This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cSn3dh1zlBINjhJ4xwixfxJs-9c.roa File: cSn3dh1zlBINjhJ4xwixfxJs-9c.roa (raw, json) Hash identifier: GkPT/EHp7LeTzb6Bd0mnW28Kn8fJLEDAD02jwseCS5M= Subject key identifier: 71:29:F7:76:1D:73:94:12:0D:8E:12:78:C7:08:B1:7F:12:6C:FB:D7 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 01967E6CF0DDD93D5B3A49B41C2361E33CE5 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cSn3dh1zlBINjhJ4xwixfxJs-9c.roa Signing time: Mon 28 Apr 2025 22:03:10 +0000 ROA not before: Mon 28 Apr 2025 22:03:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49581 IP address blocks: 5.175.237.0/24 maxlen: 24 5.175.239.0/24 maxlen: 24 5.231.25.0/24 maxlen: 24 5.231.26.0/24 maxlen: 24 5.231.111.0/24 maxlen: 24 5.231.114.0/24 maxlen: 24 5.231.233.0/24 maxlen: 24 85.93.23.0/24 maxlen: 24 89.106.69.0/24 maxlen: 24 89.106.71.0/24 maxlen: 24 89.106.88.0/24 maxlen: 24 94.103.167.0/24 maxlen: 24 94.249.150.0/24 maxlen: 24 185.13.156.0/24 maxlen: 24 Validation: Failed, certificate revoked on Thu 01 May 2025 04:12:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7e:6c:f0:dd:d9:3d:5b:3a:49:b4:1c:23:61:e3:3c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Apr 28 22:03:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7129f7761d7394120d8e1278c708b17f126cfbd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b2:c9:a6:40:3b:2d:37:e5:56:58:86:82:c0: f3:ff:d5:df:ca:1a:ef:b8:14:30:47:73:1f:70:da: 44:37:f5:c3:3d:4e:bf:cd:10:d7:37:f0:1d:e1:71: 0a:71:a8:84:0a:a5:20:37:d7:e3:5d:ab:84:79:98: 4d:a1:79:09:7f:64:3d:c1:1f:12:9a:72:3c:ae:ab: 85:5d:4a:cd:89:9f:ff:56:29:3a:48:74:81:86:d7: fe:47:bc:b6:da:c9:fc:00:34:eb:c1:43:45:7a:b4: e9:5d:a2:09:88:06:a3:f1:b7:fe:ef:43:d6:11:a0: 29:09:2b:3c:f9:51:5d:d8:8c:ea:b8:7a:77:a4:9d: 3d:eb:69:6e:c3:e0:80:ec:2b:f7:2a:f8:9e:e3:e8: 6a:8a:a6:ca:72:b9:5b:7c:97:be:6f:de:21:cf:a0: 4c:63:80:e3:0a:24:5b:d2:7a:e0:0e:c6:bd:f5:84: 95:a2:b2:7a:55:a6:d7:87:38:cd:1c:4d:1b:72:cc: b6:05:52:28:59:f3:da:06:c1:99:d7:81:e9:b4:d2: de:50:0b:09:88:6b:4b:bd:cb:30:7a:a5:91:41:5e: 8d:b3:0b:56:c3:8c:d3:3b:b5:46:af:5d:d4:2d:39: d6:18:83:a9:e1:e6:cd:59:8a:e7:c4:6c:72:fd:59: fc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:29:F7:76:1D:73:94:12:0D:8E:12:78:C7:08:B1:7F:12:6C:FB:D7 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cSn3dh1zlBINjhJ4xwixfxJs-9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.175.237.0/24 5.175.239.0/24 5.231.25.0-5.231.26.255 5.231.111.0/24 5.231.114.0/24 5.231.233.0/24 85.93.23.0/24 89.106.69.0/24 89.106.71.0/24 89.106.88.0/24 94.103.167.0/24 94.249.150.0/24 185.13.156.