This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1oHk27Vq4mp0YxnjvEpwyg-k6YQ.roa File: 1oHk27Vq4mp0YxnjvEpwyg-k6YQ.roa (raw, json) Hash identifier: vcEujwNKrU6buLrm8uYDrwN9xjlaq3DLvvyelsx2q4c= Subject key identifier: D6:81:E4:DB:B5:6A:E2:6A:74:63:19:E3:BC:4A:70:CA:0F:A4:E9:84 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019636A90D6BDB044CC4281434D796F5FFEE Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1oHk27Vq4mp0YxnjvEpwyg-k6YQ.roa Signing time: Mon 14 Apr 2025 23:36:10 +0000 ROA not before: Mon 14 Apr 2025 23:36:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19318 IP address blocks: 89.144.34.0/24 maxlen: 24 94.103.172.0/24 maxlen: 24 94.103.173.0/24 maxlen: 24 94.103.174.0/24 maxlen: 24 94.249.197.0/24 maxlen: 24 94.249.198.0/24 maxlen: 24 94.249.199.0/24 maxlen: 24 94.249.200.0/24 maxlen: 24 94.249.201.0/24 maxlen: 24 94.249.202.0/24 maxlen: 24 94.249.203.0/24 maxlen: 24 94.249.204.0/24 maxlen: 24 94.249.205.0/24 maxlen: 24 178.18.147.0/24 maxlen: 24 Validation: Failed, certificate revoked on Tue 15 Apr 2025 11:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:36:a9:0d:6b:db:04:4c:c4:28:14:34:d7:96:f5:ff:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Apr 14 23:36:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d681e4dbb56ae26a746319e3bc4a70ca0fa4e984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:99:48:55:fb:4c:f1:4e:fc:1b:e4:c5:fe: 7d:02:41:44:51:9e:57:d8:9c:b9:5b:61:08:2a:0b: 25:fa:33:ef:d3:d0:c4:48:a0:ba:be:63:f4:c0:56: a9:8b:96:cc:35:f4:ab:e6:dc:9c:ec:49:fd:a9:98: d8:a1:fb:6a:e4:f5:80:10:ca:74:26:50:01:c5:d8: e7:b3:ad:b6:f8:d4:48:48:81:9d:cf:bb:0d:d3:eb: 3e:da:c3:34:3b:04:46:75:a7:cf:db:f3:be:df:e8: 5f:67:d2:53:a0:04:c4:a4:32:a9:2a:82:32:4c:ef: 1a:61:ae:1c:1f:63:21:2b:b8:b3:d8:ac:7e:03:9b: 22:89:f1:a9:d7:ca:49:da:06:82:5a:bd:9d:13:dd: a6:1b:d4:cb:47:db:e5:74:a7:ba:ae:c3:1e:19:42: 4e:9d:d5:f2:29:0e:4c:65:dd:df:4a:47:58:3f:91: be:95:60:2d:b9:3d:ec:cc:28:1b:dd:6e:52:ce:16: fa:c8:c7:32:73:7b:b2:2e:64:8f:ec:ed:2e:aa:27: 35:98:a6:8f:d1:32:00:e3:48:12:4b:44:86:47:d9: 01:55:27:fb:08:20:ce:78:73:0a:ab:bc:26:da:1b: 27:d3:62:58:4a:dd:34:cd:dd:be:22:5d:25:f6:1c: d8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:81:E4:DB:B5:6A:E2:6A:74:63:19:E3:BC:4A:70:CA:0F:A4:E9:84 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1oHk27Vq4mp0YxnjvEpwyg-k6YQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.144.34.0/24 