This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/MZAgw5-fsnrTVIcXIHMKHKxn99E.roa File: MZAgw5-fsnrTVIcXIHMKHKxn99E.roa (raw, json) Hash identifier: 6snk32MM1c33E5m5H5lpRQyV7DiORoUURqLeM/dPLqU= Subject key identifier: 31:90:20:C3:9F:9F:B2:7A:D3:54:87:17:20:73:0A:1C:AC:67:F7:D1 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 0197684E53DAD2BB1F391723C10B784AE59D Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/MZAgw5-fsnrTVIcXIHMKHKxn99E.roa Signing time: Fri 13 Jun 2025 08:00:53 +0000 ROA not before: Fri 13 Jun 2025 08:00:53 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9125 IP address blocks: 5.172.33.0/24 maxlen: 24 5.172.34.0/23 maxlen: 23 5.172.34.0/24 maxlen: 24 5.172.36.0/22 maxlen: 22 5.172.36.0/23 maxlen: 23 89.23.65.0/24 maxlen: 24 89.23.66.0/23 maxlen: 23 89.23.67.0/24 maxlen: 24 89.23.68.0/23 maxlen: 23 89.23.70.0/24 maxlen: 24 89.23.74.0/24 maxlen: 24 89.23.75.0/24 maxlen: 24 89.23.77.0/24 maxlen: 24 89.23.78.0/24 maxlen: 24 89.23.79.0/24 maxlen: 24 89.23.83.0/24 maxlen: 24 89.23.84.0/24 maxlen: 24 89.23.86.0/24 maxlen: 24 89.23.88.0/24 maxlen: 24 89.23.90.0/24 maxlen: 24 92.42.248.0/22 maxlen: 22 92.42.252.0/24 maxlen: 24 92.42.253.0/24 maxlen: 24 92.42.254.0/24 maxlen: 24 92.42.255.0/24 maxlen: 24 93.93.192.0/21 maxlen: 21 95.140.112.0/22 maxlen: 22 95.140.115.0/24 maxlen: 24 95.140.116.0/22 maxlen: 22 95.140.120.0/23 maxlen: 23 95.140.124.0/22 maxlen: 22 95.140.125.0/24 maxlen: 24 109.111.224.0/24 maxlen: 24 109.111.225.0/24 maxlen: 24 109.111.226.0/24 maxlen: 24 109.111.227.0/24 maxlen: 24 109.111.228.0/24 maxlen: 24 109.111.229.0/24 maxlen: 24 109.111.230.0/23 maxlen: 23 109.111.232.0/22 maxlen: 22 109.111.236.0/22 maxlen: 22 109.111.240.0/24 maxlen: 24 109.111.243.0/24 maxlen: 24 109.111.244.0/24 maxlen: 24 109.111.245.0/24 maxlen: 24 109.111.246.0/24 maxlen: 24 109.111.247.0/24 maxlen: 24 109.111.248.0/24 maxlen: 24 109.111.249.0/24 maxlen: 24 109.111.250.0/24 maxlen: 24 109.111.252.0/23 maxlen: 23 109.111.254.0/24 maxlen: 24 178.254.128.0/21 maxlen: 21 178.254.133.0/24 maxlen: 24 178.254.136.0/22 maxlen: 22 178.254.140.0/22 maxlen: 22 178.254.144.0/24 maxlen: 24 178.254.145.0/24 maxlen: 24 178.254.146.0/24 maxlen: 24 178.254.148.0/24 maxlen: 24 178.254.149.0/24 maxlen: 24 178.254.151.0/24 maxlen: 24 178.254.152.0/24 maxlen: 24 178.254.153.0/24 maxlen: 24 178.254.154.0/24 maxlen: 24 178.254.155.0/24 maxlen: 24 178.254.156.0/24 maxlen: 24 178.254.157.0/24 maxlen: 24 178.254.158.0/24 maxlen: 24 178.254.159.0/24 maxlen: 24 178.254.163.0/24 maxlen: 24 178.254.165.0/24 