This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qfLEN0dvrTMFO8XKAAptMbSrKzc.roa File: qfLEN0dvrTMFO8XKAAptMbSrKzc.roa (raw, json) Hash identifier: ONM+y82Np2A32ctXE/PCezIEsFSwkrw5Sed/wUMxczc= Subject key identifier: A9:F2:C4:37:47:6F:AD:33:05:3B:C5:CA:00:0A:6D:31:B4:AB:2B:37 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019ADCB56D12B56BCB3B07AB9AF8D5DBAB0B Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qfLEN0dvrTMFO8XKAAptMbSrKzc.roa Signing time: Tue 02 Dec 2025 01:37:48 +0000 ROA not before: Tue 02 Dec 2025 01:37:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41546 IP address blocks: 2a06:82c7::/48 maxlen: 48 2a06:8dc2::/44 maxlen: 128 Validation: Failed, certificate revoked on Tue 02 Dec 2025 02:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dc:b5:6d:12:b5:6b:cb:3b:07:ab:9a:f8:d5:db:ab:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Dec 2 01:37:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a9f2c437476fad33053bc5ca000a6d31b4ab2b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:70:99:ac:60:0f:59:1e:4d:03:c7:42:1a:dc: 2a:dd:6f:18:ea:39:f1:51:00:5c:d2:4a:07:13:d4: a2:fb:56:55:64:d4:8e:a6:91:80:fe:bb:22:ba:85: e7:20:4a:3c:02:41:b4:2f:ae:a7:96:dc:de:b6:5c: de:49:39:b4:6f:93:7e:72:1e:59:ac:e6:90:58:71: 47:a2:19:95:ba:2d:93:a8:f3:e8:25:1f:36:ce:ce: a2:57:89:aa:49:45:08:61:0d:87:53:e8:3c:37:4c: ce:14:a5:d8:94:36:cb:b3:54:86:e7:fa:9e:75:ef: 3f:18:33:9b:c6:6d:cc:f1:7b:aa:9e:ac:ce:02:6d: dd:1a:df:69:f0:bb:2c:ee:95:24:12:83:20:2f:df: e7:36:7c:36:98:88:8d:fd:22:87:e9:64:2c:e6:a7: 04:98:42:29:b0:60:76:de:17:6a:95:8b:ea:32:b4: fc:d5:d0:f3:f7:75:e1:44:84:57:83:1f:f6:3d:96: f0:1c:16:4e:ae:1d:9d:e4:fd:48:fd:72:4c:ea:94: 56:4d:73:cf:a2:26:ce:8b:0c:34:d2:80:3d:43:c9: a3:f8:cb:1e:60:6b:14:9e:a7:59:66:65:b2:9f:a2: cb:70:ae:3d:05:01:54:5b:b6:7c:2d:25:30:e2:7f: b7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F2:C4:37:47:6F:AD:33:05:3B:C5:CA:00:0A:6D:31:B4:AB:2B:37 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/qfLEN0dvrTMFO8XKAAptMbSrKzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:82c7::/48 2a06:8dc2::/44 Signature Algorithm: sha256WithRSAEncryption c3:77:01:f2:30:1c:de:9b:1c:e0:74:54:7c:2f:f8:57:97:b0: fd:13:ef:33:62:cf:1c:f8:c2:3b:a0:ff:53:5b:99:c4:92:ec: c6:03:58:d6:ff:77:8d:bb:85:42:1a:53:c0:63:29:9c:c2:95: 37:10:15:09:98:7c:d5:00:86:c2:1c:c5:df:69:38:1e:6d:7a: ed:10:2c:34:13:d4:bb:d5:40:3b:24:d3:dd:b0:1f:ed:4b:33: d1:c9:5e:c0:10:65:ae:90:01:94:a6:ac:19:3b:21:47:bb:54: c0:e3:4e:1d:22:a8:d8:4c:23:a6:da:33:7c:14:30:f0:32:c3: e4:3e:c6:dc:6d:6b:67:c4:51:d7:06:4c:0c:93:4e:c5:b8:9e: ca:51:a0:b8:bd:50:01:14:67:aa:bb:31:d2:82:39:ba:ee:57: 08:18:dc:dd:55:c5:12:b1:14:82:c1:b6:b3:bd:2f:b4:1d:a0: b5:31:19:76:10:53:37:cd:00:8e:5c:5b:00:81:03:db:a5:bf: 10:cc:f2:b6:fe:4b:de:7f:60:41:c8:05:55:0b:e7:c7:1f:32: d1:05:6a:2c:f7:3f:cf:83:ea:30:d2:09:5e:eb:53:9e:b1:1c: 83:ba:1e:a0:ba:cc:d5:e4:36:ac:79:63:a4:14:1c:ff:c8:2c: b3:8b:d2:f9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrctW0StWvLOwermvjV26sLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjUxMjAyMDEzNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWYyYzQzNzQ3NmZhZDMzMDUzYmM1Y2EwMDBhNmQzMWI0YWIyYjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXCZrGAPWR5NA8dCGtwq3W8Y6jnx UQBc0koHE9Si+1ZVZNSOppGA/rsiuoXnIEo8AkG0L66nltzetlzeSTm0b5N+ch5Z rOaQWHFHohmVui2TqPPoJR82zs6iV4mqSUUIYQ2HU+g8N0zOFKXYlDbLs1SG5/qe de8/GDObxm3M8XuqnqzOAm3dGt9p8Lss7pUkEoMgL9/nNnw2mIiN/SKH6WQs5qcE mEIpsGB23hdqlYvqMrT81dDz93XhRIRXgx/2PZbwHBZOrh2d5P1I/XJM6pRWTXPP oibOiww00oA9Q8mj+MseYGsUnqdZZmWyn6LLcK49BQFUW7Z8LSUw4n+3/QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKnyxDdHb60zBTvFygAKbTG0qys3MB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvcWZMRU4wZHZyVE1GTzhYS0FBcHRNYlNyS3pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgaCxwAA AwcEKgaNwgAAMA0GCSqGSIb3DQEBCwUAA4IBAQDDdwHyMBzemxzgdFR8L/hXl7D9 E+8zYs8c+MI7oP9TW5nEkuzGA1jW/3eNu4VCGlPAYymcwpU3EBUJmHzVAIbCHMXf aTgebXrtECw0E9S71UA7JNPdsB/tSzPRyV7AEGWukAGUpqwZOyFHu1TA404dIqjY TCOm2jN8FDDwMsPkPsbcbWtnxFHXBkwMk07FuJ7KUaC4vVABFGequzHSgjm67lcI GNzdVcUSsRSCwbazvS+0HaC1MRl2EFM3zQCOXFsAgQPbpb8QzPK2/kvef2BByAVV C+fHHzLRBWos9z/Pg+ow0gle61OesRyDuh6guszV5DaseWOkFBz/yCyzi9L5 -----END CERTIFICATE-----Generated at Tue Dec 23 02:43:20 2025 by rpki-client