This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4H4IgzySz33R7LXFqla5wr3wsBU.roa File: 4H4IgzySz33R7LXFqla5wr3wsBU.roa (raw, json) Hash identifier: 78FawgIiNsoiSDX84UDnLF8GwHgCAi2vkrHsum5efnI= Subject key identifier: E0:7E:08:83:3C:92:CF:7D:D1:EC:B5:C5:AA:56:B9:C2:BD:F0:B0:15 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019720B2C05B6C933A5D3BF455C481843E32 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4H4IgzySz33R7LXFqla5wr3wsBU.roa Signing time: Fri 30 May 2025 10:17:54 +0000 ROA not before: Fri 30 May 2025 10:17:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207695 IP address blocks: 77.90.41.0/24 maxlen: 24 77.90.52.0/24 maxlen: 24 77.90.58.0/24 maxlen: 24 89.144.25.0/24 maxlen: 24 89.144.35.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 02 Jun 2025 04:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:20:b2:c0:5b:6c:93:3a:5d:3b:f4:55:c4:81:84:3e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: May 30 10:17:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e07e08833c92cf7dd1ecb5c5aa56b9c2bdf0b015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:7f:6c:5f:3a:d3:b6:72:ea:df:ea:9b:5f: 6e:ef:33:63:59:9a:e3:19:4b:d7:40:1b:b7:36:0b: c4:81:69:eb:28:09:ef:d0:0c:ef:fa:2f:ec:6b:7b: de:29:ae:25:d4:6d:1e:e0:b6:da:59:b3:51:06:49: 0a:d3:a9:0b:d6:e1:72:23:ec:d9:21:78:f6:29:ff: d7:39:91:56:fe:13:14:c6:ad:5d:ec:bd:00:78:df: b1:ff:6f:54:a2:95:b8:2b:70:4f:fe:a3:db:8a:0c: c6:75:ab:91:31:9d:ca:a9:e3:62:32:64:05:9e:a9: be:6b:97:21:41:78:c6:0b:1c:e2:fb:b9:ef:63:05: e7:9f:38:f2:d4:0c:ea:b7:59:9a:17:0e:e5:c1:f7: 2c:b5:c9:49:42:01:86:66:7c:bd:4f:e4:56:7d:2c: 71:7c:1d:37:e0:5b:c3:ad:06:73:d0:55:ce:64:d4: 87:fa:f4:ec:32:ac:12:87:dd:3f:28:a6:f4:ec:bc: b0:a3:2e:2f:f1:1d:9c:40:4f:e8:28:db:b3:bb:61: 5d:5d:4a:87:f1:fb:a0:0b:38:11:1a:19:d0:6f:d0: 2c:af:9f:72:5f:6a:ce:28:af:62:2e:62:9b:3a:30: d7:ab:5d:29:7f:45:71:ab:35:64:d3:29:09:1a:06: 77:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7E:08:83:3C:92:CF:7D:D1:EC:B5:C5:AA:56:B9:C2:BD:F0:B0:15 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4H4IgzySz33R7LXFqla5wr3wsBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.41.0/24 77.90.52.0/24 77.90.58.0/24 89.144.25.0/24 89.144.35.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:de:7c:a8:55:20:8b:57:dc:57:6d:10:bc:5f:5c:55:a6:14: 2a:50:7b:98:fd:41:4c:2f:bc:48:0a:bf:86:09:9b:6d:67:ae: c1:cf:aa:57:a0:92:3f:c4:8c:94:36:5c:e0:29:2d:b8:6f:97: d2:21:e2:b2:84:17:fe:bb:e3:2f:fe:56:1c:6b:d4:dc:da:a7: 4b:d5:04:b4:77:17:7c:17:26:b7:b7:1e:d9:6c:41:fc:50:37: fe:9c:d1:e5:d4:09:13:e4:88:44:ea:d8:0b:af:13:cc:78:c3: 68:80:8e:8e:5d:4a:78:e4:ad:72:bd:fd:7f:34:db:d7:b6:d3: 9a:99:00:a1:13:30:b7:aa:51:10:1b:9e:5d:69:a7:a8:c5:1a: 17:5a:68:4e:1d:b2:ad:1b:7c:d4:83:2c:70:a3:6c:b6:9a:55: 33:49:f1:a6:10:86:f1:67:94:f3:44:aa:8d:cd:94:75:ce:7f: ed:0a:fe:58:65:a4:c3:19:40:28:04:d1:af:14:ee:ee:99:4b: dd:f7:3e:00:af:0a:14:e3:de:35:99:74:55:09:3e:ea:25:d4: f1:24:61:7c:58:8f:5a:8e:13:fd:a9:94:9c:bc:0a:05:07:c6: 2c:df:13:b0:b6:ba:9d:60:45:fe:a2:69:c1:41:7d:0b:7f:f5: d7:ab:6f:21 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZcgssBbbJM6XTv0VcSBhD4yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUwNTMwMTAxNzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDdlMDg4MzNjOTJjZjdkZDFlY2I1YzVhYTU2YjljMmJkZjBiMDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTl/bF8607Zy6t/qm19u7zNjWZrj GUvXQBu3NgvEgWnrKAnv0Azv+i/sa3veKa4l1G0e4LbaWbNRBkkK06kL1uFyI+zZ IXj2Kf/XOZFW/hMUxq1d7L0AeN+x/29UopW4K3BP/qPbigzGdauRMZ3KqeNiMmQF nqm+a5chQXjGCxzi+7nvYwXnnzjy1Azqt1maFw7lwfcstclJQgGGZny9T+RWfSxx fB034FvDrQZz0FXOZNSH+vTsMqwSh90/KKb07Lywoy4v8R2cQE/oKNuzu2FdXUqH 8fugCzgRGhnQb9Asr59yX2rOKK9iLmKbOjDXq10pf0VxqzVk0ykJGgZ37QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFOB+CIM8ks990ey1xapWucK98LAVMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvNEg0SWd6eVN6MzNSN0xYRnFsYTV3cjN3c0JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATVopAwQA TVo0AwQATVo6AwQAWZAZAwQAWZAjMA0GCSqGSIb3DQEBCwUAA4IBAQBv3nyoVSCL V9xXbRC8X1xVphQqUHuY/UFML7xICr+GCZttZ67Bz6pXoJI/xIyUNlzgKS24b5fS IeKyhBf+u+Mv/lYca9Tc2qdL1QS0dxd8Fya3tx7ZbEH8UDf+nNHl1AkT5IhE6tgL rxPMeMNogI6OXUp45K1yvf1/NNvXttOamQChEzC3qlEQG55daaeoxRoXWmhOHbKt G3zUgyxwo2y2mlUzSfGmEIbxZ5TzRKqNzZR1zn/tCv5YZaTDGUAoBNGvFO7umUvd 9z4ArwoU4941mXRVCT7qJdTxJGF8WI9ajhP9qZScvAoFB8Ys3xOwtrqdYEX+omnB QX0Lf/XXq28h -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:16 2025 by rpki-client