This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CQLcPJIPwCClcIAHZ5CgV65jBLg.roa File: CQLcPJIPwCClcIAHZ5CgV65jBLg.roa (raw, json) Hash identifier: eKJTfoFNCXQcpqk0VBEt6doI/2MXs4M9hUYUP5jIl38= Subject key identifier: 09:02:DC:3C:92:0F:C0:20:A5:70:80:07:67:90:A0:57:AE:63:04:B8 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019473373A6273345ADF4D0636573147B7D2 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CQLcPJIPwCClcIAHZ5CgV65jBLg.roa Signing time: Fri 17 Jan 2025 07:43:06 +0000 ROA not before: Fri 17 Jan 2025 07:43:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 31.56.4.0/23 maxlen: 23 31.56.24.0/24 maxlen: 24 31.56.42.0/23 maxlen: 24 31.56.57.0/24 maxlen: 24 31.56.74.0/24 maxlen: 24 31.56.89.0/24 maxlen: 24 31.56.104.0/22 maxlen: 22 31.56.108.0/22 maxlen: 22 31.56.114.0/23 maxlen: 24 31.56.115.0/24 maxlen: 24 31.56.118.0/23 maxlen: 24 31.56.120.0/22 maxlen: 24 31.56.120.0/24 maxlen: 24 31.56.121.0/24 maxlen: 24 31.56.122.0/24 maxlen: 24 31.56.123.0/24 maxlen: 24 31.56.200.0/22 maxlen: 24 31.57.104.0/21 maxlen: 24 31.57.132.0/23 maxlen: 23 31.57.136.0/21 maxlen: 24 31.57.146.0/23 maxlen: 24 31.57.176.0/21 maxlen: 24 31.57.192.0/22 maxlen: 24 31.57.200.0/23 maxlen: 24 31.57.208.0/20 maxlen: 24 31.57.224.0/22 maxlen: 24 31.57.232.0/22 maxlen: 24 31.57.252.0/22 maxlen: 24 31.58.33.0/24 maxlen: 24 31.58.34.0/23 maxlen: 24 31.58.142.0/24 maxlen: 24 31.58.152.0/22 maxlen: 24 31.58.153.0/24 maxlen: 24 31.58.163.0/24 maxlen: 24 31.58.230.0/23 maxlen: 24 31.59.41.0/24 maxlen: 24 31.59.42.0/24 maxlen: 24 31.59.57.0/24 maxlen: 24 31.59.96.0/22 maxlen: 22 31.59.108.0/24 maxlen: 24 31.59.112.0/22 maxlen: 22 31.59.184.0/22 maxlen: 24 31.59.228.0/24 maxlen: 24 Validation: Failed, certificate revoked on Fri 17 Jan 2025 07:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:73:37:3a:62:73:34:5a:df:4d:06:36:57:31:47:b7:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 17 07:43:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0902dc3c920fc020a57080076790a057ae6304b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:d0:7b:ad:b6:14:07:77:38:6b:f8:4f:9e: b4:9c:39:16:b2:b7:6c:99:5b:78:74:94:53:c8:ca: 14:97:75:ba:f1:f9:5e:23:51:b3:8a:e0:e5:fd:d2: 06:4d:0d:f4:d6:00:1c:80:67:65:a6:14:b6:1d:6d: e1:c4:35:11:01:43:a3:d4:14:c4:09:c7:b7:17:64: 4a:0a:e5:d6:cd:c7:0c:3b:43:8d:40:2a:a3:3d:f8: 84:07:ef:7d:78:49:a4:40:80:8f:eb:82:fd:34:7c: 8e:f0:e4:07:45:31:61:3b:fa:09:90:7e:4f:4f:b4: 16:89:6a:a1:b6:e3:06:51:a6:52:69:88:af:7c:79: e6:47:82:8c:5f:7c:89:ae:79:ba:6a:37:af:e6:fa: 9c:13:1f:fe:3d:f2:ff:31:6b:05:30:72:65:b4:a2: bf:30:64:69:dc:3b:8a:3c:fa:7e:52:31:c6:92:d8: 6e:e6:8a:3d:65:a4:48:b9:f3:99:5b:63:d9:1a:4d: 93:1d:74:28:79:ea:e7:90:7c:38:15:79:21:28:af: 48:e2:85:8e:b4:37:4f:09:59:a2:e2:04:d2:60:7f: 11:27:76:cc:54:0e:0d:67:7e:c8:f8:e2:0b:ae:cf: 10:4f:03:22:db:99:a4:1f:1a:ad:d5:46:fe:4e:32: c2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:02:DC:3C:92:0F:C0:20:A5:70:80:07:67:90:A0:57:AE:63:04:B8 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/CQLcPJIPwCClcIAHZ5CgV65jBLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.56.4.0/23 