This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AuoQQdN49-Wmc8wkqXGkLD_a-IE.roa File: AuoQQdN49-Wmc8wkqXGkLD_a-IE.roa (raw, json) Hash identifier: PkrBQd0ExIFf+ElUPMF+y2balQPRq92Jtk59ToMZ06Q= Subject key identifier: 02:EA:10:41:D3:78:F7:E5:A6:73:CC:24:A9:71:A4:2C:3F:DA:F8:81 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019634998C9807A0CF9C3BE5FB570399F0BB Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AuoQQdN49-Wmc8wkqXGkLD_a-IE.roa Signing time: Mon 14 Apr 2025 14:00:00 +0000 ROA not before: Mon 14 Apr 2025 14:00:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58057 IP address blocks: 45.136.136.0/24 maxlen: 24 45.136.137.0/24 maxlen: 24 45.136.139.0/24 maxlen: 24 185.102.84.0/24 maxlen: 24 185.232.117.0/24 maxlen: 24 193.33.94.0/23 maxlen: 24 193.163.86.0/24 maxlen: 24 194.50.92.0/24 maxlen: 24 2a04:ccc0:ffff::/48 maxlen: 48 2a04:ccc1::/32 maxlen: 48 2a04:ccc3::/32 maxlen: 48 2a04:ccc4::/32 maxlen: 48 2a04:ccc5::/32 maxlen: 48 2a04:ccc6::/32 maxlen: 48 2a04:ccc7::/32 maxlen: 48 2a09:4c0::/29 maxlen: 64 2a0c:3b80::/32 maxlen: 48 2a0c:3b81::/32 maxlen: 48 2a0c:3b82::/32 maxlen: 48 2a0c:3b83::/32 maxlen: 48 2a0c:3b84::/32 maxlen: 48 2a0c:3b85::/32 maxlen: 48 2a0c:3b86::/32 maxlen: 48 2a0e:97c0:1d0::/44 maxlen: 44 2a0e:97c0:260::/44 maxlen: 44 2a0e:97c1:200::/40 maxlen: 48 2a0e:97c3:110::/44 maxlen: 48 2a0e:97c4:120::/44 maxlen: 48 2a0e:b107:9f2::/48 maxlen: 48 2a0e:b107:1165::/48 maxlen: 48 2a0e:b107:1786::/48 maxlen: 48 2a0e:b107:21c0::/45 maxlen: 48 2a0e:b107:2220::/45 maxlen: 48 2a0e:b107:2228::/45 maxlen: 48 2a0f:e404:102::/48 maxlen: 48 2a10:2f00:18d::/48 maxlen: 48 2a10:2f00:18f::/48 maxlen: 48 2a10:2f00:193::/48 maxlen: 48 2a10:cc40:250::/44 maxlen: 48 2a10:cc45:130::/44 maxlen: 44 Validation: Failed, certificate revoked on Tue 15 Apr 2025 06:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:34:99:8c:98:07:a0:cf:9c:3b:e5:fb:57:03:99:f0:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Apr 14 14:00:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=02ea1041d378f7e5a673cc24a971a42c3fdaf881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:e6:f7:e0:67:f9:15:d7:21:99:bd:de:17: 63:70:fd:29:ee:91:4a:b6:55:cc:a3:5d:49:f0:b6: 5d:89:a1:98:89:c5:99:7f:6e:12:83:74:12:e2:b1: 76:0e:8c:0f:ca:5b:be:6c:2f:a1:a6:bc:bf:f7:4f: 02:3c:9e:9f:84:30:4f:16:72:20:69:7b:cb:d5:b7: 34:c5:8e:af:96:72:c1:f3:35:06:7c:d4:6f:1a:47: 44:45:15:15:fe:83:46:db:16:f8:9f:06:f9:e6:a0: ec:17:8d:fd:f2:76:53:23:3b:5a:80:7b:62:af:29: fd:0d:13:13:0b:20:f4:dc:d8:36:69:83:3f:48:f5: 98:ad:00:9d:7c:ba:ab:b5:4d:64:1c:1e:2a:f7:50: 16:d9:04:85:54:c8:6b:2e:7a:0f:65:27:8c:f1:52: 78:51:df:09:60:bc:da:60:db:c2:6e:fc:73:a1:29: 88:14:7a:80:f2:37:9e:44:25:df:f2:8a:d5:d8:71: 7c:be:42:50:e8:3b:24:71:c4:2c:41:2e:8f:4e:e1: 4b:81:c8:b4:9e:b6:11:5e:c4:27:24:ba:ae:95:9e: 0f:64:e3:3a:4f:c2:be:ff:37:8f:e7:34:9e:6d:39: 42:5d:48:ed:48:b7:06:21:9e:77:3a:69:c8:f6:6e: ce:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EA:10:41:D3:78:F7:E5:A6:73:CC:24:A9:71:A4:2C:3F:DA:F8:81 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AuoQQdN49-Wmc8wkqXGkLD_a-IE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.136.0/23 