This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207695.roa File: AS207695.roa (raw, json) Hash identifier: yQfqSSdHoPlU3f0vpwHnU9fMfKXqiboZzSZfBIHm4c0= Subject key identifier: 86:3B:22:A5:04:BE:E9:FA:03:FD:10:A4:DC:9F:00:A4:96:5F:6D:38 Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 77572A68CED082BC55869D32B91E0571DBE8B435 Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207695.roa Signing time: Fri 12 Sep 2025 14:06:35 +0000 ROA not before: Fri 12 Sep 2025 14:01:35 +0000 ROA not after: Fri 11 Sep 2026 14:06:35 +0000 asID: 207695 IP address blocks: 45.152.240.0/24 maxlen: 24 45.152.241.0/24 maxlen: 24 Validation: Failed, certificate revoked on Sun 12 Oct 2025 13:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:57:2a:68:ce:d0:82:bc:55:86:9d:32:b9:1e:05:71:db:e8:b4:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Sep 12 14:01:35 2025 GMT Not After : Sep 11 14:06:35 2026 GMT Subject: CN=863B22A504BEE9FA03FD10A4DC9F00A4965F6D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:56:c7:d2:3a:e6:c5:a9:e3:20:d7:f6:d0:5f: 37:c9:31:dc:4f:b7:01:e9:ed:8b:2c:46:57:f4:21: 33:b9:62:90:6b:62:e5:99:6a:46:ca:fd:b4:b2:f3: f5:6d:04:ea:43:0d:5d:bb:0f:03:18:bd:85:66:a9: 1e:9d:c1:6a:5c:47:d1:6c:c5:19:8b:ab:f6:94:1c: 5a:67:82:b0:b4:6c:27:91:99:ef:ed:33:0a:7f:fc: 2e:2a:e6:ad:c3:45:b0:d3:b0:93:d7:ab:1d:fa:5f: 08:40:29:64:77:cd:a6:5a:46:da:4b:71:6b:2e:74: 73:cd:73:a8:74:8b:d0:31:49:f7:ae:89:50:20:4e: 61:85:fb:3d:31:72:02:b8:4a:a1:57:a6:c1:ee:1b: 40:6c:5d:94:b0:55:0d:de:2d:53:95:95:ac:4a:29: 90:cf:e9:8d:26:d9:e5:54:32:93:d2:47:2c:0d:d1: 06:14:ca:b3:44:54:35:d5:35:90:4e:5d:58:82:e4: b7:17:97:00:33:81:bd:e8:19:13:da:f5:da:cd:87: 23:bf:f6:e9:af:9e:25:ae:9b:5c:4f:ef:99:c7:dd: 2f:3b:80:2d:c4:d5:f4:85:a5:2e:ee:70:65:eb:55: 3c:9c:4b:65:28:85:49:f6:05:88:7a:87:4a:e1:e3: b1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3B:22:A5:04:BE:E9:FA:03:FD:10:A4:DC:9F:00:A4:96:5F:6D:38 X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207695.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.240.0/23 Signature Algorithm: sha256WithRSAEncryption d1:cb:40:ac:c5:46:fa:52:36:c9:28:c1:f8:09:54:6b:21:9d: c9:7d:ec:f3:79:76:0a:e6:09:ac:f1:5a:fd:46:e8:7b:b2:49: 5e:9d:99:33:ab:36:ef:6a:6c:67:ac:e5:d7:19:1e:a9:f1:f2: 7d:29:d5:59:df:7f:68:fb:07:e1:32:a8:f8:80:9e:f0:b5:64: d5:dc:e7:31:a6:28:3e:70:f3:47:09:62:9f:48:5d:41:49:e5: 85:42:cc:60:5e:c3:f2:cb:a8:5e:4a:55:5b:78:e3:9f:5b:5a: 2d:36:34:1f:d2:4a:70:c5:c9:37:7c:fe:ac:3f:34:c2:c6:b3: ed:3e:bb:6e:99:9a:21:56:b9:ad:2d:3a:dd:75:53:4c:2b:8b: c2:41:73:91:db:be:2b:a3:81:a0:73:63:b2:07:46:ca:11:33: ef:f4:b0:0f:1d:a1:a2:d6:f9:c9:7f:77:b5:d4:42:13:c9:96: fe:5c:8c:1c:3d:7a:7c:9c:a6:0e:18:29:5a:78:42:cf:9b:2e: 22:00:03:4a:1e:a4:84:86:fe:26:5c:90:48:e7:c7:f8:3e:2d: cb:20:57:15:a8:79:8a:29:a9:77:2b:36:b7:03:06:d4:46:30: 0b:b8:10:c0:53:3f:5e:43:a1:33:e5:39:0e:8f:59:d4:c5:d1: 7d:f6:93:97 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUd1cqaM7QgrxVhp0yuR4FcdvotDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTA5MTIxNDAxMzVaFw0yNjA5MTExNDA2MzVaMDMxMTAvBgNV BAMTKDg2M0IyMkE1MDRCRUU5RkEwM0ZEMTBBNERDOUYwMEE0OTY1RjZEMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwVsfSOubFqeMg1/bQXzfJMdxP twHp7YssRlf0ITO5YpBrYuWZakbK/bSy8/VtBOpDDV27DwMYvYVmqR6dwWpcR9Fs xRmLq/aUHFpngrC0bCeRme/tMwp//C4q5q3DRbDTsJPXqx36XwhAKWR3zaZaRtpL cWsudHPNc6h0i9AxSfeuiVAgTmGF+z0xcgK4SqFXpsHuG0BsXZSwVQ3eLVOVlaxK KZDP6Y0m2eVUMpPSRywN0QYUyrNEVDXVNZBOXViC5LcXlwAzgb3oGRPa9drNhyO/ 9umvniWum1xP75nH3S87gC3E1fSFpS7ucGXrVTycS2UohUn2BYh6h0rh47GhAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUhjsipQS+6foD/RCk3J8ApJZfbTgwHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjA3Njk1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZjw MA0GCSqGSIb3DQEBCwUAA4IBAQDRy0CsxUb6UjbJKMH4CVRrIZ3JfezzeXYK5gms 8Vr9Ruh7sklenZkzqzbvamxnrOXXGR6p8fJ9KdVZ339o+wfhMqj4gJ7wtWTV3Ocx pig+cPNHCWKfSF1BSeWFQsxgXsPyy6heSlVbeOOfW1otNjQf0kpwxck3fP6sPzTC xrPtPrtumZohVrmtLTrddVNMK4vCQXOR274ro4Ggc2OyB0bKETPv9LAPHaGi1vnJ f3e11EITyZb+XIwcPXp8nKYOGClaeELPmy4iAANKHqSEhv4mXJBI58f4Pi3LIFcV qHmKKal3Kza3AwbURjALuBDAUz9eQ6Ez5TkOj1nUxdF99pOX -----END CERTIFICATE-----Generated at Tue Dec 16 04:41:16 2025 by rpki-client