This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/LrgSUsHhv1ZNwQhQI9p6KzPGlno.roa File: LrgSUsHhv1ZNwQhQI9p6KzPGlno.roa (raw, json) Hash identifier: z7iQ+eh2paFm+bDh04GX+AQ0y+Lnq+mO4bVcXnjXmlo= Subject key identifier: 2E:B8:12:52:C1:E1:BF:56:4D:C1:08:50:23:DA:7A:2B:33:C6:96:7A Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019AEF7E69431D02E35C66D5BE4989E9E604 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/LrgSUsHhv1ZNwQhQI9p6KzPGlno.roa Signing time: Fri 05 Dec 2025 17:10:30 +0000 ROA not before: Fri 05 Dec 2025 17:10:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 10753 IP address blocks: 88.148.69.0/24 maxlen: 24 88.148.72.0/24 maxlen: 24 88.148.78.0/24 maxlen: 24 88.148.86.0/24 maxlen: 24 88.148.89.0/24 maxlen: 24 88.148.94.0/24 maxlen: 24 88.148.107.0/24 maxlen: 24 89.32.165.0/24 maxlen: 24 89.34.120.0/24 maxlen: 24 89.44.65.0/24 maxlen: 24 89.44.67.0/24 maxlen: 24 89.44.71.0/24 maxlen: 24 89.45.240.0/24 maxlen: 24 89.45.245.0/24 maxlen: 24 94.76.139.0/24 maxlen: 24 94.76.155.0/24 maxlen: 24 94.76.177.0/24 maxlen: 24 94.76.189.0/24 maxlen: 24 Validation: Failed, certificate revoked on Sat 06 Dec 2025 18:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:7e:69:43:1d:02:e3:5c:66:d5:be:49:89:e9:e6:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Dec 5 17:10:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2eb81252c1e1bf564dc1085023da7a2b33c6967a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:a4:e0:e1:94:52:a5:19:91:8f:8a:f6:64: e8:0d:7d:fc:69:1a:d6:04:8e:cc:bd:ab:52:ba:40: a4:84:de:c4:f5:b3:1a:43:10:4d:af:db:e2:dc:78: 12:33:18:dd:33:81:d5:97:b5:e5:67:9a:fb:fc:ce: 27:7d:9a:f8:ef:e7:d2:4e:7c:0b:e8:2e:6f:62:4b: 36:0d:4d:22:70:d4:0d:f5:28:32:5a:4e:ed:aa:5a: f7:42:c3:d5:df:ba:47:8c:a1:08:14:f0:23:f1:33: 0b:a8:df:bf:e9:05:1c:18:f0:bd:0c:b3:65:05:7a: cd:82:2f:e8:93:5c:de:e6:bc:07:a4:dd:90:6a:66: 22:30:94:84:89:ce:e4:db:41:f7:42:39:32:b2:29: bf:03:51:78:d7:c0:bf:b6:ef:a6:6b:25:4b:08:b1: 33:7c:75:19:d5:92:69:93:c0:d1:3c:ef:ff:fd:dc: 17:a6:fc:64:4a:96:50:c7:42:d5:79:41:46:1f:0b: 42:ee:6a:e7:ec:49:27:58:22:60:de:ae:8c:85:20: 27:19:2c:81:c8:58:9a:ed:1d:50:c2:1b:f0:f6:2a: 05:c7:53:0c:d9:04:b0:53:9a:71:98:06:0c:64:08: fa:18:89:e8:91:5a:27:f2:59:23:15:1b:37:53:d0: cf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B8:12:52:C1:E1:BF:56:4D:C1:08:50:23:DA:7A:2B:33:C6:96:7A X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/LrgSUsHhv1ZNwQhQI9p6KzPGlno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.148.69.0/24 88.148.72.0/24 88.148.78.0/24 