This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zoaVk9ko25jvAh2S5-MsiU5CcpU.roa File: zoaVk9ko25jvAh2S5-MsiU5CcpU.roa (raw, json) Hash identifier: jq/20yDegZBAhqCa1ghs4iP6g0MRdj3TNGod+Anshqw= Subject key identifier: CE:86:95:93:D9:28:DB:98:EF:02:1D:92:E7:E3:2C:89:4E:42:72:95 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 01966A3BDE65AE2110683156E61B2CC95927 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zoaVk9ko25jvAh2S5-MsiU5CcpU.roa Signing time: Thu 24 Apr 2025 23:57:10 +0000 ROA not before: Thu 24 Apr 2025 23:57:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43260 IP address blocks: 5.83.129.0/24 maxlen: 24 5.175.138.0/24 maxlen: 24 77.90.54.0/24 maxlen: 24 87.239.131.0/24 maxlen: 24 94.249.195.0/24 maxlen: 24 94.249.215.0/24 maxlen: 24 95.215.32.0/24 maxlen: 24 95.215.34.0/24 maxlen: 24 178.18.144.0/24 maxlen: 24 217.69.166.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 28 Apr 2025 04:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:6a:3b:de:65:ae:21:10:68:31:56:e6:1b:2c:c9:59:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Apr 24 23:57:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ce869593d928db98ef021d92e7e32c894e427295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:4b:3d:14:45:28:dd:a3:77:fa:f3:3f:64: 65:0d:88:0b:c3:88:fc:f8:f5:c9:92:c7:45:1a:f4: a0:c2:fd:59:c6:0d:f3:49:1a:97:01:10:09:03:cf: e8:f6:83:90:27:80:b1:08:df:03:4d:0c:68:75:72: d6:23:d2:b1:bc:f5:66:fa:ad:c6:35:89:2d:67:1e: 5a:27:bc:ab:20:78:1b:0d:04:6e:68:92:78:6d:a4: 70:4f:94:d2:55:e3:70:0f:e8:b4:56:a4:26:bd:49: 19:60:72:fc:9a:f5:b1:84:10:6b:7d:42:e2:38:0c: 7e:a4:c0:70:2c:d1:db:2b:54:31:24:62:3e:b6:d4: 5a:87:9f:36:24:32:d7:d9:0a:c0:e8:5b:60:37:83: 87:24:76:6c:dc:e2:02:56:bd:6e:03:d7:d5:79:2a: 51:b2:37:3e:58:9a:05:6f:b9:d0:a5:65:07:40:b0: 60:48:84:86:45:74:1c:4a:54:b2:e7:80:75:33:ef: b8:34:58:e1:32:7d:f1:a3:e4:84:fa:4a:67:fd:2e: 9c:c9:6f:76:58:02:0f:44:61:00:15:1f:b6:b8:38: bb:00:9a:46:fc:91:e5:5d:17:bb:4b:f4:52:b6:bd: 0b:87:65:57:f3:a4:f0:e5:20:fa:89:68:48:92:64: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:86:95:93:D9:28:DB:98:EF:02:1D:92:E7:E3:2C:89:4E:42:72:95 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/zoaVk9ko25jvAh2S5-MsiU5CcpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.129.0/24 5.175.138.0/24 77.90.54.0/24 87.239.131.0/24 94.249.195.0/24 94.249.215.0/24 95.215.32.0/24 95.215.34.0/24 178.18.144.0/24 217.69.166.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:e9:dd:fa:00:ea:42:3d:7c:10:67:72:c1:94:07:6e:8a:8e: eb:05:29:e9:fb:32:02:5e:19:a7:92:a4:04:96:0e:79:50:df: cb:0e:bb:42:92:45:74:a4:1a:c8:d9:7f:f5:a8:69:ec:fe:48: 0e:46:f7:db:c7:a0:ab:ee:ae:bd:63:a9:87:75:39:19:61:21: dd:de:61:f1:6b:f8:fb:b3:69:03:9d:bb:ac:ec:ef:55:06:75: 50:66:c1:ac:e8:9d:11:6d:e8:5d:bd:7b:fa:de:83:a0:52:70: 17:7e:6f:a4:d8:3b:8a:c3:a0:60:9f:10:67:50:aa:46:6a:cd: bf:39:eb:1d:91:e7:7c:0e:6c:f5:bd:ea:8b:50:62:4c:c9:bc: 9f:31:4d:76:85:b7:96:d0:55:4c:c7:fd:48:46:83:e5:ad:ee: 31:a9:9d:0d:a5:4e:ba:ad:99:01:c1:a2:11:2b:e2:f2:3b:ad: df:6a:88:a1:2c:43:88:c5:df:f3:71:a5:4d:48:e9:98:a3:83: 38:89:f5:57:f5:c7:cd:48:b7:49:ee:26:52:60:4d:ab:20:78: 3a:e1:99:13:97:25:00:18:b1:70:f8:f6:c0:f8:85:2a:e8:24: 02:66:fc:ec:7c:b5:62:55:a2:fe:68:41:46:0e:93:a2:43:ed: 7b:0b:0b:e4 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZZqO95lriEQaDFW5hssyVknMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUwNDI0MjM1NzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTg2OTU5M2Q5MjhkYjk4ZWYwMjFkOTJlN2UzMmM4OTRlNDI3Mjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr5LPRRFKN2jd/rzP2RlDYgLw4j8 +PXJksdFGvSgwv1Zxg3zSRqXARAJA8/o9oOQJ4CxCN8DTQxodXLWI9KxvPVm+q3G NYktZx5aJ7yrIHgbDQRuaJJ4baRwT5TSVeNwD+i0VqQmvUkZYHL8mvWxhBBrfULi OAx+pMBwLNHbK1QxJGI+ttRah582JDLX2QrA6FtgN4OHJHZs3OICVr1uA9fVeSpR sjc+WJoFb7nQpWUHQLBgSISGRXQcSlSy54B1M++4NFjhMn3xo+SE+kpn/S6cyW92 WAIPRGEAFR+2uDi7AJpG/JHlXRe7S/RStr0Lh2VX86Tw5SD6iWhIkmSKQwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFM6GlZPZKNuY7wIdkufjLIlOQnKVMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvem9hVms5a28yNWp2QWgyUzUtTXNpVTVDY3BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQABVOBAwQA Ba+KAwQATVo2AwQAV++DAwQAXvnDAwQAXvnXAwQAX9cgAwQAX9ciAwQAshKQAwQA 2UWmMA0GCSqGSIb3DQEBCwUAA4IBAQBP6d36AOpCPXwQZ3LBlAduio7rBSnp+zIC XhmnkqQElg55UN/LDrtCkkV0pBrI2X/1qGns/kgORvfbx6Cr7q69Y6mHdTkZYSHd 3mHxa/j7s2kDnbus7O9VBnVQZsGs6J0RbehdvXv63oOgUnAXfm+k2DuKw6BgnxBn UKpGas2/Oesdked8Dmz1veqLUGJMybyfMU12hbeW0FVMx/1IRoPlre4xqZ0NpU66 rZkBwaIRK+LyO63faoihLEOIxd/zcaVNSOmYo4M4ifVX9cfNSLdJ7iZSYE2rIHg6 4ZkTlyUAGLFw+PbA+IUq6CQCZvzsfLViVaL+aEFGDpOiQ+17Cwvk -----END CERTIFICATE-----Generated at Fri Dec 26 09:23:14 2025 by rpki-client