This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aEaHe2OdTzTH-cB3KLInL81r4jA.roa File: aEaHe2OdTzTH-cB3KLInL81r4jA.roa (raw, json) Hash identifier: Y1ks/6DZg+Vm4GQooyzE9mHA+C/Xi2O91K+xW4ezqWE= Subject key identifier: 68:46:87:7B:63:9D:4F:34:C7:F9:C0:77:28:B2:27:2F:CD:6B:E2:30 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 0196736DB0BAAE8E9580DB1C414C2A8FD652 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aEaHe2OdTzTH-cB3KLInL81r4jA.roa Signing time: Sat 26 Apr 2025 18:48:10 +0000 ROA not before: Sat 26 Apr 2025 18:48:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19318 IP address blocks: 5.231.106.0/24 maxlen: 24 5.231.107.0/24 maxlen: 24 5.231.108.0/24 maxlen: 24 5.231.109.0/24 maxlen: 24 5.231.110.0/24 maxlen: 24 5.231.116.0/24 maxlen: 24 5.231.117.0/24 maxlen: 24 5.231.118.0/24 maxlen: 24 5.231.119.0/24 maxlen: 24 5.231.120.0/24 maxlen: 24 5.231.121.0/24 maxlen: 24 5.231.122.0/24 maxlen: 24 89.144.34.0/24 maxlen: 24 94.103.166.0/24 maxlen: 24 94.103.172.0/24 maxlen: 24 94.103.173.0/24 maxlen: 24 94.103.174.0/24 maxlen: 24 94.249.197.0/24 maxlen: 24 94.249.198.0/24 maxlen: 24 94.249.199.0/24 maxlen: 24 94.249.200.0/24 maxlen: 24 94.249.201.0/24 maxlen: 24 94.249.202.0/24 maxlen: 24 94.249.203.0/24 maxlen: 24 94.249.204.0/24 maxlen: 24 94.249.205.0/24 maxlen: 24 94.249.206.0/24 maxlen: 24 94.249.225.0/24 maxlen: 24 94.249.226.0/24 maxlen: 24 94.249.227.0/24 maxlen: 24 94.249.228.0/24 maxlen: 24 94.249.229.0/24 maxlen: 24 94.249.230.0/24 maxlen: 24 178.18.147.0/24 maxlen: 24 Validation: Failed, certificate revoked on Sat 26 Apr 2025 19:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:6d:b0:ba:ae:8e:95:80:db:1c:41:4c:2a:8f:d6:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Apr 26 18:48:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6846877b639d4f34c7f9c07728b2272fcd6be230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9b:d5:6a:ec:a8:58:fe:94:ea:f5:b6:8a:17: 1e:44:23:85:47:f1:65:60:c6:f9:da:73:1d:7a:3a: bb:07:1b:77:46:04:7e:d7:9b:d0:a9:67:cc:ce:c6: fb:84:2f:1b:c0:7a:ef:7b:64:06:92:9c:8f:eb:f5: c8:f4:bc:66:07:1e:8f:c7:0e:a8:8b:2e:c6:b0:ce: ae:4e:f1:37:71:cd:a2:4e:f8:96:18:5b:f4:d7:70: a1:bc:44:ba:a2:0f:9c:a6:c1:65:06:79:78:46:e8: 22:45:f8:ac:73:d8:5d:f7:2c:b4:23:fd:51:2e:44: e6:93:aa:9c:52:6c:38:0c:09:51:f1:4c:83:2d:d8: 10:90:12:df:92:2a:ff:a3:06:42:9c:2b:8f:12:b8: 15:89:5d:c7:c7:ce:77:2a:53:bc:98:64:8e:95:38: 35:a0:63:b4:a2:62:7a:04:7d:0f:22:69:86:95:bc: 55:e3:39:37:a5:ba:cb:36:5f:1f:b2:2f:54:3d:27: 3d:4f:27:32:3f:b0:49:9d:03:21:61:cb:46:97:5e: 9e:17:ac:01:10:e6:e8:5f:6a:65:b3:53:44:6a:76: 40:a7:05:38:86:af:22:3d:21:6b:a4:56:85:fd:e6: 64:b8:52:41:fe:e7:cd:c3:7b:2a:0c:e2:69:77:3d: ac:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:46:87:7B:63:9D:4F:34:C7:F9:C0:77:28:B2:27:2F:CD:6B:E2:30 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/aEaHe2OdTzTH-cB3KLInL81r4jA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.106.0-5.231.110.255 5.231.116.0-5.231.122.255 89.144.34.0/24 94.103.166.0/24 94.103.172.0-94.103.174.255 94.249.197.0-94.249.206.255 94.249.225.0-94.249.230.255 178.18.147.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:16:63:ce:fc:c2:a5:9e:29:38:9c:75:70:40:6d:59:85:1e: 91:40:33:17:d9:42:01:f0:87:49:69:51:8a:c6:0a:67:e4:06: d9:c3:d6:55:82:a8:69:c1:c5:a9:84:75:0f:5d:50:e8:90:36: 4d:2e:20:a0:b1:11:02:12:f4:2e:8f:40:5c:9c:8c:43:cf:ce: 91:cb:f0:1a:46:17:c9:2f:4d:bd:8f:ed:10:72:68:cd:89:b0: 05:af:e5:55:3f:65:8f:4f:8d:6d:71:db:b1:e5:7b:3c:b4:e6: f9:db:10:3f:05:cc:a0:9e:55:39:32:4b:fd:3b:ee:44:0f:66: c9:43:68:51:9f:ea:d4:0d:7c:e7:41:c1:df:6e:90:77:ab:97: ac:4b:04:f2:75:ed:a5:10:53:68:59:28:a1:47:41:6e:b2:e2: ee:91:48:36:89:81:6a:04:2d:ef:97:73:b3:c8:2d:66:e0:17: 3b:a4:ae:bf:4e:4c:5e:1e:2c:35:4f:39:8d:fe:70:3d:fa:18: a9:55:e3:21:6f:e8:ab:dd:ed:2f:5c:fc:9b:49:10:b0:9a:e3: 5c:bd:ad:2c:27:af:e8:34:97:5d:c5:23:08:a9:b0:c7:fe:26: d7:f5:56:2c:5a:fb:3b:a2:66:63:60:ab:84:67:6b:e2:a9:10: 6e:91:33:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZZzbbC6ro6VgNscQUwqj9ZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUwNDI2MTg0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODQ2ODc3YjYzOWQ0ZjM0YzdmOWMwNzcyOGIyMjcyZmNkNmJlMjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZvVauyoWP6U6vW2ihceRCOFR/Fl YMb52nMdejq7Bxt3RgR+15vQqWfMzsb7hC8bwHrve2QGkpyP6/XI9LxmBx6Pxw6o iy7GsM6uTvE3cc2iTviWGFv013ChvES6og+cpsFlBnl4RugiRfisc9hd9yy0I/1R LkTmk6qcUmw4DAlR8UyDLdgQkBLfkir/owZCnCuPErgViV3Hx853KlO8mGSOlTg1 oGO0omJ6BH0PImmGlbxV4zk3pbrLNl8fsi9UPSc9TycyP7BJnQMhYctGl16eF6wB EOboX2pls1NEanZApwU4hq8iPSFrpFaF/eZkuFJB/ufNw3sqDOJpdz2sNwIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFGhGh3tjnU80x/nAdyiyJy/Na+IwMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvYUVhSGUyT2RUelRILWNCM0tMSW5MODFyNGpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYMAwDBAEF52oD BAAF524wDAMEAgXndAMEAAXnegMEAFmQIgMEAF5npjAMAwQCXmesAwQAXmeuMAwD BABe+cUDBABe+c4wDAMEAF754QMEAF755gMEALISkzANBgkqhkiG9w0BAQsFAAOC AQEALhZjzvzCpZ4pOJx1cEBtWYUekUAzF9lCAfCHSWlRisYKZ+QG2cPWVYKoacHF qYR1D11Q6JA2TS4goLERAhL0Lo9AXJyMQ8/OkcvwGkYXyS9NvY/tEHJozYmwBa/l VT9lj0+NbXHbseV7PLTm+dsQPwXMoJ5VOTJL/TvuRA9myUNoUZ/q1A1850HB326Q d6uXrEsE8nXtpRBTaFkooUdBbrLi7pFINomBagQt75dzs8gtZuAXO6Suv05MXh4s NU85jf5wPfoYqVXjIW/oq93tL1z8m0kQsJrjXL2tLCev6DSXXcUjCKmwx/4m1/VW LFr7O6JmY2CrhGdr4qkQbpEzDQ== -----END CERTIFICATE-----Generated at Sun Dec 21 21:13:46 2025 by rpki-client