This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PcBjBv1ABOnQ7khWyho_BBfL0jY.roa File: PcBjBv1ABOnQ7khWyho_BBfL0jY.roa (raw, json) Hash identifier: llAZ/39idFfWfg86rQkl3c/A62lVa3vHcIvnvnlYw7k= Subject key identifier: 3D:C0:63:06:FD:40:04:E9:D0:EE:48:56:CA:1A:3F:04:17:CB:D2:36 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019641F18A7F1B043F209E0251ED7574FE76 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PcBjBv1ABOnQ7khWyho_BBfL0jY.roa Signing time: Thu 17 Apr 2025 04:11:10 +0000 ROA not before: Thu 17 Apr 2025 04:11:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43260 IP address blocks: 5.83.129.0/24 maxlen: 24 5.175.138.0/24 maxlen: 24 87.239.131.0/24 maxlen: 24 94.249.195.0/24 maxlen: 24 94.249.215.0/24 maxlen: 24 95.215.32.0/24 maxlen: 24 95.215.34.0/24 maxlen: 24 178.18.144.0/24 maxlen: 24 217.69.166.0/24 maxlen: 24 Validation: Failed, certificate revoked on Thu 17 Apr 2025 13:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:41:f1:8a:7f:1b:04:3f:20:9e:02:51:ed:75:74:fe:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Apr 17 04:11:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3dc06306fd4004e9d0ee4856ca1a3f0417cbd236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5e:e5:08:b4:8a:05:cc:8f:f9:09:b4:7c:cf: 6c:30:68:69:82:bc:db:85:8f:cf:3f:16:49:7f:93: 2c:82:29:7b:f2:53:64:52:87:a8:f8:f4:bf:8c:e5: d6:1c:81:b2:b4:30:a6:cf:3f:0f:88:94:1c:e7:41: f3:ae:c1:1b:f4:78:43:4d:2e:1f:8f:97:cf:b6:8e: 00:9e:7a:62:d5:7b:34:5a:6a:b2:4c:17:63:4e:e2: bb:9b:e3:b0:5b:59:dd:4a:c8:33:79:06:0f:59:3f: 3c:4f:38:64:d8:3d:75:df:2b:79:7c:4a:31:b4:ef: ee:c4:aa:14:54:67:c1:86:23:84:7d:09:06:47:1f: b1:7e:7b:af:9c:c1:ff:ee:6b:9f:e2:31:5b:36:19: cf:b4:45:3d:62:e6:88:b2:3f:5b:26:e8:d9:29:11: cf:2d:5c:7b:31:c0:fb:f4:75:f5:ff:aa:53:36:4e: 0e:d8:a9:ac:b8:1f:e5:fb:fc:9f:b0:1a:59:82:2e: 9b:eb:4d:bb:f7:d4:13:07:d3:b0:2f:9d:38:5d:03: f5:70:96:ea:15:6e:2b:7f:42:16:b2:74:b9:70:b2: 24:f1:9f:8a:6e:a8:0b:88:1b:b1:09:02:62:f3:85: 79:1a:ad:38:cb:70:fe:14:6d:f7:23:24:80:3c:74: c4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C0:63:06:FD:40:04:E9:D0:EE:48:56:CA:1A:3F:04:17:CB:D2:36 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PcBjBv1ABOnQ7khWyho_BBfL0jY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.129.0/24 5.175.138.0/24 87.239.131.0/24 94.249.195.0/24 94.249.215.0/24 95.215.32.0/24 95.215.34.0/24 178.18.144.0/24 217.69.166.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:a1:2a:78:eb:60:fc:66:31:5c:db:3a:a1:f8:7d:38:52:a1: cd:42:06:b9:0e:98:46:23:a0:89:37:20:8d:bc:4e:9d:a2:61: 32:bd:90:3d:aa:1d:c6:bf:54:83:12:66:ae:ee:b3:e8:01:28: ea:b7:a7:19:0a:4e:6b:d7:cc:37:64:ae:49:ab:5a:b1:c8:7c: 0c:28:8f:f3:6f:44:f1:99:d8:f8:be:34:7e:fc:cc:6b:a5:39: ec:a8:ca:5c:63:91:f0:4f:68:52:aa:a7:d0:ee:09:51:22:49: 15:3e:38:17:77:46:05:24:64:59:04:26:8b:24:03:8f:52:7e: 61:69:4d:de:30:5b:70:60:16:07:32:d1:f4:3c:d0:f5:8e:a0: b8:0f:54:ad:5f:94:e2:c5:64:fc:50:b5:62:1e:2c:05:cb:50: 71:38:0d:d2:fd:a0:17:f7:b7:32:60:fd:10:63:ca:04:37:bb: f2:58:56:9b:1a:dc:e3:3b:49:50:21:c6:90:76:ff:2a:50:98: 63:43:ff:7e:6d:e3:6f:60:80:7b:c1:b9:7b:22:0b:e3:fc:96: 6d:8a:09:32:d7:4f:d6:eb:72:4e:d4:09:10:3d:a5:19:cf:9c: 7d:88:59:a7:2a:f2:b5:98:90:de:29:00:d0:69:06:71:82:2c: b9:cd:c9:51 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZZB8Yp/GwQ/IJ4CUe11dP52MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUwNDE3MDQxMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGMwNjMwNmZkNDAwNGU5ZDBlZTQ4NTZjYTFhM2YwNDE3Y2JkMjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F7lCLSKBcyP+Qm0fM9sMGhpgrzb hY/PPxZJf5Msgil78lNkUoeo+PS/jOXWHIGytDCmzz8PiJQc50HzrsEb9HhDTS4f j5fPto4Annpi1Xs0WmqyTBdjTuK7m+OwW1ndSsgzeQYPWT88Tzhk2D113yt5fEox tO/uxKoUVGfBhiOEfQkGRx+xfnuvnMH/7muf4jFbNhnPtEU9YuaIsj9bJujZKRHP LVx7McD79HX1/6pTNk4O2KmsuB/l+/yfsBpZgi6b602799QTB9OwL504XQP1cJbq FW4rf0IWsnS5cLIk8Z+KbqgLiBuxCQJi84V5Gq04y3D+FG33IySAPHTErwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFD3AYwb9QATp0O5IVsoaPwQXy9I2MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvUGNCakJ2MUFCT25RN2toV3lob19CQmZMMGpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQABVOBAwQA Ba+KAwQAV++DAwQAXvnDAwQAXvnXAwQAX9cgAwQAX9ciAwQAshKQAwQA2UWmMA0G CSqGSIb3DQEBCwUAA4IBAQCfoSp462D8ZjFc2zqh+H04UqHNQga5DphGI6CJNyCN vE6domEyvZA9qh3Gv1SDEmau7rPoASjqt6cZCk5r18w3ZK5Jq1qxyHwMKI/zb0Tx mdj4vjR+/MxrpTnsqMpcY5HwT2hSqqfQ7glRIkkVPjgXd0YFJGRZBCaLJAOPUn5h aU3eMFtwYBYHMtH0PND1jqC4D1StX5TixWT8ULViHiwFy1BxOA3S/aAX97cyYP0Q Y8oEN7vyWFabGtzjO0lQIcaQdv8qUJhjQ/9+beNvYIB7wbl7Igvj/JZtigky10/W 63JO1AkQPaUZz5x9iFmnKvK1mJDeKQDQaQZxgiy5zclR -----END CERTIFICATE-----Generated at Sun Dec 28 08:01:39 2025 by rpki-client