This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32342d3234203d3e20383334.roa File: 3138352e3232362e3135342e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: b5LyIXgkLpOlVupzgts5h6KVD2QEtWL8HJzkvwrgGyA= Subject key identifier: B4:DB:7C:9E:64:B9:A0:9B:A6:00:F5:82:07:A8:F0:9C:7F:AB:ED:D2 Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Certificate serial: A4F102F36940420CB42ED7B252E14EC0BFA182 Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32342d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 12:18:06 +0000 ROA not before: Mon 08 Dec 2025 12:13:06 +0000 ROA not after: Mon 07 Dec 2026 12:18:06 +0000 asID: 834 IP address blocks: 185.226.154.0/24 maxlen: 24 Validation: Failed, certificate revoked on Mon 15 Dec 2025 00:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a4:f1:02:f3:69:40:42:0c:b4:2e:d7:b2:52:e1:4e:c0:bf:a1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Validity Not Before: Dec 8 12:13:06 2025 GMT Not After : Dec 7 12:18:06 2026 GMT Subject: CN=B4DB7C9E64B9A09BA600F58207A8F09C7FABEDD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:58:d6:32:dd:e4:8e:a9:2b:15:3e:95:77:ac: 0e:51:a9:44:0d:eb:46:64:86:dd:f0:76:43:24:1e: 77:c5:c9:c8:a4:f1:b5:7a:50:e4:5d:6b:8a:4a:78: d3:83:be:19:02:ad:e3:e6:1c:00:b7:a9:a7:de:70: e7:52:aa:2e:66:ae:f1:a8:72:ab:2f:4b:1f:62:08: 6f:30:df:c8:0b:d9:b3:a2:f1:bd:dd:05:2b:27:e5: 87:68:05:e5:da:23:ee:c7:a3:22:2a:41:6c:c1:63: 6e:50:51:08:42:fd:30:94:ba:e2:8d:94:d8:c7:ab: be:00:1f:6d:ee:6b:80:f6:7d:23:a5:f3:78:bf:76: df:a7:89:f0:2e:d6:c5:59:b5:16:d2:9e:f3:49:ef: 55:ce:d4:7e:94:86:a1:97:2b:b3:3e:38:53:e6:b9: af:49:48:80:a0:7e:b5:1b:70:49:23:39:70:fd:7d: cb:e1:f2:f2:94:d0:0e:c4:ac:6a:6f:79:4a:85:4d: 75:fd:b0:f8:bb:64:ce:2b:3f:ab:13:ab:81:e4:31: 5f:44:dc:6f:15:c8:ea:68:ff:44:b5:e1:56:40:f6: d0:64:bf:18:84:eb:e5:61:f3:6e:0a:13:23:7f:90: 1e:38:6c:2a:7e:f3:33:cf:1e:82:73:ba:4c:9e:b7: 9b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DB:7C:9E:64:B9:A0:9B:A6:00:F5:82:07:A8:F0:9C:7F:AB:ED:D2 X509v3 Authority Key Identifier: keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3232362e3135342e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.154.0/24 Signature Algorithm: sha256WithRSAEncryption aa:fe:e5:ea:3d:6c:80:c4:57:c3:5a:31:78:e3:70:ef:6d:14: 3c:57:12:58:ec:71:cc:18:04:b3:5b:c6:a8:ed:9b:5b:64:ea: 5c:11:2e:52:b9:9b:93:54:a8:04:e6:2c:d4:c6:4d:40:0a:a8: 5b:cd:84:93:24:0d:7e:a1:2e:07:12:0c:68:25:c5:71:03:d5: 1a:b1:55:da:cf:f2:b7:3e:07:5e:03:68:d7:9e:79:2d:e7:2f: 66:6b:92:be:7e:8f:de:9a:ad:79:52:f0:c6:3d:01:72:9a:d4: 84:5e:4d:59:3d:d4:f3:ac:9b:8e:88:81:09:f1:51:42:90:87: 62:f3:04:80:9c:03:6b:7b:91:87:75:8d:c5:46:dd:36:28:41: 56:bb:7e:13:e6:04:52:02:07:0c:92:ae:58:51:39:c8:bd:40: cb:14:4b:52:2c:24:35:01:c2:cd:f8:78:ab:ed:f3:d8:ed:f6: 4f:ec:ee:2c:a6:e7:a8:d1:9f:c0:62:39:50:55:ba:39:6a:d6: 74:c0:c9:38:d1:07:07:18:70:39:38:5b:7c:f1:7b:44:6a:4a: 9d:f8:da:f2:8c:fb:fd:19:16:bc:f8:40:df:88:9b:01:41:49: 18:62:82:37:06:1b:98:98:53:e7:03:e8:90:21:a1:75:ed:09: 00:e8:ef:7c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUAKTxAvNpQEIMtC7XslLhTsC/oYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm N2M5YWNhMDAeFw0yNTEyMDgxMjEzMDZaFw0yNjEyMDcxMjE4MDZaMDMxMTAvBgNV BAMTKEI0REI3QzlFNjRCOUEwOUJBNjAwRjU4MjA3QThGMDlDN0ZBQkVERDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPWNYy3eSOqSsVPpV3rA5RqUQN 60Zkht3wdkMkHnfFycik8bV6UORda4pKeNODvhkCrePmHAC3qafecOdSqi5mrvGo cqsvSx9iCG8w38gL2bOi8b3dBSsn5YdoBeXaI+7HoyIqQWzBY25QUQhC/TCUuuKN lNjHq74AH23ua4D2fSOl83i/dt+nifAu1sVZtRbSnvNJ71XO1H6UhqGXK7M+OFPm ua9JSICgfrUbcEkjOXD9fcvh8vKU0A7ErGpveUqFTXX9sPi7ZM4rP6sTq4HkMV9E 3G8VyOpo/0S14VZA9tBkvxiE6+Vh824KEyN/kB44bCp+8zPPHoJzukyet5vDAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUtNt8nmS5oJumAPWCB6jwnH+r7dIwHwYDVR0j BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm SnJLQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzEzODM1MmUzMjMyMzYyZTMx MzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALni mjANBgkqhkiG9w0BAQsFAAOCAQEAqv7l6j1sgMRXw1oxeONw720UPFcSWOxxzBgE s1vGqO2bW2TqXBEuUrmbk1SoBOYs1MZNQAqoW82EkyQNfqEuBxIMaCXFcQPVGrFV 2s/ytz4HXgNo1555LecvZmuSvn6P3pqteVLwxj0BcprUhF5NWT3U86ybjoiBCfFR QpCHYvMEgJwDa3uRh3WNxUbdNihBVrt+E+YEUgIHDJKuWFE5yL1AyxRLUiwkNQHC zfh4q+3z2O32T+zuLKbnqNGfwGI5UFW6OWrWdMDJONEHBxhwOThbfPF7RGpKnfja 8oz7/RkWvPhA34ibAUFJGGKCNwYbmJhT5wPokCGhde0JAOjvfA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:03:40 2025 by rpki-client