This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e20383334.roa File: 3138352e3231332e3234382e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: dht8/6SE4tXRu8KcISabBBbGhLFk1Y7fd/sG6ZbZPD4= Subject key identifier: 01:DF:FD:59:DA:DE:16:DD:0D:B0:C9:80:1B:40:74:9C:B1:E8:A6:9E Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Certificate serial: 350205CD724D865FBC78659CB1F46FCE07046F07 Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e20383334.roa Signing time: Sat 11 Oct 2025 00:02:37 +0000 ROA not before: Fri 10 Oct 2025 23:57:37 +0000 ROA not after: Sat 10 Oct 2026 00:02:37 +0000 asID: 834 IP address blocks: 185.213.248.0/24 maxlen: 24 Validation: Failed, certificate revoked on Sat 11 Oct 2025 03:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:02:05:cd:72:4d:86:5f:bc:78:65:9c:b1:f4:6f:ce:07:04:6f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3 Validity Not Before: Oct 10 23:57:37 2025 GMT Not After : Oct 10 00:02:37 2026 GMT Subject: CN=01DFFD59DADE16DD0DB0C9801B40749CB1E8A69E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:36:6c:af:37:b9:c3:da:87:96:a4:dd:e6:12: 9e:0b:69:26:8c:4a:71:d8:1e:81:1f:a2:f7:03:0a: 59:bd:c1:25:37:d0:08:47:b3:a8:09:6c:e0:5f:30: 5d:89:40:e3:4a:22:d4:66:cb:ad:f0:d4:4e:fe:9e: 4b:89:7e:49:b7:93:25:b7:a8:9f:fc:d7:61:39:cf: 0b:eb:b8:5f:08:4a:f9:18:de:78:a5:e0:b2:0c:00: f8:be:9b:ac:c9:94:f2:20:a6:a4:36:7d:8d:c9:72: f0:f3:5f:17:3a:9d:48:c6:d8:34:6b:e7:90:a4:0b: eb:85:49:3c:8f:ef:8e:86:25:16:91:83:b8:1b:c4: 8e:b4:d7:a9:c9:4c:72:46:6a:7b:d1:8c:49:dc:36: 95:55:99:86:fd:f2:b2:a4:68:53:ba:ac:05:1c:70: e3:13:85:93:ec:a4:70:84:8c:40:a7:40:41:9b:92: 81:f2:54:a7:ff:0e:e9:59:ac:fe:09:1c:2c:12:0a: 53:cc:12:1f:8e:c4:1d:94:38:a1:07:fb:91:d4:f1: d8:3c:f1:1a:6c:27:e0:1a:2e:ba:87:4d:12:91:54: 9e:b0:13:f4:de:53:05:83:40:cc:c4:37:7c:dc:8e: a2:4d:1f:09:13:34:b2:24:f2:a9:d4:db:0a:5f:12: 80:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DF:FD:59:DA:DE:16:DD:0D:B0:C9:80:1B:40:74:9C:B1:E8:A6:9E X509v3 Authority Key Identifier: keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.248.0/24 Signature Algorithm: sha256WithRSAEncryption 29:b8:54:ad:04:0d:b2:96:86:e2:84:65:71:88:20:c4:89:0a: ec:92:70:59:6c:dc:02:f9:8f:52:7f:0d:f9:01:7f:b3:61:41: 6d:67:4c:c3:58:0e:e1:d3:af:73:7c:cc:f6:cd:c6:0c:63:cb: 8f:74:f6:d3:0f:6e:3a:d6:fa:b0:d9:5f:fb:69:1b:02:d5:3e: 94:68:7a:6e:10:72:08:3a:ae:ea:80:40:e4:8d:8d:8d:24:fd: 7c:e5:a8:b6:5f:69:1e:17:46:40:aa:93:cb:59:5a:cd:43:c7: bf:04:11:8e:45:a3:a7:b6:d6:c3:2b:b8:dd:3f:2d:89:b9:cb: cf:b0:aa:d4:7e:10:91:56:84:69:90:63:6e:ff:48:0d:fc:15: 71:fd:34:22:c7:33:db:7a:a1:24:87:9c:36:56:42:2f:4a:e6: b4:ef:03:c8:e9:ce:68:73:2b:3a:0e:ed:ec:a3:04:46:8a:24: fb:d7:f0:6e:97:bf:01:80:6d:9f:37:19:71:70:b6:91:ec:04: b5:53:3a:f6:45:41:50:ae:16:bf:fc:c4:25:ca:b0:fa:00:c2: af:2a:e1:49:6b:66:2f:e0:4d:88:1a:43:15:71:51:4a:ff:1b: 69:e4:00:ee:8e:77:2e:11:e1:07:d9:dd:45:5d:b1:d9:b4:59: 53:ca:3a:5e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNQIFzXJNhl+8eGWcsfRvzgcEbwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQ3ZmZhZTMwMGRlZjA4NzZiZjg0ODkwZmI2ZWExN2Jl ODQxYTRkMzAeFw0yNTEwMTAyMzU3MzdaFw0yNjEwMTAwMDAyMzdaMDMxMTAvBgNV BAMTKDAxREZGRDU5REFERTE2REQwREIwQzk4MDFCNDA3NDlDQjFFOEE2OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4NmyvN7nD2oeWpN3mEp4LaSaM SnHYHoEfovcDClm9wSU30AhHs6gJbOBfMF2JQONKItRmy63w1E7+nkuJfkm3kyW3 qJ/812E5zwvruF8ISvkY3nil4LIMAPi+m6zJlPIgpqQ2fY3JcvDzXxc6nUjG2DRr 55CkC+uFSTyP746GJRaRg7gbxI6016nJTHJGanvRjEncNpVVmYb98rKkaFO6rAUc cOMThZPspHCEjECnQEGbkoHyVKf/DulZrP4JHCwSClPMEh+OxB2UOKEH+5HU8dg8 8RpsJ+AaLrqHTRKRVJ6wE/TeUwWDQMzEN3zcjqJNHwkTNLIk8qnU2wpfEoCHAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUAd/9WdreFt0NsMmAG0B0nLHopp4wHwYDVR0j BBgwFoAUDX/64wDe8Idr+EiQ+26he+hBpNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExM2RkYTYtN2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4 Y2ExLzEvMEQ3RkZBRTMwMERFRjA4NzZCRjg0ODkwRkI2RUExN0JFODQxQTREMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RYXzY0d0RlOElkci1FaVEtMjZoZS1o QnBOTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExM2RkYTYt N2FkZS00NDVkLThjNmUtNDQ4YTc4ZTQ4Y2ExLzEvMzEzODM1MmUzMjMxMzMyZTMy MzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnV +DANBgkqhkiG9w0BAQsFAAOCAQEAKbhUrQQNspaG4oRlcYggxIkK7JJwWWzcAvmP Un8N+QF/s2FBbWdMw1gO4dOvc3zM9s3GDGPLj3T20w9uOtb6sNlf+2kbAtU+lGh6 bhByCDqu6oBA5I2NjST9fOWotl9pHhdGQKqTy1lazUPHvwQRjkWjp7bWwyu43T8t ibnLz7Cq1H4QkVaEaZBjbv9IDfwVcf00Iscz23qhJIecNlZCL0rmtO8DyOnOaHMr Og7t7KMERook+9fwbpe/AYBtnzcZcXC2kewEtVM69kVBUK4Wv/zEJcqw+gDCryrh SWtmL+BNiBpDFXFRSv8baeQA7o53LhHhB9ndRV2x2bRZU8o6Xg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:06:04 2025 by rpki-client