94.103.172.0-94.103.174.255 94.249.197.0-94.249.205.255 178.18.147.0/24 Signature Algorithm: sha256WithRSAEncryption 10:af:11:30:4c:be:7f:6f:c3:52:e1:60:af:5e:03:43:46:eb: ba:69:17:52:d4:79:c2:22:ea:b2:19:83:6b:ac:4b:25:41:d9: 61:13:94:c0:b4:d0:08:67:6d:cf:02:fe:03:a5:d1:27:14:74: fc:45:8d:5b:b5:66:6d:63:53:7e:87:d7:b9:63:c8:c2:50:8d: 9e:85:d2:11:de:81:b5:c4:d8:64:5e:dd:4a:72:3e:4d:ba:e7: 79:7a:f3:da:e1:8f:b1:18:50:09:61:2f:e1:e4:55:19:9e:ce: 09:fb:68:8f:a8:47:98:a8:38:d4:cc:a2:cb:a9:94:fc:91:ef: 18:0d:ad:00:39:42:f3:ef:15:d7:24:e6:00:97:ea:46:b8:32: cb:e9:63:4d:8b:e7:52:ac:0e:6b:a7:92:68:4a:89:2e:87:a6: 6f:e2:7d:c1:85:81:1a:d3:af:ce:d0:86:da:73:04:43:ea:1f: 8d:d2:c4:bb:e4:bc:b0:ce:48:40:be:0c:c5:c8:07:61:cd:d9: 70:88:00:fd:bc:a1:b6:fb:a2:a9:3d:09:dc:6b:43:c9:d4:52: fd:40:dd:a7:61:00:16:03:f0:b4:9f:72:f6:4a:77:16:ff:ec: 4d:42:66:b0:3a:5e:51:bd:c6:c7:29:b2:ed:09:8b:a0:f5:2f: 2a:20:91:7e -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZY2qQ1r2wRMxCgUNNeW9f/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUwNDE0MjMzNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjgxZTRkYmI1NmFlMjZhNzQ2MzE5ZTNiYzRhNzBjYTBmYTRlOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw+ZSFX7TPFO/Bvkxf59AkFEUZ5X 2Jy5W2EIKgsl+jPv09DESKC6vmP0wFapi5bMNfSr5tyc7En9qZjYoftq5PWAEMp0 JlABxdjns622+NRISIGdz7sN0+s+2sM0OwRGdafP2/O+3+hfZ9JToATEpDKpKoIy TO8aYa4cH2MhK7iz2Kx+A5siifGp18pJ2gaCWr2dE92mG9TLR9vldKe6rsMeGUJO ndXyKQ5MZd3fSkdYP5G+lWAtuT3szCgb3W5Szhb6yMcyc3uyLmSP7O0uqic1mKaP 0TIA40gSS0SGR9kBVSf7CCDOeHMKq7wm2hsn02JYSt00zd2+Il0l9hzYRwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFNaB5Nu1auJqdGMZ47xKcMoPpOmEMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMW9IazI3VnE0bXAwWXhuanZFcHd5Zy1rNllRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAWZAiMAwD BAJeZ6wDBABeZ64wDAMEAF75xQMEAV75zAMEALISkzANBgkqhkiG9w0BAQsFAAOC AQEAEK8RMEy+f2/DUuFgr14DQ0brumkXUtR5wiLqshmDa6xLJUHZYROUwLTQCGdt zwL+A6XRJxR0/EWNW7VmbWNTfofXuWPIwlCNnoXSEd6BtcTYZF7dSnI+TbrneXrz 2uGPsRhQCWEv4eRVGZ7OCftoj6hHmKg41Myiy6mU/JHvGA2tADlC8+8V1yTmAJfq Rrgyy+ljTYvnUqwOa6eSaEqJLoemb+J9wYWBGtOvztCG2nMEQ+ofjdLEu+S8sM5I QL4MxcgHYc3ZcIgA/byhtvuiqT0J3GtDydRS/UDdp2EAFgPwtJ9y9kp3Fv/sTUJm sDpeUb3Gxymy7QmLoPUvKiCRfg== -----END CERTIFICATE-----Generated at Mon Dec 29 22:41:56 2025 by rpki-client