This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/vYoXtB5Rp7Xve-p4P0CP6zRimF0.roa File: vYoXtB5Rp7Xve-p4P0CP6zRimF0.roa (raw, json) Hash identifier: 9mn2MvE/WA5oO7hp+mmWYRnnQWhZHItTJm3BZ70QEwA= Subject key identifier: BD:8A:17:B4:1E:51:A7:B5:EF:7B:EA:78:3F:40:8F:EB:34:62:98:5D Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Certificate serial: 0199810A2ECBF8986ACB34A094843AEBB76F Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/vYoXtB5Rp7Xve-p4P0CP6zRimF0.roa Signing time: Thu 25 Sep 2025 13:22:32 +0000 ROA not before: Thu 25 Sep 2025 13:22:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9105 IP address blocks: 80.40.0.0/13 maxlen: 24 81.1.64.0/18 maxlen: 24 194.106.32.0/19 maxlen: 24 194.247.224.0/19 maxlen: 24 195.137.0.0/17 maxlen: 24 212.1.128.0/19 maxlen: 24 212.74.96.0/19 maxlen: 24 212.139.0.0/16 maxlen: 24 Validation: Failed, certificate revoked on Mon 06 Oct 2025 10:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:81:0a:2e:cb:f8:98:6a:cb:34:a0:94:84:3a:eb:b7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec Validity Not Before: Sep 25 13:22:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bd8a17b41e51a7b5ef7bea783f408feb3462985d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:33:75:a2:62:74:ba:8b:cd:9e:ff:85:4f: 6a:f4:b5:18:54:c5:0f:fb:66:59:6f:6a:dc:2e:d9: fc:19:23:30:03:53:86:1f:54:43:64:06:8d:3c:3e: 73:77:f1:76:ee:3a:ff:a4:5b:81:35:ee:c2:7e:3b: f4:ce:88:09:ca:9a:0a:6a:46:00:31:19:89:bf:2f: 8f:98:d5:e8:58:0a:be:33:03:6b:72:3c:fc:8f:48: 1b:d7:ed:2b:36:44:b8:d4:87:39:32:c7:8e:bb:9a: 76:40:45:c8:a4:16:77:40:1b:4c:39:bc:b9:80:a0: 65:1a:ff:1b:8e:2f:6c:67:77:c3:0c:08:e8:ff:55: 89:d3:8d:f0:0b:27:ed:a7:eb:bd:a9:ad:e4:4e:22: ca:42:34:97:ed:e2:c0:ea:20:9e:2c:a1:30:4a:92: d2:c7:00:2f:98:ac:6f:d6:6d:ae:30:63:56:21:8a: 79:51:92:85:bf:c6:8a:56:dd:09:66:c7:15:90:a6: dd:a3:6f:6f:3a:dd:11:03:f2:93:72:97:19:6e:5b: 63:be:f5:2a:87:18:10:3e:81:41:2a:45:4e:e0:2b: bf:7f:d1:c0:f4:f3:51:a4:e3:98:8e:53:9f:a4:25: 29:c6:27:f8:64:b6:91:fe:b8:0e:ec:5d:db:8c:f8: 0e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8A:17:B4:1E:51:A7:B5:EF:7B:EA:78:3F:40:8F:EB:34:62:98:5D X509v3 Authority Key Identifier: keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/vYoXtB5Rp7Xve-p4P0CP6zRimF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.40.0.0/13 81.1.64.0/18 194.106.32.0/19 194.247.224.0/19 195.137.0.0/17 212.1.128.0/19 212.74.96.0/19 212.139.