This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/D0Qbxwm-S5PZYvFeFAELIDgV7dg.roa File: D0Qbxwm-S5PZYvFeFAELIDgV7dg.roa (raw, json) Hash identifier: 7vi1QNH8GZgYBTEF2yxHMBVJn13OCe9nG9Mwgary88E= Subject key identifier: 0F:44:1B:C7:09:BE:4B:93:D9:62:F1:5E:14:01:0B:20:38:15:ED:D8 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019423109ED571B8427DBCA82FCDC6751C14 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/D0Qbxwm-S5PZYvFeFAELIDgV7dg.roa Signing time: Wed 01 Jan 2025 18:11:19 +0000 ROA not before: Wed 01 Jan 2025 18:11:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214417 IP address blocks: 2a12:bec4:1280::/44 maxlen: 44 2a12:bec4:1480::/44 maxlen: 48 Validation: Failed, certificate revoked on Wed 01 Jan 2025 18:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:23:10:9e:d5:71:b8:42:7d:bc:a8:2f:cd:c6:75:1c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 18:11:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0f441bc709be4b93d962f15e14010b203815edd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b4:de:be:75:98:aa:bb:0e:e4:be:99:03:ba: f3:2f:9a:87:5c:9a:38:85:77:f9:b7:d4:05:23:14: 8e:90:53:0e:8d:a3:81:29:6f:70:e0:51:8b:db:4c: dc:11:fa:d0:cc:b0:3d:ce:f1:89:0b:76:01:39:45: 73:5f:c9:56:1b:f8:d4:ba:27:df:2e:3a:f9:92:4a: 2d:26:05:e3:03:d4:b5:cb:c4:6e:c3:2d:cd:fe:0e: 7c:f9:05:00:47:6f:1f:24:3b:3f:86:47:b4:3d:ed: 1e:7f:00:2e:b3:c6:74:17:b2:30:2e:42:84:6c:ec: 62:f9:9d:7c:d5:d7:fe:55:8d:92:a4:60:f1:f7:10: 8d:db:8f:07:f2:01:24:5e:30:4f:b7:af:25:22:0d: f5:4e:ef:02:1e:3e:77:bc:d5:89:2c:84:90:fc:35: 89:4e:d3:5d:b9:d4:33:65:e4:43:74:c1:d7:c4:e2: 4f:c1:e4:bb:a0:1d:8a:b0:80:00:49:1f:e7:a1:4e: bf:fc:98:3f:41:f2:39:7e:db:13:38:cb:d0:fa:39: c9:e3:3d:af:dd:6b:3e:03:cf:09:55:14:aa:2b:35: bc:ec:81:5c:f4:17:45:d9:8f:47:dd:87:06:27:89: 8d:6a:bf:1c:16:c3:28:4b:4f:25:9f:9a:2f:c0:1a: f7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:44:1B:C7:09:BE:4B:93:D9:62:F1:5E:14:01:0B:20:38:15:ED:D8 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/D0Qbxwm-S5PZYvFeFAELIDgV7dg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1280::/44 2a12:bec4:1480::/44 Signature Algorithm: sha256WithRSAEncryption 7c:f6:ba:75:bf:4e:d5:c9:21:73:9b:49:e8:ec:54:3a:bb:7e: 91:50:f1:06:06:af:92:42:58:3b:d4:78:22:e6:b0:0f:64:a1: ca:4e:ea:b2:a5:98:98:82:fa:ae:7d:84:ec:f4:89:81:ff:80: 36:78:2c:42:8d:98:7f:b1:3d:1d:a5:27:9b:76:35:91:f6:f0: 38:1d:da:96:5d:00:9d:a9:15:f9:c0:46:15:b8:0f:52:fe:12: 1d:e4:0c:e5:63:43:27:7b:9a:4a:7f:47:e7:0f:ef:2d:86:18: 3f:d9:26:83:7c:6c:5f:ef:d1:e6:db:c1:8d:30:fc:94:86:7f: 09:4d:f9:59:ac:2a:45:31:6c:d1:7f:11:e9:dc:ae:ab:a0:a6: ba:b7:a3:0f:fd:23:53:7f:79:bf:ca:a0:46:b1:2b:4c:99:56: 2e:4d:bc:ce:72:13:9d:e9:01:7c:95:7a:e7:fa:51:58:8e:fa: 2e:42:41:b6:8d:01:4f:48:b8:35:1f:7d:e1:b2:c0:e9:16:63: 1e:9c:95:68:99:e2:f0:84:3c:c5:df:d2:65:24:04:51:ee:b4: c6:a4:39:ce:58:58:84:63:8e:5f:19:12:30:0b:99:45:a6:7c: 75:d3:3f:3a:61:48:fb:27:95:2e:4d:19:00:c5:0b:dc:c3:8e: 70:32:f6:81 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZQjEJ7VcbhCfbyoL83GdRwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjUwMTAxMTgxMTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjQ0MWJjNzA5YmU0YjkzZDk2MmYxNWUxNDAxMGIyMDM4MTVlZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97TevnWYqrsO5L6ZA7rzL5qHXJo4 hXf5t9QFIxSOkFMOjaOBKW9w4FGL20zcEfrQzLA9zvGJC3YBOUVzX8lWG/jUuiff Ljr5kkotJgXjA9S1y8Ruwy3N/g58+QUAR28fJDs/hke0Pe0efwAus8Z0F7IwLkKE bOxi+Z181df+VY2SpGDx9xCN248H8gEkXjBPt68lIg31Tu8CHj53vNWJLISQ/DWJ TtNdudQzZeRDdMHXxOJPweS7oB2KsIAASR/noU6//Jg/QfI5ftsTOMvQ+jnJ4z2v 3Ws+A88JVRSqKzW87IFc9BdF2Y9H3YcGJ4mNar8cFsMoS08ln5ovwBr33wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFA9EG8cJvkuT2WLxXhQBCyA4Fe3YMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvRDBRYnh3bS1TNVBaWXZGZUZBRUxJRGdWN2RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+xBKA AwcEKhK+xBSAMA0GCSqGSIb3DQEBCwUAA4IBAQB89rp1v07VySFzm0no7FQ6u36R UPEGBq+SQlg71Hgi5rAPZKHKTuqypZiYgvqufYTs9ImB/4A2eCxCjZh/sT0dpSeb djWR9vA4HdqWXQCdqRX5wEYVuA9S/hId5AzlY0Mne5pKf0fnD+8thhg/2SaDfGxf 79Hm28GNMPyUhn8JTflZrCpFMWzRfxHp3K6roKa6t6MP/SNTf3m/yqBGsStMmVYu TbzOchOd6QF8lXrn+lFYjvouQkG2jQFPSLg1H33hssDpFmMenJVomeLwhDzF39Jl JARR7rTGpDnOWFiEY45fGRIwC5lFpnx10z86YUj7J5UuTRkAxQvcw45wMvaB -----END CERTIFICATE-----Generated at Mon Dec 29 06:50:27 2025 by rpki-client