This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GYiro4XIDaJjTCDvWSnbCEhHQcs.roa File: GYiro4XIDaJjTCDvWSnbCEhHQcs.roa (raw, json) Hash identifier: OxxJM5wgyTqRNg3Ct0CvJB/qORqIvJi7WD+W+RWV1Fw= Subject key identifier: 19:88:AB:A3:85:C8:0D:A2:63:4C:20:EF:59:29:DB:08:48:47:41:CB Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 018E88655208FFD189FF1B6B604E5A25DDC6 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GYiro4XIDaJjTCDvWSnbCEhHQcs.roa Signing time: Fri 29 Mar 2024 04:08:45 +0000 ROA not before: Fri 29 Mar 2024 04:08:45 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 8568 IP address blocks: 195.166.160.0/20 maxlen: 20 195.166.160.0/24 maxlen: 24 195.166.163.0/24 maxlen: 24 195.166.176.0/21 maxlen: 24 195.166.176.0/24 maxlen: 24 195.166.184.0/22 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:88:65:52:08:ff:d1:89:ff:1b:6b:60:4e:5a:25:dd:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Mar 29 04:08:45 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=1988aba385c80da2634c20ef5929db08484741cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:2a:7c:0a:4e:81:6f:6d:a5:a9:3f:a7:41: 17:c8:c8:7e:c7:dd:54:7e:31:e6:a8:ae:d7:1e:42: e5:fb:71:e8:52:52:ed:53:25:22:4b:e7:0b:37:3a: 7a:d3:52:e0:f0:b6:1b:85:ad:a5:ee:b7:23:92:bb: 6d:5f:ad:e3:36:3f:71:82:dd:27:85:84:16:7e:6a: bc:a3:c5:49:f4:d6:b3:0a:1b:64:e2:9e:a9:ad:66: e5:c0:9c:d7:04:e2:31:1e:14:3b:9a:cf:51:b7:a8: 45:4c:b7:71:b4:de:dd:5b:f2:78:fb:e9:90:4e:b2: db:05:5f:08:d0:80:9e:2e:28:ff:7e:b3:f1:40:f4: ce:0a:12:e6:4b:ff:08:30:df:dd:2c:f0:67:ae:c6: 3b:af:76:ed:88:24:75:8b:0c:41:82:36:8a:83:fb: 38:0c:61:55:a6:a6:49:50:72:d1:95:dc:31:75:a6: b2:5b:d2:eb:e8:fb:73:c4:ea:4a:94:21:08:79:04: 01:62:fe:ee:29:39:34:6b:ba:87:c6:7b:6b:6f:91: 2b:c3:5a:9a:93:e8:05:b7:ca:de:56:d3:ad:6e:dc: bd:c5:23:fb:3c:ab:ba:52:09:c3:1f:90:e8:6e:13: a2:30:38:2b:65:39:a2:8e:84:e4:54:3a:6d:fe:8c: 33:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:88:AB:A3:85:C8:0D:A2:63:4C:20:EF:59:29:DB:08:48:47:41:CB X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/GYiro4XIDaJjTCDvWSnbCEhHQcs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.166.160.0-195.166.187.255 Signature Algorithm: sha256WithRSAEncryption 39:7b:55:80:84:2a:e4:0c:eb:e4:ed:98:03:cc:98:00:1b:0d: bd:a3:05:7e:d1:e5:c5:39:14:19:04:55:b9:85:82:7f:04:ab: 3b:85:f2:6d:db:43:8f:d8:c7:30:89:5c:09:08:da:c0:23:cd: c2:60:e9:a2:f0:f5:31:ab:da:d9:1e:80:40:f4:4a:e3:16:58: dc:f4:68:93:73:5b:fb:85:41:35:73:cd:e7:81:12:1e:76:b0: c6:b8:96:b0:63:d3:86:3f:87:c7:cb:2d:d5:74:64:00:ac:aa: 59:bc:9c:a1:a8:47:ff:1c:55:d0:40:20:fa:83:74:5d:c5:6f: 95:ad:f3:ed:de:82:56:01:01:ef:d6:89:18:34:54:be:dc:67: 4d:e4:38:32:32:92:dc:fd:a0:d5:e7:5d:ba:29:5e:ff:b9:33: 0b:42:93:66:ac:57:3d:86:22:e6:bf:7b:4b:e6:79:d6:36:d3: ec:6f:0d:16:c8:76:1f:03:63:b3:70:d5:8f:37:fc:5a:75:0a: 95:d9:80:4d:8d:0f:14:e5:3d:cc:33:8a:48:c6:e9:a4:0a:e7: 2d:a2:c1:86:2c:b8:12:fa:2b:fe:f9:df:f8:27:91:dc:09:6c: 49:23:26:9c:96:b7:a9:65:ba:9c:a2:0a:77:f9:46:09:5d:28: 98:0e:ae:13 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAY6IZVII/9GJ/xtrYE5aJd3GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjQwMzI5MDQwODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOTg4YWJhMzg1YzgwZGEyNjM0YzIwZWY1OTI5ZGIwODQ4NDc0MWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6EqfApOgW9tpak/p0EXyMh+x91U fjHmqK7XHkLl+3HoUlLtUyUiS+cLNzp601Lg8LYbha2l7rcjkrttX63jNj9xgt0n hYQWfmq8o8VJ9NazChtk4p6prWblwJzXBOIxHhQ7ms9Rt6hFTLdxtN7dW/J4++mQ TrLbBV8I0ICeLij/frPxQPTOChLmS/8IMN/dLPBnrsY7r3btiCR1iwxBgjaKg/s4 DGFVpqZJUHLRldwxdaayW9Lr6PtzxOpKlCEIeQQBYv7uKTk0a7qHxntrb5Erw1qa k+gFt8reVtOtbty9xSP7PKu6UgnDH5DobhOiMDgrZTmijoTkVDpt/owz/wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBmIq6OFyA2iY0wg71kp2whIR0HLMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvR1lpcm80WElEYUpqVENEdldTbmJDRWhIUWNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXDpqAD BALDprgwDQYJKoZIhvcNAQELBQADggEBADl7VYCEKuQM6+TtmAPMmAAbDb2jBX7R 5cU5FBkEVbmFgn8EqzuF8m3bQ4/YxzCJXAkI2sAjzcJg6aLw9TGr2tkegED0SuMW WNz0aJNzW/uFQTVzzeeBEh52sMa4lrBj04Y/h8fLLdV0ZACsqlm8nKGoR/8cVdBA IPqDdF3Fb5Wt8+3eglYBAe/WiRg0VL7cZ03kODIyktz9oNXnXbopXv+5MwtCk2as Vz2GIua/e0vmedY20+xvDRbIdh8DY7Nw1Y83/Fp1CpXZgE2NDxTlPcwzikjG6aQK 5y2iwYYsuBL6K/753/gnkdwJbEkjJpyWt6llupyiCnf5RgldKJgOrhM= -----END CERTIFICATE-----Generated at Thu Dec 18 19:11:05 2025 by rpki-client