This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/8CnbhavwqoXMoB4zbNft7RwtJfA.roa File: 8CnbhavwqoXMoB4zbNft7RwtJfA.roa (raw, json) Hash identifier: HW6AGKloFLZUlOm5PZJn2mS70BLl+JE3gf4F7V1Fykc= Subject key identifier: F0:29:DB:85:AB:F0:AA:85:CC:A0:1E:33:6C:D7:ED:ED:1C:2D:25:F0 Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019BF2D038501AEEB387190DD119DBD1AFE7 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/8CnbhavwqoXMoB4zbNft7RwtJfA.roa Signing time: Sun 25 Jan 2026 01:41:30 +0000 ROA not before: Sun 25 Jan 2026 01:41:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202464 IP address blocks: 2a14:67c2:8800::/40 maxlen: 48 2a14:67c3:6880::/48 maxlen: 48 Validation: Failed, certificate revoked on Sun 25 Jan 2026 07:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:d0:38:50:1a:ee:b3:87:19:0d:d1:19:db:d1:af:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Jan 25 01:41:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f029db85abf0aa85cca01e336cd7eded1c2d25f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d5:56:10:22:58:ef:4d:bf:6e:8d:41:d3:e4: 35:d2:12:3e:9d:fe:2a:dd:57:28:0c:a9:db:62:ae: be:2f:e2:7f:ae:3b:60:9f:6a:d2:b8:66:2d:bf:bb: af:6e:5c:e2:ca:fd:85:5f:54:29:51:3e:76:7f:b1: 20:dc:29:a0:17:94:c0:b1:c4:21:69:64:cc:a8:51: 37:fa:bf:b6:e9:50:85:58:7e:16:a6:9c:0c:d0:6e: 08:f3:9f:ae:f0:aa:b9:25:42:2e:7e:8a:f2:ea:5e: 21:1e:d2:d4:00:57:f8:14:23:57:17:1f:25:8d:32: 2b:50:19:a7:85:f6:36:f3:23:e8:ca:59:6a:f9:09: e1:9b:4e:55:33:75:77:02:43:d3:db:31:c3:4e:f4: f3:fd:72:dd:45:81:be:01:b2:95:21:89:6d:f5:bb: cc:05:80:a9:64:21:98:9a:ad:3f:69:da:5f:b9:e2: 59:ff:f6:b5:d6:8b:2f:79:44:dc:2f:f8:ea:0f:6c: 95:13:74:6f:f7:86:66:e0:1f:46:6a:9b:c6:c2:95: 5f:09:ba:28:6b:18:ab:53:74:40:8f:cb:30:bb:0c: fb:cf:82:ef:91:f3:3b:82:48:1a:7f:51:d4:98:b8: fd:19:78:e0:36:c9:f4:31:9a:ae:2a:ea:99:00:a4: 71:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:29:DB:85:AB:F0:AA:85:CC:A0:1E:33:6C:D7:ED:ED:1C:2D:25:F0 X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/8CnbhavwqoXMoB4zbNft7RwtJfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c2:8800::/40 2a14:67c3:6880::/48 Signature Algorithm: sha256WithRSAEncryption 75:bc:9e:d6:04:a3:76:25:af:3b:c2:a6:aa:ad:fb:9e:6b:55: 8b:0a:43:af:e5:a2:7c:95:96:cf:61:9a:18:7d:c3:f9:fe:ac: 8f:42:70:da:f4:80:ca:cf:16:5a:33:8d:3a:65:e6:75:25:54: 6a:43:1f:97:7d:dd:bf:8c:32:41:5a:ca:7f:e9:50:37:12:1e: c4:af:b6:49:56:c0:6b:74:25:87:e5:ae:a5:dc:94:51:86:64: 36:ad:8e:90:88:f2:9b:86:b0:d6:fe:f4:88:4f:f6:f9:51:0e: 4e:5a:24:98:fd:b5:c5:3c:7e:90:fc:8a:d8:61:83:fa:a6:b9: 5f:c1:ea:74:0d:dd:08:b7:51:5a:40:ac:86:4c:f9:3b:5e:24: 7c:ad:21:dc:39:e6:0a:bb:3b:f8:a6:68:5e:0c:08:f0:c3:c3: 74:ff:54:66:00:99:19:5c:bd:05:21:d1:9e:2d:4c:01:f6:d0: 75:c8:ac:21:71:d0:4a:aa:90:50:19:21:f9:65:95:5f:97:a5: 7a:27:86:c7:90:e3:d3:44:d2:b4:9d:0e:4e:d6:72:a3:2a:61: ea:ab:7f:69:ad:e2:24:20:92:08:8c:90:de:94:4a:94:18:0c: 25:7c:c2:70:0d:1a:d4:2c:54:11:9f:ad:60:cb:86:3e:c1:d4: 6f:3d:6b:b4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZvy0DhQGu6zhxkN0Rnb0a/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjYwMTI1MDE0MTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDI5ZGI4NWFiZjBhYTg1Y2NhMDFlMzM2Y2Q3ZWRlZDFjMmQyNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldVWECJY702/bo1B0+Q10hI+nf4q 3VcoDKnbYq6+L+J/rjtgn2rSuGYtv7uvblziyv2FX1QpUT52f7Eg3CmgF5TAscQh aWTMqFE3+r+26VCFWH4WppwM0G4I85+u8Kq5JUIufory6l4hHtLUAFf4FCNXFx8l jTIrUBmnhfY28yPoyllq+Qnhm05VM3V3AkPT2zHDTvTz/XLdRYG+AbKVIYlt9bvM BYCpZCGYmq0/adpfueJZ//a11osveUTcL/jqD2yVE3Rv94Zm4B9GapvGwpVfCboo axirU3RAj8swuwz7z4LvkfM7gkgaf1HUmLj9GXjgNsn0MZquKuqZAKRx1QIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFPAp24Wr8KqFzKAeM2zX7e0cLSXwMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvOENuYmhhdndxb1hNb0I0emJOZnQ3Und0SmZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYAKhRnwogD BwAqFGfDaIAwDQYJKoZIhvcNAQELBQADggEBAHW8ntYEo3YlrzvCpqqt+55rVYsK Q6/lonyVls9hmhh9w/n+rI9CcNr0gMrPFlozjTpl5nUlVGpDH5d93b+MMkFayn/p UDcSHsSvtklWwGt0JYflrqXclFGGZDatjpCI8puGsNb+9IhP9vlRDk5aJJj9tcU8 fpD8ithhg/qmuV/B6nQN3Qi3UVpArIZM+TteJHytIdw55gq7O/imaF4MCPDDw3T/ VGYAmRlcvQUh0Z4tTAH20HXIrCFx0EqqkFAZIflllV+XpXonhseQ49NE0rSdDk7W cqMqYeqrf2mt4iQgkgiMkN6USpQYDCV8wnANGtQsVBGfrWDLhj7B1G89a7Q= -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:26 2026 by rpki-client