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:f6:de:5c:34:70:47:22:b3:df:b7:ea:2c:4e:93:44:0e:8c: 42:b5:f2:61:b0:a8:42:c3:e0:72:67:75:62:e9:e0:64:5a:82: 11:78:a6:ed:c2:0c:53:a7:ed:35:79:06:f1:b0:aa:50:cf:e4: e5:4b:02:22:41:d7:25:83:1a:d1:f9:a0:e9:f9:b9:75:67:f0: 42:3b:53:59:ce:d4:c5:d1:74:d5:f0:6d:11:f7:18:e2:6e:ce: 8d:28:98:0b:a1:23:a0:63:dc:75:97:0a:d4:89:9e:a8:4d:a0: 2d:5b:6d:fa:42:4f:3b:18:85:2e:a9:c5:15:c5:75:aa:83:01: a4:4e:2c:04:57:a8:04:a4:8d:05:ab:aa:13:c3:f6:15:df:94: 61:e4:0d:84:62:53:2f:d3:da:6e:b5:a9:8c:3a:d5:d9:f0:51: a1:9a:e6:60:07:b2:de:ce:eb:96:8e:50:3a:7c:b0:fc:66:74: 15:7e:1f:97:d8:36:15:2b:63:a2:be:7f:6d:7c:51:57:31:c6: ad:f2:68:4b:95:47:dc:b4:12:f6:94:bd:a7:ee:96:57:8d:ad: 8f:11:1e:af:40:ef:26:f1:fd:d6:21:1a:8e:63:dc:1d:97:b4: 82:28:8b:91:8f:bc:d1:36:ca:d8:c2:05:c6:1d:05:21:2e:8d: d5:7d:f6:75 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZZ+bPDd2T1bOkm0HCNh4zzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUwNDI4MjIwMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTI5Zjc3NjFkNzM5NDEyMGQ4ZTEyNzhjNzA4YjE3ZjEyNmNmYmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7LJpkA7LTflVliGgsDz/9Xfyhrv uBQwR3MfcNpEN/XDPU6/zRDXN/Ad4XEKcaiECqUgN9fjXauEeZhNoXkJf2Q9wR8S mnI8rquFXUrNiZ//Vik6SHSBhtf+R7y22sn8ADTrwUNFerTpXaIJiAaj8bf+70PW EaApCSs8+VFd2IzquHp3pJ0962luw+CA7Cv3Kvie4+hqiqbKcrlbfJe+b94hz6BM Y4DjCiRb0nrgDsa99YSVorJ6VabXhzjNHE0bcsy2BVIoWfPaBsGZ14HptNLeUAsJ iGtLvcsweqWRQV6NswtWw4zTO7VGr13ULTnWGIOp4ebNWYrnxGxy/Vn8SQIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFHEp93Ydc5QSDY4SeMcIsX8SbPvXMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvY1NuM2RoMXpsQklOamhKNHh3aXhmeEpzLTljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQABa/tAwQA Ba/vMAwDBAAF5xkDBAAF5xoDBAAF528DBAAF53IDBAAF5+kDBABVXRcDBABZakUD BABZakcDBABZalgDBABeZ6cDBABe+ZYDBAC5DZwwDQYJKoZIhvcNAQELBQADggEB AHv23lw0cEcis9+36ixOk0QOjEK18mGwqELD4HJndWLp4GRaghF4pu3CDFOn7TV5 BvGwqlDP5OVLAiJB1yWDGtH5oOn5uXVn8EI7U1nO1MXRdNXwbRH3GOJuzo0omAuh I6Bj3HWXCtSJnqhNoC1bbfpCTzsYhS6pxRXFdaqDAaROLARXqASkjQWrqhPD9hXf lGHkDYRiUy/T2m61qYw61dnwUaGa5mAHst7O65aOUDp8sPxmdBV+H5fYNhUrY6K+ f218UVcxxq3yaEuVR9y0EvaUvafulleNrY8RHq9A7ybx/dYhGo5j3B2XtIIoi5GP vNE2ytjCBcYdBSEujdV99nU= -----END CERTIFICATE-----Generated at Wed Dec 17 09:46:30 2025 by rpki-client