This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/IY95hW4EixO6NgVxU3Qur1ZNG1g.roa File: IY95hW4EixO6NgVxU3Qur1ZNG1g.roa (raw, json) Hash identifier: uJyoUe+AK6J8N1mKSIeA2kooeyFHavW+8Mkl/yNvBOA= Subject key identifier: 21:8F:79:85:6E:04:8B:13:BA:36:05:71:53:74:2E:AF:56:4D:1B:58 Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c Certificate serial: 019B45856A2BA9FE89115826D1E271DB21A9 Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/IY95hW4EixO6NgVxU3Qur1ZNG1g.roa Signing time: Mon 22 Dec 2025 10:05:29 +0000 ROA not before: Mon 22 Dec 2025 10:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:19b:4585:602d/128 maxlen: 128 Validation: Failed, certificate revoked on Mon 22 Dec 2025 10:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:85:6a:2b:a9:fe:89:11:58:26:d1:e2:71:db:21:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c Validity Not Before: Dec 22 10:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=218f79856e048b13ba36057153742eaf564d1b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4d:80:48:c6:bd:ac:51:e1:b4:32:4e:70:4d: 20:43:21:0d:5b:ea:27:1b:87:c1:2f:98:fb:8f:60: e3:96:34:b9:18:bd:f3:1d:fa:58:bf:93:5b:9d:7a: 20:b1:19:3d:3a:7d:d3:dd:d0:00:80:82:9b:40:86: c0:ea:e6:5d:b6:8c:c8:b4:be:2b:6c:62:8b:bf:82: 1f:92:47:de:90:68:08:83:ae:ad:43:3b:a8:75:46: 08:16:88:29:0f:d3:50:18:71:fd:11:c7:72:40:f1: 2b:a8:16:be:fa:d7:6b:d6:26:f9:55:2d:dd:9e:4c: 7a:b1:5e:80:42:7d:b7:83:7c:7f:4d:48:08:aa:85: 63:5e:0c:9a:30:c3:e5:91:34:f5:90:49:e7:b9:0e: cc:75:9e:9c:54:8f:5c:e3:01:fe:7a:c0:44:94:ff: 22:a3:ee:7c:7a:98:a1:47:f7:e7:fd:83:83:c1:d0: ab:c8:f8:d0:b5:7e:40:b8:a1:97:e8:08:fe:de:0c: 41:dc:ce:b1:0f:b2:fa:d9:38:e5:0d:4b:4a:26:11: ad:76:f0:4e:c2:47:61:0d:30:92:f9:b9:28:dc:8e: 49:d4:98:0c:ad:85:8c:48:fc:90:01:41:32:88:e6: de:ca:03:bc:a7:08:c3:e6:4e:07:b0:c4:33:c9:5f: 14:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8F:79:85:6E:04:8B:13:BA:36:05:71:53:74:2E:AF:56:4D:1B:58 X509v3 Authority Key Identifier: keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/IY95hW4EixO6NgVxU3Qur1ZNG1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:19b:4585:602d/128 Signature Algorithm: sha256WithRSAEncryption 49:06:1e:0b:cc:e8:30:a3:9e:f3:2d:af:fe:7b:56:7d:f6:f9: 98:47:03:30:49:de:60:f1:79:9e:a4:29:98:56:01:4e:8b:26: fd:0f:e2:9c:53:b2:48:31:08:9e:45:65:59:f2:da:20:9c:9e: c2:88:3a:d7:58:77:1a:16:03:32:17:af:7b:22:23:06:d3:9c: a3:1e:3d:c5:bd:62:52:42:12:52:ac:1b:92:5e:37:75:06:c8: 64:97:eb:63:c1:11:c0:cf:9e:27:07:89:37:40:ef:9c:8f:e8: 89:09:25:61:b5:c3:fa:70:b2:83:87:0e:da:c2:8a:ea:d9:bb: 06:4f:36:02:fe:b0:e3:4f:3b:cd:9d:d3:4c:2d:13:7b:0c:9f: 09:f0:3d:13:c9:bc:32:90:a6:e2:8c:b0:45:7d:69:84:80:e1: c4:7a:d7:15:b4:52:7b:fc:a7:86:24:08:e7:c8:03:fe:c8:76: 9c:5f:02:c5:38:6f:e3:24:0b:bc:fb:eb:10:de:7f:93:e1:28: 3d:6c:4c:d0:c1:b3:01:72:c5:b8:23:3c:d4:33:eb:37:7e:c5: 51:0d:f7:af:72:8f:eb:b6:0d:59:97:51:69:3b:99:e3:22:4a: 16:e3:69:b1:31:f9:e7:65:fe:95:0a:9d:79:63:e5:7e:3e:ac: 39:3d:ea:3b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZtFhWorqf6JEVgm0eJx2yGpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh MDQyOWMwHhcNMjUxMjIyMTAwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMThmNzk4NTZlMDQ4YjEzYmEzNjA1NzE1Mzc0MmVhZjU2NGQxYjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE2ASMa9rFHhtDJOcE0gQyENW+on G4fBL5j7j2DjljS5GL3zHfpYv5NbnXogsRk9On3T3dAAgIKbQIbA6uZdtozItL4r bGKLv4IfkkfekGgIg66tQzuodUYIFogpD9NQGHH9EcdyQPErqBa++tdr1ib5VS3d nkx6sV6AQn23g3x/TUgIqoVjXgyaMMPlkTT1kEnnuQ7MdZ6cVI9c4wH+esBElP8i o+58epihR/fn/YODwdCryPjQtX5AuKGX6Aj+3gxB3M6xD7L62TjlDUtKJhGtdvBO wkdhDTCS+bko3I5J1JgMrYWMSPyQAUEyiObeygO8pwjD5k4HsMQzyV8UjwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFCGPeYVuBIsTujYFcVN0Lq9WTRtYMB8GA1UdIwQY MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt NmFhNDQzNTI4Y2U1LzEvSVk5NWhXNEVpeE82TmdWeFUzUXVyMVpORzFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1 LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGbRYVgLTANBgkqhkiG9w0BAQsFAAOCAQEASQYeC8zoMKOe8y2v/ntWffb5 mEcDMEneYPF5nqQpmFYBTosm/Q/inFOySDEInkVlWfLaIJyewog611h3GhYDMhev eyIjBtOcox49xb1iUkISUqwbkl43dQbIZJfrY8ERwM+eJweJN0DvnI/oiQklYbXD +nCyg4cO2sKK6tm7Bk82Av6w4087zZ3TTC0TewyfCfA9E8m8MpCm4oywRX1phIDh xHrXFbRSe/ynhiQI58gD/sh2nF8CxThv4yQLvPvrEN5/k+EoPWxM0MGzAXLFuCM8 1DPrN37FUQ33r3KP67YNWZdRaTuZ4yJKFuNpsTH552X+lQqdeWPlfj6sOT3qOw== -----END CERTIFICATE-----Generated at Mon Dec 22 12:45:36 2025 by rpki-client