This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/grBmIQFFOFzb0ZyHOSgs4sSqDZs.roa File: grBmIQFFOFzb0ZyHOSgs4sSqDZs.roa (raw, json) Hash identifier: bBk131BgjV01jv1/wAjqSqIVJyquUgMaIkUGHH9RY/o= Subject key identifier: 82:B0:66:21:01:45:38:5C:DB:D1:9C:87:39:28:2C:E2:C4:AA:0D:9B Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019640FA58FD3689FCD159976118D9E9D8AD Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/grBmIQFFOFzb0ZyHOSgs4sSqDZs.roa Signing time: Wed 16 Apr 2025 23:41:10 +0000 ROA not before: Wed 16 Apr 2025 23:41:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43260 IP address blocks: 5.83.129.0/24 maxlen: 24 5.175.138.0/24 maxlen: 24 77.90.54.0/24 maxlen: 24 87.239.131.0/24 maxlen: 24 94.249.195.0/24 maxlen: 24 94.249.215.0/24 maxlen: 24 95.215.32.0/24 maxlen: 24 95.215.34.0/24 maxlen: 24 178.18.144.0/24 maxlen: 24 217.69.166.0/24 maxlen: 24 Validation: Failed, certificate revoked on Thu 17 Apr 2025 04:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:40:fa:58:fd:36:89:fc:d1:59:97:61:18:d9:e9:d8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Apr 16 23:41:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=82b066210145385cdbd19c8739282ce2c4aa0d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:e4:bd:1f:5a:86:ff:6b:21:f3:d3:65:e5: 51:68:7a:50:74:5c:9b:ac:2a:67:be:75:bb:47:35: 97:3d:fe:b8:fa:18:0a:f5:20:03:da:1a:dc:c8:a6: 46:e5:b9:b0:cb:0f:05:c8:b7:4e:52:fe:4f:0d:a2: a2:4b:3d:43:12:19:e8:6b:63:f5:87:fe:1e:91:74: 05:0e:2a:13:5e:b1:1b:6f:44:ba:91:d9:a7:4e:a8: 51:15:ee:b0:66:22:e2:78:d0:76:2f:71:49:b8:5b: 45:0b:27:a7:63:f9:af:ab:c8:56:1d:47:9e:cb:ec: 3e:fa:cb:6d:88:87:90:b5:f0:8c:86:5d:30:94:02: a0:94:ca:7c:e9:aa:2c:e3:66:89:6d:6c:f5:7a:40: 6c:74:11:ec:07:ed:28:6c:70:51:ff:99:49:25:59: 62:31:e9:06:c7:08:95:c5:e5:8b:cf:7f:2b:14:f8: 63:96:dd:93:c5:87:cc:ad:c6:c4:fe:b6:e6:ad:93: 1b:4a:63:a0:70:e5:f5:98:1c:f9:c4:24:40:ca:ae: dc:56:ad:52:e4:8e:d6:b7:19:17:12:3d:d0:66:f3: 54:0e:62:de:fc:64:ab:34:cf:c4:cb:6f:1d:4c:b9: f6:d3:54:84:b8:0a:6a:96:4a:ea:15:3e:4c:b3:cb: e7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B0:66:21:01:45:38:5C:DB:D1:9C:87:39:28:2C:E2:C4:AA:0D:9B X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/grBmIQFFOFzb0ZyHOSgs4sSqDZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.129.0/24 5.175.138.0/24 77.90.54.0/24 87.239.131.0/24 94.249.195.0/24 94.249.215.0/24 95.215.32.0/24 95.215.34.0/24 178.18.144.0/24 217.69.166.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:fa:80:31:6f:9f:00:26:c9:74:21:28:d5:87:ce:82:35:9f: 98:9a:90:35:8e:f7:42:0e:52:29:97:50:59:91:20:03:76:95: ef:42:08:a1:02:45:d7:37:aa:a4:6b:4d:5a:63:64:4d:37:a5: 4c:10:8f:11:2e:46:50:f6:f3:53:d3:75:c2:2a:03:bf:f1:51: 50:52:1f:5a:30:d2:31:af:36:5e:cf:5d:bb:01:36:31:60:77: 7d:7f:c7:94:40:da:c7:a5:d3:34:a3:80:8c:61:e1:87:57:2d: f1:8c:9b:e3:86:a6:5c:d9:dc:9e:38:bc:5a:8b:7d:64:07:39: 04:82:c3:d1:8f:23:cb:db:ef:ad:e4:c5:8d:ae:10:61:85:bc: d2:65:c0:13:cf:25:9b:f1:36:a4:3a:e3:5e:fb:02:65:24:b8: 63:8a:aa:50:5d:62:df:d9:e2:8c:19:ec:3f:c4:40:d5:9c:4d: c1:29:cc:25:18:97:08:72:fa:29:d6:2e:60:aa:64:46:b4:bb: fb:4a:5a:97:ef:1c:d2:77:16:ea:7a:a1:55:3d:ad:d8:46:76: da:91:12:e3:a1:09:53:3e:0a:e7:74:e4:a8:80:a4:67:b9:30: e1:b0:04:5e:34:b7:27:be:22:e7:59:e4:5a:6b:9d:2e:bb:8f: 53:51:c2:09 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZZA+lj9Non80VmXYRjZ6ditMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUwNDE2MjM0MTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmIwNjYyMTAxNDUzODVjZGJkMTljODczOTI4MmNlMmM0YWEwZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8rkvR9ahv9rIfPTZeVRaHpQdFyb rCpnvnW7RzWXPf64+hgK9SAD2hrcyKZG5bmwyw8FyLdOUv5PDaKiSz1DEhnoa2P1 h/4ekXQFDioTXrEbb0S6kdmnTqhRFe6wZiLieNB2L3FJuFtFCyenY/mvq8hWHUee y+w++sttiIeQtfCMhl0wlAKglMp86aos42aJbWz1ekBsdBHsB+0obHBR/5lJJVli MekGxwiVxeWLz38rFPhjlt2TxYfMrcbE/rbmrZMbSmOgcOX1mBz5xCRAyq7cVq1S 5I7WtxkXEj3QZvNUDmLe/GSrNM/Ey28dTLn201SEuApqlkrqFT5Ms8vnWQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFIKwZiEBRThc29GchzkoLOLEqg2bMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvZ3JCbUlRRkZPRnpiMFp5SE9TZ3M0c1NxRFpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQABVOBAwQA Ba+KAwQATVo2AwQAV++DAwQAXvnDAwQAXvnXAwQAX9cgAwQAX9ciAwQAshKQAwQA 2UWmMA0GCSqGSIb3DQEBCwUAA4IBAQBs+oAxb58AJsl0ISjVh86CNZ+YmpA1jvdC DlIpl1BZkSADdpXvQgihAkXXN6qka01aY2RNN6VMEI8RLkZQ9vNT03XCKgO/8VFQ Uh9aMNIxrzZez127ATYxYHd9f8eUQNrHpdM0o4CMYeGHVy3xjJvjhqZc2dyeOLxa i31kBzkEgsPRjyPL2++t5MWNrhBhhbzSZcATzyWb8TakOuNe+wJlJLhjiqpQXWLf 2eKMGew/xEDVnE3BKcwlGJcIcvop1i5gqmRGtLv7SlqX7xzSdxbqeqFVPa3YRnba kRLjoQlTPgrndOSogKRnuTDhsAReNLcnviLnWeRaa50uu49TUcIJ -----END CERTIFICATE-----Generated at Sun Dec 21 01:19:07 2025 by rpki-client