This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1yhLutQHs8Illp7CliuVnaG1dac.roa File: 1yhLutQHs8Illp7CliuVnaG1dac.roa (raw, json) Hash identifier: iORZXSQlc+XRMlhCSBB7eAapxOA2gqY56f/7fGcj5bY= Subject key identifier: D7:28:4B:BA:D4:07:B3:C2:25:96:9E:C2:96:2B:95:9D:A1:B5:75:A7 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 01974DFFD739DD8056850901F28BBFC05098 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1yhLutQHs8Illp7CliuVnaG1dac.roa Signing time: Sun 08 Jun 2025 05:25:01 +0000 ROA not before: Sun 08 Jun 2025 05:25:01 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42864 IP address blocks: 45.9.169.0/24 maxlen: 24 45.9.170.0/24 maxlen: 24 45.9.171.0/24 maxlen: 24 45.14.10.0/24 maxlen: 24 45.14.11.0/24 maxlen: 24 45.88.93.0/24 maxlen: 24 77.242.144.0/24 maxlen: 24 77.242.148.0/24 maxlen: 24 77.242.151.0/24 maxlen: 24 77.242.154.0/24 maxlen: 24 83.137.157.0/24 maxlen: 24 88.209.193.0/24 maxlen: 24 88.209.196.0/24 maxlen: 24 88.209.208.0/24 maxlen: 24 88.209.210.0/24 maxlen: 24 88.209.212.0/24 maxlen: 24 88.209.213.0/24 maxlen: 24 88.209.214.0/24 maxlen: 24 88.209.215.0/24 maxlen: 24 88.209.219.0/24 maxlen: 24 88.209.247.0/24 maxlen: 24 92.52.208.0/24 maxlen: 24 92.52.209.0/24 maxlen: 24 92.52.210.0/23 maxlen: 23 92.52.212.0/22 maxlen: 24 92.52.215.0/24 maxlen: 24 92.52.218.0/24 maxlen: 24 178.248.200.0/21 maxlen: 21 193.138.125.0/24 maxlen: 24 2a00:1f40::/29 maxlen: 29 2a05:f5c0::/29 maxlen: 29 2a05:f5c0::/32 maxlen: 32 2a0c:f1c0::/29 maxlen: 29 Validation: Failed, certificate revoked on Fri 13 Jun 2025 12:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4d:ff:d7:39:dd:80:56:85:09:01:f2:8b:bf:c0:50:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jun 8 05:25:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d7284bbad407b3c225969ec2962b959da1b575a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:52:d8:59:dd:6b:3b:dc:bc:38:76:53:60: 43:db:94:64:ee:99:6a:e6:ab:a6:61:c7:f1:75:1c: 1f:14:5f:0c:98:fb:df:84:b5:b8:25:2a:91:89:48: 87:b9:fc:e9:7e:d5:0b:94:95:f7:0b:3a:6d:f5:ff: 4d:3c:a0:aa:b7:9e:b3:c1:59:a6:d4:a5:50:4a:c2: 34:dd:87:57:c1:03:e0:53:a0:89:f7:e1:4d:a7:23: b1:3e:0b:69:14:e7:47:cf:c0:7c:62:a8:ce:71:bd: 89:a7:f1:76:7d:5d:04:69:89:f4:c9:22:ec:a7:84: 24:37:80:6f:4e:47:66:21:0c:f8:de:f5:c5:0c:41: 43:1c:64:ea:01:ea:e0:9e:a2:c2:4d:c7:db:c5:74: 6f:0e:18:31:b9:e8:1d:0d:fb:00:bd:ac:d7:88:e1: 08:e9:08:4a:08:2a:34:6f:2c:a0:7c:f8:3e:d9:53: 76:0a:82:ec:62:b1:70:4a:87:ab:9c:92:76:54:e4: 47:4f:cb:03:1e:97:a3:ed:6a:70:52:5e:c4:bb:1a: 47:76:a3:75:1d:98:37:68:a5:82:4d:49:eb:bc:84: 95:9e:3f:7a:80:c0:0e:93:2d:f3:fd:25:cb:81:51: 6d:e7:97:21:d0:9a:fb:5e:02:6a:d8:d3:81:ce:72: 5d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:28:4B:BA:D4:07:B3:C2:25:96:9E:C2:96:2B:95:9D:A1:B5:75:A7 