maxlen: 24 178.254.168.0/24 maxlen: 24 178.254.169.0/24 maxlen: 24 178.254.172.0/24 maxlen: 24 178.254.175.0/24 maxlen: 24 178.254.177.0/24 maxlen: 24 178.254.182.0/24 maxlen: 24 178.254.183.0/24 maxlen: 24 178.254.184.0/24 maxlen: 24 178.254.187.0/24 maxlen: 24 178.254.188.0/22 maxlen: 24 185.157.44.0/24 maxlen: 24 193.104.68.0/24 maxlen: 24 217.169.208.0/20 maxlen: 20 217.169.208.0/22 maxlen: 22 217.169.212.0/22 maxlen: 22 217.169.216.0/22 maxlen: 22 217.169.219.0/24 maxlen: 24 217.169.220.0/22 maxlen: 22 2a02:b58::/32 maxlen: 32 Validation: Failed, certificate revoked on Fri 13 Jun 2025 09:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:68:4e:53:da:d2:bb:1f:39:17:23:c1:0b:78:4a:e5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jun 13 08:00:53 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=319020c39f9fb27ad354871720730a1cac67f7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e8:bc:f0:e4:c4:e8:40:58:6f:d1:cd:33:9f: 74:e6:cc:3d:1e:f7:75:7f:f8:05:ef:4f:06:fc:6a: 30:78:31:fb:d1:a3:d9:5a:cc:1f:53:93:1c:f7:23: fc:06:3e:d6:92:ff:2d:03:7c:26:90:f9:fd:3e:f6: e3:ee:c2:01:3b:d4:83:17:4f:7d:cd:8c:42:3a:c3: 56:a0:cc:e0:ec:34:55:5d:e2:8d:81:47:79:cc:fd: 24:e1:a5:5e:b2:f7:2c:60:5e:18:0c:0c:db:ed:89: 26:57:61:de:c9:02:df:28:b6:4b:92:b8:3d:7c:87: 77:ed:bd:0d:24:0e:0b:67:d5:89:c4:7a:d3:10:e2: b5:d8:81:24:db:56:24:c7:27:bd:e8:04:fa:66:26: ec:12:1b:71:98:cb:d3:e3:03:88:6b:32:d7:39:2d: 17:00:e8:82:b2:2c:f0:4c:f1:ec:cc:96:6f:59:7b: 33:c1:f3:24:55:47:fb:0d:74:bc:fa:69:11:b0:e2: 38:1f:28:28:53:51:ba:c0:cc:c3:2b:20:dc:e5:b0: 91:22:a3:d9:70:2f:09:12:b3:3a:06:af:c3:75:93: 0e:d6:2c:3e:1a:55:f5:87:62:70:92:f7:31:57:51: e6:af:82:75:8a:a3:f7:c5:a6:f6:60:47:ab:c6:a7: 8d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:90:20:C3:9F:9F:B2:7A:D3:54:87:17:20:73:0A:1C:AC:67:F7:D1 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/MZAgw5-fsnrTVIcXIHMKHKxn99E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.33.0-5.172.39.255 89.23.65.0-89.23.70.255 89.23.74.0/23 89.23.77.0-89.23.79.255 89.23.83.0-89.23.84.255 89.23.86.0/24 89.23.88.0/24 89.23.90.0/24 92.42.248.0/21 93.93.192.0/21 95.140.112.0-95.140.121.255 95.140.124.0/22 109.111.224.0-109.111.240.255 109.111.243.0-109.111.250.255 109.111.252.0-109.111.254.255 178.254.128.0-178.254.146.255 178.254.148.0/23 178.254.151.0-178.254.159.255 178.254.163.0/24 178.254.165.0/24 178.254.168.0/23 178.254.172.0/24 178.254.175.0/24 178.254.177.0/24 178.254.182.0-178.254.184.255 178.254.187.0-178.254.191.255 185.157.44.0/24 193.104.68.0/24 217.169.208.0/20 IPv6: 2a02:b58::/32 