This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/J2wtE9sd5-52GuDQePPr3dLUWak.roa File: J2wtE9sd5-52GuDQePPr3dLUWak.roa (raw, json) Hash identifier: 5i4s0bEdMVyFHh/Rp+gZBEtQEafLyX33XCkzGR0g3QU= Subject key identifier: 27:6C:2D:13:DB:1D:E7:EE:76:1A:E0:D0:78:F3:EB:DD:D2:D4:59:A9 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 0197561C811EA890C008A47B5F224E726FED Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/J2wtE9sd5-52GuDQePPr3dLUWak.roa Signing time: Mon 09 Jun 2025 19:13:18 +0000 ROA not before: Mon 09 Jun 2025 19:13:18 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401152 IP address blocks: 37.46.20.0/22 maxlen: 24 77.239.108.0/22 maxlen: 24 87.251.16.0/22 maxlen: 24 150.241.106.0/23 maxlen: 24 193.23.196.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 09 Jun 2025 20:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:56:1c:81:1e:a8:90:c0:08:a4:7b:5f:22:4e:72:6f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jun 9 19:13:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=276c2d13db1de7ee761ae0d078f3ebddd2d459a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d9:0e:60:75:4a:dd:7e:4d:04:7d:d4:17:e0: 8d:0e:ca:30:c1:0b:ce:d9:7c:f9:2c:f1:3c:60:cd: 0b:98:1a:d0:b9:c5:a6:ba:f0:90:de:10:e5:38:1d: fc:f0:e7:29:3c:72:73:ba:a2:c3:69:26:96:15:b0: 39:61:fd:a0:05:39:b6:f6:0c:16:45:99:b1:a8:b5: 1c:64:41:0c:11:14:a5:3a:58:60:14:a2:71:35:b0: 2e:09:ac:01:84:4f:ed:6c:02:95:50:5d:3b:18:65: 47:a6:22:0b:4f:b6:2c:b3:be:b3:10:13:da:70:ce: 0f:63:9e:3e:1a:20:51:3c:3b:e3:de:21:0b:42:c8: 1f:13:26:c5:cd:8f:7e:2e:c0:d4:2a:aa:57:2b:38: b0:8a:24:45:61:6d:2e:03:15:5e:b7:75:36:f3:47: fc:8a:3e:e9:64:27:af:33:8b:4f:f7:fd:38:e1:17: 42:04:36:12:5a:42:7b:ea:ce:9f:43:d0:f0:63:62: c7:92:16:d4:09:f1:07:12:76:24:9f:85:4e:83:29: 66:5b:7f:c5:8d:8c:3c:4c:2a:82:fb:f5:75:70:ae: 16:c7:d7:1e:b6:0d:51:a6:c3:7b:0a:86:97:3f:e6: 08:ea:d1:8a:9c:e1:f3:45:d3:35:b1:90:01:ca:94: fe:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6C:2D:13:DB:1D:E7:EE:76:1A:E0:D0:78:F3:EB:DD:D2:D4:59:A9 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/J2wtE9sd5-52GuDQePPr3dLUWak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.20.0/22 77.239.108.0/22 87.251.16.0/22 150.241.106.0/23 193.23.196.0/24 Signature Algorithm: sha256WithRSAEncryption 15:80:b5:86:e7:31:94:e5:5f:92:9b:f1:12:8c:f5:58:25:82: dd:b5:e7:cf:aa:3a:c6:ac:c6:c7:72:2b:e9:98:09:ec:7d:c1: 3b:ca:50:52:97:a8:28:2f:10:c6:14:ab:ec:fe:95:d8:45:ae: f9:31:c5:d2:67:4f:5e:58:05:3b:b7:50:56:ab:aa:5c:52:f7: 53:20:c3:fd:ce:b4:ca:5a:7a:68:fc:96:28:89:fb:db:68:bc: aa:54:0c:6c:65:67:f8:d5:c6:c2:a9:09:d6:a3:7d:83:00:e7: 57:91:48:76:89:06:e4:7d:97:56:30:ec:bb:d5:20:7c:a6:12: 93:0f:e3:8a:90:69:0c:5b:61:41:ee:7d:84:12:d7:dc:f3:33: 42:52:e4:85:76:a7:10:43:9d:ed:20:bb:d5:d4:cd:1b:71:eb: e2:fb:44:9e:f0:dd:5a:99:26:f8:e6:14:a3:27:f8:c2:e2:c7: 22:31:b3:db:ec:74:49:cf:c0:2d:1e:00:68:bf:23:49:c8:2d: bf:59:7b:40:48:4d:28:1a:1b:9d:5e:92:57:0a:17:2c:45:a0: d8:0f:d6:bb:a1:e8:d4:20:16:f3:1d:55:08:21:5a:f9:a0:e2: 36:8b:c5:a1:dd:21:60:52:ce:4e:7a:53:54:6a:d4:e0:bc:c2: 28:91:0b:9e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZdWHIEeqJDACKR7XyJOcm/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUwNjA5MTkxMzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzZjMmQxM2RiMWRlN2VlNzYxYWUwZDA3OGYzZWJkZGQyZDQ1OWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49kOYHVK3X5NBH3UF+CNDsowwQvO 2Xz5LPE8YM0LmBrQucWmuvCQ3hDlOB388OcpPHJzuqLDaSaWFbA5Yf2gBTm29gwW RZmxqLUcZEEMERSlOlhgFKJxNbAuCawBhE/tbAKVUF07GGVHpiILT7Yss76zEBPa cM4PY54+GiBRPDvj3iELQsgfEybFzY9+LsDUKqpXKziwiiRFYW0uAxVet3U280f8 ij7pZCevM4tP9/044RdCBDYSWkJ76s6fQ9DwY2LHkhbUCfEHEnYkn4VOgylmW3/F jYw8TCqC+/V1cK4Wx9cetg1RpsN7CoaXP+YI6tGKnOHzRdM1sZABypT+NwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFCdsLRPbHefudhrg0Hjz693S1FmpMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvSjJ3dEU5c2Q1LTUyR3VEUWVQUHIzZExVV2FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCJS4UAwQC Te9sAwQCV/sQAwQBlvFqAwQAwRfEMA0GCSqGSIb3DQEBCwUAA4IBAQAVgLWG5zGU 5V+Sm/ESjPVYJYLdtefPqjrGrMbHcivpmAnsfcE7ylBSl6goLxDGFKvs/pXYRa75 McXSZ09eWAU7t1BWq6pcUvdTIMP9zrTKWnpo/JYoifvbaLyqVAxsZWf41cbCqQnW o32DAOdXkUh2iQbkfZdWMOy71SB8phKTD+OKkGkMW2FB7n2EEtfc8zNCUuSFdqcQ Q53tILvV1M0bcevi+0Se8N1amSb45hSjJ/jC4sciMbPb7HRJz8AtHgBovyNJyC2/ WXtASE0oGhudXpJXChcsRaDYD9a7oejUIBbzHVUIIVr5oOI2i8Wh3SFgUs5OelNU atTgvMIokQue -----END CERTIFICATE-----Generated at Wed Dec 17 13:29:35 2025 by rpki-client