This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57974.roa File: AS57974.roa (raw, json) Hash identifier: 6zxezdmLALmVmTSw5JKcQuXBLwVo7vdhZfFS8Rcv0H0= Subject key identifier: 0A:8A:F6:6B:97:70:F4:86:47:42:B4:9F:47:4D:76:35:2D:44:E7:E3 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 7DEB0DCD93F73C83CA7DC836217673D2E494AA95 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57974.roa Signing time: Mon 27 Oct 2025 20:59:47 +0000 ROA not before: Mon 27 Oct 2025 20:54:47 +0000 ROA not after: Mon 26 Oct 2026 20:59:47 +0000 asID: 57974 IP address blocks: 191.101.251.0/24 maxlen: 24 Validation: Failed, certificate revoked on Fri 31 Oct 2025 01:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:eb:0d:cd:93:f7:3c:83:ca:7d:c8:36:21:76:73:d2:e4:94:aa:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Oct 27 20:54:47 2025 GMT Not After : Oct 26 20:59:47 2026 GMT Subject: CN=0A8AF66B9770F4864742B49F474D76352D44E7E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:35:13:c3:63:3d:d8:44:47:64:91:51:1f:07: 42:4a:c6:50:dd:c6:8f:7b:dc:70:fa:85:55:a0:4f: 08:da:74:15:62:93:af:57:ef:c9:ee:ac:35:f2:f8: 4b:98:7e:f2:2d:0c:ec:ea:5a:0d:08:68:29:71:9b: b5:80:4b:73:1c:47:11:d8:e3:3c:5d:13:f3:37:4c: d9:bc:21:3d:3a:55:99:44:4c:a0:e4:e7:46:6d:7a: 60:e6:c1:ec:ea:4e:6a:e7:8e:bf:b4:6f:96:d6:c4: 69:20:89:22:61:3b:21:9a:a6:5d:c7:2e:f2:22:02: 1d:88:33:2b:1e:ac:0b:6e:14:ff:7d:25:18:c6:05: 39:73:3a:d2:13:2c:d2:8c:f6:74:94:91:23:89:f2: a0:7f:aa:3a:da:fe:a4:86:44:b5:fc:c2:66:72:d0: 5a:70:57:50:f2:40:4a:37:0d:e8:ed:08:78:34:f8: 17:a8:e3:22:f5:07:e2:fd:19:af:ac:f7:8f:f6:4d: 9d:80:6a:ac:57:b4:51:3e:7f:8b:17:9c:9b:4e:2d: d1:62:e2:73:30:ee:08:c5:5c:7b:95:50:79:ef:da: b4:a1:a0:a7:95:75:dd:0a:bb:8e:d5:ec:f3:74:b0: ba:2f:85:83:a2:1a:32:df:8b:9c:95:aa:b4:0f:e5: 78:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8A:F6:6B:97:70:F4:86:47:42:B4:9F:47:4D:76:35:2D:44:E7:E3 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57974.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.101.251.0/24 Signature Algorithm: sha256WithRSAEncryption a8:e6:ff:f4:f1:59:6b:e3:62:30:ea:92:8b:aa:f1:28:ae:d5: 03:88:a7:3b:b6:4c:37:ce:51:ec:39:59:59:c3:6f:b0:ca:ba: d5:20:54:64:11:08:62:a2:d2:1d:28:5b:dd:4a:c4:eb:bf:2b: 75:83:83:00:9b:24:32:1f:89:93:22:5e:e1:3a:63:ef:2e:58: cf:92:20:77:44:dc:08:e5:69:3d:fc:aa:5e:6f:e1:8b:77:09: 44:10:23:d3:ed:cb:83:49:a6:7d:8f:2e:2d:f8:08:cb:3d:44: 36:dd:88:62:40:d5:57:f6:cd:90:a1:7d:a6:99:6c:18:e3:cd: 2e:fc:a5:55:bf:a6:83:07:f5:74:af:b0:57:28:78:33:be:fd: e5:09:cc:65:d2:3e:b4:c3:1b:4c:c0:27:74:74:62:14:a2:0b: 1a:98:21:31:43:32:80:6a:79:d1:8d:fe:0a:1e:0e:21:b9:1a: 30:60:39:bf:27:0a:f1:ae:9d:14:cc:90:29:77:dc:a2:3f:03: 86:1a:4e:41:2c:56:3f:07:1c:dd:53:bf:2c:91:fe:22:99:ec: c9:58:10:df:d0:7f:7a:0c:c6:e3:b4:c1:3e:10:b5:91:b9:7d: df:08:d4:7e:a8:8b:b7:fa:6b:5d:c6:9c:c4:60:97:9f:eb:0c: 1d:22:c1:8d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUfesNzZP3PIPKfcg2IXZz0uSUqpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEwMjcyMDU0NDdaFw0yNjEwMjYyMDU5NDdaMDMxMTAvBgNV BAMTKDBBOEFGNjZCOTc3MEY0ODY0NzQyQjQ5RjQ3NEQ3NjM1MkQ0NEU3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNRPDYz3YREdkkVEfB0JKxlDd xo973HD6hVWgTwjadBVik69X78nurDXy+EuYfvItDOzqWg0IaClxm7WAS3McRxHY 4zxdE/M3TNm8IT06VZlETKDk50ZtemDmwezqTmrnjr+0b5bWxGkgiSJhOyGapl3H LvIiAh2IMyserAtuFP99JRjGBTlzOtITLNKM9nSUkSOJ8qB/qjra/qSGRLX8wmZy 0FpwV1DyQEo3DejtCHg0+Beo4yL1B+L9Ga+s94/2TZ2AaqxXtFE+f4sXnJtOLdFi 4nMw7gjFXHuVUHnv2rShoKeVdd0Ku47V7PN0sLovhYOiGjLfi5yVqrQP5Xh1AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUCor2a5dw9IZHQrSfR012NS1E5+MwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTc5NzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/Zfsw DQYJKoZIhvcNAQELBQADggEBAKjm//TxWWvjYjDqkouq8Siu1QOIpzu2TDfOUew5 WVnDb7DKutUgVGQRCGKi0h0oW91KxOu/K3WDgwCbJDIfiZMiXuE6Y+8uWM+SIHdE 3AjlaT38ql5v4Yt3CUQQI9Pty4NJpn2PLi34CMs9RDbdiGJA1Vf2zZChfaaZbBjj zS78pVW/poMH9XSvsFcoeDO+/eUJzGXSPrTDG0zAJ3R0YhSiCxqYITFDMoBqedGN /goeDiG5GjBgOb8nCvGunRTMkCl33KI/A4YaTkEsVj8HHN1TvyyR/iKZ7MlYEN/Q f3oMxuO0wT4QtZG5fd8I1H6oi7f6a13GnMRgl5/rDB0iwY0= -----END CERTIFICATE-----Generated at Thu Dec 18 12:44:15 2025 by rpki-client