This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/fKG8jyBN5m45pe1bOqxAn8i7OaI.roa File: fKG8jyBN5m45pe1bOqxAn8i7OaI.roa (raw, json) Hash identifier: 2IGvIXhjRJ97JvI8HM7ebv/kpw0f+dsEDvIUOOtMP/I= Subject key identifier: 7C:A1:BC:8F:20:4D:E6:6E:39:A5:ED:5B:3A:AC:40:9F:C8:BB:39:A2 Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2 Certificate serial: 019615F88ABB87D64F93D8CA29D864BD6B6F Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/fKG8jyBN5m45pe1bOqxAn8i7OaI.roa Signing time: Tue 08 Apr 2025 15:15:32 +0000 ROA not before: Tue 08 Apr 2025 15:15:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31027 IP address blocks: 5.56.144.0/20 maxlen: 20 5.83.24.0/21 maxlen: 21 5.179.80.0/20 maxlen: 20 37.49.128.0/20 maxlen: 20 46.32.156.0/22 maxlen: 22 62.12.32.0/20 maxlen: 20 62.12.48.0/21 maxlen: 21 62.116.192.0/19 maxlen: 19 77.233.224.0/19 maxlen: 19 78.111.160.0/20 maxlen: 20 78.153.160.0/19 maxlen: 19 80.88.128.0/20 maxlen: 20 80.243.112.0/20 maxlen: 20 82.192.160.0/19 maxlen: 19 83.136.88.0/21 maxlen: 21 83.151.128.0/18 maxlen: 18 87.116.0.0/18 maxlen: 18 88.212.64.0/18 maxlen: 18 89.221.160.0/20 maxlen: 20 91.143.112.0/20 maxlen: 20 92.62.192.0/20 maxlen: 20 93.176.64.0/18 maxlen: 18 94.18.0.0/16 maxlen: 16 109.202.128.0/19 maxlen: 19 130.185.128.0/20 maxlen: 20 176.222.232.0/21 maxlen: 21 185.20.240.0/22 maxlen: 22 185.67.128.0/22 maxlen: 22 188.120.64.0/19 maxlen: 19 188.120.80.0/21 maxlen: 21 193.105.116.0/24 maxlen: 24 193.105.149.0/24 maxlen: 24 194.182.96.0/21 maxlen: 21 195.93.176.0/23 maxlen: 23 195.93.182.0/23 maxlen: 23 195.140.132.0/22 maxlen: 22 212.60.96.0/19 maxlen: 19 212.60.120.0/21 maxlen: 21 212.98.96.0/24 maxlen: 24 217.74.208.0/20 maxlen: 20 217.116.208.0/20 maxlen: 20 217.195.176.0/20 maxlen: 20 217.195.178.0/24 maxlen: 24 2a01:4f0::/32 maxlen: 32 2a02:188::/29 maxlen: 29 Validation: Failed, certificate revoked on Tue 08 Apr 2025 17:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:15:f8:8a:bb:87:d6:4f:93:d8:ca:29:d8:64:bd:6b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2 Validity Not Before: Apr 8 15:15:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7ca1bc8f204de66e39a5ed5b3aac409fc8bb39a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:d1:8b:5b:07:27:6f:db:f9:8b:ec:92:76: b6:8b:b5:49:f3:44:2f:69:5b:db:57:9f:da:db:4c: d2:33:33:86:58:09:6b:49:67:71:a0:49:c9:c9:35: ba:4e:c7:a5:04:cb:38:1f:ed:58:14:35:0d:5c:5f: 7d:0b:75:b5:51:d7:bb:4a:57:38:dd:e9:58:c5:21: 0c:f1:d8:a8:89:80:df:c4:bc:f9:e2:c8:25:f0:84: b3:9c:c1:6f:35:29:a3:fc:d0:72:3a:ef:69:41:45: fb:82:7b:f9:5b:42:80:ef:bb:10:0b:32:b7:71:c8: f1:33:35:0a:10:f6:87:92:84:fc:72:b7:3c:ed:07: 03:68:4c:cc:d5:5a:04:f2:74:4f:79:b9:98:cf:f2: d2:a7:cf:3f:ba:02:09:cc:5a:0f:e5:3c:39:c5:82: 32:36:51:bd:49:65:6b:f7:ac:97:a3:18:49:61:16: 33:2d:d4:c9:29:67:45:ad:7c:2d:1b:84:bf:b7:b4: 98:ab:31:52:ed:43:9a:b1:d1:60:b5:3c:9d:a9:40: 39:9a:41:b9:9e:e3:7b:aa:ab:76:1c:32:7c:d2:1e: 90:24:65:88:7f:c8:db:76:a7:dd:f2:f5:d5:de:71: f1:90:07:3d:e7:12:e0:26:6f:27:1d:95:5c:c0:42: f2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A1:BC:8F:20:4D:E6:6E:39:A5:ED:5B:3A:AC:40:9F:C8:BB:39:A2 X509v3 Authority Key Identifier: keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/fKG8jyBN5m45pe1bOqxAn8i7OaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.144.0/20 5.83.24.0/21 5.179.80.0/20 37.49.128.0/20 