31.56.24.0/24 31.56.42.0/23 31.56.57.0/24 31.56.74.0/24 31.56.89.0/24 31.56.104.0/21 31.56.114.0/23 31.56.118.0-31.56.123.255 31.56.200.0/22 31.57.104.0/21 31.57.132.0/23 31.57.136.0/21 31.57.146.0/23 31.57.176.0/21 31.57.192.0/22 31.57.200.0/23 31.57.208.0-31.57.227.255 31.57.232.0/22 31.57.252.0/22 31.58.33.0-31.58.35.255 31.58.142.0/24 31.58.152.0/22 31.58.163.0/24 31.58.230.0/23 31.59.41.0-31.59.42.255 31.59.57.0/24 31.59.96.0/22 31.59.108.0/24 31.59.112.0/22 31.59.184.0/22 31.59.228.0/24 Signature Algorithm: sha256WithRSAEncryption a8:0c:a1:84:91:0f:9c:24:2b:f0:0a:39:b7:f9:12:7e:2f:c4: 25:bd:c0:40:9d:1d:32:0a:f0:bf:f8:1a:50:92:45:8d:90:a0: bb:aa:3a:c4:1f:14:6c:fd:5f:a2:2c:09:c9:45:f0:df:6f:67: c5:fd:48:df:08:17:45:14:37:2d:b5:59:af:33:d1:3c:5e:13: 20:b7:18:68:69:e4:c3:f7:51:1d:76:93:2c:e2:f3:21:bb:d1: ff:7d:30:3c:bb:f5:8e:d9:06:b3:13:9d:c4:0b:c2:5a:8a:11: 74:a1:17:cb:9f:e4:bf:86:c0:d3:96:59:43:64:44:99:ac:f5: 0c:b5:6b:3d:79:8a:76:6c:46:39:29:d7:ea:80:77:90:68:48: 81:7e:05:21:43:8c:fa:87:1f:64:a7:1d:d4:01:7b:09:3c:c1: 8d:43:c2:78:6a:71:92:13:64:9c:29:9a:25:16:83:24:d3:3b: e8:a1:06:eb:d3:b9:4d:54:52:cf:18:74:77:d4:6c:96:95:ac: ea:b6:44:c7:8c:59:67:92:82:6a:9f:63:36:b7:81:9b:f4:ba: e4:4d:95:56:4a:64:09:d6:b1:a1:44:4e:8b:0e:66:5f:f8:20: 50:89:b5:4d:c6:ce:c3:08:38:35:65:04:34:99:b8:ab:00:f1: ad:04:34:74 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgISAZRzNzpiczRa300GNlcxR7fSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUwMTE3MDc0MzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTAyZGMzYzkyMGZjMDIwYTU3MDgwMDc2NzkwYTA1N2FlNjMwNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQPQe622FAd3OGv4T560nDkWsrds mVt4dJRTyMoUl3W68fleI1GziuDl/dIGTQ301gAcgGdlphS2HW3hxDURAUOj1BTE Cce3F2RKCuXWzccMO0ONQCqjPfiEB+99eEmkQICP64L9NHyO8OQHRTFhO/oJkH5P T7QWiWqhtuMGUaZSaYivfHnmR4KMX3yJrnm6ajev5vqcEx/+PfL/MWsFMHJltKK/ MGRp3DuKPPp+UjHGkthu5oo9ZaRIufOZW2PZGk2THXQoeernkHw4FXkhKK9I4oWO tDdPCVmi4gTSYH8RJ3bMVA4NZ37I+OILrs8QTwMi25mkHxqt1Ub+TjLCTQIDAQAB o4IC6DCCAuQwHQYDVR0OBBYEFAkC3DySD8AgpXCAB2eQoFeuYwS4MB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvQ1FMY1BKSVB3Q0NsY0lBSFo1Q2dWNjVqQkxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH9BggrBgEFBQcBBwEB/wSB7TCB6jCB5wQCAAEwgeADBAEf OAQDBAAfOBgDBAEfOCoDBAAfODkDBAAfOEoDBAAfOFkDBAMfOGgDBAEfOHIwDAME AR84dgMEAh84eAMEAh84yAMEAx85aAMEAR85hAMEAx85iAMEAR85kgMEAx85sAME Ah85wAMEAR85yDAMAwQEHznQAwQCHzngAwQCHznoAwQCHzn8MAwDBAAfOiEDBAIf OiADBAAfOo4DBAIfOpgDBAAfOqMDBAEfOuYwDAMEAB87KQMEAB87KgMEAB87OQME Ah87YAMEAB87bAMEAh87cAMEAh87uAMEAB875DANBgkqhkiG9w0BAQsFAAOCAQEA qAyhhJEPnCQr8Ao5t/kSfi/EJb3AQJ0dMgrwv/gaUJJFjZCgu6o6xB8UbP1foiwJ yUXw329nxf1I3wgXRRQ3LbVZrzPRPF4TILcYaGnkw/dRHXaTLOLzIbvR/30wPLv1 jtkGsxOdxAvCWooRdKEXy5/kv4bA05ZZQ2REmaz1DLVrPXmKdmxGOSnX6oB3kGhI gX4FIUOM+ocfZKcd1AF7CTzBjUPCeGpxkhNknCmaJRaDJNM76KEG69O5TVRSzxh0 d9RslpWs6rZEx4xZZ5KCap9jNreBm/S65E2VVkpkCdaxoUROiw5mX/ggUIm1TcbO wwg4NWUENJm4qwDxrQQ0dA== -----END CERTIFICATE-----Generated at Thu Dec 18 15:43:02 2025 by rpki-client