This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5ZhQy36qNAKMzhbbYC_6gZvzR1Q.roa File: 5ZhQy36qNAKMzhbbYC_6gZvzR1Q.roa (raw, json) Hash identifier: 477bxJaFjE4ksm0i4lI3SvwvmVo7jS7Y8BTFiY4Vl+E= Subject key identifier: E5:98:50:CB:7E:AA:34:02:8C:CE:16:DB:60:2F:FA:81:9B:F3:47:54 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 01961DE81A20397A5AE34B9B5B3443D769C4 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5ZhQy36qNAKMzhbbYC_6gZvzR1Q.roa Signing time: Thu 10 Apr 2025 04:14:32 +0000 ROA not before: Thu 10 Apr 2025 04:14:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43260 IP address blocks: 5.83.129.0/24 maxlen: 24 5.175.138.0/24 maxlen: 24 77.90.54.0/24 maxlen: 24 87.239.131.0/24 maxlen: 24 94.249.215.0/24 maxlen: 24 95.215.32.0/24 maxlen: 24 95.215.34.0/24 maxlen: 24 217.69.166.0/24 maxlen: 24 Validation: Failed, certificate revoked on Fri 11 Apr 2025 04:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:1d:e8:1a:20:39:7a:5a:e3:4b:9b:5b:34:43:d7:69:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Apr 10 04:14:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e59850cb7eaa34028cce16db602ffa819bf34754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:05:96:e8:77:ad:78:8b:d0:a6:ae:1c:ca:91: 44:a0:a6:09:1f:29:d3:00:a7:99:2f:09:73:96:08: db:30:df:3d:ba:36:99:58:eb:1d:2d:ff:71:ca:ef: 4e:45:d2:f5:16:37:77:e4:43:26:97:ed:be:d9:ef: 29:37:1a:b5:4c:72:6c:c0:4d:4f:9a:64:7b:25:6e: 12:74:40:5b:cf:98:08:5d:a0:3a:63:32:47:64:2e: 1e:3c:bf:9c:f5:33:99:b1:a0:51:82:8d:1d:6a:f4: 31:aa:41:6e:0e:59:e9:bc:f5:da:4e:c0:bc:24:70: 43:ce:00:2c:00:74:cc:9b:90:72:7b:7f:5d:c3:04: a6:8e:c2:18:7f:59:ff:d9:a4:39:30:39:d3:79:dc: 35:55:70:b9:8f:48:dc:87:1a:3f:15:d7:96:94:84: a8:2a:26:dd:1e:92:6e:5c:b9:9b:d5:83:6d:8f:8e: 19:cd:1a:db:b1:f8:38:f0:ec:91:8e:3e:70:05:fd: 62:c4:7e:02:d9:49:98:9b:2a:af:ff:74:ad:6c:e4: 30:00:48:81:a8:d0:84:ca:cf:65:36:c0:f5:e4:c7: 19:e8:36:17:80:a6:70:a6:46:de:e5:0c:a5:93:ce: d6:c9:72:7c:2b:18:df:7e:54:c7:99:0f:2f:f3:c3: 27:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:98:50:CB:7E:AA:34:02:8C:CE:16:DB:60:2F:FA:81:9B:F3:47:54 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5ZhQy36qNAKMzhbbYC_6gZvzR1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.129.0/24 5.175.138.0/24 77.90.54.0/24 87.239.131.0/24 94.249.215.0/24 95.215.32.0/24 95.215.34.0/24 217.69.166.0/24 Signature Algorithm: sha256WithRSAEncryption 21:4b:6e:a9:c3:96:c4:a7:a5:5c:ae:b2:3a:8e:d4:39:5b:5f: 45:ca:aa:2e:13:b9:4d:55:de:d1:33:a6:60:25:83:26:89:ac: 54:f0:f5:2e:be:af:12:d2:10:c3:1a:9a:9f:42:da:e5:77:db: 26:44:29:28:ef:95:11:56:2c:03:1e:37:26:bd:78:de:27:24: 23:d7:c1:f0:67:52:f2:ba:b1:f3:60:16:64:7d:84:24:c3:80: 4c:f5:46:71:5e:ad:cd:3a:0c:b1:13:ca:00:84:8f:cb:51:6d: 3e:3d:61:c9:e3:f0:25:71:4c:31:75:ec:25:ed:35:f6:b7:e9: b4:09:7d:0b:22:09:ac:94:c5:a7:1b:8f:9d:99:69:f1:10:b8: 4a:89:7b:92:e3:f4:0d:dc:de:12:4f:78:5f:81:4c:6b:0b:15: 9e:76:3a:f2:bb:01:43:96:a3:67:69:a0:4d:54:23:2e:9d:d3: bd:10:64:a3:f1:83:52:8e:44:c2:a9:6b:28:16:09:c9:b6:03: 64:5f:4e:bc:d5:56:b8:c9:11:e9:ff:2f:03:69:8a:8f:fc:1b: 53:36:ef:ef:a6:af:2c:65:30:bd:c6:f6:49:36:b7:50:50:53: 78:a6:b1:18:84:bf:fd:06:c5:f7:24:c6:0f:2c:f6:27:1d:2d: d4:3b:3d:8c -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZYd6BogOXpa40ubWzRD12nEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUwNDEwMDQxNDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTk4NTBjYjdlYWEzNDAyOGNjZTE2ZGI2MDJmZmE4MTliZjM0NzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAWW6HeteIvQpq4cypFEoKYJHynT AKeZLwlzlgjbMN89ujaZWOsdLf9xyu9ORdL1Fjd35EMml+2+2e8pNxq1THJswE1P mmR7JW4SdEBbz5gIXaA6YzJHZC4ePL+c9TOZsaBRgo0davQxqkFuDlnpvPXaTsC8 JHBDzgAsAHTMm5Bye39dwwSmjsIYf1n/2aQ5MDnTedw1VXC5j0jchxo/FdeWlISo KibdHpJuXLmb1YNtj44ZzRrbsfg48OyRjj5wBf1ixH4C2UmYmyqv/3StbOQwAEiB qNCEys9lNsD15McZ6DYXgKZwpkbe5Qylk87WyXJ8KxjfflTHmQ8v88Mn5wIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFOWYUMt+qjQCjM4W22Av+oGb80dUMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvNVpoUXkzNnFOQUtNemhiYllDXzZnWnZ6UjFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQABVOBAwQA Ba+KAwQATVo2AwQAV++DAwQAXvnXAwQAX9cgAwQAX9ciAwQA2UWmMA0GCSqGSIb3 DQEBCwUAA4IBAQAhS26pw5bEp6VcrrI6jtQ5W19FyqouE7lNVd7RM6ZgJYMmiaxU 8PUuvq8S0hDDGpqfQtrld9smRCko75URViwDHjcmvXjeJyQj18HwZ1LyurHzYBZk fYQkw4BM9UZxXq3NOgyxE8oAhI/LUW0+PWHJ4/AlcUwxdewl7TX2t+m0CX0LIgms lMWnG4+dmWnxELhKiXuS4/QN3N4ST3hfgUxrCxWedjryuwFDlqNnaaBNVCMundO9 EGSj8YNSjkTCqWsoFgnJtgNkX0681Va4yRHp/y8DaYqP/BtTNu/vpq8sZTC9xvZJ NrdQUFN4prEYhL/9BsX3JMYPLPYnHS3UOz2M -----END CERTIFICATE-----Generated at Mon Dec 29 00:47:47 2025 by rpki-client