This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/9kJl887Bjnk6qLmw3JWErIhWY2g.roa File: 9kJl887Bjnk6qLmw3JWErIhWY2g.roa (raw, json) Hash identifier: E+9njwwt2rh34nb7ckXWG5RRpEDyCNKbXp8HEhefSmI= Subject key identifier: F6:42:65:F3:CE:C1:8E:79:3A:A8:B9:B0:DC:95:84:AC:88:56:63:68 Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414 Certificate serial: 01975DD1763600D01B526DA35145081408CA Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/9kJl887Bjnk6qLmw3JWErIhWY2g.roa Signing time: Wed 11 Jun 2025 07:08:17 +0000 ROA not before: Wed 11 Jun 2025 07:08:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209726 IP address blocks: 87.121.168.0/24 maxlen: 24 87.121.169.0/24 maxlen: 24 Validation: Failed, certificate revoked on Wed 11 Jun 2025 08:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:5d:d1:76:36:00:d0:1b:52:6d:a3:51:45:08:14:08:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414 Validity Not Before: Jun 11 07:08:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f64265f3cec18e793aa8b9b0dc9584ac88566368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:df:d6:35:24:1e:a7:41:f6:9f:a1:d1:8d:c3: bc:65:0f:98:f9:7f:e7:40:70:08:4f:59:61:94:f1: 18:ec:dc:96:b7:b1:02:b0:8b:4c:42:ab:a5:1d:00: 40:2d:4c:af:d5:23:39:8a:88:b9:12:10:d0:c0:b3: e7:07:69:50:ff:dc:50:19:fe:d7:62:a3:4e:d9:ea: e5:0a:07:98:21:5f:34:4a:39:3e:d5:b8:5c:c5:a0: e6:06:12:22:cd:27:7c:98:fa:78:fb:7e:14:ff:c9: e0:f9:de:78:34:36:92:75:bf:34:f5:b0:15:b3:fa: 3d:a6:9c:73:ad:02:fc:c0:36:f3:0c:8f:32:fa:bc: 65:fa:01:84:eb:cc:b2:8b:31:63:1f:6b:3a:1c:e0: a9:f4:67:74:1a:26:f8:99:1b:c3:ae:06:0c:f5:5d: 71:58:25:08:84:73:64:08:42:ea:35:cb:11:cc:91: 45:24:1f:76:b9:fa:e2:31:aa:93:6a:f0:fa:b1:03: b1:02:b5:0f:a7:fd:3d:b6:06:a8:6d:35:0b:3e:cc: c5:eb:32:61:9e:66:22:93:65:53:80:38:7c:08:a0: a2:7b:c0:8b:e6:14:2d:b3:d2:33:e5:15:bc:a5:ca: 84:27:f1:af:90:5c:fc:f3:29:e2:b1:5a:46:e2:e6: c4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:42:65:F3:CE:C1:8E:79:3A:A8:B9:B0:DC:95:84:AC:88:56:63:68 X509v3 Authority Key Identifier: keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/9kJl887Bjnk6qLmw3JWErIhWY2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.168.0/23 Signature Algorithm: sha256WithRSAEncryption 21:1f:cb:65:8b:86:6d:5a:3e:4c:30:c2:81:7f:1e:cb:a6:69: ea:7a:de:8a:f7:11:5b:5e:b3:ae:96:25:57:53:6e:47:ad:ff: 33:78:5e:52:39:fd:8a:12:a2:63:c9:9d:1b:f6:5f:25:00:01: a7:73:76:1d:d2:0e:ce:75:6c:6e:88:d0:6a:f2:06:07:0b:85: 89:f6:6d:a2:bb:0a:c1:5b:f8:5f:25:19:cb:98:c7:b6:56:0a: 4e:74:8a:86:0e:2f:81:f6:64:ca:1c:24:33:70:a2:7a:cc:6d: 1c:97:4a:7d:25:60:64:fd:a8:9b:c8:11:fc:6a:84:f6:2c:9f: 70:2f:c1:3a:35:b2:85:a8:d3:e0:90:fe:7d:20:e0:bf:93:6f: 97:0a:7a:05:04:0a:5b:34:67:fe:db:d1:0b:d1:3e:55:03:c8: 30:19:11:bc:02:31:5e:bf:a4:b3:6b:c5:45:c9:66:c4:88:30: e7:82:75:9d:6f:4f:56:c6:b8:c5:d6:15:c2:3c:ef:7b:37:56: ff:23:72:e4:3e:5f:bd:f3:43:6c:8b:3e:7c:26:15:10:99:11: 4c:b9:6b:89:70:8f:26:90:c8:22:28:59:04:70:84:e9:6a:0b: d7:4a:0b:98:9c:ab:93:59:52:d7:6b:54:c0:d9:66:4b:bc:ce: d5:a4:b8:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZdd0XY2ANAbUm2jUUUIFAjKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz NTI0MTQwHhcNMjUwNjExMDcwODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjQyNjVmM2NlYzE4ZTc5M2FhOGI5YjBkYzk1ODRhYzg4NTY2MzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19/WNSQep0H2n6HRjcO8ZQ+Y+X/n QHAIT1lhlPEY7NyWt7ECsItMQqulHQBALUyv1SM5ioi5EhDQwLPnB2lQ/9xQGf7X YqNO2erlCgeYIV80Sjk+1bhcxaDmBhIizSd8mPp4+34U/8ng+d54NDaSdb809bAV s/o9ppxzrQL8wDbzDI8y+rxl+gGE68yyizFjH2s6HOCp9Gd0Gib4mRvDrgYM9V1x WCUIhHNkCELqNcsRzJFFJB92ufriMaqTavD6sQOxArUPp/09tgaobTULPszF6zJh nmYik2VTgDh8CKCie8CL5hQts9Iz5RW8pcqEJ/GvkFz88ynisVpG4ubEMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPZCZfPOwY55Oqi5sNyVhKyIVmNoMB8GA1UdIwQY MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt NjE5YzI2MTk0MTY4LzEvOWtKbDg4N0Jqbms2cUxtdzNKV0VySWhXWTJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4 LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV3moMA0G CSqGSIb3DQEBCwUAA4IBAQAhH8tli4ZtWj5MMMKBfx7Lpmnqet6K9xFbXrOuliVX U25Hrf8zeF5SOf2KEqJjyZ0b9l8lAAGnc3Yd0g7OdWxuiNBq8gYHC4WJ9m2iuwrB W/hfJRnLmMe2VgpOdIqGDi+B9mTKHCQzcKJ6zG0cl0p9JWBk/aibyBH8aoT2LJ9w L8E6NbKFqNPgkP59IOC/k2+XCnoFBApbNGf+29EL0T5VA8gwGRG8AjFev6Sza8VF yWbEiDDngnWdb09WxrjF1hXCPO97N1b/I3LkPl+980Nsiz58JhUQmRFMuWuJcI8m kMgiKFkEcITpagvXSguYnKuTWVLXa1TA2WZLvM7VpLjq -----END CERTIFICATE-----Generated at Thu Dec 25 03:41:13 2025 by rpki-client