This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2fpWqp2aoSLhPiuXr52smpgoRdA.roa File: 2fpWqp2aoSLhPiuXr52smpgoRdA.roa (raw, json) Hash identifier: GgmhlH9S0OqQ4iYMgvnhYjrrLf4+lkDMKiQxM1+/FOA= Subject key identifier: D9:FA:56:AA:9D:9A:A1:22:E1:3E:2B:97:AF:9D:AC:9A:98:28:45:D0 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 0196D00FAF90E5C65E3B42EFB23CAC6EC140 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2fpWqp2aoSLhPiuXr52smpgoRdA.roa Signing time: Wed 14 May 2025 18:30:10 +0000 ROA not before: Wed 14 May 2025 18:30:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 85.202.203.0/24 maxlen: 24 146.19.102.0/24 maxlen: 24 Validation: Failed, certificate revoked on Sun 18 May 2025 04:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:d0:0f:af:90:e5:c6:5e:3b:42:ef:b2:3c:ac:6e:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: May 14 18:30:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d9fa56aa9d9aa122e13e2b97af9dac9a982845d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d1:aa:9c:e4:6a:50:80:57:06:d0:35:c6:26: 70:f9:04:8d:f8:63:12:41:b9:29:b7:2e:16:c6:07: 65:a8:a0:25:ec:00:12:f0:88:59:2b:a9:83:fb:3f: 56:35:99:66:57:7a:65:19:47:c1:24:18:8b:a0:9a: d6:cc:47:86:5f:0e:c9:bd:07:61:1c:ce:69:40:47: 8d:ea:93:23:70:f9:38:e7:34:41:09:26:59:85:85: 73:f5:c0:ca:86:2e:45:a5:34:c1:4d:a1:10:2b:12: e5:91:f9:b4:a4:4f:89:fb:8b:64:a1:fb:64:29:90: d2:ef:0e:f5:19:3a:5b:81:a0:ba:b3:88:54:a7:8d: 83:b8:45:b1:f5:82:c5:81:ed:dd:4f:97:b7:a4:04: f5:54:7a:68:00:7a:2f:8d:25:fc:73:db:38:bb:bf: 68:8d:a7:cb:d0:54:d1:9d:db:51:28:b3:63:af:7c: 63:2b:fa:f4:1d:f0:1d:0d:f9:42:45:90:9e:5e:c8: a0:d1:46:22:10:92:41:c3:a3:ec:5d:ca:e1:44:33: b4:c4:71:2e:b1:70:3d:52:76:89:f7:e6:b4:ba:0a: 26:d7:cb:00:5e:e0:7b:24:0f:bc:6a:0c:ad:46:86: 27:6f:6d:c2:78:bf:cb:8e:1e:97:79:42:6e:db:98: dc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FA:56:AA:9D:9A:A1:22:E1:3E:2B:97:AF:9D:AC:9A:98:28:45:D0 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/2fpWqp2aoSLhPiuXr52smpgoRdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.203.0/24 146.19.102.0/24 Signature Algorithm: sha256WithRSAEncryption 29:b2:3e:15:cf:bd:26:d1:36:6b:f1:d5:c8:bd:5d:32:d6:2f: 68:2e:bd:72:61:9a:8b:53:b4:58:74:7e:70:2b:87:e6:17:dd: 4d:56:58:af:60:80:03:11:e0:46:32:05:00:2e:03:e9:57:4e: f3:5d:11:e0:20:f4:13:7e:9b:3a:6c:2f:28:43:6f:0b:f7:e1: e9:a6:9e:a5:aa:08:14:83:88:6f:67:67:5a:7b:29:8d:b4:bc: d9:19:a7:6f:58:fc:76:57:70:76:d2:ea:49:47:8b:a2:eb:5b: 2f:6c:d8:56:ab:eb:ec:11:c6:30:b0:bf:cd:dc:2a:c8:10:6a: 7e:ea:bd:56:18:db:c7:01:b3:c6:b9:4e:ed:b5:13:0b:7a:f9: c4:ff:00:29:b9:ee:09:8a:43:8b:02:b6:8a:1e:40:c0:f3:7a: d8:26:c2:0c:18:92:73:25:9f:88:ea:ee:fd:78:42:82:54:08: 02:30:bd:8f:9d:83:bc:c0:3a:55:3d:ce:cd:e5:6b:1a:d3:06: cf:4a:a4:6c:9b:49:70:8b:a5:a7:61:38:4e:b7:07:0f:cc:55: f5:b4:74:d3:89:9f:5a:e5:cc:73:8a:25:c6:7f:0a:16:65:cb: e0:99:f8:6d:4e:c9:6d:52:7b:4a:f8:5e:8d:59:9e:4a:5e:d8: c3:fe:e0:aa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZbQD6+Q5cZeO0LvsjysbsFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUwNTE0MTgzMDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWZhNTZhYTlkOWFhMTIyZTEzZTJiOTdhZjlkYWM5YTk4Mjg0NWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztGqnORqUIBXBtA1xiZw+QSN+GMS Qbkpty4WxgdlqKAl7AAS8IhZK6mD+z9WNZlmV3plGUfBJBiLoJrWzEeGXw7JvQdh HM5pQEeN6pMjcPk45zRBCSZZhYVz9cDKhi5FpTTBTaEQKxLlkfm0pE+J+4tkoftk KZDS7w71GTpbgaC6s4hUp42DuEWx9YLFge3dT5e3pAT1VHpoAHovjSX8c9s4u79o jafL0FTRndtRKLNjr3xjK/r0HfAdDflCRZCeXsig0UYiEJJBw6PsXcrhRDO0xHEu sXA9UnaJ9+a0ugom18sAXuB7JA+8agytRoYnb23CeL/Ljh6XeUJu25jcdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNn6VqqdmqEi4T4rl6+drJqYKEXQMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvMmZwV3FwMmFvU0xoUGl1WHI1MnNtcGdvUmRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVcrLAwQA khNmMA0GCSqGSIb3DQEBCwUAA4IBAQApsj4Vz70m0TZr8dXIvV0y1i9oLr1yYZqL U7RYdH5wK4fmF91NVlivYIADEeBGMgUALgPpV07zXRHgIPQTfps6bC8oQ28L9+Hp pp6lqggUg4hvZ2daeymNtLzZGadvWPx2V3B20upJR4ui61svbNhWq+vsEcYwsL/N 3CrIEGp+6r1WGNvHAbPGuU7ttRMLevnE/wApue4JikOLAraKHkDA83rYJsIMGJJz JZ+I6u79eEKCVAgCML2PnYO8wDpVPc7N5Wsa0wbPSqRsm0lwi6WnYThOtwcPzFX1 tHTTiZ9a5cxziiXGfwoWZcvgmfhtTsltUntK+F6NWZ5KXtjD/uCq -----END CERTIFICATE-----Generated at Thu Dec 25 03:00:58 2025 by rpki-client