This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ERkuFBQNHr7Ob2tmxWoC-pCoK-U.roa File: ERkuFBQNHr7Ob2tmxWoC-pCoK-U.roa (raw, json) Hash identifier: m84GmXfJxu7zeADs+QSk3QYtXnoQGoGLO9wW/x5GO6U= Subject key identifier: 11:19:2E:14:14:0D:1E:BE:CE:6F:6B:66:C5:6A:02:FA:90:A8:2B:E5 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019ACF71BA7BA57985359E8F43BC276E84B1 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ERkuFBQNHr7Ob2tmxWoC-pCoK-U.roa Signing time: Sat 29 Nov 2025 11:48:48 +0000 ROA not before: Sat 29 Nov 2025 11:48:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44208 IP address blocks: 31.170.48.0/20 maxlen: 24 37.49.148.0/24 maxlen: 24 94.74.128.0/18 maxlen: 24 94.74.136.0/24 maxlen: 24 94.74.147.0/24 maxlen: 24 94.74.152.0/22 maxlen: 24 94.74.157.0/24 maxlen: 24 94.74.158.0/24 maxlen: 24 94.74.164.0/24 maxlen: 24 94.74.165.0/24 maxlen: 24 94.74.166.0/23 maxlen: 23 94.74.168.0/23 maxlen: 24 94.74.182.0/24 maxlen: 24 94.74.187.0/24 maxlen: 24 94.74.190.0/24 maxlen: 24 94.74.191.0/24 maxlen: 24 109.203.176.0/21 maxlen: 24 176.46.134.0/24 maxlen: 24 176.46.139.0/24 maxlen: 24 176.46.141.0/24 maxlen: 24 176.46.144.0/24 maxlen: 24 176.46.147.0/24 maxlen: 24 176.46.148.0/24 maxlen: 24 176.46.149.0/24 maxlen: 24 176.46.152.0/24 maxlen: 24 176.46.153.0/24 maxlen: 24 176.46.154.0/24 maxlen: 24 176.46.155.0/24 maxlen: 24 176.46.156.0/24 maxlen: 24 176.46.157.0/24 maxlen: 24 176.46.158.0/24 maxlen: 24 Validation: Failed, certificate revoked on Sat 06 Dec 2025 06:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cf:71:ba:7b:a5:79:85:35:9e:8f:43:bc:27:6e:84:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Nov 29 11:48:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=11192e14140d1ebece6f6b66c56a02fa90a82be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:76:e6:2c:1e:6e:f5:b9:7d:16:93:11:18:7e: c7:e9:b1:20:d5:80:1b:9f:c0:a6:d3:4c:b2:cf:ca: 7a:1f:92:94:b8:02:ac:d5:ca:95:25:87:d9:e9:e4: 05:d3:66:49:b6:19:08:81:76:28:6f:ac:73:9e:40: fb:17:4c:3e:63:06:4c:c6:15:3a:e2:77:4c:a7:22: 2f:ed:62:be:07:95:72:0f:ff:4a:67:2a:99:9d:ba: 2c:38:c9:27:b6:3a:dc:dc:25:5d:9d:cb:f2:aa:00: ae:bb:ef:42:79:fb:35:8e:d2:6d:9c:90:f2:74:ae: 05:82:e8:b5:9c:51:11:5c:c2:e7:2d:4b:81:b7:e6: 0c:6d:d7:a0:bf:82:b8:c6:90:5e:f9:85:47:b6:e6: f6:bb:6c:da:1c:64:a6:d3:aa:81:6d:ce:ec:c0:f3: 28:dc:bd:dd:ea:3b:ae:9f:34:8e:cb:6c:60:b7:62: 48:49:e0:a5:49:52:1d:8a:5d:c6:a7:bc:b4:57:74: 9e:63:0c:aa:10:75:e8:84:74:11:60:71:ad:34:d1: 27:15:0e:bf:15:ee:50:f4:e9:63:96:bf:45:89:a0: 90:13:13:80:00:53:e5:0e:66:b5:21:c8:1b:b8:91: 23:40:be:b3:65:dd:26:68:af:78:83:13:a3:55:64: