This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wG3i2_RQfYNGxcKZvlpJB2jyaoo.roa File: wG3i2_RQfYNGxcKZvlpJB2jyaoo.roa (raw, json) Hash identifier: TtdA6zM2+2/HZgDLyvLHsZiK/+T1ZSS8f/gD9nt2v1k= Subject key identifier: C0:6D:E2:DB:F4:50:7D:83:46:C5:C2:99:BE:5A:49:07:68:F2:6A:8A Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 0195FAB3015963AD7E135BFEB47D03BD3A08 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wG3i2_RQfYNGxcKZvlpJB2jyaoo.roa Signing time: Thu 03 Apr 2025 08:09:50 +0000 ROA not before: Thu 03 Apr 2025 08:09:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215540 IP address blocks: 5.253.59.0/24 maxlen: 24 85.208.139.0/24 maxlen: 24 171.22.16.0/25 maxlen: 25 171.22.16.128/25 maxlen: 25 212.87.222.0/24 maxlen: 24 Validation: Failed, certificate revoked on Thu 03 Apr 2025 08:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:fa:b3:01:59:63:ad:7e:13:5b:fe:b4:7d:03:bd:3a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Apr 3 08:09:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c06de2dbf4507d8346c5c299be5a490768f26a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:27:fd:be:2a:f2:de:6c:08:ef:38:f1:1f:2a: ba:0a:20:a9:41:db:4a:af:87:0e:b8:19:ac:e8:33: 19:fa:da:75:18:11:08:84:ba:db:bf:db:64:68:95: d5:ec:76:27:ef:e9:f6:fe:cd:c2:fb:b4:b1:08:81: d8:d5:a2:1c:bb:a8:8c:43:7a:1c:7c:f8:98:8c:45: ea:41:37:d0:13:db:b1:3a:d9:a9:94:a7:8a:cf:e2: bd:e3:be:41:c1:04:97:95:7c:80:8b:1f:39:30:b2: 66:08:25:46:72:b2:77:b1:24:0c:56:f3:39:0e:f8: bc:ff:bc:20:72:b1:a7:9a:11:87:9e:72:9d:b1:fb: 77:24:5f:1a:d6:f6:b5:d9:83:5a:cb:9e:3f:86:10: c7:b3:b0:fc:32:eb:48:36:9d:82:45:3c:1f:f0:6b: ab:17:f7:fe:15:8b:45:32:81:fd:43:63:dc:cb:1d: 45:f5:ac:c9:cb:fb:e5:1e:f7:09:7a:ac:d8:8b:f9: 96:3e:ea:e1:54:b0:2c:78:66:51:af:55:30:0b:ec: 3c:bc:b1:c5:cb:59:9a:46:42:98:64:70:0b:33:c6: c6:57:63:f8:cc:24:be:b2:4f:b5:23:9e:88:e0:c3: 36:07:f8:bf:9e:42:dc:74:56:97:3e:c0:33:e7:fe: a4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6D:E2:DB:F4:50:7D:83:46:C5:C2:99:BE:5A:49:07:68:F2:6A:8A X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wG3i2_RQfYNGxcKZvlpJB2jyaoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.59.0/24 85.208.139.0/24 171.22.16.0/24 212.87.222.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:24:12:d0:27:3f:35:68:8e:f5:2a:e4:d9:0c:df:66:2e:9c: 57:40:6c:8a:81:48:3c:b4:25:33:14:40:cb:46:15:6e:d6:6e: 5f:21:e8:0c:b4:08:8c:6c:10:dc:29:e3:be:70:65:fc:da:fc: 2c:07:16:be:bb:90:fc:2b:77:d8:db:55:56:96:ab:cf:06:f9: 40:13:7c:ba:ed:13:6f:99:4f:eb:f7:6f:c1:d5:e6:23:77:77: 0b:9a:9d:74:0f:f2:40:d2:e4:45:a0:02:6a:5b:7a:c9:5e:dc: 27:98:1e:09:70:28:23:35:58:78:a5:c3:66:4a:04:c9:19:e1: c8:23:40:32:1d:ee:14:a2:29:4f:4d:5d:f1:49:5f:dd:ca:a4: c5:a5:00:76:87:a4:d4:f7:c7:07:84:9f:87:fa:98:f4:ca:74: 12:64:5e:3f:cd:f3:a6:1d:1f:03:d6:31:df:9c:1b:c4:da:5b: 91:a0:b8:d3:c6:e9:0d:54:2f:31:e0:6c:64:0e:d1:d5:e3:34: b9:ad:71:a5:14:49:8c:14:84:9b:cb:97:fa:b3:31:09:3f:db: e4:5b:62:ae:b2:09:88:0d:eb:64:f0:5a:25:72:7d:a6:f3:37: 8f:35:62:5d:16:71:cd:52:4b:3d:d7:0d:ca:6c:eb:fa:33:97: dc:5b:78:10 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZX6swFZY61+E1v+tH0DvToIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUwNDAzMDgwOTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDZkZTJkYmY0NTA3ZDgzNDZjNWMyOTliZTVhNDkwNzY4ZjI2YThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Cf9viry3mwI7zjxHyq6CiCpQdtK r4cOuBms6DMZ+tp1GBEIhLrbv9tkaJXV7HYn7+n2/s3C+7SxCIHY1aIcu6iMQ3oc fPiYjEXqQTfQE9uxOtmplKeKz+K9475BwQSXlXyAix85MLJmCCVGcrJ3sSQMVvM5 Dvi8/7wgcrGnmhGHnnKdsft3JF8a1va12YNay54/hhDHs7D8MutINp2CRTwf8Gur F/f+FYtFMoH9Q2Pcyx1F9azJy/vlHvcJeqzYi/mWPurhVLAseGZRr1UwC+w8vLHF y1maRkKYZHALM8bGV2P4zCS+sk+1I56I4MM2B/i/nkLcdFaXPsAz5/6kywIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMBt4tv0UH2DRsXCmb5aSQdo8mqKMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvd0czaTJfUlFmWU5HeGNLWnZscEpCMmp5YW9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABf07AwQA VdCLAwQAqxYQAwQA1FfeMA0GCSqGSIb3DQEBCwUAA4IBAQBvJBLQJz81aI71KuTZ DN9mLpxXQGyKgUg8tCUzFEDLRhVu1m5fIegMtAiMbBDcKeO+cGX82vwsBxa+u5D8 K3fY21VWlqvPBvlAE3y67RNvmU/r92/B1eYjd3cLmp10D/JA0uRFoAJqW3rJXtwn mB4JcCgjNVh4pcNmSgTJGeHII0AyHe4UoilPTV3xSV/dyqTFpQB2h6TU98cHhJ+H +pj0ynQSZF4/zfOmHR8D1jHfnBvE2luRoLjTxukNVC8x4GxkDtHV4zS5rXGlFEmM FISby5f6szEJP9vkW2KusgmIDetk8Folcn2m8zePNWJdFnHNUks91w3KbOv6M5fc W3gQ -----END CERTIFICATE-----Generated at Thu Dec 25 01:00:34 2025 by rpki-client