This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/wIxnx-se1Mw7Z749AxChpXr1aHs.roa File: wIxnx-se1Mw7Z749AxChpXr1aHs.roa (raw, json) Hash identifier: rMQ0YnHbrHVLW8CZKO4/sUe1529eHnJwRo07g0liPEM= Subject key identifier: C0:8C:67:C7:EB:1E:D4:CC:3B:67:BE:3D:03:10:A1:A5:7A:F5:68:7B Certificate issuer: /CN=2614411899d721f343ed2a39629969417b5b655d Certificate serial: 01951DDC78B760ADC53A4C6D3ACA97CC7296 Authority key identifier: 26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/wIxnx-se1Mw7Z749AxChpXr1aHs.roa Signing time: Wed 19 Feb 2025 10:59:02 +0000 ROA not before: Wed 19 Feb 2025 10:59:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200908 IP address blocks: 45.144.228.0/22 maxlen: 24 45.144.228.0/24 maxlen: 24 45.144.229.0/24 maxlen: 24 45.144.230.0/24 maxlen: 24 45.150.192.0/22 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:1d:dc:78:b7:60:ad:c5:3a:4c:6d:3a:ca:97:cc:72:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2614411899d721f343ed2a39629969417b5b655d Validity Not Before: Feb 19 10:59:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c08c67c7eb1ed4cc3b67be3d0310a1a57af5687b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:16:de:71:80:b3:00:1a:15:dd:ea:5e:fc:5c: 8f:8b:29:aa:f0:26:91:e9:c8:95:3b:29:99:28:f2: ee:70:78:8c:ae:92:97:48:50:27:25:d4:b9:bd:7c: df:ff:44:24:7e:d5:35:c7:1b:3e:1f:ce:2e:1d:af: 27:8d:9e:a1:9a:69:b2:ea:41:8e:61:a0:e7:48:17: 30:73:47:56:79:05:7a:58:9b:ee:05:4e:cf:f4:06: ab:9d:97:ad:a2:a2:26:4e:8c:69:65:53:ec:cf:27: 2c:47:59:0b:08:c5:f8:a6:2a:67:27:55:b2:e3:9b: 47:c8:e5:62:7a:1a:97:61:17:53:24:20:c1:a7:02: 1b:f9:ae:c1:b6:10:23:7d:f2:d2:bf:60:71:51:7c: d2:98:ee:21:8f:92:e1:67:a2:46:f9:77:26:e6:35: a1:46:46:91:12:43:9f:a5:ea:7b:7c:f9:d8:0d:ed: 53:19:e1:90:b5:a3:3e:f1:e2:1c:8c:9e:13:b8:48: cc:e4:27:34:6b:17:88:f4:e0:0c:0f:9a:a3:d1:54: 03:e0:c3:d7:a4:37:82:5f:f6:4f:77:84:5f:9e:d8: 39:39:c2:97:3d:ad:27:91:71:06:a1:11:46:60:79: bd:4d:7c:71:26:6e:27:4b:89:2e:a6:a5:ab:de:3b: ef:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8C:67:C7:EB:1E:D4:CC:3B:67:BE:3D:03:10:A1:A5:7A:F5:68:7B X509v3 Authority Key Identifier: keyid:26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/wIxnx-se1Mw7Z749AxChpXr1aHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.228.0/22 45.150.192.