88.148.86.0/24 88.148.89.0/24 88.148.94.0/24 88.148.107.0/24 89.32.165.0/24 89.34.120.0/24 89.44.65.0/24 89.44.67.0/24 89.44.71.0/24 89.45.240.0/24 89.45.245.0/24 94.76.139.0/24 94.76.155.0/24 94.76.177.0/24 94.76.189.0/24 Signature Algorithm: sha256WithRSAEncryption 59:f3:14:6b:46:cb:42:a7:4f:c6:db:e9:fa:34:5b:74:35:fb: 8c:47:13:7b:f4:d5:d7:51:75:12:72:8d:a0:f0:0e:3b:ce:47: 9c:09:95:55:98:e5:f1:f0:77:a7:6f:aa:c2:89:81:7c:d7:f1: b1:78:d8:b2:ee:1d:b5:45:4c:28:7e:b5:f9:71:e0:f9:1a:15: bb:f6:27:19:15:24:1a:fa:41:70:9e:90:9c:83:f5:99:0b:95: 9b:6d:6b:19:2b:07:39:60:ff:48:aa:07:33:88:8d:4b:f4:ed: 9b:95:7e:ee:5e:f6:bc:11:43:1c:3e:8d:00:18:19:c1:06:dd: e6:93:b4:f5:b2:5d:06:7f:74:07:63:70:65:c9:96:9e:70:98: 62:35:89:50:af:72:5b:0a:87:60:88:54:36:6f:4d:eb:0c:f5: c2:33:f2:f0:76:b3:fc:28:ba:bc:16:44:6a:20:df:e5:1a:d9: c1:7b:bc:6a:08:b1:76:65:60:73:87:67:b2:b0:71:2d:7a:09: 7d:d4:80:83:47:ee:ad:50:8e:77:c5:78:36:dc:a2:fa:67:f1: 14:e8:a5:f2:4b:1e:f0:73:b1:00:05:a1:e1:04:63:6d:4f:bf: bc:b4:fd:7a:ff:b0:5c:50:79:0f:29:44:64:df:de:ba:16:c0: 2c:25:44:a8 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZrvfmlDHQLjXGbVvkmJ6eYEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjUxMjA1MTcxMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWI4MTI1MmMxZTFiZjU2NGRjMTA4NTAyM2RhN2EyYjMzYzY5NjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Kk4OGUUqUZkY+K9mToDX38aRrW BI7MvatSukCkhN7E9bMaQxBNr9vi3HgSMxjdM4HVl7XlZ5r7/M4nfZr47+fSTnwL 6C5vYks2DU0icNQN9SgyWk7tqlr3QsPV37pHjKEIFPAj8TMLqN+/6QUcGPC9DLNl BXrNgi/ok1ze5rwHpN2QamYiMJSEic7k20H3Qjkysim/A1F418C/tu+mayVLCLEz fHUZ1ZJpk8DRPO///dwXpvxkSpZQx0LVeUFGHwtC7mrn7EknWCJg3q6MhSAnGSyB yFia7R1Qwhvw9ioFx1MM2QSwU5pxmAYMZAj6GInokVon8lkjFRs3U9DPbwIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFC64ElLB4b9WTcEIUCPaeiszxpZ6MB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvTHJnU1VzSGh2MVpOd1FoUUk5cDZLelBHbG5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAFiURQME AFiUSAMEAFiUTgMEAFiUVgMEAFiUWQMEAFiUXgMEAFiUawMEAFkgpQMEAFkieAME AFksQQMEAFksQwMEAFksRwMEAFkt8AMEAFkt9QMEAF5MiwMEAF5MmwMEAF5MsQME AF5MvTANBgkqhkiG9w0BAQsFAAOCAQEAWfMUa0bLQqdPxtvp+jRbdDX7jEcTe/TV 11F1EnKNoPAOO85HnAmVVZjl8fB3p2+qwomBfNfxsXjYsu4dtUVMKH61+XHg+RoV u/YnGRUkGvpBcJ6QnIP1mQuVm21rGSsHOWD/SKoHM4iNS/Ttm5V+7l72vBFDHD6N ABgZwQbd5pO09bJdBn90B2NwZcmWnnCYYjWJUK9yWwqHYIhUNm9N6wz1wjPy8Haz /Ci6vBZEaiDf5RrZwXu8agixdmVgc4dnsrBxLXoJfdSAg0furVCOd8V4Ntyi+mfx FOil8kse8HOxAAWh4QRjbU+/vLT9ev+wXFB5DylEZN/euhbALCVEqA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:24 2025 by rpki-client