This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32363a3a2f34382d3438203d3e203133323133.roa File: 326131333a393530303a32363a3a2f34382d3438203d3e203133323133.roa (raw, json) Hash identifier: w3KIV7bRu+XtOEfajNfpppEIFuzIknbWoJ2uVHh5sFo= Subject key identifier: C4:F3:C5:8D:1F:53:C0:E4:D6:A9:58:4F:0F:5E:4C:C1:37:58:8B:B0 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 2ACEE1A2ED848CCB3676DC7BA0C09A56DB286C0D Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32363a3a2f34382d3438203d3e203133323133.roa Signing time: Fri 27 Dec 2024 09:28:15 +0000 ROA not before: Fri 27 Dec 2024 09:23:15 +0000 ROA not after: Fri 26 Dec 2025 09:28:15 +0000 asID: 13213 IP address blocks: 2a13:9500:26::/48 maxlen: 48 Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ce:e1:a2:ed:84:8c:cb:36:76:dc:7b:a0:c0:9a:56:db:28:6c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 27 09:23:15 2024 GMT Not After : Dec 26 09:28:15 2025 GMT Subject: CN=C4F3C58D1F53C0E4D6A9584F0F5E4CC137588BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d5:c4:f7:73:5a:0c:ab:20:7a:a1:b9:b5:02: 20:44:d8:d5:91:98:c8:35:35:cb:ae:c1:f3:fa:ee: b4:9d:0f:61:a8:28:85:87:59:70:47:fd:bc:a4:fc: ab:cc:b5:a4:ef:9c:97:be:29:1c:95:25:58:e6:5b: eb:f9:1c:c6:c2:72:54:03:36:76:4f:5a:8b:c6:24: 47:30:c5:fd:15:98:f3:83:e3:b5:e4:ab:5d:98:10: b8:eb:dd:28:fe:0d:1f:32:d3:67:0a:92:e6:f3:c1: 38:e9:41:ff:ea:b6:d6:6f:04:9a:ed:9f:d2:c9:40: d5:a5:74:aa:3a:7b:c7:fd:11:22:c6:a0:ff:cb:de: a0:c4:5a:b0:30:b7:85:d2:94:6e:45:5e:78:3e:62: 18:b9:d4:e4:8d:64:cd:c7:f6:51:20:46:e8:a5:68: 2a:73:a1:b7:39:a1:7d:7c:2f:bd:02:1b:44:8f:74: 4a:b8:69:4c:83:08:52:99:21:05:ac:cb:6d:8f:9a: 06:2d:d7:e6:0c:3f:f8:47:3a:04:e7:98:00:96:ff: 0f:0d:ca:32:c6:3d:79:83:c8:fa:f6:5c:53:df:39: 3d:cd:16:6d:ee:9b:6b:b5:83:d4:df:b9:2e:d3:76: 0c:bd:31:de:73:07:62:96:ca:10:f1:7d:f7:10:d0: a0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F3:C5:8D:1F:53:C0:E4:D6:A9:58:4F:0F:5E:4C:C1:37:58:8B:B0 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/326131333a393530303a32363a3a2f34382d3438203d3e203133323133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:26::/48 Signature Algorithm: sha256WithRSAEncryption 61:fe:fd:2f:b5:d5:f5:e1:99:17:1f:d7:df:11:b5:a3:d0:c1: 07:ff:61:9f:29:35:a8:61:2f:9e:fe:e7:98:43:e1:ae:6b:e0: 11:31:fe:30:49:f7:a3:f0:9a:8b:d1:c8:08:2f:ad:15:8b:9e: 68:2c:88:b8:be:d8:80:c4:53:e5:2d:63:c4:67:4c:a2:8c:ed: 57:a3:fd:f5:19:36:ff:54:86:5c:12:7d:d1:6c:13:ae:1f:18: 44:d3:e9:ff:29:be:bf:5f:22:bc:e1:32:7b:b6:c0:db:63:fd: fa:6b:2b:b9:b8:54:3c:ff:b1:c3:8a:0c:b5:94:76:1e:2a:7f: 54:32:eb:5d:37:2c:c8:af:61:5a:65:77:fa:27:23:4f:a5:64: 31:d6:28:1b:d3:77:d7:79:a3:4d:b4:a9:b3:5b:82:2c:04:d0: 18:6e:d4:30:10:92:3b:61:3f:30:b0:1b:35:8f:db:2b:a1:e5: 23:ed:68:73:2f:81:83:ac:a1:43:b4:d5:29:19:db:7e:f7:68: 13:ba:63:43:12:74:65:69:6e:a7:db:f9:8d:cc:a2:94:e8:09: 3b:89:c7:0a:2c:ab:7c:9e:57:b9:27:3c:34:3b:b3:46:3d:98: 3f:07:6e:5c:9c:45:c8:5a:d4:4e:fb:af:25:aa:04:f8:fe:2b: 84:6f:e7:3a -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUKs7hou2EjMs2dtx7oMCaVtsobA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNDEyMjcwOTIzMTVaFw0yNTEyMjYwOTI4MTVaMDMxMTAvBgNV BAMTKEM0RjNDNThEMUY1M0MwRTRENkE5NTg0RjBGNUU0Q0MxMzc1ODhCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1cT3c1oMqyB6obm1AiBE2NWR mMg1NcuuwfP67rSdD2GoKIWHWXBH/byk/KvMtaTvnJe+KRyVJVjmW+v5HMbCclQD NnZPWovGJEcwxf0VmPOD47Xkq12YELjr3Sj+DR8y02cKkubzwTjpQf/qttZvBJrt n9LJQNWldKo6e8f9ESLGoP/L3qDEWrAwt4XSlG5FXng+Yhi51OSNZM3H9lEgRuil aCpzobc5oX18L70CG0SPdEq4aUyDCFKZIQWsy22PmgYt1+YMP/hHOgTnmACW/w8N yjLGPXmDyPr2XFPfOT3NFm3um2u1g9TfuS7Tdgy9Md5zB2KWyhDxffcQ0KBnAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUxPPFjR9TwOTWqVhPD15MwTdYi7AwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYt YjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWExYWY2LzAvMzI2MTMxMzMzYTM5MzUzMDMw M2EzMjM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMyMzEzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACoTlQAAJjANBgkqhkiG9w0BAQsFAAOCAQEAYf79L7XV9eGZFx/X3xG1o9DB B/9hnyk1qGEvnv7nmEPhrmvgETH+MEn3o/Cai9HICC+tFYueaCyIuL7YgMRT5S1j xGdMooztV6P99Rk2/1SGXBJ90WwTrh8YRNPp/ym+v18ivOEye7bA22P9+msrubhU PP+xw4oMtZR2Hip/VDLrXTcsyK9hWmV3+icjT6VkMdYoG9N313mjTbSps1uCLATQ GG7UMBCSO2E/MLAbNY/bK6HlI+1ocy+Bg6yhQ7TVKRnbfvdoE7pjQxJ0ZWlup9v5 jcyilOgJO4nHCiyrfJ5XuSc8NDuzRj2YPwduXJxFyFrUTvuvJaoE+P4rhG/nOg== -----END CERTIFICATE-----Generated at Tue Dec 16 07:01:25 2025 by rpki-client