This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0kJQIRT7CY0TwMMAEVypKrzfbfs.roa File: 0kJQIRT7CY0TwMMAEVypKrzfbfs.roa (raw, json) Hash identifier: giEhHE/CbkSqByPlqrXed1Pvk3Joo1cnYvUCPTwCors= Subject key identifier: D2:42:50:21:14:FB:09:8D:13:C0:C3:00:11:5C:A9:2A:BC:DF:6D:FB Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 01968F3A1794459E19FA05B6EDD09F98A012 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0kJQIRT7CY0TwMMAEVypKrzfbfs.roa Signing time: Fri 02 May 2025 04:21:11 +0000 ROA not before: Fri 02 May 2025 04:21:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43260 IP address blocks: 5.83.129.0/24 maxlen: 24 5.175.138.0/24 maxlen: 24 77.90.54.0/24 maxlen: 24 87.239.131.0/24 maxlen: 24 94.249.195.0/24 maxlen: 24 95.215.32.0/24 maxlen: 24 95.215.34.0/24 maxlen: 24 178.18.144.0/24 maxlen: 24 Validation: Failed, certificate revoked on Fri 02 May 2025 09:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:8f:3a:17:94:45:9e:19:fa:05:b6:ed:d0:9f:98:a0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: May 2 04:21:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d242502114fb098d13c0c300115ca92abcdf6dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:72:ee:0b:85:72:57:7f:05:ca:ec:66:e6:da: fe:d3:fd:d6:d8:83:06:4e:72:85:7f:ad:60:54:da: c2:14:ae:f3:d8:cb:18:1c:43:00:ef:29:32:0e:d9: e2:41:ba:95:92:ab:29:7e:fb:44:35:d6:84:bc:e2: 92:e5:23:dc:48:c9:6f:b8:8d:27:a4:44:62:12:3d: 80:56:2c:be:70:19:55:d0:cb:d8:9a:ba:59:de:93: dd:4b:77:d1:d0:e5:21:15:de:5e:57:bf:f9:42:43: 95:bb:88:eb:f9:96:24:f9:41:73:7e:3a:94:a5:4b: 3f:3f:b6:b4:84:50:24:62:f4:06:73:78:81:a2:df: d2:76:50:3b:a3:f4:18:29:be:a0:5c:26:97:dc:95: 85:e4:03:ac:3a:6e:a2:f2:91:92:c2:22:5e:f8:e7: 1a:ea:8d:0d:6e:3c:c8:5a:96:f3:f3:1e:1a:13:0a: 74:8d:76:79:04:4b:06:37:21:27:11:6d:52:61:28: f9:7b:0d:fb:d3:47:97:06:89:e2:4c:e1:05:93:46: 96:fe:54:a3:65:0c:64:fc:3a:88:3f:90:08:5e:89: d7:f0:ad:d9:a7:37:5c:f3:d1:37:4a:f3:de:7b:c8: dd:36:ea:10:43:31:09:f1:91:d6:48:70:bf:74:76: 83:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:42:50:21:14:FB:09:8D:13:C0:C3:00:11:5C:A9:2A:BC:DF:6D:FB X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0kJQIRT7CY0TwMMAEVypKrzfbfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.129.0/24 5.175.138.0/24 77.90.54.0/24 87.239.131.0/24 94.249.195.0/24 95.215.32.0/24 95.215.34.0/24 178.18.144.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:23:04:26:58:dd:b4:10:f8:0c:c5:27:45:15:f3:0c:dc:55: bd:d2:03:dd:36:ce:12:bc:80:0f:19:53:f6:58:e4:13:b8:9a: ad:e1:52:0f:76:19:c9:0b:a6:8a:9a:21:82:16:b0:c6:53:73: 11:31:19:6a:7f:1c:5f:8c:81:2e:4f:f0:0d:42:ab:ab:39:98: cc:9e:c1:91:ab:cb:e0:34:16:cf:e6:08:4a:de:72:c5:71:1c: db:68:9b:92:42:c5:80:2b:c3:b5:3f:14:80:15:95:df:aa:7d: 72:16:e2:13:40:67:7f:be:2d:16:44:ed:6b:e3:14:0d:b4:70: fb:da:0b:70:31:fa:f3:19:ed:59:f8:82:f3:b2:3c:ad:e7:bd: 98:61:e4:a1:97:3d:1d:47:29:01:f7:93:da:42:75:5b:89:e9: 71:b1:a5:6c:c8:2d:81:90:24:1a:67:71:95:8b:92:1d:00:a1: dc:5b:da:6b:2b:41:1c:d5:b4:c7:f9:bc:c9:a8:97:5b:92:b7: e0:6e:6e:58:a6:7e:86:fc:ab:24:90:52:49:50:bf:dd:4e:b8: c6:d1:a8:58:50:80:21:b1:3b:e1:34:95:db:e4:1b:97:d5:47: ed:da:cf:2f:67:b2:e4:0d:4f:22:cb:0d:57:3e:04:f6:85:2a: 21:91:50:30 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZaPOheURZ4Z+gW27dCfmKASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUwNTAyMDQyMTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjQyNTAyMTE0ZmIwOThkMTNjMGMzMDAxMTVjYTkyYWJjZGY2ZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnLuC4VyV38Fyuxm5tr+0/3W2IMG TnKFf61gVNrCFK7z2MsYHEMA7ykyDtniQbqVkqspfvtENdaEvOKS5SPcSMlvuI0n pERiEj2AViy+cBlV0MvYmrpZ3pPdS3fR0OUhFd5eV7/5QkOVu4jr+ZYk+UFzfjqU pUs/P7a0hFAkYvQGc3iBot/SdlA7o/QYKb6gXCaX3JWF5AOsOm6i8pGSwiJe+Oca 6o0NbjzIWpbz8x4aEwp0jXZ5BEsGNyEnEW1SYSj5ew3700eXBoniTOEFk0aW/lSj ZQxk/DqIP5AIXonX8K3Zpzdc89E3SvPee8jdNuoQQzEJ8ZHWSHC/dHaDjQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFNJCUCEU+wmNE8DDABFcqSq83237MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMGtKUUlSVDdDWTBUd01NQUVWeXBLcnpmYmZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQABVOBAwQA Ba+KAwQATVo2AwQAV++DAwQAXvnDAwQAX9cgAwQAX9ciAwQAshKQMA0GCSqGSIb3 DQEBCwUAA4IBAQA/IwQmWN20EPgMxSdFFfMM3FW90gPdNs4SvIAPGVP2WOQTuJqt 4VIPdhnJC6aKmiGCFrDGU3MRMRlqfxxfjIEuT/ANQqurOZjMnsGRq8vgNBbP5ghK 3nLFcRzbaJuSQsWAK8O1PxSAFZXfqn1yFuITQGd/vi0WRO1r4xQNtHD72gtwMfrz Ge1Z+ILzsjyt572YYeShlz0dRykB95PaQnVbielxsaVsyC2BkCQaZ3GVi5IdAKHc W9prK0Ec1bTH+bzJqJdbkrfgbm5Ypn6G/KskkFJJUL/dTrjG0ahYUIAhsTvhNJXb 5BuX1Uft2s8vZ7LkDU8iyw1XPgT2hSohkVAw -----END CERTIFICATE-----Generated at Thu Dec 25 07:12:45 2025 by rpki-client