This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/O_8QECPZES88lm29rnNhzVLt8rQ.roa File: O_8QECPZES88lm29rnNhzVLt8rQ.roa (raw, json) Hash identifier: fAuKp9flcMnEMBeZFL9YYVjNGKFUA/UxsGe/l+81At4= Subject key identifier: 3B:FF:10:10:23:D9:11:2F:3C:96:6D:BD:AE:73:61:CD:52:ED:F2:B4 Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 0196B4B96282482BA0E33AA1F524799B16CD Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/O_8QECPZES88lm29rnNhzVLt8rQ.roa Signing time: Fri 09 May 2025 11:06:10 +0000 ROA not before: Fri 09 May 2025 11:06:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202678 IP address blocks: 46.31.76.0/24 maxlen: 24 46.31.78.0/24 maxlen: 24 46.31.79.0/24 maxlen: 24 85.117.238.0/24 maxlen: 24 185.17.114.0/24 maxlen: 24 185.17.115.0/24 maxlen: 24 Validation: Failed, certificate revoked on Sat 10 May 2025 21:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b4:b9:62:82:48:2b:a0:e3:3a:a1:f5:24:79:9b:16:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: May 9 11:06:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3bff101023d9112f3c966dbdae7361cd52edf2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4f:60:a9:69:3d:b2:8d:b8:93:a4:4a:b8:5c: e5:a4:96:02:be:06:21:ca:8d:e2:2a:1d:be:4c:7e: 31:68:2a:d8:dd:28:ba:67:e0:60:23:6c:c8:f7:e1: 92:d1:9a:e9:dc:46:2a:d6:73:4b:6b:d1:d0:c9:c9: 7e:db:a5:0b:95:92:e0:ec:d8:22:43:9c:b3:72:8f: 00:e3:f9:b4:74:08:73:43:93:06:85:b6:af:52:a1: 93:99:5f:f9:1b:2c:76:3c:90:49:c8:9a:9f:2f:ab: b5:33:e5:90:3a:c7:dd:42:55:c5:14:53:c6:0e:b7: e5:ae:ed:13:51:d9:94:b8:bb:cc:e7:54:87:98:dc: 30:f0:04:ea:e0:29:e9:f0:f8:b9:4a:0f:0f:b0:27: 59:e4:de:6b:c3:b2:b1:b4:47:d5:49:a6:76:4c:3e: 92:ff:7f:81:35:8a:5b:09:6b:a9:36:56:0a:bc:25: eb:ac:03:eb:4f:43:61:64:28:0d:c8:e7:e9:15:5a: df:95:fe:77:6e:4c:ad:90:9c:46:13:e6:13:c4:26: 6a:63:3b:95:18:9c:6f:52:29:65:b2:60:e2:a5:f8: 14:1b:5f:24:45:62:33:25:51:ae:61:2f:f3:ed:4a: 6f:05:79:1d:46:ea:72:21:9f:06:16:8a:bd:db:2e: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FF:10:10:23:D9:11:2F:3C:96:6D:BD:AE:73:61:CD:52:ED:F2:B4 X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/O_8QECPZES88lm29rnNhzVLt8rQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.76.0/24 46.31.78.0/23 85.117.238.0/24 185.17.114.0/23 Signature Algorithm: sha256WithRSAEncryption b9:81:6d:2e:d8:dc:d3:74:7a:c4:87:1b:25:07:88:90:34:c9: 52:2c:53:5a:00:d0:51:c0:51:3d:8a:3b:34:d1:33:44:a3:bd: ec:24:10:8d:c5:d4:af:83:5c:af:24:06:c1:2e:36:de:5e:6b: 96:93:61:6b:14:3a:cc:7c:fb:6c:84:68:4e:e7:08:2e:5c:3e: 88:e4:9e:93:f2:13:65:43:3b:0e:63:1e:d0:7f:82:28:76:e6: 18:33:a1:6b:c0:8f:63:cb:7d:18:cb:d3:06:8e:61:87:fa:48: 98:48:d7:ec:58:c6:d2:60:1d:ba:67:d9:48:2f:6f:b2:0d:0a: b1:bc:8a:7c:db:de:c6:dc:a9:f7:31:a2:8f:6e:19:7b:d2:ee: 24:60:97:0c:5d:e1:4a:05:59:f9:d7:b5:41:14:fb:51:c0:71: 99:c4:40:55:0c:c8:40:5d:6c:8e:7d:7f:3e:39:e9:c6:78:0c: 30:6e:95:92:3b:53:60:e2:9a:a9:6e:95:15:92:4e:ae:3d:4b: 08:3a:b2:a1:91:ff:21:48:2f:72:b3:a2:ce:a0:1a:fd:93:60: 13:37:89:3b:ba:35:2c:c0:61:db:95:e1:30:c3:91:f9:8e:57: b6:f2:b1:f4:2b:2c:ac:c2:90:86:88:bc:7d:a6:0c:56:19:fe: be:40:e5:b8 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZa0uWKCSCug4zqh9SR5mxbNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjUwNTA5MTEwNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmZmMTAxMDIzZDkxMTJmM2M5NjZkYmRhZTczNjFjZDUyZWRmMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz09gqWk9so24k6RKuFzlpJYCvgYh yo3iKh2+TH4xaCrY3Si6Z+BgI2zI9+GS0Zrp3EYq1nNLa9HQycl+26ULlZLg7Ngi Q5yzco8A4/m0dAhzQ5MGhbavUqGTmV/5Gyx2PJBJyJqfL6u1M+WQOsfdQlXFFFPG Drflru0TUdmUuLvM51SHmNww8ATq4Cnp8Pi5Sg8PsCdZ5N5rw7KxtEfVSaZ2TD6S /3+BNYpbCWupNlYKvCXrrAPrT0NhZCgNyOfpFVrflf53bkytkJxGE+YTxCZqYzuV GJxvUillsmDipfgUG18kRWIzJVGuYS/z7UpvBXkdRupyIZ8GFoq92y4miwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDv/EBAj2REvPJZtva5zYc1S7fK0MB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvT184UUVDUFpFUzg4bG0yOXJuTmh6Vkx0OHJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALh9MAwQB Lh9OAwQAVXXuAwQBuRFyMA0GCSqGSIb3DQEBCwUAA4IBAQC5gW0u2NzTdHrEhxsl B4iQNMlSLFNaANBRwFE9ijs00TNEo73sJBCNxdSvg1yvJAbBLjbeXmuWk2FrFDrM fPtshGhO5wguXD6I5J6T8hNlQzsOYx7Qf4IoduYYM6FrwI9jy30Yy9MGjmGH+kiY SNfsWMbSYB26Z9lIL2+yDQqxvIp8297G3Kn3MaKPbhl70u4kYJcMXeFKBVn517VB FPtRwHGZxEBVDMhAXWyOfX8+OenGeAwwbpWSO1Ng4pqpbpUVkk6uPUsIOrKhkf8h SC9ys6LOoBr9k2ATN4k7ujUswGHbleEww5H5jle28rH0KyyswpCGiLx9pgxWGf6+ QOW4 -----END CERTIFICATE-----Generated at Mon Dec 29 08:28:22 2025 by rpki-client