This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/s4mFfRSSdGHtqascilKbXmu9QNE.roa File: s4mFfRSSdGHtqascilKbXmu9QNE.roa (raw, json) Hash identifier: qjvqgZ+uR6yKNVWkX5bD5EoiPd5zXXm9zLg1R519A+4= Subject key identifier: B3:89:85:7D:14:92:74:61:ED:A9:AB:1C:8A:52:9B:5E:6B:BD:40:D1 Certificate issuer: /CN=aa70110d30d52e8a6969588b3f621416bcdf644b Certificate serial: 0195FC11A56C5AEC93865CDFE9583F8D36BE Authority key identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/s4mFfRSSdGHtqascilKbXmu9QNE.roa Signing time: Thu 03 Apr 2025 14:32:49 +0000 ROA not before: Thu 03 Apr 2025 14:32:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57227 IP address blocks: 81.24.85.0/24 maxlen: 24 81.24.88.0/22 maxlen: 22 81.24.92.0/22 maxlen: 22 81.163.32.0/19 maxlen: 19 81.163.63.0/24 maxlen: 24 176.120.192.0/19 maxlen: 19 185.110.44.0/22 maxlen: 22 185.110.44.0/23 maxlen: 23 185.110.46.0/23 maxlen: 23 Validation: Failed, certificate revoked on Fri 04 Apr 2025 09:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:fc:11:a5:6c:5a:ec:93:86:5c:df:e9:58:3f:8d:36:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa70110d30d52e8a6969588b3f621416bcdf644b Validity Not Before: Apr 3 14:32:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b389857d14927461eda9ab1c8a529b5e6bbd40d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f2:aa:61:45:67:af:a3:50:14:da:21:27:67: 13:9e:d8:70:7c:57:71:21:75:25:3a:3b:b8:15:a8: 2e:af:7b:8a:41:41:80:d2:a7:4d:0c:ab:72:0f:ac: eb:10:78:ec:44:2c:3a:e6:ac:a1:88:5e:6c:40:29: 5e:a7:87:88:21:47:8d:f5:73:8e:ab:d5:9d:66:1a: f8:fc:60:7e:31:bc:3e:2b:a4:61:59:4e:6a:5b:39: 19:a1:aa:ff:f8:9a:2d:bb:12:07:b3:10:0f:2e:5c: 3a:ca:5d:ba:02:12:32:d3:c3:5e:0e:12:0e:05:fc: ff:1f:53:76:40:53:fc:eb:4f:42:fb:04:ab:e8:74: 2e:ad:bd:7a:34:4a:2e:55:ba:da:a5:ef:20:d3:28: 1b:07:34:8c:dc:5a:f0:e9:be:49:9b:2f:53:74:f7: 75:49:2a:b4:6b:25:8b:25:18:32:71:de:19:db:89: 14:1a:ac:aa:f2:60:df:31:90:45:30:da:1f:46:4f: cf:d8:17:f6:14:15:5b:4e:c0:aa:cd:27:f5:14:7e: 14:60:2a:0f:29:2e:cd:71:1d:ee:50:ec:6c:b7:ff: 21:4e:b1:8b:e8:c0:f1:5c:51:bb:2e:a7:53:2e:8f: e5:0e:4f:fd:d3:4d:30:84:f1:52:80:32:cf:51:4d: c3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:89:85:7D:14:92:74:61:ED:A9:AB:1C:8A:52:9B:5E:6B:BD:40:D1 X509v3 Authority Key Identifier: keyid:AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/s4mFfRSSdGHtqascilKbXmu9QNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.24.85.0/24 81.24.88.0/21 81.163.32.0/19 176.120.192.0/19 185.110.44.