This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231372e302f32342d3234203d3e20383334.roa File: 34352e382e3231372e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 9t5u0/N3hEDum+LyNPHiMt0KfdcsP2T4wS/zxhLd/G0= Subject key identifier: 8F:5E:68:A8:4D:49:16:F0:BD:E6:68:BA:10:0C:7C:9A:0A:AD:03:2B Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 40B135A57851ED66C88D5BA145D847ABE9202CBE Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231372e302f32342d3234203d3e20383334.roa Signing time: Wed 18 Jun 2025 00:03:30 +0000 ROA not before: Tue 17 Jun 2025 23:58:30 +0000 ROA not after: Wed 17 Jun 2026 00:03:30 +0000 asID: 834 IP address blocks: 45.8.217.0/24 maxlen: 24 Validation: Failed, certificate revoked on Wed 18 Jun 2025 10:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b1:35:a5:78:51:ed:66:c8:8d:5b:a1:45:d8:47:ab:e9:20:2c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Jun 17 23:58:30 2025 GMT Not After : Jun 17 00:03:30 2026 GMT Subject: CN=8F5E68A84D4916F0BDE668BA100C7C9A0AAD032B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:47:e0:4c:db:cc:2b:7e:ea:6e:a8:a4:0e: ba:3f:88:f8:43:80:2e:0b:64:0d:a1:aa:4e:d0:79: 4b:5e:88:0e:04:b1:00:00:65:91:da:b3:92:dd:cf: c5:df:1a:3f:76:c7:0e:82:86:de:32:9e:9a:0d:a8: 5d:1f:7c:7f:08:fd:ac:3c:39:6b:35:55:4c:40:4c: 82:0e:96:64:51:90:8a:88:84:b2:10:70:9e:bb:db: 77:58:b9:4a:8f:a3:28:65:7a:a0:9f:d7:1b:41:28: b8:54:a9:88:c6:e6:15:77:18:1f:d9:0e:0e:29:17: c3:87:0c:a8:4a:0d:25:e0:87:67:2e:71:43:8b:e2: b2:3d:04:a8:c9:9f:95:7c:f9:7c:e9:8b:e4:6a:fa: 97:9d:1f:7d:41:4e:6f:4f:76:3b:b8:24:ce:83:9f: e5:22:48:5f:75:46:d5:99:23:66:3b:73:bc:1a:26: 3d:b8:a0:60:79:f2:32:e6:c9:7e:a2:ab:69:15:be: 50:22:6d:54:82:84:62:5a:0e:1d:6a:18:e0:a5:25: 3c:06:b1:a8:66:43:7d:67:f0:1f:83:1f:15:c6:58: 4e:3e:36:05:28:84:00:5a:92:51:9d:32:db:2b:d8: 18:c2:aa:04:ed:80:c6:75:b2:9c:db:a0:70:30:0e: 6a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5E:68:A8:4D:49:16:F0:BD:E6:68:BA:10:0C:7C:9A:0A:AD:03:2B X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231372e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.217.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:ed:38:d0:96:2f:ae:91:aa:50:15:fa:8b:1d:07:ca:ba:30: 22:3d:f7:7c:6f:0d:32:5f:25:a7:0c:b4:98:af:7e:48:b8:eb: f5:03:80:95:13:b4:9d:85:0d:c3:4e:01:7c:f2:9a:9d:56:32: 34:d9:05:8b:47:36:e7:64:66:9c:8f:b6:fa:cd:6d:06:8f:e7: c9:0a:37:16:9d:6f:c2:8f:9f:f0:ee:ef:d3:5a:6d:59:d7:e1: 13:71:a5:4c:2a:7f:78:d4:d8:d9:38:d3:5c:b3:53:71:40:d6: 48:07:c6:97:78:73:84:13:f8:7a:3f:79:0e:de:93:bf:5a:09: f5:fa:a7:86:14:29:dd:21:49:fb:a5:23:ad:c0:a4:9d:b9:88: 00:5e:46:e0:ff:d4:f2:13:a0:85:0c:85:01:a4:25:b5:79:1b: 68:b6:89:7b:69:3d:4b:fc:86:ac:79:74:7f:b5:dd:8b:27:eb: 2c:bb:38:57:be:f1:2b:60:a6:a3:62:41:ec:82:45:54:87:5e: e6:33:2d:30:4c:ee:27:73:4b:01:d9:1f:b0:10:78:34:11:11: 58:91:75:ef:81:b1:62:65:16:16:8f:31:0a:5a:80:88:fb:db: c5:63:77:3f:89:8a:1f:dc:96:3e:0e:9c:93:77:b5:33:f2:d0: ce:cf:ab:12 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUQLE1pXhR7WbIjVuhRdhHq+kgLL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNTA2MTcyMzU4MzBaFw0yNjA2MTcwMDAzMzBaMDMxMTAvBgNV BAMTKDhGNUU2OEE4NEQ0OTE2RjBCREU2NjhCQTEwMEM3QzlBMEFBRDAzMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoN0fgTNvMK37qbqikDro/iPhD gC4LZA2hqk7QeUteiA4EsQAAZZHas5Ldz8XfGj92xw6Cht4ynpoNqF0ffH8I/aw8 OWs1VUxATIIOlmRRkIqIhLIQcJ6723dYuUqPoyhleqCf1xtBKLhUqYjG5hV3GB/Z Dg4pF8OHDKhKDSXgh2cucUOL4rI9BKjJn5V8+Xzpi+Rq+pedH31BTm9Pdju4JM6D n+UiSF91RtWZI2Y7c7waJj24oGB58jLmyX6iq2kVvlAibVSChGJaDh1qGOClJTwG sahmQ31n8B+DHxXGWE4+NgUohABaklGdMtsr2BjCqgTtgMZ1spzboHAwDmr/AgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUj15oqE1JFvC95mi6EAx8mgqtAyswHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzQzNTJlMzgyZTMyMzEzNzJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0I2TANBgkq hkiG9w0BAQsFAAOCAQEAm+040JYvrpGqUBX6ix0HyrowIj33fG8NMl8lpwy0mK9+ SLjr9QOAlRO0nYUNw04BfPKanVYyNNkFi0c252RmnI+2+s1tBo/nyQo3Fp1vwo+f 8O7v01ptWdfhE3GlTCp/eNTY2TjTXLNTcUDWSAfGl3hzhBP4ej95Dt6Tv1oJ9fqn hhQp3SFJ+6UjrcCknbmIAF5G4P/U8hOghQyFAaQltXkbaLaJe2k9S/yGrHl0f7Xd iyfrLLs4V77xK2Cmo2JB7IJFVIde5jMtMEzuJ3NLAdkfsBB4NBERWJF174GxYmUW Fo8xClqAiPvbxWN3P4mKH9yWPg6ck3e1M/LQzs+rEg== -----END CERTIFICATE-----Generated at Sun Dec 21 21:14:13 2025 by rpki-client