This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/PY1mTwhYgZ4EIru4VaP3LDFeZJU.roa File: PY1mTwhYgZ4EIru4VaP3LDFeZJU.roa (raw, json) Hash identifier: nBPwi+itXfl6yqhPkiJXPznsE2PF1HqGAXHEobUGcN8= Subject key identifier: 3D:8D:66:4F:08:58:81:9E:04:22:BB:B8:55:A3:F7:2C:31:5E:64:95 Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c Certificate serial: 019AF27ADEA16C2E683C6E4814C3004BDB7F Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/PY1mTwhYgZ4EIru4VaP3LDFeZJU.roa Signing time: Sat 06 Dec 2025 07:05:29 +0000 ROA not before: Sat 06 Dec 2025 07:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 2001:67c:64:ffff:0:19a:f279:f6c8/128 maxlen: 128 Validation: Failed, certificate revoked on Sat 06 Dec 2025 07:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:7a:de:a1:6c:2e:68:3c:6e:48:14:c3:00:4b:db:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c Validity Not Before: Dec 6 07:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3d8d664f0858819e0422bbb855a3f72c315e6495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:d1:b3:b4:25:47:45:f8:bc:3e:dd:f8:fa: 87:d6:0f:b1:47:61:2d:84:f2:8e:f8:f7:2c:fe:82: e0:0e:17:7c:31:5d:e7:2f:ca:6e:3d:56:97:aa:6c: 8e:e6:f1:5f:80:a1:3b:d6:84:e7:03:57:4b:1b:7e: 56:af:64:03:02:32:8a:e2:2e:d6:4c:6f:bd:e0:81: d9:77:26:d2:51:ef:14:da:9d:06:ff:d3:67:2c:57: 6f:fe:cd:4b:2b:3b:fa:3a:9b:26:62:66:9c:88:f1: 5d:cd:22:55:56:61:4d:5f:2b:c0:c7:34:6e:66:76: 62:21:b9:4a:2b:c5:e4:7c:bc:54:ba:2c:30:da:fa: 60:51:e5:a7:33:e9:52:23:6e:f0:5e:be:2a:94:2d: 76:5c:2b:94:9a:28:19:d7:b8:c1:c1:79:49:56:4a: 0d:fb:58:45:9c:7a:62:41:6e:70:47:91:a3:68:98: d0:7d:95:9b:3a:09:99:2e:48:42:54:cf:98:aa:d1: 18:bc:f5:0b:ed:18:e0:2f:ff:af:0a:69:41:b4:98: 0e:b1:3e:0c:f3:84:13:cc:6a:d5:99:68:b7:1e:66: b9:6d:b6:f0:f2:b7:7b:d1:ac:08:58:a5:45:25:27: cc:5c:1d:c2:15:45:8c:a3:64:c4:24:4e:5c:59:5c: c4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8D:66:4F:08:58:81:9E:04:22:BB:B8:55:A3:F7:2C:31:5E:64:95 X509v3 Authority Key Identifier: keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/PY1mTwhYgZ4EIru4VaP3LDFeZJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:64:ffff:0:19a:f279:f6c8/128 Signature Algorithm: sha256WithRSAEncryption 21:76:f0:a4:54:9b:3e:6e:ff:49:37:61:a3:fd:6c:9d:b5:6a: fc:19:e1:44:69:73:a0:c4:e6:77:13:a8:08:5e:aa:c1:21:83: 28:03:12:fe:af:8b:ed:e7:6f:98:fa:ae:71:c9:46:66:7a:0c: c0:75:40:1e:73:28:fe:e0:b4:13:0f:74:d6:a4:e3:7d:62:08: fb:98:3d:7f:f1:b2:62:77:99:f2:71:d6:3b:83:6d:37:2b:57: e4:9c:14:cb:1a:37:bb:ef:ce:f9:77:58:18:dd:2d:a1:8b:b2: 90:7d:c8:4d:af:ff:d0:6d:7b:2d:ec:78:fb:b2:d3:9b:eb:22: 8a:75:78:2c:1f:b8:ad:1a:cd:2b:1d:d4:3e:bb:8d:99:54:d3: 24:df:17:1c:cc:48:0c:a7:a0:84:bd:34:e6:29:a5:63:41:49: 2e:d8:72:32:61:cc:17:01:b6:e6:1f:38:88:b6:3f:83:e4:b0: 87:94:01:42:b6:df:db:ee:4e:bc:53:a9:2b:ba:ca:40:eb:8b: e3:47:ad:31:21:ef:6b:3d:49:ba:d5:6e:cf:37:f7:1e:f9:26: 4f:cf:ee:22:68:1c:ce:d3:bc:4d:c4:4a:eb:7c:76:92:84:6d: 2d:58:41:42:1f:cd:ef:9d:04:b2:56:34:e7:d8:97:39:e9:07: 97:36:99:fb -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZryet6hbC5oPG5IFMMAS9t/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMTNkMGMwYTcwM2UwOWNkYTY0YzEyYjA4ZGRhMmI3NDlh MDQyOWMwHhcNMjUxMjA2MDcwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDhkNjY0ZjA4NTg4MTllMDQyMmJiYjg1NWEzZjcyYzMxNWU2NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BbRs7QlR0X4vD7d+PqH1g+xR2Et hPKO+Pcs/oLgDhd8MV3nL8puPVaXqmyO5vFfgKE71oTnA1dLG35Wr2QDAjKK4i7W TG+94IHZdybSUe8U2p0G/9NnLFdv/s1LKzv6OpsmYmaciPFdzSJVVmFNXyvAxzRu ZnZiIblKK8XkfLxUuiww2vpgUeWnM+lSI27wXr4qlC12XCuUmigZ17jBwXlJVkoN +1hFnHpiQW5wR5GjaJjQfZWbOgmZLkhCVM+YqtEYvPUL7RjgL/+vCmlBtJgOsT4M 84QTzGrVmWi3Hma5bbbw8rd70awIWKVFJSfMXB3CFUWMo2TEJE5cWVzEJwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFD2NZk8IWIGeBCK7uFWj9ywxXmSVMB8GA1UdIwQY MBaAFE4T0MCnA+Cc2mTBKwjdordJoEKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYt NmFhNDQzNTI4Y2U1LzEvUFkxbVR3aFlnWjRFSXJ1NFZhUDNMREZlWkpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9hZTA0OWEtMDc4Yi00MmVkLWEyOGYtNmFhNDQzNTI4Y2U1 LzEvVGhQUXdLY0Q0SnphWk1FckNOMml0MG1nUXB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEGfABk //8AAAGa8nn2yDANBgkqhkiG9w0BAQsFAAOCAQEAIXbwpFSbPm7/STdho/1snbVq /BnhRGlzoMTmdxOoCF6qwSGDKAMS/q+L7edvmPqucclGZnoMwHVAHnMo/uC0Ew90 1qTjfWII+5g9f/GyYneZ8nHWO4NtNytX5JwUyxo3u+/O+XdYGN0toYuykH3ITa// 0G17Lex4+7LTm+siinV4LB+4rRrNKx3UPruNmVTTJN8XHMxIDKeghL005imlY0FJ LthyMmHMFwG25h84iLY/g+Swh5QBQrbf2+5OvFOpK7rKQOuL40etMSHvaz1JutVu zzf3HvkmT8/uImgcztO8TcRK63x2koRtLVhBQh/N750EslY059iXOekHlzaZ+w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:08:38 2025 by rpki-client