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9b:d9:25:eb:68:3b:cc:f7:45:af:c6:7b:37:7f:95:eb:a7:ac: 03:a1:dd:46:bd:ad:17:b9:32:7c:79:27:37:f0:37:12:3b:c4: 40:22:37:eb:6c:d7:f6:9b:f0:90:d1:5e:ac:9d:9a:da:71:7a: 35:bf:70:32:86:0e:94:e4:b0:d8:92:b5:32:b7:35:43:aa:87: 85:5f:f0:e9:31:6a:4d:22:39:58:b5:93:32:d3:e7:36:dd:68: 1f:14:cc:b0:fb:73:e4:9a:73:21:2f:7b:f6:22:2e:bc:bf:71: 9f:c5:6c:c9:ed:d0:f9:3a:ef:2a:7a:5d:27:ba:8f:12:6a:62: 61:9c:21:3a:90:b6:3d:99:7e:03:42:36:9d:5c:01:08:c4:34: 1e:85:29:1b:24:a6:75:d2:b9:ee:c4:99:ec:5d:e5:ef:8f:40: 2e:27:4d:27:2e:91:55:f3:8d:24:f9:b3:df:b1:78:e7:9c:07: b9:81:5f:dd:5b:9e:75:7a:63:a2:85:7d:c2:b4:39:1d:26:32: e8:62:e3:79:08:c0:a7:5f:c9:46:54:24:73:d8:7c:90:d6:c4: a8:57:f6:4d:b4:cc:36:4d:65:56:f5:77:43:71:04:a6:fc:51: 7d:2d:a2:5c:b1:0d:2a:16:2f:86:5a:41:d0:bb:90:c1:19:c7: ae:ab:aa:f3 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZmBCi7L+JhqyzSglIQ667dvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh ZGIzZWMwHhcNMjUwOTI1MTMyMjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDhhMTdiNDFlNTFhN2I1ZWY3YmVhNzgzZjQwOGZlYjM0NjI5ODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqEzdaJidLqLzZ7/hU9q9LUYVMUP +2ZZb2rcLtn8GSMwA1OGH1RDZAaNPD5zd/F27jr/pFuBNe7Cfjv0zogJypoKakYA MRmJvy+PmNXoWAq+MwNrcjz8j0gb1+0rNkS41Ic5MseOu5p2QEXIpBZ3QBtMOby5 gKBlGv8bji9sZ3fDDAjo/1WJ043wCyftp+u9qa3kTiLKQjSX7eLA6iCeLKEwSpLS xwAvmKxv1m2uMGNWIYp5UZKFv8aKVt0JZscVkKbdo29vOt0RA/KTcpcZbltjvvUq hxgQPoFBKkVO4Cu/f9HA9PNRpOOYjlOfpCUpxif4ZLaR/rgO7F3bjPgOywIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFL2KF7QeUae173vqeD9Aj+s0YphdMB8GA1UdIwQY MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt MGQ4ZjdkZDhjY2U2LzEvdllvWHRCNVJwN1h2ZS1wNFAwQ1A2elJpbUYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2 LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwMDUCgDBAZR AUADBAXCaiADBAXC9+ADBAfDiQADBAXUAYADBAXUSmADAwDUizANBgkqhkiG9w0B AQsFAAOCAQEAm9kl62g7zPdFr8Z7N3+V66esA6HdRr2tF7kyfHknN/A3EjvEQCI3 62zX9pvwkNFerJ2a2nF6Nb9wMoYOlOSw2JK1Mrc1Q6qHhV/w6TFqTSI5WLWTMtPn Nt1oHxTMsPtz5JpzIS979iIuvL9xn8Vsye3Q+TrvKnpdJ7qPEmpiYZwhOpC2PZl+ A0I2nVwBCMQ0HoUpGySmddK57sSZ7F3l749ALidNJy6RVfONJPmz37F455wHuYFf 3VuedXpjooV9wrQ5HSYy6GLjeQjAp1/JRlQkc9h8kNbEqFf2TbTMNk1lVvV3Q3EE pvxRfS2iXLENKhYvhlpB0LuQwRnHrquq8w== -----END CERTIFICATE-----Generated at Wed Dec 17 21:18:26 2025 by rpki-client