This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tAcA8AAFeqOaDnykzIkqNtQF9t0.roa File: tAcA8AAFeqOaDnykzIkqNtQF9t0.roa (raw, json) Hash identifier: yOkeGNpumtpP9i2jrbXaZPnjLTm9n3An4Wtbk8NhycI= Subject key identifier: B4:07:00:F0:00:05:7A:A3:9A:0E:7C:A4:CC:89:2A:36:D4:05:F6:DD Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 0196A1B2C9CEF8DFDF831318D8CB4AD2BD69 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tAcA8AAFeqOaDnykzIkqNtQF9t0.roa Signing time: Mon 05 May 2025 18:26:10 +0000 ROA not before: Mon 05 May 2025 18:26:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 82.152.142.0/24 maxlen: 24 89.213.123.0/24 maxlen: 24 109.176.14.0/24 maxlen: 24 213.210.52.0/24 maxlen: 24 213.210.53.0/24 maxlen: 24 213.218.239.0/24 maxlen: 24 217.145.75.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 05 May 2025 18:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a1:b2:c9:ce:f8:df:df:83:13:18:d8:cb:4a:d2:bd:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: May 5 18:26:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b40700f000057aa39a0e7ca4cc892a36d405f6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:95:68:f7:6a:1d:a3:42:4a:13:9c:1e:31:f0: 7e:5d:ce:dc:11:eb:a3:77:46:23:ae:2e:2e:5f:43: 55:2b:b8:37:a8:73:f3:53:85:35:4d:c1:31:c9:ec: c5:25:fb:4e:3e:3c:07:80:c0:aa:9b:12:3d:39:6e: c1:46:dd:8e:5f:58:70:74:42:d0:1f:87:51:52:c8: 66:20:58:04:5e:48:29:31:68:bf:0e:97:94:c3:e7: c8:87:fc:41:01:5e:7a:a4:8b:89:23:2b:e3:d7:cb: 80:e2:18:d2:b3:b5:cc:74:0d:46:82:fd:f5:53:62: 4c:ac:65:d5:0f:8d:ac:70:9d:86:6c:8c:2e:02:92: 66:58:ed:c5:fa:4c:7e:0a:3f:ea:34:6f:ba:61:09: ae:08:60:f3:d1:a2:fb:a5:1a:f0:8f:26:db:85:83: 00:e7:b4:aa:fe:f2:02:e1:98:35:6e:f7:12:d8:cb: 42:ae:f9:1a:00:c8:23:90:0b:8a:6c:92:c3:bd:14: 4b:e4:99:2e:b0:c3:87:c0:9a:70:9f:37:04:9e:48: e8:5c:6e:99:8c:1f:e5:48:3c:0f:47:e6:54:f5:59: 55:93:2d:5d:e0:4c:3f:53:85:81:62:54:c9:58:c9: 43:14:84:0f:4f:07:3f:c5:e0:79:ae:d9:17:98:96: de:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:07:00:F0:00:05:7A:A3:9A:0E:7C:A4:CC:89:2A:36:D4:05:F6:DD X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tAcA8AAFeqOaDnykzIkqNtQF9t0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.142.0/24 89.213.123.0/24 109.176.14.0/24 213.210.52.0/23 213.218.239.0/24 217.145.75.0/24 Signature Algorithm: sha256WithRSAEncryption 69:7f:4d:ed:bf:3e:06:9d:81:ac:55:7f:c4:6c:30:18:1c:6e: b5:b3:e7:59:fc:48:b2:ba:af:42:d1:84:21:b9:89:a2:d3:e1: 8f:91:e1:f8:d9:9c:87:bf:81:c2:c1:7d:0e:1a:74:c6:5d:b5: 59:da:46:0e:bb:d8:da:af:1b:e2:87:35:1e:7a:87:2f:42:14: dc:9c:9e:61:ef:74:30:ae:2b:69:8e:ad:bd:54:5a:06:0f:8f: 1e:93:df:3a:9f:95:13:03:6e:52:7e:a2:0d:13:3a:3e:f3:09: e6:40:50:19:70:1c:36:73:77:12:d6:08:7d:7f:b2:fc:57:e0: ef:ad:36:2e:91:be:a8:71:36:70:ea:49:90:2c:c4:11:c9:dd: 39:01:53:29:75:53:93:ba:41:8f:dd:6c:b5:92:3d:92:6b:7a: ad:b6:16:4a:35:9b:5c:53:9e:5e:54:6b:2a:ab:46:53:42:78: 25:87:9e:af:b1:a3:53:19:4e:c9:6f:da:b2:7d:5d:e6:90:8c: 99:c3:0e:94:bb:b2:12:58:e9:a0:38:a3:8d:2a:1e:2c:58:3b: 56:47:eb:a3:fc:1e:4e:35:37:92:91:8a:97:d7:e5:4b:de:9c: 2a:0d:6a:1a:cf:e7:cb:d4:be:8e:98:a7:0d:b1:48:1b:dc:c4: 6b:ea:3c:6f -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZahssnO+N/fgxMY2MtK0r1pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUwNTA1MTgyNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDA3MDBmMDAwMDU3YWEzOWEwZTdjYTRjYzg5MmEzNmQ0MDVmNmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpVo92odo0JKE5weMfB+Xc7cEeuj d0Yjri4uX0NVK7g3qHPzU4U1TcExyezFJftOPjwHgMCqmxI9OW7BRt2OX1hwdELQ H4dRUshmIFgEXkgpMWi/DpeUw+fIh/xBAV56pIuJIyvj18uA4hjSs7XMdA1Ggv31 U2JMrGXVD42scJ2GbIwuApJmWO3F+kx+Cj/qNG+6YQmuCGDz0aL7pRrwjybbhYMA 57Sq/vIC4Zg1bvcS2MtCrvkaAMgjkAuKbJLDvRRL5JkusMOHwJpwnzcEnkjoXG6Z jB/lSDwPR+ZU9VlVky1d4Ew/U4WBYlTJWMlDFIQPTwc/xeB5rtkXmJberwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFLQHAPAABXqjmg58pMyJKjbUBfbdMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvdEFjQThBQUZlcU9hRG55a3pJa3FOdFFGOXQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAUpiOAwQA WdV7AwQAbbAOAwQB1dI0AwQA1drvAwQA2ZFLMA0GCSqGSIb3DQEBCwUAA4IBAQBp f03tvz4GnYGsVX/EbDAYHG61s+dZ/Eiyuq9C0YQhuYmi0+GPkeH42ZyHv4HCwX0O GnTGXbVZ2kYOu9jarxvihzUeeocvQhTcnJ5h73Qwritpjq29VFoGD48ek986n5UT A25SfqINEzo+8wnmQFAZcBw2c3cS1gh9f7L8V+DvrTYukb6ocTZw6kmQLMQRyd05 AVMpdVOTukGP3Wy1kj2Sa3qtthZKNZtcU55eVGsqq0ZTQnglh56vsaNTGU7Jb9qy fV3mkIyZww6Uu7ISWOmgOKONKh4sWDtWR+uj/B5ONTeSkYqX1+VL3pwqDWoaz+fL 1L6OmKcNsUgb3MRr6jxv -----END CERTIFICATE-----Generated at Thu Dec 18 12:45:16 2025 by rpki-client