This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50917.roa File: AS50917.roa (raw, json) Hash identifier: kyJZznIJSU7BktkLz0rP7rhic1u1kX/1/FwSZW7sS7c= Subject key identifier: CC:85:3B:A2:FD:64:E6:B1:94:96:EB:F4:D0:B9:86:B8:AA:F7:2C:29 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 0DAE06160F7505D3F4E4D4C7FD2AEDF1522746FB Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50917.roa Signing time: Wed 12 Nov 2025 00:06:18 +0000 ROA not before: Wed 12 Nov 2025 00:01:18 +0000 ROA not after: Wed 11 Nov 2026 00:06:18 +0000 asID: 50917 IP address blocks: 146.103.22.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 01 Dec 2025 00:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ae:06:16:0f:75:05:d3:f4:e4:d4:c7:fd:2a:ed:f1:52:27:46:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 12 00:01:18 2025 GMT Not After : Nov 11 00:06:18 2026 GMT Subject: CN=CC853BA2FD64E6B19496EBF4D0B986B8AAF72C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0b:5f:bb:f6:43:1a:31:d4:3e:13:54:93:81: e2:3c:7b:ee:d2:a1:1d:8f:95:93:85:b4:49:4f:82: a9:bd:ed:e9:5d:95:b0:0f:b5:d7:46:ac:5b:26:28: 5a:41:2b:d8:6e:3f:7e:2e:b2:4f:d7:e2:c4:1f:19: e3:4c:4b:95:96:3b:50:f1:74:28:80:a1:99:77:cb: b1:bd:a2:44:81:4d:64:a4:c3:c6:f5:25:60:d9:8b: c2:b3:e8:4e:1d:16:6a:ae:8d:ad:f9:97:cb:cc:ce: 38:5a:92:75:4e:09:e1:39:f3:fd:68:ab:09:11:a1: 05:22:be:85:ab:6a:ed:4d:d9:b5:bb:c3:57:9e:ec: 39:0f:64:f2:76:5d:aa:13:02:4e:9a:79:12:c1:1f: ef:88:79:6c:0d:7c:6f:8b:17:46:7d:d6:53:d1:77: b1:58:92:ff:44:ac:ba:37:90:b5:22:c4:44:61:ae: 52:9f:ef:69:c7:f8:c9:c2:b5:f7:e6:50:73:b1:74: 0e:fa:74:3b:b8:b6:ef:af:76:d2:ed:9f:28:f5:66: ea:4f:4c:0e:fd:28:bf:9b:f9:b6:22:62:2f:e2:12: 9f:bf:8a:b9:bb:33:3b:57:c0:a3:a5:55:20:0d:7d: 42:98:5b:76:b2:5d:9b:35:93:1d:6a:a0:86:ba:81: 4f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:85:3B:A2:FD:64:E6:B1:94:96:EB:F4:D0:B9:86:B8:AA:F7:2C:29 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS50917.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.103.22.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:10:f3:39:dc:ae:4f:dc:39:64:d7:28:96:29:d7:3b:12:84: 6f:16:35:3c:42:85:05:f8:96:49:a6:a5:bb:42:51:57:68:73: bb:ea:ee:ff:66:d8:ef:10:95:4d:87:14:7d:4e:62:d9:62:45: 90:20:5d:34:4a:bf:ff:18:24:6f:01:a6:c2:6a:8c:24:8c:0b: 6e:63:0a:fe:b1:72:5b:1c:f0:58:87:1b:a5:a5:ef:75:16:3c: f9:e9:40:7c:97:a0:84:7f:09:bb:78:ab:81:f4:41:f5:01:98: 3c:6b:ba:26:65:c5:3a:54:88:41:d9:36:0b:9e:29:aa:45:e9: 58:5b:94:79:22:3e:77:10:a5:e7:e6:8b:43:4c:1d:64:01:2a: 76:ff:65:64:17:a0:ee:29:11:10:c3:e7:ec:54:57:fa:db:84: 6a:f6:01:b5:55:42:b8:b7:17:a0:3a:fa:19:ad:f3:92:fb:17: 7c:54:6e:8d:c9:db:c3:8d:ff:52:b7:d9:33:cd:de:bb:76:c0: 48:b6:e5:83:ec:9f:a0:d8:61:a7:da:d6:5b:bd:20:59:f3:96: 54:3c:74:4a:a5:3a:ee:47:c1:f2:12:58:3f:30:f8:0c:33:2b: 22:f8:65:f9:0e:f6:06:0e:e1:fa:84:72:0a:4a:19:ad:7c:ff: 5d:88:a7:d2 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUDa4GFg91BdP05NTH/Srt8VInRvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMTIwMDAxMThaFw0yNjExMTEwMDA2MThaMDMxMTAvBgNV BAMTKENDODUzQkEyRkQ2NEU2QjE5NDk2RUJGNEQwQjk4NkI4QUFGNzJDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoC1+79kMaMdQ+E1STgeI8e+7S oR2PlZOFtElPgqm97eldlbAPtddGrFsmKFpBK9huP34usk/X4sQfGeNMS5WWO1Dx dCiAoZl3y7G9okSBTWSkw8b1JWDZi8Kz6E4dFmquja35l8vMzjhaknVOCeE58/1o qwkRoQUivoWrau1N2bW7w1ee7DkPZPJ2XaoTAk6aeRLBH++IeWwNfG+LF0Z91lPR d7FYkv9ErLo3kLUixERhrlKf72nH+MnCtffmUHOxdA76dDu4tu+vdtLtnyj1ZupP TA79KL+b+bYiYi/iEp+/irm7MztXwKOlVSANfUKYW3ayXZs1kx1qoIa6gU9dAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUzIU7ov1k5rGUluv00LmGuKr3LCkwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTA5MTcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACSZxYw DQYJKoZIhvcNAQELBQADggEBAG8Q8zncrk/cOWTXKJYp1zsShG8WNTxChQX4lkmm pbtCUVdoc7vq7v9m2O8QlU2HFH1OYtliRZAgXTRKv/8YJG8BpsJqjCSMC25jCv6x clsc8FiHG6Wl73UWPPnpQHyXoIR/Cbt4q4H0QfUBmDxruiZlxTpUiEHZNgueKapF 6VhblHkiPncQpefmi0NMHWQBKnb/ZWQXoO4pERDD5+xUV/rbhGr2AbVVQri3F6A6 +hmt85L7F3xUbo3J28ON/1K32TPN3rt2wEi25YPsn6DYYafa1lu9IFnzllQ8dEql Ou5HwfISWD8w+AwzKyL4ZfkO9gYO4fqEcgpKGa18/12Ip9I= -----END CERTIFICATE-----Generated at Fri Dec 19 10:21:15 2025 by rpki-client