This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/53KZQpzBlq63Iqzc72mRC9HJRrU.roa File: 53KZQpzBlq63Iqzc72mRC9HJRrU.roa (raw, json) Hash identifier: 2TgokPdM1CvBJD3SkK9/xzrlE5OlJrZw7i7Nt8uCQy4= Subject key identifier: E7:72:99:42:9C:C1:96:AE:B7:22:AC:DC:EF:69:91:0B:D1:C9:46:B5 Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a Certificate serial: 019AEF486285A424C843BBD57972ABA4AA1D Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/53KZQpzBlq63Iqzc72mRC9HJRrU.roa Signing time: Fri 05 Dec 2025 16:11:29 +0000 ROA not before: Fri 05 Dec 2025 16:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13335 IP address blocks: 144.124.208.0/24 maxlen: 24 158.94.212.0/24 maxlen: 24 Validation: Failed, certificate revoked on Sat 06 Dec 2025 10:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:48:62:85:a4:24:c8:43:bb:d5:79:72:ab:a4:aa:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a Validity Not Before: Dec 5 16:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e77299429cc196aeb722acdcef69910bd1c946b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ae:0b:7d:e2:6e:62:71:5f:87:b3:45:f5:b3: c3:39:96:52:33:cf:38:c0:f0:f6:3e:2e:98:90:87: d8:84:02:80:96:e5:cb:48:7d:89:4d:73:3b:14:88: 48:05:10:88:1d:96:37:5c:8e:4c:73:3b:81:0f:c9: d6:8c:66:8d:03:5f:4e:af:3a:21:30:c9:88:da:ac: 36:7a:0c:21:09:1f:29:22:2e:24:9e:c3:89:88:60: 04:39:b1:e4:e3:a8:6c:24:e3:d4:68:e7:6a:8f:d7: 31:da:27:65:88:3c:18:e0:a1:e8:54:17:50:da:2a: 03:10:19:1a:73:f5:37:9b:32:a0:aa:b5:39:79:f5: b3:49:90:3d:6e:91:5c:50:04:28:35:a3:5c:21:45: 12:56:38:85:1f:57:c1:a1:ec:84:e3:ea:b8:89:e7: ce:e6:cd:7e:5b:32:d8:81:4b:ff:3e:fc:86:da:d0: 82:60:4c:9c:c2:7a:13:c8:75:b2:22:aa:0b:82:e9: d4:d9:8c:4f:10:eb:aa:b9:58:74:fb:a0:bb:cd:44: 70:52:d6:f7:59:f4:40:a8:9c:bb:db:f1:65:10:c2: 05:ef:47:39:b8:61:7a:7d:2b:1b:48:93:e5:47:33: 2b:49:dc:db:e4:ab:a4:b8:92:87:d1:9a:5f:88:b8: d6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:72:99:42:9C:C1:96:AE:B7:22:AC:DC:EF:69:91:0B:D1:C9:46:B5 X509v3 Authority Key Identifier: keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/53KZQpzBlq63Iqzc72mRC9HJRrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.124.208.0/24 158.94.212.0/24 Signature Algorithm: sha256WithRSAEncryption 22:2b:0c:bb:52:65:64:74:7b:2d:b3:76:19:e1:55:64:b9:93: 5f:4a:e2:08:0d:f8:b7:17:8f:34:8f:9d:54:70:bd:b6:f0:2b: ea:45:6b:c3:e8:08:39:a5:e5:60:0b:bc:69:39:62:1d:e3:74: 54:34:77:27:cb:67:51:f1:3c:b1:cf:c8:1b:b3:be:cb:e6:17: f4:c1:3c:2a:13:b8:26:55:4c:ef:59:eb:57:ef:3c:88:8c:3c: 66:9e:d4:5a:72:c9:2d:c6:6c:4d:ae:9e:b8:6b:18:7d:2e:5c: 7e:59:24:a4:cb:f2:7a:26:f7:87:29:f9:5b:ed:50:ea:a6:fd: ed:fe:91:3e:eb:c5:6c:40:5d:30:39:04:24:02:8e:bc:ca:66: 25:f2:e2:73:7f:df:ab:93:a2:c7:73:e0:0d:76:16:e9:bd:19: f2:b6:5b:cf:5f:ec:8c:fb:fa:21:d6:30:10:e2:25:99:7e:06: 8c:71:ee:50:91:de:c4:da:e2:d0:b4:52:0b:f9:a0:fc:43:07: fc:43:cf:c4:81:44:44:ef:46:de:68:75:47:ea:37:77:20:a4: 02:d5:5a:45:51:fd:23:25:60:ac:df:c4:f5:40:cc:6a:0e:28: c4:6d:39:6e:ba:8f:11:e6:80:23:9c:2b:b9:8d:7f:c7:34:cb: 00:f6:b6:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrvSGKFpCTIQ7vVeXKrpKodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTNiOWFjMGE0ODZiMDAzNzc2NWQ2MDVjOGIxYzgxMDQw NDZmMGEwHhcNMjUxMjA1MTYxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzcyOTk0MjljYzE5NmFlYjcyMmFjZGNlZjY5OTEwYmQxYzk0NmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg64LfeJuYnFfh7NF9bPDOZZSM884 wPD2Pi6YkIfYhAKAluXLSH2JTXM7FIhIBRCIHZY3XI5MczuBD8nWjGaNA19Orzoh MMmI2qw2egwhCR8pIi4knsOJiGAEObHk46hsJOPUaOdqj9cx2idliDwY4KHoVBdQ 2ioDEBkac/U3mzKgqrU5efWzSZA9bpFcUAQoNaNcIUUSVjiFH1fBoeyE4+q4iefO 5s1+WzLYgUv/PvyG2tCCYEycwnoTyHWyIqoLgunU2YxPEOuquVh0+6C7zURwUtb3 WfRAqJy72/FlEMIF70c5uGF6fSsbSJPlRzMrSdzb5KukuJKH0ZpfiLjWeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOdymUKcwZautyKs3O9pkQvRyUa1MB8GA1UdIwQY MBaAFEWTuawKSGsAN3ZdYFyLHIEEBG8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNWIwZDItMTZiYS00ZDcxLWEyMTgt NDNlNmJmZjlhMjVlLzEvNTNLWlFwekJscTYzSXF6YzcybVJDOUhKUnJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8wNWIwZDItMTZiYS00ZDcxLWEyMTgtNDNlNmJmZjlhMjVl LzEvUlpPNXJBcElhd0EzZGwxZ1hJc2NnUVFFYndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkHzQAwQA nl7UMA0GCSqGSIb3DQEBCwUAA4IBAQAiKwy7UmVkdHsts3YZ4VVkuZNfSuIIDfi3 F480j51UcL228CvqRWvD6Ag5peVgC7xpOWId43RUNHcny2dR8Tyxz8gbs77L5hf0 wTwqE7gmVUzvWetX7zyIjDxmntRacsktxmxNrp64axh9Llx+WSSky/J6JveHKflb 7VDqpv3t/pE+68VsQF0wOQQkAo68ymYl8uJzf9+rk6LHc+ANdhbpvRnytlvPX+yM +/oh1jAQ4iWZfgaMce5Qkd7E2uLQtFIL+aD8Qwf8Q8/EgURE70beaHVH6jd3IKQC 1VpFUf0jJWCs38T1QMxqDijEbTluuo8R5oAjnCu5jX/HNMsA9rbR -----END CERTIFICATE-----Generated at Sat Dec 6 18:47:57 2025 by rpki-client