f7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:19:2E:14:14:0D:1E:BE:CE:6F:6B:66:C5:6A:02:FA:90:A8:2B:E5 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ERkuFBQNHr7Ob2tmxWoC-pCoK-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.48.0/20 37.49.148.0/24 94.74.128.0/18 109.203.176.0/21 176.46.134.0/24 176.46.139.0/24 176.46.141.0/24 176.46.144.0/24 176.46.147.0-176.46.149.255 176.46.152.0-176.46.158.255 Signature Algorithm: sha256WithRSAEncryption 80:9e:f1:5a:13:16:50:a5:45:d4:7e:d8:a9:f8:82:b9:50:a0: 02:92:d1:28:95:df:95:38:f2:cb:c8:d0:0e:c1:3f:e0:16:6c: 5c:01:3c:ed:9b:31:c3:33:b5:7e:f8:14:5a:9f:aa:b9:d3:ae: 43:6d:5e:8b:6f:c4:c4:2d:58:75:9b:a9:bc:b0:99:5b:35:8d: 92:76:b6:34:71:4b:9d:48:2e:fe:65:7e:cd:84:1d:c6:78:f8: 06:40:d1:9f:03:65:f2:54:26:5b:62:fd:3b:e4:b7:40:a3:12: b5:9c:a6:e7:a8:64:37:df:7d:39:e3:96:17:69:fe:eb:3b:13: 6a:02:98:59:95:7d:90:7b:d9:43:29:b3:e4:e1:a0:3f:7d:97: 70:d7:08:6f:0f:fb:ca:83:0e:ff:b5:28:97:60:4b:a3:a0:a9: 3d:76:fb:d4:47:39:e5:9b:2c:06:a3:cd:9f:58:ca:f6:66:43: 09:34:3a:05:9c:71:38:0a:63:e9:cb:b6:2f:72:a7:ec:f9:9d: 9a:68:87:9e:7a:4d:99:06:bc:00:5a:3f:ef:41:38:d2:c1:1f: 53:aa:42:ce:59:e2:f1:c6:53:64:04:6a:37:fc:ba:35:44:85: 8e:84:93:6e:99:8d:cb:41:f6:78:6b:d4:4e:eb:20:28:c6:53: 8c:1f:c3:94 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZrPcbp7pXmFNZ6PQ7wnboSxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjUxMTI5MTE0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTE5MmUxNDE0MGQxZWJlY2U2ZjZiNjZjNTZhMDJmYTkwYTgyYmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3bmLB5u9bl9FpMRGH7H6bEg1YAb n8Cm00yyz8p6H5KUuAKs1cqVJYfZ6eQF02ZJthkIgXYob6xznkD7F0w+YwZMxhU6 4ndMpyIv7WK+B5VyD/9KZyqZnbosOMkntjrc3CVdncvyqgCuu+9Cefs1jtJtnJDy dK4Fgui1nFERXMLnLUuBt+YMbdegv4K4xpBe+YVHtub2u2zaHGSm06qBbc7swPMo 3L3d6juunzSOy2xgt2JISeClSVIdil3Gp7y0V3SeYwyqEHXohHQRYHGtNNEnFQ6/ Fe5Q9Oljlr9FiaCQExOAAFPlDma1IcgbuJEjQL6zZd0maK94gxOjVWT3xQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFBEZLhQUDR6+zm9rZsVqAvqQqCvlMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvRVJrdUZCUU5IcjdPYjJ0bXhXb0MtcENvSy1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQEH6owAwQA JTGUAwQGXkqAAwQDbcuwAwQAsC6GAwQAsC6LAwQAsC6NAwQAsC6QMAwDBACwLpMD BAGwLpQwDAMEA7AumAMEALAunjANBgkqhkiG9w0BAQsFAAOCAQEAgJ7xWhMWUKVF 1H7YqfiCuVCgApLRKJXflTjyy8jQDsE/4BZsXAE87ZsxwzO1fvgUWp+qudOuQ21e i2/ExC1YdZupvLCZWzWNkna2NHFLnUgu/mV+zYQdxnj4BkDRnwNl8lQmW2L9O+S3 QKMStZym56hkN999OeOWF2n+6zsTagKYWZV9kHvZQymz5OGgP32XcNcIbw/7yoMO /7Uol2BLo6CpPXb71Ec55ZssBqPNn1jK9mZDCTQ6BZxxOApj6cu2L3Kn7PmdmmiH nnpNmQa8AFo/70E40sEfU6pCzlni8cZTZARqN/y6NUSFjoSTbpmNy0H2eGvUTusg KMZTjB/DlA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:45:41 2025 by rpki-client