46.32.156.0/22 62.12.32.0-62.12.55.255 62.116.192.0/19 77.233.224.0/19 78.111.160.0/20 78.153.160.0/19 80.88.128.0/20 80.243.112.0/20 82.192.160.0/19 83.136.88.0/21 83.151.128.0/18 87.116.0.0/18 88.212.64.0/18 89.221.160.0/20 91.143.112.0/20 92.62.192.0/20 93.176.64.0/18 94.18.0.0/16 109.202.128.0/19 130.185.128.0/20 176.222.232.0/21 185.20.240.0/22 185.67.128.0/22 188.120.64.0/19 193.105.116.0/24 193.105.149.0/24 194.182.96.0/21 195.93.176.0/23 195.93.182.0/23 195.140.132.0/22 212.60.96.0/19 212.98.96.0/24 217.74.208.0/20 217.116.208.0/20 217.195.176.0/20 IPv6: 2a01:4f0::/32 2a02:188::/29 Signature Algorithm: sha256WithRSAEncryption 40:a1:d7:e3:a6:dc:00:08:36:f3:5e:34:6f:e7:8e:38:2e:a3: bf:5d:27:26:9a:bb:3b:d4:d6:9d:bf:4e:80:63:b8:4e:04:22: 0c:5c:da:37:95:74:62:28:e0:45:0b:0d:a3:99:95:8b:2c:53: d9:6f:00:42:02:35:ee:a9:9b:b4:5c:0b:d7:48:8b:5e:80:0b: 59:cd:30:2a:40:ba:6e:49:87:84:c8:7a:3e:57:6f:7b:e5:fd: 3c:9c:0c:a2:29:7b:e8:11:b5:e6:1e:d4:ee:43:87:45:d8:e4: d1:16:ad:9a:5f:87:43:73:d1:d1:46:a7:c1:89:9f:cf:37:e5: 86:a6:2f:91:fc:7e:8a:d5:2b:1b:10:7c:b1:ab:05:8b:d3:a4: 82:f5:11:a9:1b:ab:fc:ae:c7:c2:bc:d0:c2:7f:df:37:65:14: ba:99:f0:88:55:bf:c2:a0:16:ac:b9:d5:f6:69:5a:17:60:4f: df:b6:48:78:99:a4:08:66:69:c5:96:74:23:76:6a:84:4d:10: b9:5f:10:94:94:72:57:75:60:c8:a5:34:1a:33:85:b2:01:50: bd:11:b9:ee:4d:b7:36:79:8d:00:f1:a8:c6:51:e0:c2:be:38: 1d:81:25:2b:64:e2:6a:34:e2:d2:4a:10:76:a5:7f:1e:d5:b5: 79:2a:cb:36 -----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgISAZYV+Iq7h9ZPk9jKKdhkvWtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Zjg0MzYwMDNkMzc2MDIwMjZiNjU1MzE3NTVjYThmY2Qz MWJlZDIwHhcNMjUwNDA4MTUxNTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2ExYmM4ZjIwNGRlNjZlMzlhNWVkNWIzYWFjNDA5ZmM4YmIzOWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygvRi1sHJ2/b+Yvskna2i7VJ80Qv aVvbV5/a20zSMzOGWAlrSWdxoEnJyTW6TselBMs4H+1YFDUNXF99C3W1Ude7Slc4 3elYxSEM8dioiYDfxLz54sgl8ISznMFvNSmj/NByOu9pQUX7gnv5W0KA77sQCzK3 ccjxMzUKEPaHkoT8crc87QcDaEzM1VoE8nRPebmYz/LSp88/ugIJzFoP5Tw5xYIy NlG9SWVr96yXoxhJYRYzLdTJKWdFrXwtG4S/t7SYqzFS7UOasdFgtTydqUA5mkG5 nuN7qqt2HDJ80h6QJGWIf8jbdqfd8vXV3nHxkAc95xLgJm8nHZVcwELyoQIDAQAB o4IDEjCCAw4wHQYDVR0OBBYEFHyhvI8gTeZuOaXtWzqsQJ/IuzmiMB8GA1UdIwQY MBaAFKT4Q2AD03YCAmtlUxdVyo/NMb7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQt MjdiZjgzY2RlZDZiLzEvZktHOGp5Qk41bTQ1cGUxYk9xeEFuOGk3T2FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQtMjdiZjgzY2RlZDZi LzEvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBJgYIKwYBBQUHAQcBAf8EggEVMIIBETCB+AQCAAEwgfED BAQFOJADBAMFUxgDBAQFs1ADBAQlMYADBAIuIJwwDAMEBT4MIAMEAz4MMAMEBT50 wAMEBU3p4AMEBE5voAMEBU6ZoAMEBFBYgAMEBFDzcAMEBVLAoAMEA1OIWAMEBlOX gAMEBld0AAMEBljUQAMEBFndoAMEBFuPcAMEBFw+wAMEBl2wQAMDAF4SAwQFbcqA AwQEgrmAAwQDsN7oAwQCuRTwAwQCuUOAAwQFvHhAAwQAwWl0AwQAwWmVAwQDwrZg AwQBw12wAwQBw122AwQCw4yEAwQF1DxgAwQA1GJgAwQE2UrQAwQE2XTQAwQE2cOw MBQEAgACMA4DBQAqAQTwAwUDKgIBiDANBgkqhkiG9w0BAQsFAAOCAQEAQKHX46bc AAg28140b+eOOC6jv10nJpq7O9TWnb9OgGO4TgQiDFzaN5V0YijgRQsNo5mViyxT 2W8AQgI17qmbtFwL10iLXoALWc0wKkC6bkmHhMh6Pldve+X9PJwMoil76BG15h7U 7kOHRdjk0Ratml+HQ3PR0UanwYmfzzflhqYvkfx+itUrGxB8sasFi9OkgvURqRur /K7HwrzQwn/fN2UUupnwiFW/wqAWrLnV9mlaF2BP37ZIeJmkCGZpxZZ0I3ZqhE0Q uV8QlJRyV3VgyKU0GjOFsgFQvRG57k23NnmNAPGoxlHgwr44HYElK2TiajTi0koQ dqV/HtW1eSrLNg== -----END CERTIFICATE-----Generated at Sun Jan 11 23:18:57 2026 by rpki-client