This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C2G4lAbv4kXW7-b292EZc5BvdOg.roa File: C2G4lAbv4kXW7-b292EZc5BvdOg.roa (raw, json) Hash identifier: 9aiLar7qMNKUNHM3UTYO9/So0MLcwa5HWnngtIeFcEs= Subject key identifier: 0B:61:B8:94:06:EF:E2:45:D6:EF:E6:F6:F7:61:19:73:90:6F:74:E8 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019762E84328B1D2E0C3196332E8CEA4711E Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C2G4lAbv4kXW7-b292EZc5BvdOg.roa Signing time: Thu 12 Jun 2025 06:51:18 +0000 ROA not before: Thu 12 Jun 2025 06:51:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 89.213.127.0/24 maxlen: 24 89.213.167.0/24 maxlen: 24 89.213.212.0/24 maxlen: 24 89.213.224.0/24 maxlen: 24 213.210.11.0/24 maxlen: 24 213.218.215.0/24 maxlen: 24 Validation: Failed, certificate revoked on Fri 13 Jun 2025 16:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:62:e8:43:28:b1:d2:e0:c3:19:63:32:e8:ce:a4:71:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jun 12 06:51:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0b61b89406efe245d6efe6f6f7611973906f74e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:78:de:6f:4b:d8:c5:7b:fd:6f:79:3e:64: e6:f2:be:3e:e3:22:51:4a:fb:0b:98:fe:cb:6a:42: d1:18:4d:3f:b3:3d:f5:ba:c6:e4:aa:20:52:96:50: 62:36:2b:53:e1:21:22:42:34:7d:47:f8:59:98:8b: a2:9b:c0:3c:93:90:12:24:33:bc:84:2d:61:9a:dc: c0:2d:07:93:49:95:c1:3d:fb:bf:fb:37:07:49:5a: e6:7e:94:01:0a:50:61:0a:66:73:5f:e5:85:4d:8a: 4e:de:37:c7:1e:e6:dd:1f:92:10:c1:c2:5f:38:5c: 49:a1:fe:0e:d8:22:45:51:33:44:b8:80:e5:57:d0: 98:eb:d6:d4:8b:2c:88:4a:17:b6:06:99:ab:8e:f5: 2a:b5:99:d5:4d:27:c9:19:8d:89:e7:80:6e:8a:51: b7:35:4e:4b:33:14:17:93:6b:15:ba:2b:27:f4:d4: ef:1e:20:76:ea:f4:a6:fa:bc:4e:6e:16:f4:cb:f9: 0b:1d:61:bf:25:c0:3d:df:4b:1a:ab:99:03:7f:a1: 7d:7d:15:2f:00:f8:f8:52:26:53:81:75:c3:b1:88: bb:fe:94:c6:bf:23:95:c2:3c:65:80:85:c1:4a:1c: 4b:97:0c:8e:ee:06:ae:d5:24:e3:ca:e8:69:0a:c5: 6f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:61:B8:94:06:EF:E2:45:D6:EF:E6:F6:F7:61:19:73:90:6F:74:E8 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/C2G4lAbv4kXW7-b292EZc5BvdOg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.213.127.0/24 89.213.167.0/24 89.213.212.0/24 89.213.224.0/24 213.210.11.0/24 213.218.215.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:88:37:87:62:a6:e6:08:ed:c6:a2:d5:82:15:fe:da:1a:be: 36:19:dd:3c:bb:90:6e:63:58:9d:21:34:ab:19:7f:ee:aa:de: 56:b2:ab:f2:78:e2:39:72:bb:b7:87:9e:80:54:f7:7d:14:4f: ec:06:fc:68:46:ba:2f:13:a6:ec:95:28:ec:02:f2:dc:6b:10: 3c:3e:3a:45:27:28:44:61:31:49:ac:1a:83:d9:4e:3f:2f:be: e9:f2:78:14:08:57:36:11:9b:5d:73:f3:bc:da:1b:4c:5b:b5: a3:e7:f6:3c:d1:db:95:ae:5d:5f:53:d6:47:3d:01:e9:26:b0: 08:fd:72:d3:2b:49:4a:e8:eb:e9:9a:1f:6a:8c:05:cf:47:bf: 9c:e7:f7:62:86:2f:fa:e7:52:7b:1e:22:dc:17:7e:96:c1:4d: 92:b5:2c:bf:aa:6c:69:04:b2:36:c1:ef:b2:23:91:08:8e:c9: e0:a6:27:83:4f:af:91:06:c9:a2:a4:ad:4a:f9:e0:69:e7:bc: 86:61:3d:05:ce:94:1f:2c:fb:f3:06:5b:de:50:52:81:ed:f9: 9a:94:01:2f:21:a0:13:48:f1:00:96:75:28:94:92:71:ca:8f: e7:27:95:d4:39:34:5f:70:b6:a1:55:97:f1:5e:ee:a2:0b:dd: 60:c0:d3:6f -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZdi6EMosdLgwxljMujOpHEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUwNjEyMDY1MTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjYxYjg5NDA2ZWZlMjQ1ZDZlZmU2ZjZmNzYxMTk3MzkwNmY3NGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09543m9L2MV7/W95PmTm8r4+4yJR SvsLmP7LakLRGE0/sz31usbkqiBSllBiNitT4SEiQjR9R/hZmIuim8A8k5ASJDO8 hC1hmtzALQeTSZXBPfu/+zcHSVrmfpQBClBhCmZzX+WFTYpO3jfHHubdH5IQwcJf OFxJof4O2CJFUTNEuIDlV9CY69bUiyyIShe2BpmrjvUqtZnVTSfJGY2J54BuilG3 NU5LMxQXk2sVuisn9NTvHiB26vSm+rxObhb0y/kLHWG/JcA930saq5kDf6F9fRUv APj4UiZTgXXDsYi7/pTGvyOVwjxlgIXBShxLlwyO7gau1STjyuhpCsVvFQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFAthuJQG7+JF1u/m9vdhGXOQb3ToMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvQzJHNGxBYnY0a1hXNy1iMjkyRVpjNUJ2ZE9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAWdV/AwQA WdWnAwQAWdXUAwQAWdXgAwQA1dILAwQA1drXMA0GCSqGSIb3DQEBCwUAA4IBAQB7 iDeHYqbmCO3GotWCFf7aGr42Gd08u5BuY1idITSrGX/uqt5WsqvyeOI5cru3h56A VPd9FE/sBvxoRrovE6bslSjsAvLcaxA8PjpFJyhEYTFJrBqD2U4/L77p8ngUCFc2 EZtdc/O82htMW7Wj5/Y80duVrl1fU9ZHPQHpJrAI/XLTK0lK6Ovpmh9qjAXPR7+c 5/dihi/651J7HiLcF36WwU2StSy/qmxpBLI2we+yI5EIjsngpieDT6+RBsmipK1K +eBp57yGYT0FzpQfLPvzBlveUFKB7fmalAEvIaATSPEAlnUolJJxyo/nJ5XUOTRf cLahVZfxXu6iC91gwNNv -----END CERTIFICATE-----Generated at Mon Dec 22 00:48:01 2025 by rpki-client