This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fMrNZrg_G3CN-zqyH1HaVRSISno.roa File: fMrNZrg_G3CN-zqyH1HaVRSISno.roa (raw, json) Hash identifier: Q+e3i3/nCIvTfg9s+ITyEaevKOv//L4AKsQdM9dBtT0= Subject key identifier: 7C:CA:CD:66:B8:3F:1B:70:8D:FB:3A:B2:1F:51:DA:55:14:88:4A:7A Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019A9E18C75A78BDA8FD5B7C80802D1EA052 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fMrNZrg_G3CN-zqyH1HaVRSISno.roa Signing time: Wed 19 Nov 2025 21:50:15 +0000 ROA not before: Wed 19 Nov 2025 21:50:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 100 IP address blocks: 91.211.114.0/24 maxlen: 24 Validation: Failed, certificate revoked on Thu 20 Nov 2025 20:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9e:18:c7:5a:78:bd:a8:fd:5b:7c:80:80:2d:1e:a0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Nov 19 21:50:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7ccacd66b83f1b708dfb3ab21f51da5514884a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:bf:a6:13:3e:63:86:f5:0b:ab:10:28:04: 7a:0d:52:03:4d:0f:07:27:a3:78:c0:92:d7:63:f5: b2:a8:dc:69:73:bd:d0:19:5e:68:78:41:2e:32:4e: a4:ac:be:bd:73:14:27:98:16:01:4d:d8:b6:c7:a1: 9b:6a:3d:97:6e:06:2d:91:46:06:9f:2f:88:03:ba: f6:a7:7a:dd:70:bf:88:c3:31:a7:44:f3:78:50:4c: 0c:61:c6:03:e6:22:87:7c:38:18:4d:ab:22:52:b7: 95:51:e3:83:c6:73:7c:50:ed:d2:ac:1f:db:bc:10: f8:35:66:cd:a5:37:af:64:b0:74:dc:38:02:a4:2a: b3:7b:38:f8:cf:e4:1c:dc:5d:67:53:e4:b7:bc:8b: 32:98:59:66:9e:b3:dd:54:03:a8:ee:9b:24:41:48: 4c:38:92:08:bc:f6:44:d2:4f:50:33:71:55:88:d3: 87:bf:e5:fb:41:37:a9:a1:fc:b3:48:b8:47:a0:90: 39:61:e3:a0:f6:a2:75:39:49:65:a9:0b:9a:93:1e: af:da:b7:14:2d:76:90:cf:21:8c:b6:c9:6a:ae:5a: f9:5a:ad:57:47:e3:65:fe:f7:a2:ed:f7:e8:fd:53: af:6a:b9:79:44:55:c9:7b:9a:b2:dd:3f:62:0d:50: c5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CA:CD:66:B8:3F:1B:70:8D:FB:3A:B2:1F:51:DA:55:14:88:4A:7A X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/fMrNZrg_G3CN-zqyH1HaVRSISno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.114.0/24 Signature Algorithm: sha256WithRSAEncryption 67:99:a6:c9:1d:50:92:62:6c:39:3a:52:0f:ac:36:6e:0c:b3: 22:c8:13:26:24:3c:80:bf:ff:ca:2e:b2:85:a7:93:cb:7d:8a: d8:c5:5c:ac:75:46:8c:82:57:b9:55:4e:2e:8b:cd:f3:a2:65: 39:79:d0:e1:e2:fc:c8:1f:e4:68:11:04:55:72:6e:86:e1:e9: db:0d:da:ee:c6:46:97:89:41:b9:4a:cc:b6:31:ed:0b:6b:6b: ef:0f:0d:df:cd:53:2c:a0:99:e2:bf:12:23:f4:b4:58:b2:06: 47:8e:d5:b6:d1:37:5a:f8:3a:fe:5a:82:15:af:b6:df:2b:a2: 9f:c6:a8:b8:e6:0f:9b:2d:5e:b0:1f:bc:e2:34:45:a1:33:e1: b0:e8:7b:f0:6c:c7:64:a4:7b:8b:bb:f6:b7:de:b2:5b:61:5c: ec:bc:d8:2b:ac:ad:7b:b9:06:db:a9:4f:3d:67:b5:89:d1:89: cc:b1:60:67:36:a6:29:16:ff:ce:2d:1b:c1:e4:de:66:e3:9d: b6:2e:29:cd:40:eb:cb:53:44:cf:53:f7:e8:7d:f1:e4:32:95: 7b:bb:36:48:60:8d:2c:71:46:87:97:6e:bc:08:71:b4:5a:71: 94:ef:ed:91:29:32:29:2b:bb:a1:d1:5d:4a:ae:73:ae:8b:17: c6:a5:c5:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqeGMdaeL2o/Vt8gIAtHqBSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjUxMTE5MjE1MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2NhY2Q2NmI4M2YxYjcwOGRmYjNhYjIxZjUxZGE1NTE0ODg0YTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtju/phM+Y4b1C6sQKAR6DVIDTQ8H J6N4wJLXY/WyqNxpc73QGV5oeEEuMk6krL69cxQnmBYBTdi2x6Gbaj2XbgYtkUYG ny+IA7r2p3rdcL+IwzGnRPN4UEwMYcYD5iKHfDgYTasiUreVUeODxnN8UO3SrB/b vBD4NWbNpTevZLB03DgCpCqzezj4z+Qc3F1nU+S3vIsymFlmnrPdVAOo7pskQUhM OJIIvPZE0k9QM3FViNOHv+X7QTepofyzSLhHoJA5YeOg9qJ1OUllqQuakx6v2rcU LXaQzyGMtslqrlr5Wq1XR+Nl/vei7ffo/VOvarl5RFXJe5qy3T9iDVDFUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzKzWa4Pxtwjfs6sh9R2lUUiEp6MB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvZk1yTlpyZ19HM0NOLXpxeUgxSGFWUlNJU25vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9NyMA0G CSqGSIb3DQEBCwUAA4IBAQBnmabJHVCSYmw5OlIPrDZuDLMiyBMmJDyAv//KLrKF p5PLfYrYxVysdUaMgle5VU4ui83zomU5edDh4vzIH+RoEQRVcm6G4enbDdruxkaX iUG5Ssy2Me0La2vvDw3fzVMsoJnivxIj9LRYsgZHjtW20Tda+Dr+WoIVr7bfK6Kf xqi45g+bLV6wH7ziNEWhM+Gw6HvwbMdkpHuLu/a33rJbYVzsvNgrrK17uQbbqU89 Z7WJ0YnMsWBnNqYpFv/OLRvB5N5m4522LinNQOvLU0TPU/foffHkMpV7uzZIYI0s cUaHl268CHG0WnGU7+2RKTIpK7uh0V1KrnOuixfGpcV1 -----END CERTIFICATE-----Generated at Tue Dec 16 09:20:42 2025 by rpki-client