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:3e:17:27:17:3b:be:c0:e6:b3:4a:35:f4:e8:c0:0b:6f:5b: 21:25:f2:8f:96:b6:cf:82:4b:be:b2:b5:ad:13:8b:14:6c:67: 77:af:4f:27:d8:1d:51:34:65:ce:a2:30:a7:33:a1:07:bd:27: 91:9c:23:82:a0:e0:b2:77:e8:66:35:09:3a:71:55:c2:f1:37: 59:3e:42:f6:7a:78:ce:c3:b1:e7:e3:f1:ec:47:9e:f5:48:eb: ba:44:52:ef:92:36:66:cb:fa:7e:89:45:f8:db:95:11:cd:ed: e9:e7:ae:4d:81:9f:13:fb:bc:fd:1e:96:9f:c4:bc:fd:bc:aa: a8:c3:cc:9e:e6:2c:e9:86:3e:d7:98:25:90:e2:0d:f0:9a:d5: 3b:69:bc:50:c0:88:ca:a6:e6:13:52:d0:e6:52:55:27:b4:c8: 45:5f:39:fb:ff:06:50:c3:46:61:20:b2:e6:44:7c:62:91:cf: 46:8a:31:19:d9:9f:35:fb:4d:fc:66:10:15:59:c5:07:09:a4: 28:69:30:b5:f5:ac:82:10:bf:c3:ec:fa:d1:3b:91:e8:3c:8d: 99:a2:0a:2c:dd:24:83:a3:a6:38:31:b4:77:0e:86:2c:09:13: 15:26:65:13:50:1e:d0:10:f5:c7:53:00:3a:75:9d:fb:65:e1: 97:d9:68:26 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZX8EaVsWuyThlzf6Vg/jTa+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNzAxMTBkMzBkNTJlOGE2OTY5NTg4YjNmNjIxNDE2YmNk ZjY0NGIwHhcNMjUwNDAzMTQzMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzg5ODU3ZDE0OTI3NDYxZWRhOWFiMWM4YTUyOWI1ZTZiYmQ0MGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/KqYUVnr6NQFNohJ2cTnthwfFdx IXUlOju4Fagur3uKQUGA0qdNDKtyD6zrEHjsRCw65qyhiF5sQClep4eIIUeN9XOO q9WdZhr4/GB+Mbw+K6RhWU5qWzkZoar/+JotuxIHsxAPLlw6yl26AhIy08NeDhIO Bfz/H1N2QFP8609C+wSr6HQurb16NEouVbrape8g0ygbBzSM3Frw6b5Jmy9TdPd1 SSq0ayWLJRgycd4Z24kUGqyq8mDfMZBFMNofRk/P2Bf2FBVbTsCqzSf1FH4UYCoP KS7NcR3uUOxst/8hTrGL6MDxXFG7LqdTLo/lDk/9000whPFSgDLPUU3DywIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLOJhX0UknRh7amrHIpSm15rvUDRMB8GA1UdIwQY MBaAFKpwEQ0w1S6KaWlYiz9iFBa832RLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW5BUkRURFZMb3BwYVZpTFAySVVGcnpmWkVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9mYjdlNjctNTQyNS00YzRmLWI0NmEt ODI0M2FlZjZmZTVhLzEvczRtRmZSU1NkR0h0cWFzY2lsS2JYbXU5UU5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9mYjdlNjctNTQyNS00YzRmLWI0NmEtODI0M2FlZjZmZTVh LzEvcW5BUkRURFZMb3BwYVZpTFAySVVGcnpmWkVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAURhVAwQD URhYAwQFUaMgAwQFsHjAAwQCuW4sMA0GCSqGSIb3DQEBCwUAA4IBAQBsPhcnFzu+ wOazSjX06MALb1shJfKPlrbPgku+srWtE4sUbGd3r08n2B1RNGXOojCnM6EHvSeR nCOCoOCyd+hmNQk6cVXC8TdZPkL2enjOw7Hn4/HsR571SOu6RFLvkjZmy/p+iUX4 25URze3p565NgZ8T+7z9HpafxLz9vKqow8ye5izphj7XmCWQ4g3wmtU7abxQwIjK puYTUtDmUlUntMhFXzn7/wZQw0ZhILLmRHxikc9GijEZ2Z81+038ZhAVWcUHCaQo aTC19ayCEL/D7PrRO5HoPI2Zogos3SSDo6Y4MbR3DoYsCRMVJmUTUB7QEPXHUwA6 dZ37ZeGX2Wgm -----END CERTIFICATE-----Generated at Thu Dec 25 22:25:01 2025 by rpki-client