This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Lq2S-X6Ljo_tgJSQJV3a40PVTgs.roa File: Lq2S-X6Ljo_tgJSQJV3a40PVTgs.roa (raw, json) Hash identifier: 17IucebkH3Qzgq1dLvr5kY9T3iLW8+ua9GF55DqaSf4= Subject key identifier: 2E:AD:92:F9:7E:8B:8E:8F:ED:80:94:90:25:5D:DA:E3:43:D5:4E:0B Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019753D290AF0BF82434FCB747FBAB8E4247 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Lq2S-X6Ljo_tgJSQJV3a40PVTgs.roa Signing time: Mon 09 Jun 2025 08:33:17 +0000 ROA not before: Mon 09 Jun 2025 08:33:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 79.172.193.0/24 maxlen: 24 79.172.208.0/24 maxlen: 24 79.172.228.0/24 maxlen: 24 87.229.8.0/22 maxlen: 22 87.229.34.0/24 maxlen: 24 87.229.79.0/24 maxlen: 24 87.229.124.0/24 maxlen: 24 87.229.125.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 09 Jun 2025 08:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:53:d2:90:af:0b:f8:24:34:fc:b7:47:fb:ab:8e:42:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jun 9 08:33:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2ead92f97e8b8e8fed809490255ddae343d54e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:b2:bf:57:23:7d:be:26:f6:74:28:de:03: 74:31:f4:6f:db:e2:30:ef:33:d2:7c:a2:13:2a:33: cd:27:5a:83:24:d7:4c:05:ec:19:13:7f:e1:7d:35: 11:a1:85:2f:84:59:90:84:c5:bc:57:e1:ee:ac:40: 5b:ec:e1:48:8e:19:9b:81:dc:a1:28:a5:98:cb:63: 48:fc:39:69:83:24:0b:e0:ae:06:29:c8:e1:66:6a: 8b:f5:66:e7:98:cd:d2:cd:ff:a8:2d:29:fa:4f:16: 67:3c:57:ed:1d:22:6d:bf:88:f1:e0:de:43:2f:15: 98:3e:aa:ac:53:7b:d0:33:1a:84:11:e7:ae:1d:0f: 15:ac:66:d9:34:e3:61:f5:d0:5d:2d:9e:cd:6d:73: 39:69:0e:a5:a1:24:16:a0:52:ca:03:dc:06:98:09: 62:d6:58:52:e3:83:c6:7c:8e:c1:0b:13:49:13:e2: 3d:85:3a:ad:86:25:96:d4:21:6c:bd:77:57:fd:c0: d5:b9:14:95:6a:7e:33:b8:2d:32:ec:6a:44:e7:31: fc:03:43:a2:a9:c8:85:34:7f:e4:26:42:b6:09:05: 4d:40:41:1f:dd:7a:59:c9:3e:b2:78:9d:16:bb:fa: 55:6a:ec:2c:11:d1:6c:dc:39:f0:28:90:6d:30:3a: 6d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AD:92:F9:7E:8B:8E:8F:ED:80:94:90:25:5D:DA:E3:43:D5:4E:0B X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/Lq2S-X6Ljo_tgJSQJV3a40PVTgs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.193.0/24 79.172.208.0/24 79.172.228.0/24 87.229.8.0/22 87.229.34.0/24 87.229.79.0/24 87.229.124.0/23 Signature Algorithm: sha256WithRSAEncryption 86:68:86:29:bb:42:70:e4:dd:22:a9:8b:93:5a:e5:61:e1:af: 0a:77:f4:b2:fd:2a:37:4a:a9:7f:ca:83:0d:35:2c:2b:2a:40: 1e:ec:bb:6b:92:71:25:35:33:7c:89:f5:20:29:bd:5f:a8:27: 72:0c:bf:0a:74:0e:41:1b:d3:95:c5:b8:c3:c3:68:ea:03:3f: a0:38:7b:27:f5:b3:68:3c:b0:b8:69:13:5c:8b:de:bc:a8:c5: d6:43:c1:ae:62:1b:2b:6a:4b:30:8f:e2:8b:bc:d9:c2:5f:ec: 36:6c:88:ac:f7:ab:26:86:07:d5:86:b9:98:a3:f2:e2:bd:0e: 8b:9b:2f:9b:ed:df:28:6a:4e:c5:18:a4:ae:b0:b7:09:11:09: 6c:57:79:13:29:1a:8a:9c:3f:2e:45:66:22:e1:68:78:6a:da: 40:e2:41:78:13:f2:e2:43:1f:19:46:b4:d0:26:d4:6e:85:ea: 8a:bc:da:d4:05:4b:78:47:dc:f3:1f:86:09:45:94:ea:2a:42: be:0d:2a:42:0d:bd:42:49:22:59:96:65:c3:26:d9:68:d9:f1: d9:2a:00:ac:3c:65:d6:62:57:95:89:ba:4d:4c:7c:2d:15:a2: f1:4e:45:b8:44:64:55:da:2c:43:1b:d5:a7:a1:96:ab:83:fe: c8:bd:b7:3b -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZdT0pCvC/gkNPy3R/urjkJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUwNjA5MDgzMzE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWFkOTJmOTdlOGI4ZThmZWQ4MDk0OTAyNTVkZGFlMzQzZDU0ZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAKyv1cjfb4m9nQo3gN0MfRv2+Iw 7zPSfKITKjPNJ1qDJNdMBewZE3/hfTURoYUvhFmQhMW8V+HurEBb7OFIjhmbgdyh KKWYy2NI/DlpgyQL4K4GKcjhZmqL9WbnmM3Szf+oLSn6TxZnPFftHSJtv4jx4N5D LxWYPqqsU3vQMxqEEeeuHQ8VrGbZNONh9dBdLZ7NbXM5aQ6loSQWoFLKA9wGmAli 1lhS44PGfI7BCxNJE+I9hTqthiWW1CFsvXdX/cDVuRSVan4zuC0y7GpE5zH8A0Oi qciFNH/kJkK2CQVNQEEf3XpZyT6yeJ0Wu/pVauwsEdFs3DnwKJBtMDpt8QIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFC6tkvl+i46P7YCUkCVd2uND1U4LMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvTHEyUy1YNkxqb190Z0pTUUpWM2E0MFBWVGdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAT6zBAwQA T6zQAwQAT6zkAwQCV+UIAwQAV+UiAwQAV+VPAwQBV+V8MA0GCSqGSIb3DQEBCwUA A4IBAQCGaIYpu0Jw5N0iqYuTWuVh4a8Kd/Sy/So3Sql/yoMNNSwrKkAe7LtrknEl NTN8ifUgKb1fqCdyDL8KdA5BG9OVxbjDw2jqAz+gOHsn9bNoPLC4aRNci968qMXW Q8GuYhsrakswj+KLvNnCX+w2bIis96smhgfVhrmYo/LivQ6Lmy+b7d8oak7FGKSu sLcJEQlsV3kTKRqKnD8uRWYi4Wh4atpA4kF4E/LiQx8ZRrTQJtRuheqKvNrUBUt4 R9zzH4YJRZTqKkK+DSpCDb1CSSJZlmXDJtlo2fHZKgCsPGXWYleVibpNTHwtFaLx TkW4RGRV2ixDG9WnoZarg/7Ivbc7 -----END CERTIFICATE-----Generated at Sun Dec 21 00:02:51 2025 by rpki-client