Signature Algorithm: sha256WithRSAEncryption 58:75:18:56:f3:90:13:f4:ea:85:bc:5c:de:d4:c6:f5:19:ee: d8:86:18:7c:1d:bd:ac:f4:17:ce:86:60:17:88:44:6b:25:db: 79:5e:31:37:34:2c:28:ff:0a:27:4d:ef:74:58:64:15:bc:98: 54:7c:6e:9d:f4:99:a9:d1:53:b6:8b:47:1f:d9:84:2b:f1:3a: 7e:76:33:0f:02:1b:91:7f:c8:ea:b3:e4:0b:12:48:2a:4b:f4: 84:85:ed:12:22:55:d0:4f:17:eb:56:7e:6d:29:fa:f6:44:72: 62:27:6c:92:b3:48:a1:aa:d2:1c:9c:dc:ee:fa:52:fd:a7:38: 53:c3:96:5b:da:20:2d:2b:89:2d:fa:db:16:e3:1b:c4:61:73: 8a:98:cb:60:b4:f5:76:71:f7:9a:c1:3f:73:bb:a4:6b:a0:d3: 8e:87:cb:7d:34:49:b1:37:a2:2d:04:37:79:91:7a:67:3f:a4: fd:ed:d1:ca:51:da:af:d3:de:2b:de:64:de:f6:0e:c2:d1:a7: e1:5c:4f:0b:6d:8c:c9:6c:cc:a6:bb:4c:70:b2:3a:25:32:c7: 3e:04:82:78:bd:05:e3:31:d2:73:d8:e8:ea:01:ec:8a:57:43: 79:de:65:51:95:6d:95:6c:59:4c:16:8c:1f:cd:88:b5:bf:74: c1:3d:54:23 -----BEGIN CERTIFICATE----- MIIGHjCCBQagAwIBAgISAZdoTlPa0rsfORcjwQt4SuWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjUwNjEzMDgwMDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTkwMjBjMzlmOWZiMjdhZDM1NDg3MTcyMDczMGExY2FjNjdmN2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOi88OTE6EBYb9HNM5905sw9Hvd1 f/gF708G/GoweDH70aPZWswfU5Mc9yP8Bj7Wkv8tA3wmkPn9Pvbj7sIBO9SDF099 zYxCOsNWoMzg7DRVXeKNgUd5zP0k4aVesvcsYF4YDAzb7YkmV2HeyQLfKLZLkrg9 fId37b0NJA4LZ9WJxHrTEOK12IEk21Ykxye96AT6ZibsEhtxmMvT4wOIazLXOS0X AOiCsizwTPHszJZvWXszwfMkVUf7DXS8+mkRsOI4HygoU1G6wMzDKyDc5bCRIqPZ cC8JErM6Bq/DdZMO1iw+GlX1h2JwkvcxV1Hmr4J1iqP3xab2YEerxqeNuQIDAQAB o4IDKjCCAyYwHQYDVR0OBBYEFDGQIMOfn7J601SHFyBzChysZ/fRMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvTVpBZ3c1LWZzbnJUVkljWElITUtIS3huOTlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBPgYIKwYBBQUHAQcBAf8EggEtMIIBKTCCARYEAgABMIIB DjAMAwQABawhAwQDBawgMAwDBABZF0EDBABZF0YDBAFZF0owDAMEAFkXTQMEBFkX QDAMAwQAWRdTAwQAWRdUAwQAWRdWAwQAWRdYAwQAWRdaAwQDXCr4AwQDXV3AMAwD BARfjHADBAFfjHgDBAJfjHwwDAMEBW1v4AMEAG1v8DAMAwQAbW/zAwQAbW/6MAwD BAJtb/wDBABtb/4wDAMEB7L+gAMEALL+kgMEAbL+lDAMAwQAsv6XAwQFsv6AAwQA sv6jAwQAsv6lAwQBsv6oAwQAsv6sAwQAsv6vAwQAsv6xMAwDBAGy/rYDBACy/rgw DAMEALL+uwMEBrL+gAMEALmdLAMEAMFoRAMEBNmp0DANBAIAAjAHAwUAKgILWDAN BgkqhkiG9w0BAQsFAAOCAQEAWHUYVvOQE/Tqhbxc3tTG9Rnu2IYYfB29rPQXzoZg F4hEayXbeV4xNzQsKP8KJ03vdFhkFbyYVHxunfSZqdFTtotHH9mEK/E6fnYzDwIb kX/I6rPkCxJIKkv0hIXtEiJV0E8X61Z+bSn69kRyYidskrNIoarSHJzc7vpS/ac4 U8OWW9ogLSuJLfrbFuMbxGFzipjLYLT1dnH3msE/c7uka6DTjofLfTRJsTeiLQQ3 eZF6Zz+k/e3RylHar9PeK95k3vYOwtGn4VxPC22MyWzMprtMcLI6JTLHPgSCeL0F 4zHSc9jo6gHsildDed5lUZVtlWxZTBaMH82Itb90wT1UIw== -----END CERTIFICATE-----Generated at Wed Jan 7 22:16:43 2026 by rpki-client