This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS399989.roa File: AS399989.roa (raw, json) Hash identifier: 3F3Yp9QSnCWzO4RAC/D9lCZvQszDzbJMY6WTl1VmHMg= Subject key identifier: 73:2C:E2:CD:E4:3C:C9:6C:38:68:E6:70:72:52:42:98:66:A1:DE:9D Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 67784C2DA8DD3C0110045750D7EB08154B44BD6E Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS399989.roa Signing time: Mon 15 Sep 2025 14:03:00 +0000 ROA not before: Mon 15 Sep 2025 13:58:00 +0000 ROA not after: Mon 14 Sep 2026 14:03:00 +0000 asID: 399989 IP address blocks: 85.8.156.0/22 maxlen: 22 213.139.224.0/22 maxlen: 22 Validation: Failed, certificate revoked on Thu 25 Sep 2025 12:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:78:4c:2d:a8:dd:3c:01:10:04:57:50:d7:eb:08:15:4b:44:bd:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Sep 15 13:58:00 2025 GMT Not After : Sep 14 14:03:00 2026 GMT Subject: CN=732CE2CDE43CC96C3868E6707252429866A1DE9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:92:6b:0f:67:11:3e:31:59:82:2a:27:f1: 87:07:1c:51:1d:9b:fe:6a:f2:ae:4d:fa:42:4b:55: 5f:d9:e6:18:eb:c2:37:2c:d9:87:0d:18:4a:a3:c3: c9:60:8a:da:b7:26:ee:6b:0a:88:0e:dc:3b:f6:b8: 29:d6:07:01:7b:d6:f7:fa:d1:cb:b9:1f:2f:55:d1: b1:92:cb:dc:22:57:f0:4d:9f:61:c3:1e:99:4f:82: 59:37:5a:db:62:87:ba:3f:20:b9:4f:c6:5e:ea:b7: 9c:1f:a7:ef:c2:23:a2:73:19:5d:ce:5e:63:e8:cb: 7e:0f:ba:32:9c:53:12:4d:d9:da:d3:5c:46:7d:a1: e6:ac:65:29:dc:ec:35:26:0d:64:c7:da:50:45:a4: 97:50:5a:6c:43:96:59:6f:4c:ee:11:ff:b3:8c:3a: 9a:ad:0d:8d:3b:ed:66:41:c3:8a:4c:48:c0:87:15: a9:df:2f:01:8e:f9:ba:aa:f3:47:16:e6:8d:8c:0a: 34:ff:52:bd:00:a8:03:9d:a3:0f:c9:4f:bf:74:59: af:fa:ce:e3:bd:05:cd:22:56:06:74:f3:e8:98:22: e9:62:9b:ce:81:0a:39:64:dd:91:b6:bb:63:57:c1: 1b:97:4a:68:65:a5:79:b0:d4:d6:af:f9:ce:d6:d1: 1c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2C:E2:CD:E4:3C:C9:6C:38:68:E6:70:72:52:42:98:66:A1:DE:9D X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS399989.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.8.156.0/22 213.139.224.0/22 Signature Algorithm: sha256WithRSAEncryption 82:5b:cc:56:15:d8:f1:85:ba:af:be:7a:4f:5c:d2:7d:50:55: 1c:58:1f:34:ba:e7:36:61:58:60:ec:fd:b1:8b:42:be:7e:4d: 8d:db:b6:0e:6b:00:b0:2d:b7:7a:a4:ca:56:b1:d6:77:db:a3: fb:1b:3d:70:d7:da:c4:b6:5a:aa:2b:c9:6e:67:2c:b5:fc:15: f4:ea:1b:57:6e:d3:6f:11:84:14:e6:5e:c6:7f:15:85:45:da: 18:9d:46:3e:fb:c2:dd:a2:d0:b3:ac:4e:b1:2d:20:f8:73:ea: 30:51:9d:61:d9:64:6c:02:9a:21:3d:f4:79:4b:6f:47:54:9a: 3a:03:17:ec:6f:9b:4c:7b:ab:7a:53:93:fb:4b:8f:73:23:a7: 39:fa:67:a3:08:b3:fd:b3:8f:c8:56:53:f8:09:10:e2:b2:78: b6:7f:f2:fb:78:50:f9:4f:63:67:08:a7:9c:5b:77:ec:95:3c: 8a:61:6d:e0:4e:54:4e:68:0b:1f:66:8c:cb:b0:bc:b9:81:8c: d0:7f:b9:28:9e:7b:38:28:31:5b:e0:cf:23:6b:f2:1a:b2:be: 48:dc:2c:e8:08:21:a4:66:86:01:9f:62:b4:55:e4:0a:e5:21: 0c:92:77:17:44:b5:46:df:e6:ff:dc:17:da:87:36:65:3b:5f: 9d:27:b8:03 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUZ3hMLajdPAEQBFdQ1+sIFUtEvW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTA5MTUxMzU4MDBaFw0yNjA5MTQxNDAzMDBaMDMxMTAvBgNV BAMTKDczMkNFMkNERTQzQ0M5NkMzODY4RTY3MDcyNTI0Mjk4NjZBMURFOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1wJJrD2cRPjFZgion8YcHHFEd m/5q8q5N+kJLVV/Z5hjrwjcs2YcNGEqjw8lgitq3Ju5rCogO3Dv2uCnWBwF71vf6 0cu5Hy9V0bGSy9wiV/BNn2HDHplPglk3Wttih7o/ILlPxl7qt5wfp+/CI6JzGV3O XmPoy34PujKcUxJN2drTXEZ9oeasZSnc7DUmDWTH2lBFpJdQWmxDlllvTO4R/7OM OpqtDY077WZBw4pMSMCHFanfLwGO+bqq80cW5o2MCjT/Ur0AqAOdow/JT790Wa/6 zuO9Bc0iVgZ08+iYIulim86BCjlk3ZG2u2NXwRuXSmhlpXmw1Nav+c7W0RwzAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUcyzizeQ8yWw4aOZwclJCmGah3p0wHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMzk5OTg5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVQic AwQC1YvgMA0GCSqGSIb3DQEBCwUAA4IBAQCCW8xWFdjxhbqvvnpPXNJ9UFUcWB80 uuc2YVhg7P2xi0K+fk2N27YOawCwLbd6pMpWsdZ326P7Gz1w19rEtlqqK8luZyy1 /BX06htXbtNvEYQU5l7GfxWFRdoYnUY++8LdotCzrE6xLSD4c+owUZ1h2WRsApoh PfR5S29HVJo6Axfsb5tMe6t6U5P7S49zI6c5+mejCLP9s4/IVlP4CRDisni2f/L7 eFD5T2NnCKecW3fslTyKYW3gTlROaAsfZozLsLy5gYzQf7konns4KDFb4M8ja/Ia sr5I3CzoCCGkZoYBn2K0VeQK5SEMkncXRLVG3+b/3BfahzZlO1+dJ7gD -----END CERTIFICATE-----Generated at Tue Dec 16 18:02:35 2025 by rpki-client