This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/C5Uvng0hugqUI_u1L3_VHn6Fc4s.roa File: C5Uvng0hugqUI_u1L3_VHn6Fc4s.roa (raw, json) Hash identifier: VxfZ1b0rZIv2cBRKs6Jk/N+O/I1szgBDs7kGQoDLN2I= Subject key identifier: 0B:95:2F:9E:0D:21:BA:0A:94:23:FB:B5:2F:7F:D5:1E:7E:85:73:8B Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Certificate serial: 019468F1E78449B2F754F3D90265F504D68F Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/C5Uvng0hugqUI_u1L3_VHn6Fc4s.roa Signing time: Wed 15 Jan 2025 07:51:11 +0000 ROA not before: Wed 15 Jan 2025 07:51:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1136 IP address blocks: 37.251.0.0/17 maxlen: 17 62.131.0.0/16 maxlen: 16 62.251.0.0/17 maxlen: 17 77.160.0.0/13 maxlen: 13 77.168.0.0/14 maxlen: 14 77.172.0.0/16 maxlen: 16 77.173.0.0/16 maxlen: 16 77.174.0.0/16 maxlen: 16 77.175.0.0/16 maxlen: 16 77.175.0.0/17 maxlen: 17 77.175.128.0/17 maxlen: 17 80.60.0.0/15 maxlen: 15 81.204.0.0/14 maxlen: 14 82.136.192.0/18 maxlen: 18 82.168.0.0/15 maxlen: 15 82.170.0.0/16 maxlen: 16 84.39.0.0/19 maxlen: 19 84.80.0.0/16 maxlen: 16 84.82.0.0/15 maxlen: 15 84.84.0.0/14 maxlen: 14 85.113.224.0/19 maxlen: 19 86.80.0.0/13 maxlen: 13 86.88.0.0/15 maxlen: 15 86.90.0.0/16 maxlen: 16 86.92.0.0/14 maxlen: 14 88.159.0.0/16 maxlen: 16 188.142.0.0/17 maxlen: 17 195.240.0.0/16 maxlen: 16 195.240.0.0/17 maxlen: 17 195.240.128.0/18 maxlen: 18 195.240.192.0/18 maxlen: 18 195.241.0.0/16 maxlen: 16 212.123.128.0/18 maxlen: 18 212.182.128.0/18 maxlen: 18 212.238.0.0/16 maxlen: 16 213.10.0.0/16 maxlen: 16 213.84.0.0/16 maxlen: 16 213.197.0.0/18 maxlen: 18 2a02:a400::/25 maxlen: 25 Validation: Failed, certificate revoked on Wed 15 Jan 2025 08:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:68:f1:e7:84:49:b2:f7:54:f3:d9:02:65:f5:04:d6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Validity Not Before: Jan 15 07:51:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0b952f9e0d21ba0a9423fbb52f7fd51e7e85738b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:02:ce:26:67:6f:1b:40:f6:f2:b3:35:8a:06: 31:6a:01:7d:ae:6e:8e:95:01:8b:f2:36:65:9d:35: 04:55:10:0d:11:14:4d:43:21:7e:7d:b2:ed:b7:ca: c2:f5:e2:4f:e3:44:d5:bc:50:50:fc:12:f0:31:2c: 65:31:71:52:5a:6a:96:98:f8:e7:09:96:3e:fb:34: 96:f0:94:8a:05:d1:97:8a:4a:c4:b3:f1:b9:04:2e: 9b:74:12:d7:83:27:bd:33:ba:fd:1e:af:6c:90:0c: 6f:1f:b4:62:57:5b:51:81:e3:db:26:9c:97:b2:4f: c8:97:d7:9a:3a:13:7b:5b:33:87:6c:1c:4b:cd:e4: 5f:aa:59:1b:04:37:e0:65:0d:82:a0:81:9c:22:65: 6f:75:59:dd:8c:bb:5f:c7:56:30:b4:bc:26:5a:7a: 7c:a0:f0:0e:b8:a2:c2:3e:1b:66:7a:87:1e:9c:cb: 65:04:60:d6:eb:1c:6e:58:ac:26:c3:f4:b7:6c:a8: 5f:e0:7a:87:df:10:5f:f3:b2:34:9b:eb:ec:a2:08: 9e:66:1f:31:d1:50:47:85:d7:79:ea:12:d6:c2:e1: 41:5d:78:e2:6a:de:0d:87:2a:a8:c4:6e:aa:d1:67: c8:fc:36:61:b0:0f:f1:44:65:f1:02:79:5d:b1:57: ef:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:95:2F:9E:0D:21:BA:0A:94:23:FB:B5:2F:7F:D5:1E:7E:85:73:8B X509v3 Authority Key Identifier: keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/C5Uvng0hugqUI_u1L3_VHn6Fc4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.251.0.0/17 62.131.0.0/16 62.251.0.0/17 77.160.0.0/12 80.60.0.0/15 81.204.0.0/14 82.136.192.0/18 82.168.0.0-82.170.255.255 84.39.0.0/19 84.80.0.0/16 84.82.0.0-84.87.255.255 85.113.224.0/19 86.80.0.0-86.90.255.255 86.92.0.0/14 88.159.0.0/16 188.142.0.0/17 195.240.0.0/15 212.123.128.0/18 212.182.128.0/18 212.238.0.0/16 213.10.0.0/16 213.84.0.0/16 213.197.0.0/18 IPv6: 2a02:a400::/25 Signature Algorithm: sha256WithRSAEncryption 6e:fc:35:0b:4c:6b:9a:d0:e7:b3:14:97:8e:1a:99:2e:c0:03: 0b:f7:19:a9:c8:6a:f0:8c:5b:7e:67:31:51:9e:8f:fe:32:85: 44:c7:df:8e:6b:f3:71:cf:0c:73:81:3b:a1:72:4d:0a:58:f0: f3:44:61:69:e6:8f:79:2f:4e:2a:c1:57:9a:dc:8f:7f:b2:e0: 5c:61:f6:a6:70:10:17:bd:6d:10:18:d5:a5:76:d2:08:e8:36: 8f:be:e4:34:b9:e2:58:64:30:e2:1f:f6:21:5e:12:fb:f7:b2: ac:dd:70:b2:e1:a0:ac:f1:af:18:8e:59:51:32:9a:df:5e:53: 27:ff:ac:13:6c:78:e4:e1:5d:01:7c:14:22:bd:5d:15:52:05: be:af:93:10:cf:3a:76:e4:f7:fd:c4:80:ec:e6:d0:aa:43:c5: fe:4f:22:0b:30:a4:f1:24:7b:f2:94:84:43:9e:eb:9a:1c:28: c3:d8:cb:d0:23:a5:46:dc:aa:d2:bb:5a:1f:b2:8b:1c:49:61: 72:3b:00:40:2a:86:f8:1d:82:74:b8:2c:39:c1:14:fa:d6:d7: 9b:c6:31:df:3c:1a:6d:fc:9f:93:6c:48:bb:a3:57:4f:5d:c7: d6:54:16:9c:fb:d4:2e:8e:28:cf:af:ea:9f:92:39:b7:98:3e: 5e:04:f9:62 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZRo8eeESbL3VPPZAmX1BNaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk Y2UyMDUwHhcNMjUwMTE1MDc1MTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjk1MmY5ZTBkMjFiYTBhOTQyM2ZiYjUyZjdmZDUxZTdlODU3MzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApALOJmdvG0D28rM1igYxagF9rm6O lQGL8jZlnTUEVRANERRNQyF+fbLtt8rC9eJP40TVvFBQ/BLwMSxlMXFSWmqWmPjn CZY++zSW8JSKBdGXikrEs/G5BC6bdBLXgye9M7r9Hq9skAxvH7RiV1tRgePbJpyX sk/Il9eaOhN7WzOHbBxLzeRfqlkbBDfgZQ2CoIGcImVvdVndjLtfx1YwtLwmWnp8 oPAOuKLCPhtmeocenMtlBGDW6xxuWKwmw/S3bKhf4HqH3xBf87I0m+vsogieZh8x 0VBHhdd56hLWwuFBXXjiat4NhyqoxG6q0WfI/DZhsA/xRGXxAnldsVfvrQIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFAuVL54NIboKlCP7tS9/1R5+hXOLMB8GA1UdIwQY MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et ODcyYjM3MTBjMmExLzEvQzVVdm5nMGh1Z3FVSV91MUwzX1ZIbjZGYzRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG9BggrBgEFBQcBBwEB/wSBrTCBqjCBmAQCAAEwgZEDBAcl +wADAwA+gwMEBz77AAMDBE2gAwMBUDwDAwJRzAMEBlKIwDAKAwMDUqgDAwBSqgME BVQnAAMDAFRQMAoDAwFUUgMDA1RQAwQFVXHgMAoDAwRWUAMDAFZaAwMCVlwDAwBY nwMEB7yOAAMDAcPwAwQG1HuAAwQG1LaAAwMA1O4DAwDVCgMDANVUAwQG1cUAMA0E AgACMAcDBQcqAqQAMA0GCSqGSIb3DQEBCwUAA4IBAQBu/DULTGua0OezFJeOGpku wAML9xmpyGrwjFt+ZzFRno/+MoVEx9+Oa/NxzwxzgTuhck0KWPDzRGFp5o95L04q wVea3I9/suBcYfamcBAXvW0QGNWldtII6DaPvuQ0ueJYZDDiH/YhXhL797Ks3XCy 4aCs8a8YjllRMprfXlMn/6wTbHjk4V0BfBQivV0VUgW+r5MQzzp25Pf9xIDs5tCq Q8X+TyILMKTxJHvylIRDnuuaHCjD2MvQI6VG3KrSu1ofsoscSWFyOwBAKob4HYJ0 uCw5wRT61tebxjHfPBpt/J+TbEi7o1dPXcfWVBac+9QujijPr+qfkjm3mD5eBPli -----END CERTIFICATE-----Generated at Tue Dec 16 04:41:19 2025 by rpki-client