This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32322e302e302f31362d3234203d3e20383334.roa File: 38322e32322e302e302f31362d3234203d3e20383334.roa (raw, json) Hash identifier: XuBQTiJbo9yjyZJuFNpqYn1zJMJCTZbDpFykgjgXfAw= Subject key identifier: 48:A7:CA:BC:68:36:DF:E8:9E:C5:58:AC:0A:E9:D1:72:C2:64:5B:87 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 1811131F9BA7C3A941D2B4F72DDA4AD90A8D1C8C Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32322e302e302f31362d3234203d3e20383334.roa Signing time: Fri 27 Dec 2024 10:06:12 +0000 ROA not before: Fri 27 Dec 2024 10:01:12 +0000 ROA not after: Fri 26 Dec 2025 10:06:12 +0000 asID: 834 IP address blocks: 82.22.0.0/16 maxlen: 24 Validation: Failed, certificate revoked on Fri 27 Dec 2024 11:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:11:13:1f:9b:a7:c3:a9:41:d2:b4:f7:2d:da:4a:d9:0a:8d:1c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 27 10:01:12 2024 GMT Not After : Dec 26 10:06:12 2025 GMT Subject: CN=48A7CABC6836DFE89EC558AC0AE9D172C2645B87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:cd:fb:77:65:22:83:1d:ff:30:74:89:6a: 92:97:e3:ec:ea:16:b3:84:76:54:a1:eb:e9:6e:6f: df:93:cd:19:69:91:a4:74:dc:3b:6d:85:b2:e1:94: 26:82:aa:f9:07:94:2e:c0:7a:31:2a:c4:df:ab:9b: aa:0e:3e:16:37:2e:5f:70:4b:d5:22:69:f7:c1:23: ab:21:e6:08:20:ec:7a:60:c7:dc:7e:9c:f1:19:fb: 71:4d:96:1a:74:2e:ae:f7:61:9e:67:c1:37:9c:ad: 23:7c:cc:e5:af:28:75:93:0a:98:a8:31:1c:24:fa: 31:90:a4:ee:20:0b:0d:95:ce:54:b3:c0:31:da:1d: 29:0f:16:b1:97:85:07:9f:e0:a0:ef:5a:28:d8:d6: 72:ad:6e:a5:23:8d:91:ec:62:c4:e6:02:dd:37:55: 92:7d:05:ed:d4:89:59:28:e6:60:57:14:5d:3f:b0: a1:25:95:28:1d:5d:4e:37:b0:a4:25:ee:e4:0b:74: 35:12:cb:3d:aa:03:fc:ce:bd:15:85:50:62:4d:c0: 69:ff:3b:d6:6a:e4:38:0b:b4:7d:e0:23:fe:45:f8: b3:04:59:d1:8e:12:17:da:5e:bf:5b:79:67:ad:fc: 4d:45:5c:05:84:1b:ed:50:ad:6e:f6:6e:7b:6e:ac: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A7:CA:BC:68:36:DF:E8:9E:C5:58:AC:0A:E9:D1:72:C2:64:5B:87 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/38322e32322e302e302f31362d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.0.0/16 Signature Algorithm: sha256WithRSAEncryption 53:54:1f:0e:6d:17:41:60:6f:64:1d:19:37:9c:d4:1d:3a:6e: 8d:5c:9f:b4:2f:73:3c:f9:5a:c7:dc:e2:e0:b3:84:57:1d:b5: ba:6b:4a:29:53:ad:d7:3c:17:61:df:da:f9:5b:e5:88:f4:59: f6:81:67:b3:6f:3e:ad:82:c6:15:be:9b:78:e5:dc:d1:83:fb: 03:de:f2:46:2b:5f:16:64:63:65:51:31:56:37:63:bf:0b:bd: 8b:98:4d:29:4b:2d:3c:5a:0a:72:c1:59:30:8c:3c:e3:ae:8b: b1:e6:46:14:cb:13:4d:2d:55:23:df:75:6e:b4:4c:72:0f:64: 5a:9c:d3:30:6f:2b:9b:45:9b:b4:d7:96:9c:76:fc:fc:47:5c: 9d:73:04:47:de:26:90:b2:a1:a5:74:4a:dc:d8:36:3c:03:7f: 8e:fd:72:d2:a3:52:d7:86:f8:92:f7:48:e6:96:b9:8f:0c:57: 06:2c:f9:69:5d:20:e7:65:53:7c:f3:85:87:14:69:9e:80:63: 81:ae:92:d1:49:87:7e:43:ce:1f:fe:5b:cd:07:ec:23:16:b8: 44:38:3a:cd:8e:22:6a:9d:ec:94:c9:54:64:9a:c9:38:c4:3a: b0:98:7f:53:33:8c:75:70:8a:0f:86:91:99:24:07:fb:69:33: 33:7d:a0:32 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGBETH5unw6lB0rT3LdpK2QqNHIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNDEyMjcxMDAxMTJaFw0yNTEyMjYxMDA2MTJaMDMxMTAvBgNV BAMTKDQ4QTdDQUJDNjgzNkRGRTg5RUM1NThBQzBBRTlEMTcyQzI2NDVCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFM37d2Uigx3/MHSJapKX4+zq FrOEdlSh6+lub9+TzRlpkaR03DtthbLhlCaCqvkHlC7AejEqxN+rm6oOPhY3Ll9w S9UiaffBI6sh5ggg7Hpgx9x+nPEZ+3FNlhp0Lq73YZ5nwTecrSN8zOWvKHWTCpio MRwk+jGQpO4gCw2VzlSzwDHaHSkPFrGXhQef4KDvWijY1nKtbqUjjZHsYsTmAt03 VZJ9Be3UiVko5mBXFF0/sKEllSgdXU43sKQl7uQLdDUSyz2qA/zOvRWFUGJNwGn/ O9Zq5DgLtH3gI/5F+LMEWdGOEhfaXr9beWet/E1FXAWEG+1QrW72bnturOPZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUSKfKvGg23+iexVisCunRcsJkW4cwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYt YjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWExYWY2LzAvMzgzMjJlMzIzMjJlMzAyZTMw MmYzMTM2MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBSFjANBgkqhkiG 9w0BAQsFAAOCAQEAU1QfDm0XQWBvZB0ZN5zUHTpujVyftC9zPPlax9zi4LOEVx21 umtKKVOt1zwXYd/a+VvliPRZ9oFns28+rYLGFb6beOXc0YP7A97yRitfFmRjZVEx Vjdjvwu9i5hNKUstPFoKcsFZMIw8466LseZGFMsTTS1VI991brRMcg9kWpzTMG8r m0WbtNeWnHb8/EdcnXMER94mkLKhpXRK3Ng2PAN/jv1y0qNS14b4kvdI5pa5jwxX Biz5aV0g52VTfPOFhxRpnoBjga6S0UmHfkPOH/5bzQfsIxa4RDg6zY4iap3slMlU ZJrJOMQ6sJh/UzOMdXCKD4aRmSQH+2kzM32gMg== -----END CERTIFICATE-----Generated at Mon Dec 15 17:07:31 2025 by rpki-client