This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8P2cXPfRvU1kI8mSepxm5k09BVU.roa File: 8P2cXPfRvU1kI8mSepxm5k09BVU.roa (raw, json) Hash identifier: lA7lqbOJIgc47dE1Szmd4MYMeqhkdSHjFM67wPtrW5s= Subject key identifier: F0:FD:9C:5C:F7:D1:BD:4D:64:23:C9:92:7A:9C:66:E6:4D:3D:05:55 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019957737A925D0EA9555FF5392A120F7601 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8P2cXPfRvU1kI8mSepxm5k09BVU.roa Signing time: Wed 17 Sep 2025 11:33:29 +0000 ROA not before: Wed 17 Sep 2025 11:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209562 IP address blocks: 2a09:5040::/48 maxlen: 48 2a09:95c0::/48 maxlen: 48 2a09:9ac0::/48 maxlen: 48 2a09:9b40::/48 maxlen: 48 Validation: Failed, certificate revoked on Wed 17 Sep 2025 11:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:57:73:7a:92:5d:0e:a9:55:5f:f5:39:2a:12:0f:76:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Sep 17 11:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f0fd9c5cf7d1bd4d6423c9927a9c66e64d3d0555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:09:3b:da:2b:09:6e:fc:bf:67:08:0f:26: 6a:e7:42:b7:a4:cb:06:b4:c7:30:84:96:1c:33:ec: 72:91:6f:a2:1e:c2:05:ef:ef:14:24:d7:45:16:10: a4:15:8a:9f:06:a7:dd:c5:05:bf:1c:71:d7:98:0b: 1d:0e:43:fb:3a:ff:d2:23:2a:c2:57:1b:48:35:c9: 30:fe:e5:0d:4f:bb:59:33:b8:a6:04:01:f8:12:23: 1e:73:d1:e8:f4:4c:18:ab:b7:97:85:0b:7e:e1:10: df:ed:20:1f:04:0f:68:cb:3f:70:52:a1:d8:b0:a9: b4:c4:3c:3c:f2:3d:82:2c:b4:d7:42:4d:6a:da:d4: d3:af:e6:70:30:8c:18:63:bb:a0:5a:5b:44:e9:11: 29:5f:a3:45:28:d2:ff:be:a0:d8:04:ef:01:46:c7: 61:f2:b2:8e:6e:bd:6c:cb:2a:bb:ba:ab:8a:bb:75: 7e:2b:eb:1e:a9:33:8a:e4:21:3b:ee:d6:d2:13:21: 7e:5b:3c:5d:64:bb:47:bb:6b:92:99:a4:d5:d0:1c: 8b:1b:ae:f7:d8:80:ed:e4:01:9b:bc:fd:87:92:47: 7c:93:6c:d3:12:83:eb:52:01:6a:10:67:75:42:28: 23:79:fc:24:a5:82:5b:5e:f0:87:8e:f5:b4:40:0d: 09:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FD:9C:5C:F7:D1:BD:4D:64:23:C9:92:7A:9C:66:E6:4D:3D:05:55 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/8P2cXPfRvU1kI8mSepxm5k09BVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:5040::/48 2a09:95c0::/48 2a09:9ac0::/48 2a09:9b40::/48 Signature Algorithm: sha256WithRSAEncryption 7d:f9:75:6d:1f:3d:70:c1:fd:14:37:5a:9d:24:0a:7f:13:2d: 23:24:ea:98:15:f2:64:69:39:95:47:2f:07:6e:e8:60:cc:a8: 07:fa:8b:26:70:f8:ba:e6:18:c2:8b:e7:67:f9:1b:ec:3d:b1: d1:9d:83:37:18:f5:09:c4:fd:a8:f8:35:c2:24:34:64:07:0f: b3:6c:44:89:48:7f:ee:18:aa:f3:c4:3c:10:89:29:4c:6e:81: 98:cf:cc:91:82:63:f5:d1:b8:18:07:c9:4d:4f:c2:42:4a:cc: 22:35:ca:81:80:4d:ce:e4:fc:49:fb:69:98:08:3c:a5:d4:b5: 31:74:eb:b0:b0:7f:5f:4a:e2:54:6f:82:15:2b:f0:a6:94:0c: 3a:df:ff:a1:dc:76:c3:61:61:11:18:0e:b6:75:bc:94:dc:1c: d9:da:ab:34:c1:d1:8d:ec:eb:e6:7f:2b:b2:bb:76:6f:17:e6: f2:bc:de:9e:3b:20:11:80:43:9b:3b:73:e7:8e:64:a7:f9:a3: 06:e6:4a:48:87:b3:b2:e9:62:e7:56:26:53:79:0d:be:54:0c: de:f4:5f:d5:2b:e6:84:e1:f7:9c:92:52:d6:5f:72:ca:84:5b: b5:89:84:b5:a6:3c:39:9c:83:80:55:6a:a1:df:09:f4:0f:e0: 12:28:2c:e3 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZlXc3qSXQ6pVV/1OSoSD3YBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjUwOTE3MTEzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGZkOWM1Y2Y3ZDFiZDRkNjQyM2M5OTI3YTljNjZlNjRkM2QwNTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoQJO9orCW78v2cIDyZq50K3pMsG tMcwhJYcM+xykW+iHsIF7+8UJNdFFhCkFYqfBqfdxQW/HHHXmAsdDkP7Ov/SIyrC VxtINckw/uUNT7tZM7imBAH4EiMec9Ho9EwYq7eXhQt+4RDf7SAfBA9oyz9wUqHY sKm0xDw88j2CLLTXQk1q2tTTr+ZwMIwYY7ugWltE6REpX6NFKNL/vqDYBO8BRsdh 8rKObr1syyq7uquKu3V+K+seqTOK5CE77tbSEyF+WzxdZLtHu2uSmaTV0ByLG673 2IDt5AGbvP2Hkkd8k2zTEoPrUgFqEGd1QigjefwkpYJbXvCHjvW0QA0JUwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPD9nFz30b1NZCPJknqcZuZNPQVVMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvOFAyY1hQZlJ2VTFrSThtU2VweG01azA5QlZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKglQQAAA AwcAKgmVwAAAAwcAKgmawAAAAwcAKgmbQAAAMA0GCSqGSIb3DQEBCwUAA4IBAQB9 +XVtHz1wwf0UN1qdJAp/Ey0jJOqYFfJkaTmVRy8HbuhgzKgH+osmcPi65hjCi+dn +RvsPbHRnYM3GPUJxP2o+DXCJDRkBw+zbESJSH/uGKrzxDwQiSlMboGYz8yRgmP1 0bgYB8lNT8JCSswiNcqBgE3O5PxJ+2mYCDyl1LUxdOuwsH9fSuJUb4IVK/CmlAw6 3/+h3HbDYWERGA62dbyU3BzZ2qs0wdGN7Ovmfyuyu3ZvF+byvN6eOyARgEObO3Pn jmSn+aMG5kpIh7Oy6WLnViZTeQ2+VAze9F/VK+aE4fecklLWX3LKhFu1iYS1pjw5 nIOAVWqh3wn0D+ASKCzj -----END CERTIFICATE-----Generated at Mon Dec 22 03:02:53 2025 by rpki-client