This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3-oT-kaqjxt4KRMY9qj3GI_KIxA.roa File: 3-oT-kaqjxt4KRMY9qj3GI_KIxA.roa (raw, json) Hash identifier: zS7lyQZEHRHea0e7nn5nXZfiQSzVJI+Xx466pLteVEA= Subject key identifier: DF:EA:13:FA:46:AA:8F:1B:78:29:13:18:F6:A8:F7:18:8F:CA:23:10 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019705A20B24C7EA167BFBE14209828844C6 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3-oT-kaqjxt4KRMY9qj3GI_KIxA.roa Signing time: Sun 25 May 2025 04:09:55 +0000 ROA not before: Sun 25 May 2025 04:09:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 5.83.138.0/24 maxlen: 24 5.175.200.0/24 maxlen: 24 5.175.201.0/24 maxlen: 24 5.175.204.0/24 maxlen: 24 5.175.205.0/24 maxlen: 24 5.175.209.0/24 maxlen: 24 5.175.210.0/24 maxlen: 24 5.175.211.0/24 maxlen: 24 5.175.212.0/24 maxlen: 24 5.175.213.0/24 maxlen: 24 5.175.214.0/24 maxlen: 24 5.175.238.0/24 maxlen: 24 5.230.164.0/24 maxlen: 24 5.231.61.0/24 maxlen: 24 5.231.71.0/24 maxlen: 24 5.231.72.0/24 maxlen: 24 5.231.73.0/24 maxlen: 24 5.231.74.0/24 maxlen: 24 5.231.75.0/24 maxlen: 24 5.231.79.0/24 maxlen: 24 5.231.92.0/24 maxlen: 24 5.231.240.0/24 maxlen: 24 5.231.241.0/24 maxlen: 24 5.231.242.0/24 maxlen: 24 5.231.243.0/24 maxlen: 24 5.231.244.0/24 maxlen: 24 5.231.245.0/24 maxlen: 24 5.231.246.0/24 maxlen: 24 5.231.247.0/24 maxlen: 24 5.231.248.0/24 maxlen: 24 85.93.5.0/24 maxlen: 24 85.93.21.0/24 maxlen: 24 85.93.31.0/24 maxlen: 24 89.106.70.0/24 maxlen: 24 89.106.90.0/24 maxlen: 24 89.144.5.0/24 maxlen: 24 89.144.34.0/24 maxlen: 24 89.144.39.0/24 maxlen: 24 94.249.168.0/24 maxlen: 24 94.249.169.0/24 maxlen: 24 94.249.180.0/24 maxlen: 24 94.249.181.0/24 maxlen: 24 94.249.237.0/24 maxlen: 24 Validation: Failed, certificate revoked on Thu 29 May 2025 04:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:05:a2:0b:24:c7:ea:16:7b:fb:e1:42:09:82:88:44:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: May 25 04:09:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dfea13fa46aa8f1b78291318f6a8f7188fca2310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:81:60:7a:04:1d:93:ba:b5:80:40:a2:8d: 59:52:42:07:c3:6a:28:c5:69:01:aa:50:67:79:c8: c2:d9:9c:2a:c3:54:76:4d:30:4d:14:4f:fd:d7:ff: ad:00:c1:b2:47:2f:47:0b:69:51:f2:ea:2e:af:8b: 3f:d7:e6:b2:ba:b8:e7:78:b0:b2:ee:25:37:21:fd: 19:78:18:4f:56:9a:f7:b7:60:c5:a7:c2:1d:48:32: 7d:24:30:18:97:31:3c:c3:70:9e:a1:c9:77:4a:d1: 55:87:02:2f:e6:21:45:e2:0e:4c:f4:e6:52:3b:d9: 64:0f:91:e4:17:80:20:08:09:8c:03:58:6c:71:a5: 1a:70:c9:ed:81:b1:35:0f:2a:36:d5:53:89:61:c1: 9b:be:49:32:c8:d1:ad:76:f7:e9:42:1b:59:4b:3d: 80:d6:a4:af:d9:78:42:10:61:b5:ce:31:b1:f1:a4: b8:8e:c0:90:48:6c:a5:29:de:3c:64:4c:db:89:f4: e9:39:6f:40:35:d4:8f:85:f7:20:40:fb:12:95:02: a6:54:5f:0f:f9:bc:dd:26:66:5f:0e:f1:2c:4f:15: bf:f4:81:8c:c9:52:7f:34:c3:9d:6c:e7:7a:b8:1e: 78:96:c9:6e:1c:02:85:7c:69:e5:82:11:76:d1:cb: 89:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EA:13:FA:46:AA:8F:1B:78:29:13:18:F6:A8:F7:18:8F:CA:23:10 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3-oT-kaqjxt4KRMY9qj3GI_KIxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.138.0/24 5.175.200.0/23 5.175.204.0/23 5.175.209.0-5.175.214.255 5.175.238.0/24 5.230.164.0/24 5.231.61.0/24 5.231.71.0-5.231.75.255 5.231.79.0/24 5.231.92.0/24 5.231.240.0-5.231.248.255 85.93.5.0/24 85.93.21.0/24 85.93.31.0/24 89.106.70.0/24 89.106.90.0/24 89.144.5.0/24 89.144.34.0/24 89.144.39.0/24 94.249.168.0/23 94.249.180.0/23 94.249.237.0/24 Signature Algorithm: sha256WithRSAEncryption 88:d5:d3:d3:9d:f3:02:09:7e:ab:f4:60:a0:7c:1b:7a:dd:a5: 11:38:6b:b4:a1:4e:12:29:41:fd:b4:fb:57:88:1a:74:32:db: 76:53:84:1b:40:6d:51:81:df:96:5d:d9:fa:25:3b:ae:f2:66: bf:ea:d2:0f:d1:78:2d:c8:4d:80:4d:0c:ad:70:8c:da:6f:33: 30:27:b9:b8:9f:d0:07:91:20:ae:fb:b6:22:c0:45:a3:30:e8: f9:10:d6:8b:8b:98:c3:8e:86:a0:b9:26:9a:13:87:6c:0d:01: 03:13:40:1d:f6:50:5e:1f:72:a4:67:49:67:9d:9d:58:6a:88: c7:a0:cd:cc:cf:cf:10:45:d0:89:ac:2c:91:c8:6b:86:77:cd: 65:d2:93:c4:5c:49:ba:73:fe:fe:28:8c:2f:2d:e0:9b:55:cc: bd:28:90:4e:b1:b8:f1:f5:95:8d:8b:fe:4f:db:0d:ce:43:83: 97:74:3f:de:f6:58:39:ea:90:49:c5:31:47:fd:71:e5:be:36: 3c:1b:c2:55:3c:78:97:ed:77:60:5a:4f:82:46:b2:c6:5b:ab: 33:63:28:6c:fc:2d:1d:78:8c:81:69:dc:5b:e0:b8:2f:05:92: 0f:72:e5:0f:83:b3:31:b0:48:d4:c6:33:f9:92:c8:ea:67:b7: 25:aa:e3:49 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZcFogskx+oWe/vhQgmCiETGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUwNTI1MDQwOTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmVhMTNmYTQ2YWE4ZjFiNzgyOTEzMThmNmE4ZjcxODhmY2EyMzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWKBYHoEHZO6tYBAoo1ZUkIHw2oo xWkBqlBnecjC2Zwqw1R2TTBNFE/91/+tAMGyRy9HC2lR8uour4s/1+ayurjneLCy 7iU3If0ZeBhPVpr3t2DFp8IdSDJ9JDAYlzE8w3Ceocl3StFVhwIv5iFF4g5M9OZS O9lkD5HkF4AgCAmMA1hscaUacMntgbE1Dyo21VOJYcGbvkkyyNGtdvfpQhtZSz2A 1qSv2XhCEGG1zjGx8aS4jsCQSGylKd48ZEzbifTpOW9ANdSPhfcgQPsSlQKmVF8P +bzdJmZfDvEsTxW/9IGMyVJ/NMOdbOd6uB54lsluHAKFfGnlghF20cuJ3wIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFN/qE/pGqo8beCkTGPao9xiPyiMQMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMy1vVC1rYXFqeHQ0S1JNWTlxajNHSV9LSXhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBowQCAAEwgZwDBAAF U4oDBAEFr8gDBAEFr8wwDAMEAAWv0QMEAAWv1gMEAAWv7gMEAAXmpAMEAAXnPTAM AwQABedHAwQCBedIAwQABedPAwQABedcMAwDBAQF5/ADBAAF5/gDBABVXQUDBABV XRUDBABVXR8DBABZakYDBABZaloDBABZkAUDBABZkCIDBABZkCcDBAFe+agDBAFe +bQDBABe+e0wDQYJKoZIhvcNAQELBQADggEBAIjV09Od8wIJfqv0YKB8G3rdpRE4 a7ShThIpQf20+1eIGnQy23ZThBtAbVGB35Zd2folO67yZr/q0g/ReC3ITYBNDK1w jNpvMzAnubif0AeRIK77tiLARaMw6PkQ1ouLmMOOhqC5JpoTh2wNAQMTQB32UF4f cqRnSWednVhqiMegzczPzxBF0ImsLJHIa4Z3zWXSk8RcSbpz/v4ojC8t4JtVzL0o kE6xuPH1lY2L/k/bDc5Dg5d0P972WDnqkEnFMUf9ceW+NjwbwlU8eJftd2BaT4JG ssZbqzNjKGz8LR14jIFp3FvguC8Fkg9y5Q+DszGwSNTGM/mSyOpntyWq40k= -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:02 2025 by rpki-client