This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/MXbsc8aWsK9HR18jkML42rv1NW0.roa File: MXbsc8aWsK9HR18jkML42rv1NW0.roa (raw, json) Hash identifier: YmXXNOvmuneTRFnJJ+MJoVzxQaZ00ShtYmpx981Bl8o= Subject key identifier: 31:76:EC:73:C6:96:B0:AF:47:47:5F:23:90:C2:F8:DA:BB:F5:35:6D Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019703FFA4AAD46EA85618F0B43D892A151C Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/MXbsc8aWsK9HR18jkML42rv1NW0.roa Signing time: Sat 24 May 2025 20:32:54 +0000 ROA not before: Sat 24 May 2025 20:32:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205770 IP address blocks: 2a06:5fc2::/32 maxlen: 32 Validation: Failed, certificate revoked on Tue 27 May 2025 09:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:03:ff:a4:aa:d4:6e:a8:56:18:f0:b4:3d:89:2a:15:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: May 24 20:32:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3176ec73c696b0af47475f2390c2f8dabbf5356d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:4e:4f:95:52:3d:43:1b:3a:19:84:66:b7: c5:99:6a:03:a5:49:20:75:ba:76:af:d9:08:49:93: 07:54:9b:06:52:18:13:f9:f1:49:6e:7d:d3:b3:c7: a5:fa:82:f9:18:37:3f:b9:d8:d8:9a:b5:e1:fa:8c: f3:39:b8:e2:c0:53:1d:96:06:ba:a8:f3:4f:6c:09: e3:dd:d4:0a:b0:d6:ad:fb:b7:33:88:d5:fd:81:f2: 7e:2f:0f:5a:ce:56:84:66:d3:25:78:4c:46:64:a3: c2:5b:2c:93:d6:06:a6:3a:6d:7f:d5:a1:4e:66:04: 3e:e4:02:66:85:6a:a9:7c:fa:18:fa:9a:c5:17:02: ea:03:1f:4f:b7:de:09:90:fd:5e:09:83:de:04:5a: 16:d4:ae:70:bd:bf:e1:63:ca:0a:58:9d:86:48:a6: ba:6c:a9:40:93:1c:a7:bd:58:eb:8e:a1:61:86:78: a3:c5:97:cc:2c:62:b9:17:89:d2:2e:9e:48:ba:8f: 20:43:56:9f:6f:49:ca:fe:32:85:fd:ba:02:84:e3: 9b:71:b3:11:8c:48:08:b9:3d:a5:a1:97:38:26:0b: 87:b2:be:bd:db:c4:61:ba:0d:ef:a3:d4:cc:ea:cc: 55:98:19:14:5b:4b:fb:83:95:9c:a6:40:6c:70:59: 7e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:76:EC:73:C6:96:B0:AF:47:47:5F:23:90:C2:F8:DA:BB:F5:35:6D X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/MXbsc8aWsK9HR18jkML42rv1NW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:5fc2::/32 Signature Algorithm: sha256WithRSAEncryption a6:7f:a1:94:0c:44:a7:31:1b:a3:6e:15:b7:53:f2:55:65:83: a9:10:46:d0:f4:3e:5d:24:51:25:49:a8:6e:50:eb:9d:06:cb: 95:81:b9:b4:63:fb:3f:c8:88:2c:67:99:57:9f:41:86:80:cc: 72:31:71:cd:13:2f:aa:5f:f5:99:03:38:76:b9:4f:09:5f:2c: 3c:e2:31:a9:80:4f:89:a9:ba:32:96:2d:2b:67:68:3a:25:86: d1:6f:a9:6e:ee:8e:3b:62:e1:34:53:24:94:b1:03:15:e5:08: 51:95:54:55:78:3b:25:bf:cf:35:be:2c:55:d9:9d:d1:dd:e2: 79:8e:a3:b6:30:aa:93:12:3d:d4:23:0d:f5:23:9c:4c:70:74: 5c:99:2a:63:b3:6e:e2:a4:36:ec:93:c2:4d:d1:ea:df:79:ba: 45:7c:1e:05:23:89:07:a3:74:a1:bd:d7:2e:5e:13:35:34:87: 41:a5:6f:de:24:f9:9f:7d:7a:b7:bf:70:7e:7e:d0:d5:61:d0: 36:45:fc:82:4c:ad:0f:b6:0e:89:7b:f4:a3:43:b1:4d:49:d8: d7:41:90:62:c8:49:c7:4d:08:7a:9a:83:49:95:19:9c:34:6c: 8a:3b:11:a0:64:ee:de:8d:f4:75:45:d1:a9:b1:49:f3:00:8e: 9c:39:7b:2f -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZcD/6Sq1G6oVhjwtD2JKhUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUwNTI0MjAzMjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTc2ZWM3M2M2OTZiMGFmNDc0NzVmMjM5MGMyZjhkYWJiZjUzNTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMFOT5VSPUMbOhmEZrfFmWoDpUkg dbp2r9kISZMHVJsGUhgT+fFJbn3Ts8el+oL5GDc/udjYmrXh+ozzObjiwFMdlga6 qPNPbAnj3dQKsNat+7cziNX9gfJ+Lw9azlaEZtMleExGZKPCWyyT1gamOm1/1aFO ZgQ+5AJmhWqpfPoY+prFFwLqAx9Pt94JkP1eCYPeBFoW1K5wvb/hY8oKWJ2GSKa6 bKlAkxynvVjrjqFhhnijxZfMLGK5F4nSLp5Iuo8gQ1afb0nK/jKF/boChOObcbMR jEgIuT2loZc4JguHsr6928Rhug3vo9TM6sxVmBkUW0v7g5WcpkBscFl+mwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDF27HPGlrCvR0dfI5DC+Nq79TVtMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvTVhic2M4YVdzSzlIUjE4amtNTDQycnYxTlcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgZfwjAN BgkqhkiG9w0BAQsFAAOCAQEApn+hlAxEpzEbo24Vt1PyVWWDqRBG0PQ+XSRRJUmo blDrnQbLlYG5tGP7P8iILGeZV59BhoDMcjFxzRMvql/1mQM4drlPCV8sPOIxqYBP iam6MpYtK2doOiWG0W+pbu6OO2LhNFMklLEDFeUIUZVUVXg7Jb/PNb4sVdmd0d3i eY6jtjCqkxI91CMN9SOcTHB0XJkqY7Nu4qQ27JPCTdHq33m6RXweBSOJB6N0ob3X Ll4TNTSHQaVv3iT5n316t79wfn7Q1WHQNkX8gkytD7YOiXv0o0OxTUnY10GQYshJ x00IepqDSZUZnDRsijsRoGTu3o30dUXRqbFJ8wCOnDl7Lw== -----END CERTIFICATE-----Generated at Wed Dec 24 03:01:07 2025 by rpki-client