This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/_Nxkuo_bgy_q1xlQLbfmENArS74.roa File: _Nxkuo_bgy_q1xlQLbfmENArS74.roa (raw, json) Hash identifier: cRl1Q8xFz3yxRMQ765LTSQHayPUWBfGBPSUd5E7XPqw= Subject key identifier: FC:DC:64:BA:8F:DB:83:2F:EA:D7:19:50:2D:B7:E6:10:D0:2B:4B:BE Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b Certificate serial: 0196E7724F09974F2A510101FF6354BC45BF Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/_Nxkuo_bgy_q1xlQLbfmENArS74.roa Signing time: Mon 19 May 2025 07:29:10 +0000 ROA not before: Mon 19 May 2025 07:29:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44654 IP address blocks: 37.252.208.0/23 maxlen: 23 37.252.208.0/24 maxlen: 24 37.252.209.0/24 maxlen: 24 37.252.210.0/23 maxlen: 23 37.252.210.0/24 maxlen: 24 37.252.211.0/24 maxlen: 24 37.252.212.0/23 maxlen: 23 37.252.212.0/24 maxlen: 24 37.252.213.0/24 maxlen: 24 37.252.215.0/24 maxlen: 24 109.205.8.0/21 maxlen: 24 185.36.124.0/22 maxlen: 24 185.36.124.0/23 maxlen: 23 2a02:d8::/32 maxlen: 48 2a02:d8:8::/48 maxlen: 48 2a02:d8:9::/48 maxlen: 48 2a02:d8:a::/48 maxlen: 48 Validation: Failed, certificate revoked on Thu 29 May 2025 14:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:e7:72:4f:09:97:4f:2a:51:01:01:ff:63:54:bc:45:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b Validity Not Before: May 19 07:29:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fcdc64ba8fdb832fead719502db7e610d02b4bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:ed:41:d0:a6:b0:fc:1e:d2:4b:47:d0:cd: b3:eb:67:0a:ed:ff:11:f1:ee:f6:f9:32:9b:df:fd: 7e:ee:4c:84:ab:42:b2:b0:b9:a4:cb:20:0d:49:61: 25:91:85:29:b0:59:93:b3:a3:77:9e:70:73:e3:c5: 27:f4:e8:d3:7b:d0:d6:8f:c8:1e:cd:94:51:9e:81: 70:ad:72:5f:6c:0d:bf:9c:fd:4d:a7:ef:99:b9:da: ed:a0:55:05:67:23:ed:2e:5a:91:f9:48:29:96:3e: 9e:2c:06:a2:81:5e:7b:7a:eb:fc:e0:26:a5:41:73: fe:bc:17:f3:15:fb:d4:98:69:4f:1e:23:d4:c9:d7: 74:6b:8b:20:66:41:ab:68:03:46:1e:70:6a:00:1c: 04:6e:0e:42:e5:d0:3f:18:61:72:3f:63:d4:4b:3b: 7b:bb:15:5c:63:48:81:7f:87:58:0f:c6:df:c9:ac: 47:13:3e:81:9c:06:0e:5f:c3:58:21:f1:46:2f:28: 13:5b:c5:0f:5d:ff:94:60:c7:29:9d:92:01:cb:0d: 61:bb:9a:fd:6f:18:ca:9f:55:60:94:cd:56:5d:9d: da:d2:6d:49:04:41:b6:67:32:73:5a:fb:bd:50:80: 2f:d8:ce:4a:3b:67:53:93:22:1c:b8:be:41:11:74: ec:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DC:64:BA:8F:DB:83:2F:EA:D7:19:50:2D:B7:E6:10:D0:2B:4B:BE X509v3 Authority Key Identifier: keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/_Nxkuo_bgy_q1xlQLbfmENArS74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.208.0-37.252.213.255 37.252.215.0/24 109.205.8.0/21 185.36.124.0/22 IPv6: 2a02:d8::/32 Signature Algorithm: sha256WithRSAEncryption 32:c4:f0:73:a7:20:17:83:75:f8:f2:97:d0:ce:dd:36:e0:73: 4f:7c:7c:32:2d:da:76:a1:e3:1b:94:2e:a3:e0:f3:8f:a4:39: ec:54:de:c8:c8:35:aa:08:07:34:36:16:d6:3f:d8:4e:db:30: 4f:6f:a2:17:4f:8a:a9:4f:93:fc:17:49:5a:a2:7d:9a:b3:10: c7:7f:17:f7:65:bd:fb:05:29:95:5c:5f:d5:da:a8:a3:b6:69: 4f:c1:47:5b:9e:67:6e:a3:d8:81:57:da:cd:bd:dd:39:67:8b: c9:97:5c:08:08:52:50:69:08:45:44:80:fb:4f:ee:8f:71:19: 19:a0:ed:e6:7a:f2:98:78:0c:82:b8:30:a5:c2:7b:d3:0d:e0: ae:f3:7c:74:76:76:9a:a3:19:41:33:46:b1:24:23:3d:c4:46: ab:e2:d5:15:0f:62:67:66:04:c2:86:54:15:1f:76:5a:11:f5: 18:e9:96:62:2e:b0:2b:3c:18:97:d1:d7:4a:40:53:0b:e2:32: 43:fe:78:11:da:d8:c4:e5:48:6d:49:e9:31:a8:3c:ea:f5:b2: 0a:00:d2:02:5a:71:e8:d7:f2:2f:83:ca:9c:ac:01:31:b1:e0: a0:3e:a2:6f:7a:33:ab:38:25:db:60:d4:ce:83:cc:92:d5:23: 1c:4e:b3:78 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZbnck8Jl08qUQEB/2NUvEW/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx MjMwN2IwHhcNMjUwNTE5MDcyOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2RjNjRiYThmZGI4MzJmZWFkNzE5NTAyZGI3ZTYxMGQwMmI0YmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLHtQdCmsPwe0ktH0M2z62cK7f8R 8e72+TKb3/1+7kyEq0KysLmkyyANSWElkYUpsFmTs6N3nnBz48Un9OjTe9DWj8ge zZRRnoFwrXJfbA2/nP1Np++ZudrtoFUFZyPtLlqR+Ugplj6eLAaigV57euv84Cal QXP+vBfzFfvUmGlPHiPUydd0a4sgZkGraANGHnBqABwEbg5C5dA/GGFyP2PUSzt7 uxVcY0iBf4dYD8bfyaxHEz6BnAYOX8NYIfFGLygTW8UPXf+UYMcpnZIByw1hu5r9 bxjKn1VglM1WXZ3a0m1JBEG2ZzJzWvu9UIAv2M5KO2dTkyIcuL5BEXTsAQIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFPzcZLqP24Mv6tcZUC235hDQK0u+MB8GA1UdIwQY MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt NWI4NzgyNWMwN2VlLzEvX054a3VvX2JneV9xMXhsUUxiZm1FTkFyUzc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAQl/NAD BAEl/NQDBAAl/NcDBANtzQgDBAK5JHwwDQQCAAIwBwMFACoCANgwDQYJKoZIhvcN AQELBQADggEBADLE8HOnIBeDdfjyl9DO3Tbgc098fDIt2nah4xuULqPg84+kOexU 3sjINaoIBzQ2FtY/2E7bME9vohdPiqlPk/wXSVqifZqzEMd/F/dlvfsFKZVcX9Xa qKO2aU/BR1ueZ26j2IFX2s293Tlni8mXXAgIUlBpCEVEgPtP7o9xGRmg7eZ68ph4 DIK4MKXCe9MN4K7zfHR2dpqjGUEzRrEkIz3ERqvi1RUPYmdmBMKGVBUfdloR9Rjp lmIusCs8GJfR10pAUwviMkP+eBHa2MTlSG1J6TGoPOr1sgoA0gJacejX8i+Dypys ATGx4KA+om96M6s4Jdtg1M6DzJLVIxxOs3g= -----END CERTIFICATE-----Generated at Wed Dec 31 03:41:29 2025 by rpki-client