6:f4:e7:6c:10:7c:87:56:7b:62:8b:1b:ca:0f:49:54: 48:75:97:67:dd:36:29:b5:7e:63:0a:df:9d:03:f5:59:7c:ea: 4b:ed:92:3f:82:64:5c:48:fc:d3:69:54:55:51:2a:f3:4e:df: b7:2f:c3:cf:c2:3a:8e:56:7d:e9:14:09:f3:09:b1:d2:5e:f8: 78:68:4e:3e:8a:a9:46:ad:83:91:b3:69:8c:58:c1:82:0a:07: 0e:14:52:0b:c8:44:b2:d1:b0:a9:88:a7:4f:7e:4c:86:dd:47: f2:a3:7a:13 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAYnUP86BnsfQrGO2Tkmd6qx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjMwODA4MDgyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmUzMTk4MzhmMDczMzVhNzI5Mzc1MWJiMWU5Y2Y3MGExYzJkZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FmZ+PfryMvg2dQfnD9eLXDs5a2y +DhKmZN6M5F+dNbMWUakQW9u2J87HZy5hs2QBjtUclJ4yw3Me2pgEUBTrp+Xm5/8 utksm0Y4d5d7lWMsSt6hjbyqgowh+TehKSM5v0nevO8ZdZCtaGu9eTk/qPP1XM6m H6e58x2YAC+ynOXQoPR2HF4X/A2hM1xtH71/SyZA9raOkkrixTLgcs/E6YbuHz1L YNm0epr39NqGpDKAY687Vpzh7cz6AmvE9d0G5pN0MaXamELyAqMD5pV1qzOjxRhk irt/fM4IqW976NfWmHeSwvdh97vbBnuUgg1hMnaCT2jRroSYaNKavzyvdwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPLjGYOPBzNacpN1G7Hpz3Chwt0VMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvOHVNWmc0OEhNMXB5azNVYnNlblBjS0hDM1JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHVYWAAwQC uSkAMA0EAgACMAcDBQMqBIfAMA0GCSqGSIb3DQEBCwUAA4IBAQAHmGJzVaQKPAml R2z6st9F57Vl932zO0bf9OQjI+JtiRx5kEpgPW5+kngoOYg6rtSZia0UcskC0b5G HlweMK/QAB4/SCQfHhKe5Bbr3gHyUfPr87XCRKY7pntUP6KdN+SuoC4Oaj0xPLHo zEtCfSiWxLXGYfZTIKlH+rYQtNj5b1A3XysduHkHCQz9dR5HsvIuN7b052wQfIdW e2KLG8oPSVRIdZdn3TYptX5jCt+dA/VZfOpL7ZI/gmRcSPzTaVRVUSrzTt+3L8PP wjqOVn3pFAnzCbHSXvh4aE4+iqlGrYORs2mMWMGCCgcOFFILyESy0bCpiKdPfkyG 3Ufyo3oT -----END CERTIFICATE-----Generated at Fri Dec 19 12:52:04 2025 by rpki-client