This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/OkulLyL_NAIK8XMRuSQk8SawZlY.roa File: OkulLyL_NAIK8XMRuSQk8SawZlY.roa (raw, json) Hash identifier: y+GQh8QOvTWlkRSPXPrk5XWL2FkhBOK6MkzwPOMhByQ= Subject key identifier: 3A:4B:A5:2F:22:FF:34:02:0A:F1:73:11:B9:24:24:F1:26:B0:66:56 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 01891B89021C970DE4E717792066176B6061 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/OkulLyL_NAIK8XMRuSQk8SawZlY.roa Signing time: Mon 03 Jul 2023 11:35:11 +0000 ROA not before: Mon 03 Jul 2023 11:35:11 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 9009 IP address blocks: 185.187.46.0/23 maxlen: 23 92.42.20.0/22 maxlen: 22 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:89:1b:89:02:1c:97:0d:e4:e7:17:79:20:66:17:6b:60:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Jul 3 11:35:11 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=3a4ba52f22ff34020af17311b92424f126b06656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:71:8b:55:22:8e:2d:e0:b9:94:fd:fb:81:87: 7d:91:10:eb:0a:89:ed:85:bc:5b:7b:4c:0c:8f:90: 52:d2:23:d1:6a:3c:8b:96:93:3e:6a:77:bd:82:a2: 13:e3:3b:b6:70:25:6e:c9:c0:c4:39:b2:96:2a:d3: 22:c8:a5:3a:87:08:12:55:00:92:90:c4:17:0c:5e: b4:82:9c:30:94:cc:b7:d5:06:54:ed:9d:f1:99:43: 83:4f:86:1b:00:b6:03:c8:44:d3:97:33:c5:c5:c3: 8f:05:b6:a1:28:d5:c2:b5:57:0a:7a:fa:a9:91:89: ce:0a:6b:51:17:59:c8:c9:b0:3e:5a:ff:a2:61:fc: 0d:ff:0d:6f:ec:e5:18:9e:7d:3d:ca:f9:a5:54:84: 42:97:05:6d:d0:63:90:22:a9:00:e4:9d:b0:b9:26: 31:04:99:ef:62:47:11:ae:ac:64:c5:98:9f:28:46: 38:ac:02:e9:62:a3:9a:b8:f4:86:a7:5d:6a:47:36: 61:91:af:c3:81:f3:d3:58:da:69:82:8a:69:f0:4e: a4:c7:24:a1:5c:52:d2:3e:be:6f:f3:6e:87:62:80: b9:cd:a6:8e:e9:ca:b7:08:db:34:aa:64:25:82:88: a9:bf:55:d8:84:25:a8:3e:1a:c0:5a:d5:11:25:6d: 27:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4B:A5:2F:22:FF:34:02:0A:F1:73:11:B9:24:24:F1:26:B0:66:56 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/OkulLyL_NAIK8XMRuSQk8SawZlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.20.0/22 185.187.46.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:99:75:78:67:6b:ee:db:59:cd:de:21:0d:f1:b2:cd:72:92: e5:c1:23:f3:e0:3b:32:d3:9c:11:93:24:4d:63:e2:d8:db:f4: e5:09:9e:06:1d:94:eb:89:2e:f2:8d:8e:0e:0e:d0:bb:1f:bf: d8:0b:cf:63:75:83:a6:81:5b:b1:a4:60:a0:17:cb:2c:cf:dd: f4:84:b6:32:06:03:e7:6d:f4:6e:45:e5:7d:01:d7:e2:0b:e7: aa:8a:f4:0c:5d:dc:3f:89:f5:2b:ce:4d:5c:0c:68:fb:c7:c8: 4f:72:a9:74:a3:cd:d2:6f:f1:df:cc:ea:8f:44:d1:40:00:8d: 4b:c8:f3:d7:30:77:f7:c2:e8:f8:3d:d0:ce:20:68:4d:7f:ff: 85:96:c6:ba:7c:ac:b8:e0:a1:3d:47:65:9f:ce:16:db:b6:df: bf:a2:d3:e5:fb:fd:71:69:da:87:1f:e0:fb:6e:71:b7:7b:21: 44:d3:6c:82:3a:d8:58:5b:6f:78:22:73:e9:c1:c6:b9:16:47: c9:de:0f:8c:80:cc:60:db:41:89:ee:f2:98:5e:c0:cb:7f:e0: 36:84:e9:73:5f:d7:15:27:d2:51:ae:a6:d8:e5:ed:94:08:0d: f5:8e:c9:88:e2:32:c8:b2:17:25:f0:e4:34:d7:0e:9a:4c:ee: f5:55:2c:cb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAYkbiQIclw3k5xd5IGYXa2BhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjMwNzAzMTEzNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTRiYTUyZjIyZmYzNDAyMGFmMTczMTFiOTI0MjRmMTI2YjA2NjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03GLVSKOLeC5lP37gYd9kRDrCont hbxbe0wMj5BS0iPRajyLlpM+ane9gqIT4zu2cCVuycDEObKWKtMiyKU6hwgSVQCS kMQXDF60gpwwlMy31QZU7Z3xmUODT4YbALYDyETTlzPFxcOPBbahKNXCtVcKevqp kYnOCmtRF1nIybA+Wv+iYfwN/w1v7OUYnn09yvmlVIRClwVt0GOQIqkA5J2wuSYx BJnvYkcRrqxkxZifKEY4rALpYqOauPSGp11qRzZhka/DgfPTWNppgopp8E6kxySh XFLSPr5v826HYoC5zaaO6cq3CNs0qmQlgoipv1XYhCWoPhrAWtURJW0nOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDpLpS8i/zQCCvFzEbkkJPEmsGZWMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvT2t1bEx5TF9OQUlLOFhNUnVTUWs4U2F3WmxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXCoUAwQB ubsuMA0GCSqGSIb3DQEBCwUAA4IBAQCNmXV4Z2vu21nN3iEN8bLNcpLlwSPz4Dsy 05wRkyRNY+LY2/TlCZ4GHZTriS7yjY4ODtC7H7/YC89jdYOmgVuxpGCgF8ssz930 hLYyBgPnbfRuReV9AdfiC+eqivQMXdw/ifUrzk1cDGj7x8hPcql0o83Sb/HfzOqP RNFAAI1LyPPXMHf3wuj4PdDOIGhNf/+Flsa6fKy44KE9R2Wfzhbbtt+/otPl+/1x adqHH+D7bnG3eyFE02yCOthYW294InPpwca5FkfJ3g+MgMxg20GJ7vKYXsDLf+A2 hOlzX9cVJ9JRrqbY5e2UCA31jsmI4jLIshcl8OQ01w6aTO71VSzL -----END CERTIFICATE-----Generated at Sun Dec 21 23:15:47 2025 by rpki-client