X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1yhLutQHs8Illp7CliuVnaG1dac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.169.0-45.9.171.255 45.14.10.0/23 45.88.93.0/24 77.242.144.0/24 77.242.148.0/24 77.242.151.0/24 77.242.154.0/24 83.137.157.0/24 88.209.193.0/24 88.209.196.0/24 88.209.208.0/24 88.209.210.0/24 88.209.212.0/22 88.209.219.0/24 88.209.247.0/24 92.52.208.0/21 92.52.218.0/24 178.248.200.0/21 193.138.125.0/24 IPv6: 2a00:1f40::/29 2a05:f5c0::/29 2a0c:f1c0::/29 Signature Algorithm: sha256WithRSAEncryption 98:9f:77:bc:30:61:07:d9:e3:9c:9d:3c:3c:93:5f:cc:aa:5e: b1:e7:8e:d2:bf:51:af:8a:bf:fa:54:c0:a9:3d:6a:dd:17:99: 92:62:bf:86:01:41:73:08:dc:61:6d:e7:38:31:63:9b:73:85: 95:44:d3:c7:1b:66:6f:50:a7:ac:c2:39:3a:66:27:63:2f:6c: cc:50:8d:80:c3:6a:4b:ce:ea:36:ae:07:e1:2a:7e:ff:4e:e1: a9:13:8a:77:11:1e:06:5c:02:4f:07:c7:36:2b:ac:8d:61:4d: a3:cf:cd:d5:04:86:c8:29:eb:ed:97:ff:20:01:0e:02:76:48: 30:cc:90:ef:d9:c3:e0:7a:b7:f3:d3:eb:75:91:49:bf:68:16: 70:31:12:d6:11:0d:ac:0e:e1:e6:a6:48:6a:ff:bd:21:8f:f5: 35:7e:48:c4:45:2e:14:df:5c:27:2d:fd:70:f4:c1:05:a2:fb: 3c:9b:75:d8:1a:48:f4:e6:a5:be:76:a4:8c:b8:9b:f9:c7:91: 8a:68:de:8e:74:d5:2a:05:11:06:b2:59:b7:de:13:9c:c8:7d: 71:1f:4c:fc:a9:28:b8:29:19:6c:1c:9e:7b:35:32:26:a3:18: 5f:c2:7d:17:91:59:c1:8e:7b:9e:b1:c0:37:c1:52:e1:be:18: 66:a1:bb:21 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZdN/9c53YBWhQkB8ou/wFCYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjUwNjA4MDUyNTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzI4NGJiYWQ0MDdiM2MyMjU5NjllYzI5NjJiOTU5ZGExYjU3NWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ1S2FndazvcvDh2U2BD25Rk7plq 5qumYcfxdRwfFF8MmPvfhLW4JSqRiUiHufzpftULlJX3Czpt9f9NPKCqt56zwVmm 1KVQSsI03YdXwQPgU6CJ9+FNpyOxPgtpFOdHz8B8YqjOcb2Jp/F2fV0EaYn0ySLs p4QkN4BvTkdmIQz43vXFDEFDHGTqAergnqLCTcfbxXRvDhgxuegdDfsAvazXiOEI 6QhKCCo0byygfPg+2VN2CoLsYrFwSoernJJ2VORHT8sDHpej7WpwUl7EuxpHdqN1 HZg3aKWCTUnrvISVnj96gMAOky3z/SXLgVFt55ch0Jr7XgJq2NOBznJd0wIDAQAB o4ICnjCCApowHQYDVR0OBBYEFNcoS7rUB7PCJZaewpYrlZ2htXWnMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvMXloTHV0UUhzOElsbHA3Q2xpdVZuYUcxZGFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBgAQCAAEwejAMAwQA LQmpAwQCLQmoAwQBLQ4KAwQALVhdAwQATfKQAwQATfKUAwQATfKXAwQATfKaAwQA U4mdAwQAWNHBAwQAWNHEAwQAWNHQAwQAWNHSAwQCWNHUAwQAWNHbAwQAWNH3AwQD XDTQAwQAXDTaAwQDsvjIAwQAwYp9MBsEAgACMBUDBQMqAB9AAwUDKgX1wAMFAyoM 8cAwDQYJKoZIhvcNAQELBQADggEBAJifd7wwYQfZ45ydPDyTX8yqXrHnjtK/Ua+K v/pUwKk9at0XmZJiv4YBQXMI3GFt5zgxY5tzhZVE08cbZm9Qp6zCOTpmJ2MvbMxQ jYDDakvO6jauB+Eqfv9O4akTincRHgZcAk8HxzYrrI1hTaPPzdUEhsgp6+2X/yAB DgJ2SDDMkO/Zw+B6t/PT63WRSb9oFnAxEtYRDawO4eamSGr/vSGP9TV+SMRFLhTf XCct/XD0wQWi+zybddgaSPTmpb52pIy4m/nHkYpo3o501SoFEQayWbfeE5zIfXEf TPypKLgpGWwcnns1MiajGF/CfReRWcGOe56xwDfBUuG+GGahuyE= -----END CERTIFICATE-----Generated at Sat Dec 27 02:19:24 2025 by rpki-client