This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lLEORXMmTTVQ2lTlPBFmkZBZFWc.roa File: lLEORXMmTTVQ2lTlPBFmkZBZFWc.roa (raw, json) Hash identifier: 9KTnMDPA96R/U9F5CtPea8cH8jHvwEwQEN3ygrI/kHI= Subject key identifier: 94:B1:0E:45:73:26:4D:35:50:DA:54:E5:3C:11:66:91:90:59:15:67 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019600AEAEC6EF4B5D1A23BBCB399F02E4B4 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lLEORXMmTTVQ2lTlPBFmkZBZFWc.roa Signing time: Fri 04 Apr 2025 12:02:50 +0000 ROA not before: Fri 04 Apr 2025 12:02:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137409 IP address blocks: 151.240.43.0/24 maxlen: 24 151.240.44.0/24 maxlen: 24 151.240.46.0/24 maxlen: 24 151.240.47.0/24 maxlen: 24 151.240.48.0/24 maxlen: 24 151.240.49.0/24 maxlen: 24 151.240.50.0/24 maxlen: 24 151.240.51.0/24 maxlen: 24 151.240.52.0/24 maxlen: 24 151.240.53.0/24 maxlen: 24 151.240.54.0/24 maxlen: 24 151.240.56.0/24 maxlen: 24 151.240.57.0/24 maxlen: 24 151.240.58.0/24 maxlen: 24 151.240.59.0/24 maxlen: 24 151.240.62.0/24 maxlen: 24 151.240.63.0/24 maxlen: 24 151.240.64.0/24 maxlen: 24 151.240.65.0/24 maxlen: 24 151.240.66.0/24 maxlen: 24 151.240.67.0/24 maxlen: 24 151.240.91.0/24 maxlen: 24 151.240.92.0/24 maxlen: 24 151.240.93.0/24 maxlen: 24 151.240.94.0/24 maxlen: 24 151.240.95.0/24 maxlen: 24 151.240.101.0/24 maxlen: 24 151.240.102.0/24 maxlen: 24 151.240.103.0/24 maxlen: 24 151.240.104.0/24 maxlen: 24 151.240.105.0/24 maxlen: 24 151.240.106.0/24 maxlen: 24 151.240.107.0/24 maxlen: 24 151.240.108.0/24 maxlen: 24 151.240.109.0/24 maxlen: 24 151.240.111.0/24 maxlen: 24 Validation: Failed, certificate revoked on Sat 05 Apr 2025 11:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:00:ae:ae:c6:ef:4b:5d:1a:23:bb:cb:39:9f:02:e4:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Apr 4 12:02:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=94b10e4573264d3550da54e53c11669190591567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:c5:cf:dd:cc:f0:d9:b3:ce:9c:5f:36:e5:f8: d8:9a:cb:0f:0c:c9:03:1e:c5:ba:81:1d:5a:19:1c: 00:d6:1a:6e:d6:b7:9d:b2:e6:aa:ea:04:07:0a:24: 69:f4:3a:71:20:87:84:fc:1b:02:11:25:19:9a:a1: 0b:1c:4f:cc:ef:ef:2b:03:7a:2d:5b:fe:30:92:17: 38:ed:13:8e:1e:1b:d6:53:7d:2f:bc:c8:74:a2:f2: 44:ce:2a:bc:f6:6e:03:98:90:1e:d1:6e:b6:2a:4e: 6f:00:56:c7:8d:10:43:d4:3a:46:95:10:dc:41:1b: 72:c9:8a:d9:9c:80:45:ac:3e:18:d9:00:fb:93:ae: 27:62:d3:5d:9b:58:8c:b8:53:4f:dd:02:0d:79:67: 0a:0e:45:4b:64:3e:3f:bf:0c:86:54:8a:c8:b9:34: a9:c6:ed:60:dc:a7:c5:20:2f:2e:c2:03:b5:b0:af: 92:89:f9:48:82:7b:7b:96:a2:07:5e:fe:a7:09:57: ff:8f:9d:de:43:60:33:b9:a1:99:20:b1:31:fc:8c: 50:2f:de:f6:9a:06:8c:06:f1:0f:70:11:07:61:17: 10:ab:e9:38:69:c2:7e:d6:9e:55:62:d6:ec:4d:d5: cf:ba:91:b1:08:c2:28:9d:09:d8:e2:a5:85:ba:79: 10:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B1:0E:45:73:26:4D:35:50:DA:54:E5:3C:11:66:91:90:59:15:67 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lLEORXMmTTVQ2lTlPBFmkZBZFWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.43.0-151.240.44.255 151.240.46.0-151.240.54.255 151.240.56.0/22 151.240.62.0-151.240.67.255 151.240.91.0-151.240.95.255 151.240.101.0-151.240.109.255 151.240.111.0/24 Signature Algorithm: sha256WithRSAEncryption 91:3f:3f:32:c0:f8:ce:bf:c4:4c:75:1d:6d:82:9f:da:9b:08: 45:91:6b:92:60:3f:66:b5:e9:84:13:c2:dc:f8:c8:84:86:3b: 91:68:b6:30:0a:33:1f:4b:7b:85:eb:65:af:32:a5:c7:a0:1d: e4:a8:55:f9:c0:79:34:ec:13:6c:32:df:b5:b5:2c:27:e1:63: af:f4:f5:ee:6e:a0:15:8a:71:f1:2a:85:83:12:7b:a4:f3:14: 11:18:f9:c3:60:6b:64:47:49:bf:13:d5:54:22:8f:f8:b8:28: 4b:5d:f7:a5:85:67:42:b7:d3:0a:85:b3:d6:68:77:f1:9d:7b: a1:8d:ba:db:c8:89:fe:bf:d9:70:5c:52:3c:50:0b:c8:c2:d0: 68:cd:d2:06:7a:b5:05:b6:04:eb:04:0a:ad:c8:ed:a1:25:00: b1:3d:6d:ed:a0:02:a7:da:e1:16:8b:a2:28:70:db:a1:9d:b7: f9:d2:9c:92:54:d7:3a:b5:2c:64:dd:67:59:94:de:3a:45:cd: 91:53:5f:2f:c2:0b:bb:70:ce:82:02:b2:5f:ef:52:89:14:96: 71:a8:d0:f9:ce:d5:70:74:40:a2:07:8f:36:bf:1d:e5:3f:10: c2:29:f9:21:2f:28:17:72:22:90:f1:89:be:e6:85:e4:ef:b7: af:0a:b0:5a -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZYArq7G70tdGiO7yzmfAuS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUwNDA0MTIwMjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGIxMGU0NTczMjY0ZDM1NTBkYTU0ZTUzYzExNjY5MTkwNTkxNTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/8XP3czw2bPOnF825fjYmssPDMkD HsW6gR1aGRwA1hpu1redsuaq6gQHCiRp9DpxIIeE/BsCESUZmqELHE/M7+8rA3ot W/4wkhc47ROOHhvWU30vvMh0ovJEziq89m4DmJAe0W62Kk5vAFbHjRBD1DpGlRDc QRtyyYrZnIBFrD4Y2QD7k64nYtNdm1iMuFNP3QINeWcKDkVLZD4/vwyGVIrIuTSp xu1g3KfFIC8uwgO1sK+SiflIgnt7lqIHXv6nCVf/j53eQ2AzuaGZILEx/IxQL972 mgaMBvEPcBEHYRcQq+k4acJ+1p5VYtbsTdXPupGxCMIonQnY4qWFunkQ2QIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFJSxDkVzJk01UNpU5TwRZpGQWRVnMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbExFT1JYTW1UVFZRMmxUbFBCRm1rWkJaRldjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSMAwDBACX8CsD BACX8CwwDAMEAZfwLgMEAJfwNgMEApfwODAMAwQBl/A+AwQCl/BAMAwDBACX8FsD BAWX8EAwDAMEAJfwZQMEAZfwbAMEAJfwbzANBgkqhkiG9w0BAQsFAAOCAQEAkT8/ MsD4zr/ETHUdbYKf2psIRZFrkmA/ZrXphBPC3PjIhIY7kWi2MAozH0t7hetlrzKl x6Ad5KhV+cB5NOwTbDLftbUsJ+Fjr/T17m6gFYpx8SqFgxJ7pPMUERj5w2BrZEdJ vxPVVCKP+LgoS133pYVnQrfTCoWz1mh38Z17oY2628iJ/r/ZcFxSPFALyMLQaM3S Bnq1BbYE6wQKrcjtoSUAsT1t7aACp9rhFouiKHDboZ23+dKcklTXOrUsZN1nWZTe OkXNkVNfL8ILu3DOggKyX+9SiRSWcajQ+c7VcHRAogePNr8d5T8Qwin5IS8oF3Ii kPGJvuaF5O+3rwqwWg== -----END CERTIFICATE-----Generated at Wed Dec 31 03:41:47 2025 by rpki-client