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:54:44:3f:82:28:c4:cf:0f:c0:5d:77:5d:d6:b5:db:70:8c: 0a:34:e5:eb:21:dd:b3:03:e4:44:85:c2:99:69:b1:7e:7c:aa: c5:a4:d8:97:04:3a:d7:13:d0:f4:4f:f5:10:99:5a:7c:c8:f6: 3a:f1:3f:75:6a:84:ce:b0:1e:ac:5f:88:f8:89:50:34:69:24: fe:c0:81:cd:0a:76:c5:c5:10:1c:b8:80:fb:23:81:7b:38:ff: ac:87:d4:6f:41:69:14:a6:d3:37:47:6a:aa:8e:24:ef:d8:4d: bb:be:b0:91:31:65:6f:10:d4:94:a2:fd:29:e9:ca:7d:9e:e2: 88:45:a2:aa:9b:c5:46:33:c1:8c:c5:f6:f5:02:19:e2:ba:57: 28:76:cc:39:04:f6:67:b0:ab:2e:67:f0:db:57:de:3d:fc:17: 0a:e0:98:a2:df:ff:00:18:89:36:92:96:ed:3f:77:42:28:89: 0f:d1:56:3a:e8:3e:96:b7:47:be:5c:b4:c1:c5:48:07:49:c4: 17:a1:42:59:49:86:7a:63:e6:7a:41:06:5f:96:d9:31:ed:53: 94:f8:0a:86:20:c5:36:5f:0b:d2:9d:44:c3:73:29:9f:cc:58: 79:74:24:06:2d:ef:9e:b0:6f:9a:09:15:9d:6e:f1:4c:bf:6e: 11:77:5a:2b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZUd3Hi3YK3FOkxtOsqXzHKWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MTQ0MTE4OTlkNzIxZjM0M2VkMmEzOTYyOTk2OTQxN2I1 YjY1NWQwHhcNMjUwMjE5MTA1OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDhjNjdjN2ViMWVkNGNjM2I2N2JlM2QwMzEwYTFhNTdhZjU2ODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBbecYCzABoV3epe/FyPiymq8CaR 6ciVOymZKPLucHiMrpKXSFAnJdS5vXzf/0QkftU1xxs+H84uHa8njZ6hmmmy6kGO YaDnSBcwc0dWeQV6WJvuBU7P9AarnZetoqImToxpZVPszycsR1kLCMX4pipnJ1Wy 45tHyOViehqXYRdTJCDBpwIb+a7BthAjffLSv2BxUXzSmO4hj5LhZ6JG+Xcm5jWh RkaREkOfpep7fPnYDe1TGeGQtaM+8eIcjJ4TuEjM5Cc0axeI9OAMD5qj0VQD4MPX pDeCX/ZPd4Rfntg5OcKXPa0nkXEGoRFGYHm9TXxxJm4nS4kupqWr3jvv3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMCMZ8frHtTMO2e+PQMQoaV69Wh7MB8GA1UdIwQY MBaAFCYUQRiZ1yHzQ+0qOWKZaUF7W2VdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmhSQkdKblhJZk5EN1NvNVlwbHBRWHRiWlYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9kYzRlMDAtNzhiNi00NzViLTg1YzQt MDIxNDQ1NTEyOTlmLzEvd0l4bngtc2UxTXc3Wjc0OUF4Q2hwWHIxYUhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9kYzRlMDAtNzhiNi00NzViLTg1YzQtMDIxNDQ1NTEyOTlm LzEvSmhSQkdKblhJZk5EN1NvNVlwbHBRWHRiWlYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZDkAwQC LZbAMA0GCSqGSIb3DQEBCwUAA4IBAQAqVEQ/gijEzw/AXXdd1rXbcIwKNOXrId2z A+REhcKZabF+fKrFpNiXBDrXE9D0T/UQmVp8yPY68T91aoTOsB6sX4j4iVA0aST+ wIHNCnbFxRAcuID7I4F7OP+sh9RvQWkUptM3R2qqjiTv2E27vrCRMWVvENSUov0p 6cp9nuKIRaKqm8VGM8GMxfb1Ahniulcodsw5BPZnsKsuZ/DbV949/BcK4Jii3/8A GIk2kpbtP3dCKIkP0VY66D6Wt0e+XLTBxUgHScQXoUJZSYZ6Y+Z6QQZfltkx7VOU +AqGIMU2XwvSnUTDcymfzFh5dCQGLe+esG+aCRWdbvFMv24Rd1or -----END CERTIFICATE-----Generated at Thu Dec 18 07:41:58 2025 by rpki-client