45.136.139.0/24 185.102.84.0/24 185.232.117.0/24 193.33.94.0/23 193.163.86.0/24 194.50.92.0/24 IPv6: 2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff 2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff 2a09:4c0::/29 2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:97c0:1d0::/44 2a0e:97c0:260::/44 2a0e:97c1:200::/40 2a0e:97c3:110::/44 2a0e:97c4:120::/44 2a0e:b107:9f2::/48 2a0e:b107:1165::/48 2a0e:b107:1786::/48 2a0e:b107:21c0::/45 2a0e:b107:2220::/44 2a0f:e404:102::/48 2a10:2f00:18d::/48 2a10:2f00:18f::/48 2a10:2f00:193::/48 2a10:cc40:250::/44 2a10:cc45:130::/44 Signature Algorithm: sha256WithRSAEncryption 5f:7a:c7:82:2e:6e:f2:ed:2f:73:cf:1b:30:9f:63:46:0a:62: a2:1e:0c:34:68:36:5f:bd:b7:85:df:ba:97:97:31:bb:2e:b9: 65:03:d8:c2:1e:42:bf:f0:f8:e1:66:4a:84:a6:ae:07:e2:05: 40:c2:c2:5a:ef:a9:e5:1b:e0:ea:59:1b:15:e4:8e:86:0f:bc: ec:6c:24:dc:b0:fb:b7:0e:83:9a:41:7d:ba:57:98:26:09:12: 89:6e:9f:d9:1d:4c:13:ab:c4:c7:51:17:d3:9e:35:f3:b9:ef: e5:9b:5c:df:b4:95:ca:85:ce:fc:39:ed:a3:cf:f3:0b:7e:b2: 6a:7c:ad:da:ab:2f:2c:fc:0d:18:91:c4:f7:a6:33:16:01:09: 9e:db:c0:4f:05:d2:3e:f6:8e:a4:54:31:a2:51:4e:08:53:83: 90:ce:e1:f2:c4:c7:7a:b3:5c:ba:77:f5:b8:b8:a4:7c:45:b5: 61:2b:20:65:37:00:a6:cf:da:26:6e:f8:c7:f7:eb:f0:73:e4: c6:02:a8:42:90:d5:4c:28:c1:41:0d:f2:20:5a:9f:cc:51:5f: e0:8c:18:7d:78:6f:9b:a1:35:74:b5:3c:a9:93:88:f2:a4:2f: 13:ea:bc:fb:6e:d3:81:c3:45:36:a3:2c:ab:8f:c7:58:be:0e: 57:6b:47:0c -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgISAZY0mYyYB6DPnDvl+1cDmfC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUwNDE0MTQwMDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmVhMTA0MWQzNzhmN2U1YTY3M2NjMjRhOTcxYTQyYzNmZGFmODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqbm9+Bn+RXXIZm93hdjcP0p7pFK tlXMo11J8LZdiaGYicWZf24Sg3QS4rF2DowPylu+bC+hpry/908CPJ6fhDBPFnIg aXvL1bc0xY6vlnLB8zUGfNRvGkdERRUV/oNG2xb4nwb55qDsF4398nZTIztagHti ryn9DRMTCyD03Ng2aYM/SPWYrQCdfLqrtU1kHB4q91AW2QSFVMhrLnoPZSeM8VJ4 Ud8JYLzaYNvCbvxzoSmIFHqA8jeeRCXf8orV2HF8vkJQ6DskccQsQS6PTuFLgci0 nrYRXsQnJLqulZ4PZOM6T8K+/zeP5zSebTlCXUjtSLcGIZ53OmnI9m7OfwIDAQAB o4IDBTCCAwEwHQYDVR0OBBYEFALqEEHTePflpnPMJKlxpCw/2viBMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvQXVvUVFkTjQ5LVdtYzh3a3FYR2tMRF9hLUlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBGQYIKwYBBQUHAQcBAf8EggEIMIIBBDAwBAIAATAqAwQB LYiIAwQALYiLAwQAuWZUAwQAueh1AwQBwSFeAwQAwaNWAwQAwjJcMIHPBAIAAjCB yDAQAwcAKgTMwP//AwUBKgTMwDAOAwUAKgTMwwMFAyoEzMADBQMqCQTAMA4DBQcq DDuAAwUAKgw7hgMHBCoOl8AB0AMHBCoOl8ACYAMGACoOl8ECAwcEKg6XwwEQAwcE Kg6XxAEgAwcAKg6xBwnyAwcAKg6xBxFlAwcAKg6xBxeGAwcDKg6xByHAAwcEKg6x ByIgAwcAKg/kBAECAwcAKhAvAAGNAwcAKhAvAAGPAwcAKhAvAAGTAwcEKhDMQAJQ AwcEKhDMRQEwMA0GCSqGSIb3DQEBCwUAA4IBAQBfeseCLm7y7S9zzxswn2NGCmKi Hgw0aDZfvbeF37qXlzG7LrllA9jCHkK/8PjhZkqEpq4H4gVAwsJa76nlG+DqWRsV 5I6GD7zsbCTcsPu3DoOaQX26V5gmCRKJbp/ZHUwTq8THURfTnjXzue/lm1zftJXK hc78Oe2jz/MLfrJqfK3aqy8s/A0YkcT3pjMWAQme28BPBdI+9o6kVDGiUU4IU4OQ zuHyxMd6s1y6d/W4uKR8RbVhKyBlNwCmz9ombvjH9+vwc+TGAqhCkNVMKMFBDfIg Wp/MUV/gjBh9eG+boTV0tTypk4jypC8T6rz7btOBw0U2oyyrj8dYvg5Xa0cM -----END CERTIFICATE-----Generated at Thu Dec 25 03:07:43 2025 by rpki-client