This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/pX8l7e8dfhbW65DaAWMvZir4D4A.roa File: pX8l7e8dfhbW65DaAWMvZir4D4A.roa (raw, json) Hash identifier: rP/wNiuFImRcrlBBzDobCHFxpCegdp7a41cw4Hhw6Lo= Subject key identifier: A5:7F:25:ED:EF:1D:7E:16:D6:EB:90:DA:01:63:2F:66:2A:F8:0F:80 Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc Certificate serial: 019B7AC9369879AEDF5A718F13FDD5157CF0 Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/pX8l7e8dfhbW65DaAWMvZir4D4A.roa Signing time: Thu 01 Jan 2026 18:19:25 +0000 ROA not before: Thu 01 Jan 2026 18:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35131 IP address blocks: 45.145.24.0/22 maxlen: 22 45.145.27.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 26 Jan 2026 08:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:36:98:79:ae:df:5a:71:8f:13:fd:d5:15:7c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a57f25edef1d7e16d6eb90da01632f662af80f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8e:cc:e3:7e:c4:ea:e8:5e:13:05:91:e7:aa: 4f:b2:3e:29:7e:27:8f:24:02:cd:0b:b1:4e:2c:fe: 5b:70:8b:9a:c9:3a:23:9d:f4:3e:d8:b6:b9:2f:57: 42:76:79:3c:04:3e:ab:b7:33:7d:f9:64:4c:69:1d: bf:83:99:8e:26:55:35:81:a7:90:eb:4a:69:ad:e7: da:7a:97:9b:4c:d6:c7:d5:af:d3:b8:49:24:c0:16: 26:1d:62:f6:80:96:35:60:7e:a7:16:3a:e9:cc:18: ab:24:6e:42:93:d6:90:de:c8:19:eb:6f:7a:ca:c5: df:06:c4:48:fb:30:25:df:f4:01:7e:cb:78:88:0a: 3a:44:82:57:e1:23:00:34:a2:b2:34:fe:69:2b:33: 4d:55:5b:f7:22:51:2d:9a:ee:f3:ad:7d:94:d5:80: 5d:c8:1e:db:46:79:b7:5f:84:fe:bd:14:91:98:e6: 2a:2d:1e:a1:43:18:f9:0b:21:4a:b8:0c:60:80:ed: ea:c4:5e:04:79:ac:7b:2f:2a:c5:f8:e3:55:41:52: d6:f0:84:ce:20:87:d2:a9:39:a2:0c:7e:a3:23:06: aa:07:4c:5c:33:18:55:9d:47:9c:72:02:07:f3:f5: 36:e3:01:41:b9:70:51:0c:2a:73:80:25:46:44:c5: 45:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7F:25:ED:EF:1D:7E:16:D6:EB:90:DA:01:63:2F:66:2A:F8:0F:80 X509v3 Authority Key Identifier: keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/pX8l7e8dfhbW65DaAWMvZir4D4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.24.0/22 Signature Algorithm: sha256WithRSAEncryption 17:5c:da:d1:58:06:33:e8:96:9f:25:19:98:a9:62:52:68:e6: c1:8e:ed:bc:8e:2b:e9:81:75:4d:d4:e1:7a:28:95:10:1d:2f: ab:93:92:ff:c6:57:cf:49:6c:35:cc:5c:33:8a:39:7f:29:11: 21:b8:06:17:a7:c3:db:b6:c2:f4:2a:de:f3:a2:23:47:3a:b4: ce:28:3e:d3:8f:cd:6d:2a:11:8f:f0:2d:fe:4d:ff:f8:87:b4: 4c:3e:f4:19:75:f9:34:61:4b:31:7b:e3:69:76:0a:20:f7:74: 22:6f:d4:c5:32:d0:0f:0a:c8:b5:8d:d4:a9:f2:bd:4b:97:38: 25:65:3b:98:fc:bd:48:c6:d6:5b:55:61:ac:2e:67:26:20:ed: de:b5:01:94:62:be:6c:3a:28:0f:fd:8d:9e:29:e5:94:0c:4e: 11:cb:3a:f4:d5:dc:45:66:2b:92:21:04:16:38:7a:9b:92:39: ae:78:b5:1e:cd:91:4c:67:02:1c:ea:38:a7:6f:54:6e:7e:4b: be:b9:70:3a:84:7e:f7:00:d0:9b:fa:e6:1e:50:60:c2:8e:a2: 89:83:05:b4:8a:5f:10:12:5c:e5:1e:76:e9:1e:40:7c:3c:8a: dc:5f:d6:85:34:51:ae:ff:19:eb:46:c8:a1:3e:73:7c:64:75: 27:f5:91:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yTaYea7fWnGPE/3VFXzwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMGU3N2Q5YzZmZjY4ZGNhNjhmMDVkZjhmNDY3NWVlN2Jk Y2IwYmMwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTdmMjVlZGVmMWQ3ZTE2ZDZlYjkwZGEwMTYzMmY2NjJhZjgwZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto7M437E6uheEwWR56pPsj4pfieP JALNC7FOLP5bcIuayTojnfQ+2La5L1dCdnk8BD6rtzN9+WRMaR2/g5mOJlU1gaeQ 60pprefaepebTNbH1a/TuEkkwBYmHWL2gJY1YH6nFjrpzBirJG5Ck9aQ3sgZ6296 ysXfBsRI+zAl3/QBfst4iAo6RIJX4SMANKKyNP5pKzNNVVv3IlEtmu7zrX2U1YBd yB7bRnm3X4T+vRSRmOYqLR6hQxj5CyFKuAxggO3qxF4Eeax7LyrF+ONVQVLW8ITO IIfSqTmiDH6jIwaqB0xcMxhVnUeccgIH8/U24wFBuXBRDCpzgCVGRMVFFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKV/Je3vHX4W1uuQ2gFjL2Yq+A+AMB8GA1UdIwQY MBaAFE8Od9nG/2jcpo8F349Gde573LC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAt NDU1YjE5Zjc2NmNjLzEvcFg4bDdlOGRmaGJXNjVEYUFXTXZaaXI0RDRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAtNDU1YjE5Zjc2NmNj LzEvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZEYMA0G CSqGSIb3DQEBCwUAA4IBAQAXXNrRWAYz6JafJRmYqWJSaObBju28jivpgXVN1OF6 KJUQHS+rk5L/xlfPSWw1zFwzijl/KREhuAYXp8PbtsL0Kt7zoiNHOrTOKD7Tj81t KhGP8C3+Tf/4h7RMPvQZdfk0YUsxe+Npdgog93Qib9TFMtAPCsi1jdSp8r1Llzgl ZTuY/L1IxtZbVWGsLmcmIO3etQGUYr5sOigP/Y2eKeWUDE4Ryzr01dxFZiuSIQQW OHqbkjmueLUezZFMZwIc6jinb1Rufku+uXA6hH73ANCb+uYeUGDCjqKJgwW0il8Q ElzlHnbpHkB8PIrcX9aFNFGu/xnrRsihPnN8ZHUn9ZEL -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:32 2026 by rpki-client